Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
File:                     CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft (raw, json)
Hash identifier:          K03n0P5ZRsQHqnEOddo6edWTeu0pooc3v7YGH0e3FdM=
Subject key identifier:   04:4D:95:8D:6A:D5:67:41:0E:80:E5:E4:2F:10:B8:1C:EE:10:FE:7B
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Certificate issuer:       /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial:       721C553ADB78A01285C83876C10F661B15EECF33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft
Manifest number:          AB
Signing time:             Thu 30 Jan 2025 19:15:24 +0000
Manifest this update:     Thu 30 Jan 2025 19:10:24 +0000
Manifest next update:     Wed 05 Feb 2025 17:06:24 +0000
Files and hashes:         1: 323830333a363163303a3a2f33322d3634203d3e20323635363833.roa (hash: wiZDaEXGlDKGfgBTV7qmNUOyJb47E6kSXdrxfXaeg/g=)
                          2: CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl (hash: aY9Y6cs691Z/W7iqKRt7eN3B9eyoDrfN+yqHp5SMQz4=)
                          3: 34352e342e3136302e302f32322d3234203d3e20323635363833.roa (hash: 1SWoV21xXzD4i2+ibfHYKbLDi9zFpR+LrDU7mcwF5ik=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1c:55:3a:db:78:a0:12:85:c8:38:76:c1:0f:66:1b:15:ee:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
        Validity
            Not Before: Jan 30 19:10:24 2025 GMT
            Not After : Feb  5 17:06:24 2025 GMT
        Subject: CN=044D958D6AD567410E80E5E42F10B81CEE10FE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:34:01:e9:e3:a1:3a:9c:f5:6c:05:8c:7a:
                    a7:c9:66:e9:e7:04:54:ea:59:a9:85:80:e6:1a:b1:
                    95:37:4e:f3:95:99:6a:09:fc:15:c0:e9:3f:1c:73:
                    11:ad:88:c5:ac:f5:b9:bb:d9:f8:8a:c0:60:55:52:
                    61:ed:48:fa:50:22:cb:e0:a4:da:5b:86:83:d3:17:
                    3b:39:ce:e4:b8:bd:82:09:d0:12:e5:f5:7d:ed:39:
                    4d:24:c5:c1:1b:22:9e:14:ac:0b:42:62:58:a1:76:
                    7b:c0:32:67:aa:02:d4:b0:cf:48:b3:be:c4:51:d1:
                    fd:07:d5:aa:56:18:13:43:da:a2:24:21:f1:e4:7a:
                    cd:8e:ac:5d:ca:65:9b:cf:70:80:45:14:d7:2f:22:
                    6b:ea:be:51:ce:59:fd:65:94:b1:a6:63:79:ac:58:
                    f1:10:00:34:ea:9d:c5:d7:c5:15:69:86:dc:2d:70:
                    a0:32:c1:11:86:ed:83:6a:c3:6d:6a:9d:89:d5:26:
                    20:64:23:49:3a:ea:93:5f:8e:b6:cd:2b:0e:71:c4:
                    8b:17:96:5e:ee:21:a9:44:a8:9b:6f:c8:5d:99:55:
                    08:79:66:41:76:f9:a8:e3:7e:2f:a9:c0:46:51:56:
                    03:8b:a2:d9:6f:75:44:02:e4:55:3d:b8:6b:da:1d:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4D:95:8D:6A:D5:67:41:0E:80:E5:E4:2F:10:B8:1C:EE:10:FE:7B
            X509v3 Authority Key Identifier:
                keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4c:65:e3:48:c0:73:a9:60:c4:28:58:3b:9d:63:63:2f:3a:
         c0:dd:ba:f3:7c:39:3c:46:74:92:aa:c2:03:0a:5e:09:e4:8b:
         4c:fd:05:7f:02:78:f1:d7:43:7a:a1:f4:24:dc:2e:a2:2d:7a:
         6d:47:43:f2:57:3f:b2:e0:00:44:61:b6:01:2c:54:a7:23:05:
         54:78:a4:69:27:6e:5d:f5:ea:20:4f:2b:de:d7:22:33:37:01:
         33:c9:06:f2:06:03:b7:58:74:9d:a7:d2:3e:5c:03:7f:81:9b:
         ee:d5:c6:1b:bf:f5:0f:d3:c9:55:b2:56:06:56:2e:ee:4e:29:
         17:d4:0c:3d:61:d1:ca:80:e7:83:df:b0:b1:38:69:9d:3e:9c:
         69:8b:65:b9:ab:29:4a:2c:6c:c1:da:92:b1:16:e6:d6:71:21:
         6b:b9:8a:e4:ce:47:af:54:75:4f:b1:33:b9:43:b6:28:46:6c:
         d3:bf:3c:d4:c8:b2:09:07:29:9b:0f:dc:04:46:e9:c0:36:83:
         01:dd:c0:1f:d3:7e:f0:a9:50:ad:63:14:89:9f:44:94:f8:83:
         9e:75:62:2c:83:14:14:f9:bb:f5:60:0e:b8:50:40:e3:45:59:
         81:a1:fa:44:84:32:35:b5:33:67:97:dd:47:75:9e:ac:dd:03:
         e8:ce:6e:b2
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUchxVOtt4oBKFyDh2wQ9mGxXuzzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QzQkU0NThGQjQ5QzcxOTk5MjZGMTJCMEY3OTM4QzVE
REM2N0M0NDAeFw0yNTAxMzAxOTEwMjRaFw0yNTAyMDUxNzA2MjRaMDMxMTAvBgNV
BAMTKDA0NEQ5NThENkFENTY3NDEwRTgwRTVFNDJGMTBCODFDRUUxMEZFN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXIDQB6eOhOpz1bAWMeqfJZunn
BFTqWamFgOYasZU3TvOVmWoJ/BXA6T8ccxGtiMWs9bm72fiKwGBVUmHtSPpQIsvg
pNpbhoPTFzs5zuS4vYIJ0BLl9X3tOU0kxcEbIp4UrAtCYlihdnvAMmeqAtSwz0iz
vsRR0f0H1apWGBND2qIkIfHkes2OrF3KZZvPcIBFFNcvImvqvlHOWf1llLGmY3ms
WPEQADTqncXXxRVphtwtcKAywRGG7YNqw21qnYnVJiBkI0k66pNfjrbNKw5xxIsX
ll7uIalEqJtvyF2ZVQh5ZkF2+ajjfi+pwEZRVgOLotlvdUQC5FU9uGvaHc87AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUBE2VjWrVZ0EOgOXkLxC4HO4Q/nswHwYDVR0j
BBgwFoAUzTvkWPtJxxmZJvErD3k4xd3GfEQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GN0YwN0IwQjREQ0MwODZFOTVBNDY1M0UxRDBERjM5NTEy
MzgxREU5MDY2OTVGNkM5QUY5MTMyOURFRjE5RTU5LzAvQ0QzQkU0NThGQjQ5Qzcx
OTk5MjZGMTJCMEY3OTM4QzVEREM2N0M0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNCRTQ1OEZCNDlDNzE5OTky
NkYxMkIwRjc5MzhDNUREQzY3QzQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjdGMDdCMEI0RENDMDg2RTk1QTQ2NTNFMUQwREYzOTUxMjM4MURFOTA2
Njk1RjZDOUFGOTEzMjlERUYxOUU1OS8wL0NEM0JFNDU4RkI0OUM3MTk5OTI2RjEy
QjBGNzkzOEM1RERDNjdDNDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzTGXjSMBzqWDEKFg7nWNjLzrA
3brzfDk8RnSSqsIDCl4J5ItM/QV/Anjx10N6ofQk3C6iLXptR0PyVz+y4ABEYbYB
LFSnIwVUeKRpJ25d9eogTyve1yIzNwEzyQbyBgO3WHSdp9I+XAN/gZvu1cYbv/UP
08lVslYGVi7uTikX1Aw9YdHKgOeD37CxOGmdPpxpi2W5qylKLGzB2pKxFubWcSFr
uYrkzkevVHVPsTO5Q7YoRmzTvzzUyLIJBymbD9wERunANoMB3cAf037wqVCtYxSJ
n0SU+IOedWIsgxQU+bv1YA64UEDjRVmBofpEhDI1tTNnl91HdZ6s3QPozm6y
-----END CERTIFICATE-----