Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft
File:                     0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft (raw, json)
Hash identifier:          z0h9G8UhrB241MTMUC/nD+pwZXZ2bHyNJjjAdPwCwGA=
Subject key identifier:   9B:3A:87:FF:72:81:0A:19:C2:7B:2D:2A:2C:2F:C5:B4:39:47:B3:B6
Authority key identifier: 0D:3E:5E:EA:EF:56:A3:05:23:E1:76:42:5F:74:1B:EF:D5:AC:37:C8
Certificate issuer:       /CN=0D3E5EEAEF56A30523E176425F741BEFD5AC37C8
Certificate serial:       25994EE498F6C8428A82A38E5A932BA3252CBE17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft
Manifest number:          A4
Signing time:             Fri 31 Jan 2025 08:54:02 +0000
Manifest this update:     Fri 31 Jan 2025 08:49:02 +0000
Manifest next update:     Tue 04 Feb 2025 12:32:02 +0000
Files and hashes:         1: 323830313a31633a393830303a3a2f34382d3438203d3e203139343239.roa (hash: g4X2JzO9xDwNMp9D4cM2d3uZV9lki1REOqfmvjAAiw0=)
                          2: 0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.crl (hash: jXSSt8idGkNlnmtwK4L8B/vcl/siHO//TUNkVuKbpEc=)
                          3: 323830313a31633a393830303a3a2f34382d3438203d3e20323732303439.roa (hash: i1oh/i5jbbUpalTaNg7KdMOpWqUqoPyKBv/SDvRXnVc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:99:4e:e4:98:f6:c8:42:8a:82:a3:8e:5a:93:2b:a3:25:2c:be:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3E5EEAEF56A30523E176425F741BEFD5AC37C8
        Validity
            Not Before: Jan 31 08:49:02 2025 GMT
            Not After : Feb  4 12:32:02 2025 GMT
        Subject: CN=9B3A87FF72810A19C27B2D2A2C2FC5B43947B3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:e7:22:54:7c:95:08:7d:9a:dc:aa:13:2e:
                    ff:89:12:cb:d2:96:1a:e0:c6:2b:88:1b:26:cf:27:
                    0e:52:d7:37:eb:ea:c9:c2:45:8d:6f:36:c1:17:cf:
                    48:c8:81:5d:4f:39:c9:c2:0c:e8:06:95:07:a3:95:
                    67:2c:88:62:3d:53:c1:78:80:2e:0e:bf:dd:ae:7e:
                    cc:7a:fa:ad:07:70:8a:17:e5:cc:d6:d6:9c:7e:51:
                    69:41:e2:fd:d0:86:b9:e0:39:02:0c:df:70:be:65:
                    1d:4b:fb:f6:fd:46:07:7e:98:a6:33:a3:0b:ad:68:
                    61:cb:cf:7c:a6:a8:ad:e3:59:65:1e:63:d2:81:61:
                    e2:58:57:03:4b:ea:c1:f3:cf:75:cb:eb:52:75:90:
                    6f:a8:fd:d7:83:5f:fb:7a:17:c0:11:55:d1:83:24:
                    50:24:6e:3d:e0:bd:c9:f8:5a:3e:68:8e:73:c2:2e:
                    ba:44:ee:85:c0:d0:f8:71:42:86:b9:f5:2b:d1:e5:
                    a7:90:a5:97:c6:5e:f7:fe:33:17:9f:3c:5a:74:a9:
                    a7:f4:5b:27:02:c0:90:15:d1:ee:77:bd:08:47:d8:
                    8d:f4:53:9b:af:92:bb:09:99:bc:72:cd:e9:b1:03:
                    0b:8b:41:ac:ba:b4:24:e3:be:00:56:dd:7c:05:59:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3A:87:FF:72:81:0A:19:C2:7B:2D:2A:2C:2F:C5:B4:39:47:B3:B6
            X509v3 Authority Key Identifier:
                keyid:0D:3E:5E:EA:EF:56:A3:05:23:E1:76:42:5F:74:1B:EF:D5:AC:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F95F2B80759815AA470E1EA24C8897FB4F2C1714A50957F407027CAB8262B8DB/0/0D3E5EEAEF56A30523E176425F741BEFD5AC37C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:85:2b:6f:bd:9c:01:ae:e1:c8:24:2c:4b:9a:be:81:4f:45:
         53:97:d4:ef:3f:c8:4d:7c:93:a5:ab:ee:68:85:e7:c4:73:42:
         dd:48:57:ac:45:34:a2:2c:a7:61:8a:eb:b8:c6:94:05:1a:7e:
         5b:57:89:9a:b6:8f:5e:e9:6e:00:f4:b2:4e:a4:5f:18:e2:74:
         8f:63:44:3e:6e:92:26:ab:ae:2f:cf:3a:0b:fb:49:ab:23:e3:
         0d:17:31:45:94:b2:bc:c4:b2:2a:53:bf:f1:04:af:5f:d6:b9:
         c2:da:fc:e1:53:f2:23:d5:fc:7f:72:82:14:6d:8f:c9:f2:25:
         a4:82:fc:77:69:e3:7d:f8:8f:ca:b7:74:06:4d:66:ae:81:d4:
         e6:43:94:6e:52:ce:38:6b:bf:44:03:aa:c7:5a:e3:49:fe:c6:
         56:f0:40:a8:a2:fa:8a:d8:0e:b6:e2:8f:f4:45:3d:ed:a1:8b:
         a3:df:27:44:50:1a:32:8c:ec:f9:58:c0:77:a6:97:c2:f9:b7:
         15:b7:2f:69:64:80:b8:eb:de:42:8f:84:56:32:6f:1c:77:9e:
         16:ce:18:b2:43:f8:93:1a:38:1a:30:f4:72:65:38:2d:72:0c:
         17:2e:7b:7b:1c:d8:33:4f:ca:be:94:1e:3b:97:db:4c:9f:2d:
         05:e3:9d:e6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUJZlO5Jj2yEKKgqOOWpMroyUsvhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQzRTVFRUFFRjU2QTMwNTIzRTE3NjQyNUY3NDFCRUZE
NUFDMzdDODAeFw0yNTAxMzEwODQ5MDJaFw0yNTAyMDQxMjMyMDJaMDMxMTAvBgNV
BAMTKDlCM0E4N0ZGNzI4MTBBMTlDMjdCMkQyQTJDMkZDNUI0Mzk0N0IzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnw+ciVHyVCH2a3KoTLv+JEsvS
lhrgxiuIGybPJw5S1zfr6snCRY1vNsEXz0jIgV1POcnCDOgGlQejlWcsiGI9U8F4
gC4Ov92ufsx6+q0HcIoX5czW1px+UWlB4v3QhrngOQIM33C+ZR1L+/b9Rgd+mKYz
owutaGHLz3ymqK3jWWUeY9KBYeJYVwNL6sHzz3XL61J1kG+o/deDX/t6F8ARVdGD
JFAkbj3gvcn4Wj5ojnPCLrpE7oXA0PhxQoa59SvR5aeQpZfGXvf+MxefPFp0qaf0
WycCwJAV0e53vQhH2I30U5uvkrsJmbxyzemxAwuLQay6tCTjvgBW3XwFWVh/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUmzqH/3KBChnCey0qLC/FtDlHs7YwHwYDVR0j
BBgwFoAUDT5e6u9WowUj4XZCX3Qb79WsN8gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOTVGMkI4MDc1OTgxNUFBNDcwRTFFQTI0Qzg4OTdGQjRG
MkMxNzE0QTUwOTU3RjQwNzAyN0NBQjgyNjJCOERCLzAvMEQzRTVFRUFFRjU2QTMw
NTIzRTE3NjQyNUY3NDFCRUZENUFDMzdDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDNFNUVFQUVGNTZBMzA1MjNF
MTc2NDI1Rjc0MUJFRkQ1QUMzN0M4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjk1RjJCODA3NTk4MTVBQTQ3MEUxRUEyNEM4ODk3RkI0RjJDMTcxNEE1
MDk1N0Y0MDcwMjdDQUI4MjYyQjhEQi8wLzBEM0U1RUVBRUY1NkEzMDUyM0UxNzY0
MjVGNzQxQkVGRDVBQzM3QzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2hStvvZwBruHIJCxLmr6BT0VT
l9TvP8hNfJOlq+5ohefEc0LdSFesRTSiLKdhiuu4xpQFGn5bV4mato9e6W4A9LJO
pF8Y4nSPY0Q+bpImq64vzzoL+0mrI+MNFzFFlLK8xLIqU7/xBK9f1rnC2vzhU/Ij
1fx/coIUbY/J8iWkgvx3aeN9+I/Kt3QGTWaugdTmQ5RuUs44a79EA6rHWuNJ/sZW
8ECoovqK2A624o/0RT3toYuj3ydEUBoyjOz5WMB3ppfC+bcVty9pZIC4695Cj4RW
Mm8cd54WzhiyQ/iTGjgaMPRyZTgtcgwXLnt7HNgzT8q+lB47l9tMny0F453m
-----END CERTIFICATE-----