Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
File:                     D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft (raw, json)
Hash identifier:          pOQT9luOARHCHbsLi0ofTKEi+qC/4UpX+NsOXbgqpms=
Subject key identifier:   2E:D9:FA:40:A0:D2:33:9D:10:51:E1:9A:8A:FE:57:5D:1E:2A:06:CF
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Certificate issuer:       /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial:       23A094AE4E299B57D3DB889B8D9A6C99BA35A69F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
Manifest number:          CA
Signing time:             Sat 29 Mar 2025 05:32:06 +0000
Manifest this update:     Sat 29 Mar 2025 05:27:06 +0000
Manifest next update:     Thu 03 Apr 2025 18:45:06 +0000
Files and hashes:         1: 3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa (hash: iOrp1TY9okxlEMEv0TktHJtolSjUOp8L6mFM7QjZmiw=)
                          2: 3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa (hash: x8TKGA/ymcnEQ5T/pgbqXFsH+hMaJHOdkeuG0LPaeF8=)
                          3: 3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa (hash: XHxglRsIznH2oL3Cu9yOSaX8apE6OvGRr2VSqRl+ywM=)
                          4: 3133382e3131372e31352e302f32342d3234203d3e20323732383730.roa (hash: iVmlDBcdxKFZ6/VgTekmBsBAKaWyMbkX8AkFMuVjBa8=)
                          5: D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl (hash: je8aA6YW0pBi2tQZGkAkIOLoXCSQEsvairTYAmsvwvE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a0:94:ae:4e:29:9b:57:d3:db:88:9b:8d:9a:6c:99:ba:35:a6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
        Validity
            Not Before: Mar 29 05:27:06 2025 GMT
            Not After : Apr  3 18:45:06 2025 GMT
        Subject: CN=2ED9FA40A0D2339D1051E19A8AFE575D1E2A06CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:fc:a5:99:20:42:73:7f:96:3a:b3:80:50:
                    56:ea:08:07:81:04:a3:73:6b:26:5b:8b:15:63:a1:
                    f0:ac:ba:a0:73:78:b9:d9:11:3f:b7:42:c0:02:8e:
                    2d:25:05:93:9f:62:a3:26:2c:6c:64:16:18:f0:cf:
                    be:f1:38:e5:b3:a2:a0:eb:0b:5b:c8:81:43:f1:e1:
                    73:9f:4a:52:08:89:78:47:51:d8:df:63:36:23:a3:
                    8f:94:3a:6b:bd:95:60:85:79:c3:06:82:e6:cc:28:
                    f5:b0:5a:fb:00:c2:10:56:bd:f8:a1:b8:41:4d:34:
                    ee:53:3c:33:94:f8:73:a2:61:d3:96:11:da:73:5a:
                    4f:f3:29:ed:09:a2:99:e9:93:81:b5:d9:71:32:a3:
                    58:9b:d3:38:26:ff:a5:9a:f6:32:17:bd:84:bb:5a:
                    42:e8:94:24:c4:93:49:4f:26:66:4e:52:33:d4:06:
                    f7:b8:1d:e3:77:f6:5f:60:e8:84:87:c8:11:d7:86:
                    43:20:fd:5f:da:f0:d7:41:05:b1:00:58:b7:7c:c7:
                    ed:0b:92:e2:2e:f7:47:0f:ef:e5:4e:ba:49:c7:20:
                    aa:58:40:41:e4:4a:42:04:32:67:e0:87:39:d2:7f:
                    5b:c5:fd:05:58:0f:4e:6d:88:81:99:ce:38:0c:2c:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D9:FA:40:A0:D2:33:9D:10:51:E1:9A:8A:FE:57:5D:1E:2A:06:CF
            X509v3 Authority Key Identifier:
                keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:c2:da:16:5d:95:3b:e1:c0:48:16:54:49:1a:c8:af:d0:
         56:4e:4c:7f:51:06:95:fe:39:a3:6e:ed:6a:21:12:ec:68:e8:
         a5:53:1f:e9:cf:a1:8d:f2:bc:87:89:52:ba:ba:b0:65:71:31:
         70:22:61:84:20:53:c0:fd:f3:84:0f:bd:f2:36:ea:e6:24:62:
         38:c1:72:e1:9d:b7:2d:62:1e:b8:dc:68:d5:ca:08:0f:b5:f7:
         d6:ea:dc:8b:99:f6:38:12:3d:aa:b2:3d:bf:90:98:87:07:df:
         97:e1:ff:a2:53:85:75:a5:71:0a:ae:75:66:6f:ef:a3:2f:6b:
         5a:b8:c2:39:e9:a1:c0:ca:e3:47:3e:c7:89:0a:0d:6f:20:8c:
         f0:d3:29:99:e9:32:37:58:c2:6a:9c:c0:b8:5d:58:7f:64:21:
         31:5d:1c:77:34:cf:95:e8:65:b0:b8:14:1b:41:ae:ef:0d:af:
         cf:18:81:bf:24:3e:85:a1:3c:5f:9d:95:5b:35:1e:db:bf:38:
         ce:29:61:c2:60:92:8c:f1:b9:77:de:f6:41:d8:0a:c9:b5:04:
         9b:85:26:c0:4c:ce:bb:ef:92:ff:b4:fe:23:7e:a5:b1:f4:20:
         6a:aa:30:f7:1b:8b:85:a0:b3:37:9e:34:30:77:e9:94:62:db:
         e4:50:a8:d4
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUI6CUrk4pm1fT24ibjZpsmbo1pp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJFNkE4QUYzMjI2NTAxRDhDMEFFODlCMzFBNzhFMzY5
QkNEQkMwMzAeFw0yNTAzMjkwNTI3MDZaFw0yNTA0MDMxODQ1MDZaMDMxMTAvBgNV
BAMTKDJFRDlGQTQwQTBEMjMzOUQxMDUxRTE5QThBRkU1NzVEMUUyQTA2Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURfylmSBCc3+WOrOAUFbqCAeB
BKNzayZbixVjofCsuqBzeLnZET+3QsACji0lBZOfYqMmLGxkFhjwz77xOOWzoqDr
C1vIgUPx4XOfSlIIiXhHUdjfYzYjo4+UOmu9lWCFecMGgubMKPWwWvsAwhBWvfih
uEFNNO5TPDOU+HOiYdOWEdpzWk/zKe0Jopnpk4G12XEyo1ib0zgm/6Wa9jIXvYS7
WkLolCTEk0lPJmZOUjPUBve4HeN39l9g6ISHyBHXhkMg/V/a8NdBBbEAWLd8x+0L
kuIu90cP7+VOuknHIKpYQEHkSkIEMmfghznSf1vF/QVYD05tiIGZzjgMLPsPAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQULtn6QKDSM50QUeGaiv5XXR4qBs8wHwYDVR0j
BBgwFoAU0uaorzImUB2MCuibMaeONpvNvAMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QTlCRThCQUMwREJGMDRBMDRFNjU3RjE3NzIyMURFNUVG
QUVEMTQ3ODAzNEJERTYyNUZENDMxNTBCQ0ZCRjAyLzAvRDJFNkE4QUYzMjI2NTAx
RDhDMEFFODlCMzFBNzhFMzY5QkNEQkMwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkU2QThBRjMyMjY1MDFEOEMw
QUU4OUIzMUE3OEUzNjlCQ0RCQzAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUE5QkU4QkFDMERCRjA0QTA0RTY1N0YxNzcyMjFERTVFRkFFRDE0Nzgw
MzRCREU2MjVGRDQzMTUwQkNGQkYwMi8wL0QyRTZBOEFGMzIyNjUwMUQ4QzBBRTg5
QjMxQTc4RTM2OUJDREJDMDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMrMLaFl2VO+HASBZUSRrIr9BW
Tkx/UQaV/jmjbu1qIRLsaOilUx/pz6GN8ryHiVK6urBlcTFwImGEIFPA/fOED73y
NurmJGI4wXLhnbctYh643GjVyggPtffW6tyLmfY4Ej2qsj2/kJiHB9+X4f+iU4V1
pXEKrnVmb++jL2tauMI56aHAyuNHPseJCg1vIIzw0ymZ6TI3WMJqnMC4XVh/ZCEx
XRx3NM+V6GWwuBQbQa7vDa/PGIG/JD6FoTxfnZVbNR7bvzjOKWHCYJKM8bl33vZB
2ArJtQSbhSbATM6775L/tP4jfqWx9CBqqjD3G4uFoLM3njQwd+mUYtvkUKjU
-----END CERTIFICATE-----