Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
File:                     AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft (raw, json)
Hash identifier:          Mew2nDA3s/40vCJ3bBEGrX+q+uS+IVz725cVWoW2yys=
Subject key identifier:   EC:AC:46:AB:86:E3:36:E3:94:5B:88:79:8D:37:0A:F4:D8:9C:8C:47
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Certificate issuer:       /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial:       238E92D672B61BBD92FFB2977F85BDC4DF1E24C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
Manifest number:          C6
Signing time:             Fri 28 Mar 2025 03:41:30 +0000
Manifest this update:     Fri 28 Mar 2025 03:36:30 +0000
Manifest next update:     Wed 02 Apr 2025 13:01:30 +0000
Files and hashes:         1: AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl (hash: dgsj4licLPzxXBDQVbGwfYzsY6piUXk8vwP+W9qjJ74=)
                          2: 3230312e3135382e39382e302f32342d3234203d3e20323732333636.roa (hash: +3H2vQacPst44179H9ozi8ZNmuf3gbFsNRH1xkt2BXU=)
                          3: 3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (hash: M4+B8dKZV5DI02H1wVqkAPnxV4BALeFj/B9STyRTB2k=)
                          4: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (hash: yvSEv5Xfx29WmYskueRJZaLzBlNmMLZ3piPORyqzEPc=)
                          5: 3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (hash: w3Yy4sRo0gzJGcEnOCGmEHKKiZdLPgWGX410//7WEO4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:92:d6:72:b6:1b:bd:92:ff:b2:97:7f:85:bd:c4:df:1e:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
        Validity
            Not Before: Mar 28 03:36:30 2025 GMT
            Not After : Apr  2 13:01:30 2025 GMT
        Subject: CN=ECAC46AB86E336E3945B88798D370AF4D89C8C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:f9:17:c5:ce:19:42:3a:61:1d:33:3b:47:
                    9b:40:78:f9:7b:24:a3:9b:57:b9:3a:20:22:e9:4d:
                    3d:f9:1f:5b:99:23:79:b7:bc:63:4b:a4:26:00:05:
                    b0:36:cf:c9:01:d8:4b:bb:e7:8b:76:a3:30:c2:e5:
                    3d:e0:a3:41:c6:ed:22:64:5d:24:9c:2b:73:b0:21:
                    b6:da:16:6a:1d:9b:3e:be:96:50:d8:94:90:77:5e:
                    d4:e3:d7:25:f2:66:ea:cf:ee:88:3c:41:44:dd:28:
                    26:33:bf:bd:49:2e:74:07:1f:b4:57:47:1e:8c:63:
                    f1:07:4c:1e:09:83:9b:33:c7:e9:a2:12:53:ee:8f:
                    a5:ba:87:35:1d:fb:9c:ff:04:57:96:78:4c:be:c6:
                    d8:3a:18:a2:f7:61:13:a4:20:77:83:74:ce:93:8b:
                    77:00:71:16:07:fe:03:ae:2d:9a:91:56:b0:b4:4b:
                    60:94:90:89:3f:2c:5a:fb:cc:b4:e0:48:b3:ff:c9:
                    4d:7f:dc:f4:64:73:bc:31:8e:4f:e0:79:2f:79:30:
                    76:45:7c:0e:bb:f2:54:6c:ee:7b:1c:9d:0c:c8:4c:
                    af:2f:20:e0:37:78:ee:ff:3d:ec:39:e6:5d:4f:f1:
                    c6:0e:8d:28:04:9c:f6:80:ec:68:3e:0a:a0:28:d7:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:46:AB:86:E3:36:E3:94:5B:88:79:8D:37:0A:F4:D8:9C:8C:47
            X509v3 Authority Key Identifier:
                keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:92:07:74:05:7f:0f:0f:76:11:40:a8:e6:07:20:9e:d6:0d:
         d5:51:60:76:14:c9:fb:21:ac:08:17:09:eb:d0:7f:f8:4d:c0:
         26:49:3b:01:4b:a5:de:e7:84:8e:5f:08:23:7a:bc:ca:d7:2b:
         3c:62:e6:74:fe:b1:bd:36:31:1d:60:d4:bd:c5:d8:85:b6:bb:
         13:4f:6c:b4:53:c1:2c:99:b8:2d:1d:0a:62:3d:c2:13:fb:a2:
         86:01:c3:4e:8c:d4:73:8f:3d:32:d5:e1:15:bd:4a:67:66:b1:
         c0:38:b0:7b:40:62:72:a3:ef:ff:81:71:a1:4b:8b:ad:a7:8f:
         01:ba:aa:cf:9c:2e:96:ae:c4:7d:76:c0:2a:00:13:8e:b1:0c:
         b4:25:35:54:ce:46:9e:07:b2:20:63:ca:f2:0b:e0:34:12:d4:
         42:a4:27:ee:f3:35:ff:92:c8:c0:d1:73:9c:b5:72:ed:1a:38:
         19:a4:19:f3:0c:4f:df:01:9b:e6:86:ca:69:a1:fb:e3:00:be:
         9e:23:83:81:e3:4e:17:73:01:c2:10:d0:ca:f0:96:f5:49:43:
         8a:0d:90:ce:93:9f:0a:a0:7d:f5:2f:d4:68:92:48:f9:87:05:
         9c:19:04:1b:a2:44:00:f7:7c:33:3c:92:b4:26:4f:04:e1:2b:
         e9:1e:33:22
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUI46S1nK2G72S/7KXf4W9xN8eJMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEyMUI4MUEzNUJBRjdFNUYxMEUwQzhBQkUxNjQ2Njc0
NUMzN0JGODAeFw0yNTAzMjgwMzM2MzBaFw0yNTA0MDIxMzAxMzBaMDMxMTAvBgNV
BAMTKEVDQUM0NkFCODZFMzM2RTM5NDVCODg3OThEMzcwQUY0RDg5QzhDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpPkXxc4ZQjphHTM7R5tAePl7
JKObV7k6ICLpTT35H1uZI3m3vGNLpCYABbA2z8kB2Eu754t2ozDC5T3go0HG7SJk
XSScK3OwIbbaFmodmz6+llDYlJB3XtTj1yXyZurP7og8QUTdKCYzv71JLnQHH7RX
Rx6MY/EHTB4Jg5szx+miElPuj6W6hzUd+5z/BFeWeEy+xtg6GKL3YROkIHeDdM6T
i3cAcRYH/gOuLZqRVrC0S2CUkIk/LFr7zLTgSLP/yU1/3PRkc7wxjk/geS95MHZF
fA678lRs7nscnQzITK8vIOA3eO7/Pew55l1P8cYOjSgEnPaA7Gg+CqAo1z1fAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU7KxGq4bjNuOUW4h5jTcK9NicjEcwHwYDVR0j
BBgwFoAUqiG4GjW69+XxDgyKvhZGZ0XDe/gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MjQ0MjRFODUyNDUwMDgyQjlCNTQzODFEM0E5NEE4MUQ1
OUNENEU2NjNEREE4NUE0MkM5QjA1MTc3RDc4M0UyLzAvQUEyMUI4MUEzNUJBRjdF
NUYxMEUwQzhBQkUxNjQ2Njc0NUMzN0JGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQTIxQjgxQTM1QkFGN0U1RjEw
RTBDOEFCRTE2NDY2NzQ1QzM3QkY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzI0NDI0RTg1MjQ1MDA4MkI5QjU0MzgxRDNBOTRBODFENTlDRDRFNjYz
RERBODVBNDJDOUIwNTE3N0Q3ODNFMi8wL0FBMjFCODFBMzVCQUY3RTVGMTBFMEM4
QUJFMTY0NjY3NDVDMzdCRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3kgd0BX8PD3YRQKjmByCe1g3V
UWB2FMn7IawIFwnr0H/4TcAmSTsBS6Xe54SOXwgjerzK1ys8YuZ0/rG9NjEdYNS9
xdiFtrsTT2y0U8EsmbgtHQpiPcIT+6KGAcNOjNRzjz0y1eEVvUpnZrHAOLB7QGJy
o+//gXGhS4utp48BuqrPnC6WrsR9dsAqABOOsQy0JTVUzkaeB7IgY8ryC+A0EtRC
pCfu8zX/ksjA0XOctXLtGjgZpBnzDE/fAZvmhsppofvjAL6eI4OB404XcwHCENDK
8Jb1SUOKDZDOk58KoH31L9Rokkj5hwWcGQQbokQA93wzPJK0Jk8E4SvpHjMi
-----END CERTIFICATE-----