Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
File:                     28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json)
Hash identifier:          dI+X0J0COrambrgBXveZb7HWvBNlg0IyslFRkvO/Vv8=
Subject key identifier:   0A:E6:FA:7B:50:B3:02:5C:D9:80:9D:E2:AC:52:B9:3E:D9:A4:96:9F
Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A
Certificate issuer:       /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
Certificate serial:       66702D300F42799FFD1578023AEC7A5F8FD3817B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
Manifest number:          BE
Signing time:             Fri 28 Mar 2025 11:26:12 +0000
Manifest this update:     Fri 28 Mar 2025 11:21:12 +0000
Manifest next update:     Wed 02 Apr 2025 04:13:12 +0000
Files and hashes:         1: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: pt90BIyyUSHlZlm4AKVLe1Z6Moz1dZPbV9t+YfaClY0=)
                          2: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: 7u4MCkoCp7ZT+ysEeheF+AFCRqgv/f4qOQ9KFJxMg8I=)
                          3: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: Tv46jSL3jD0k1NXV0T/tAaiSDTR6TBPS4SWa9rtammU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:70:2d:30:0f:42:79:9f:fd:15:78:02:3a:ec:7a:5f:8f:d3:81:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
        Validity
            Not Before: Mar 28 11:21:12 2025 GMT
            Not After : Apr  2 04:13:12 2025 GMT
        Subject: CN=0AE6FA7B50B3025CD9809DE2AC52B93ED9A4969F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:25:91:e0:2a:94:34:b8:6f:3b:2e:a5:a8:
                    d9:66:ef:c8:9c:7c:13:9d:eb:06:d4:e5:f4:90:5f:
                    c3:c0:09:ab:29:e9:36:64:98:d1:4c:86:2c:13:c3:
                    f9:71:73:6d:7b:4d:71:55:b3:51:b8:2e:25:c9:85:
                    06:5a:7f:df:07:4f:20:47:d8:2c:89:9d:0c:56:af:
                    f0:68:0e:e2:5b:e2:c3:a5:d4:83:53:cc:48:1a:ee:
                    d7:c9:b4:38:c4:69:df:2c:c1:e3:76:65:72:cc:35:
                    1f:e8:80:9d:c4:db:ab:e9:5e:ec:45:cb:d9:f1:5d:
                    3c:e8:df:ae:7a:d2:d9:6a:35:e6:6f:5c:68:72:da:
                    1b:7c:9d:cf:8e:df:15:d1:eb:06:c0:21:76:c8:37:
                    7d:d1:b5:9b:3e:0b:6a:b7:50:70:28:c7:04:03:6d:
                    74:b0:90:9e:1d:f0:b8:43:e9:a1:ed:ee:3e:41:b5:
                    25:65:d5:89:90:f4:bb:26:d4:03:94:26:02:d9:14:
                    7c:69:70:6e:29:ff:06:ee:69:d2:9a:ec:51:59:b0:
                    c3:67:c6:d2:ed:22:04:39:8d:af:0a:12:ad:03:50:
                    3c:e2:a3:94:48:93:10:aa:fa:07:db:a7:cf:6c:13:
                    ca:a4:46:9d:a7:f3:42:46:bf:86:6a:d7:82:01:21:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E6:FA:7B:50:B3:02:5C:D9:80:9D:E2:AC:52:B9:3E:D9:A4:96:9F
            X509v3 Authority Key Identifier:
                keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:04:36:b4:78:5a:ae:ed:0f:67:a6:17:05:c5:84:c2:36:78:
         f9:15:35:9d:01:e8:65:d7:3a:d1:16:d2:9f:7a:f7:38:6b:b6:
         6d:e5:6b:10:6d:b9:61:79:ec:2c:b5:83:31:80:16:89:52:16:
         49:e1:51:88:7a:d8:f9:fe:3a:e8:19:bf:58:7c:f1:10:23:c8:
         a8:2b:81:ec:c2:af:ef:f8:63:34:f1:18:d7:74:de:19:04:8f:
         fe:60:79:03:77:49:19:c8:c1:77:e5:f4:60:a5:4d:22:13:03:
         fe:72:81:be:be:23:c9:68:2e:1a:79:f3:ad:71:64:c5:24:de:
         18:fe:a0:1c:25:bc:be:a3:c6:a7:6f:fd:7e:cd:35:f4:41:c6:
         80:0d:df:ab:12:cc:40:eb:01:16:e3:22:1f:97:d8:0b:f0:a1:
         3a:c0:7e:f7:6a:a5:93:3c:1d:cd:20:75:3c:a6:c0:54:48:cb:
         2e:a2:a8:61:28:de:93:6a:16:ec:9e:c0:00:04:b0:0c:e1:bb:
         bb:f9:2d:6b:2f:92:ce:e4:33:cc:d4:aa:fd:63:6d:95:58:70:
         d9:33:74:5b:0a:ac:6e:8c:2f:97:72:49:e7:8e:d4:a6:a2:27:
         08:7f:63:c5:17:58:21:09:19:ec:81:40:3a:a5:5d:8f:ce:55:
         3d:09:d6:f0
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUZnAtMA9CeZ/9FXgCOux6X4/TgXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD
QkE5NTM2QTAeFw0yNTAzMjgxMTIxMTJaFw0yNTA0MDIwNDEzMTJaMDMxMTAvBgNV
BAMTKDBBRTZGQTdCNTBCMzAyNUNEOTgwOURFMkFDNTJCOTNFRDlBNDk2OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdoiWR4CqUNLhvOy6lqNlm78ic
fBOd6wbU5fSQX8PACasp6TZkmNFMhiwTw/lxc217TXFVs1G4LiXJhQZaf98HTyBH
2CyJnQxWr/BoDuJb4sOl1INTzEga7tfJtDjEad8sweN2ZXLMNR/ogJ3E26vpXuxF
y9nxXTzo36560tlqNeZvXGhy2ht8nc+O3xXR6wbAIXbIN33RtZs+C2q3UHAoxwQD
bXSwkJ4d8LhD6aHt7j5BtSVl1YmQ9Lsm1AOUJgLZFHxpcG4p/wbuadKa7FFZsMNn
xtLtIgQ5ja8KEq0DUDzio5RIkxCq+gfbp89sE8qkRp2n80JGv4Zq14IBIVNBAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUCub6e1CzAlzZgJ3irFK5Ptmklp8wHwYDVR0j
BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC
Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4
MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1
OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0
RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw
QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8BDa0eFqu7Q9nphcFxYTCNnj5
FTWdAehl1zrRFtKfevc4a7Zt5WsQbblheewstYMxgBaJUhZJ4VGIetj5/jroGb9Y
fPEQI8ioK4Hswq/v+GM08RjXdN4ZBI/+YHkDd0kZyMF35fRgpU0iEwP+coG+viPJ
aC4aefOtcWTFJN4Y/qAcJby+o8anb/1+zTX0QcaADd+rEsxA6wEW4yIfl9gL8KE6
wH73aqWTPB3NIHU8psBUSMsuoqhhKN6TahbsnsAABLAM4bu7+S1rL5LO5DPM1Kr9
Y22VWHDZM3RbCqxujC+XcknnjtSmoicIf2PFF1ghCRnsgUA6pV2PzlU9Cdbw
-----END CERTIFICATE-----