Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13ec1d4e-ed93-4f1e-829f-6d8b05ef73e0/28f76b879a1459ce86a185362e868785c2ae6a54.mft
File:                     28f76b879a1459ce86a185362e868785c2ae6a54.mft (raw, json)
Hash identifier:          xeRrIT5mkWOLL4+jwNrf9+2uQbXQB7/yiue93o6Rh34=
Subject key identifier:   25:4D:0B:BC:AB:F3:AA:98:9D:31:E0:92:01:5B:EA:28:40:EA:B5:B9
Authority key identifier: 59:D8:03:6D:43:9B:80:3C:93:34:7B:27:8D:0E:6F:77:6B:A2:5B:D0
Certificate issuer:       /CN=28f76b879a1459ce86a185362e868785c2ae6a54
Certificate serial:       29035C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f76b879a1459ce86a185362e868785c2ae6a54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13ec1d4e-ed93-4f1e-829f-6d8b05ef73e0/28f76b879a1459ce86a185362e868785c2ae6a54.mft
Manifest number:          0DD4
Signing time:             Mon 15 Apr 2024 09:21:11 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:52:18 +0000
Files and hashes:         1: 28f76b879a1459ce86a185362e868785c2ae6a54.crl (hash: o1obu4PQzN1ej5MPw0m3O1lL8Y9xU8ThmuNvin5jlg0=)
                          2: bed78c05d5ecf8f471ccff8b9775f783727e56d8.roa (hash: C+dnZEd4s3oVAYrgyzbXoBJsPtL3Uu87fyMEL79U+nM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2687836 (0x29035c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f76b879a1459ce86a185362e868785c2ae6a54
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:52:18 2024 GMT
        Subject: CN=d7361bd24085ccf00f9c3b33d74ae8b07b59bd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:74:1b:09:e6:ba:76:44:81:1e:b2:fe:c3:3b:
                    9d:00:3d:b8:9b:f0:48:d4:87:e8:c5:8f:a1:f6:99:
                    ba:06:15:6b:47:f1:b2:81:db:73:cb:a2:e9:be:62:
                    ee:48:2b:92:6e:ea:12:b4:07:95:27:1b:a9:c9:09:
                    db:4d:79:2c:df:a6:ea:b6:10:49:e8:de:68:9c:7c:
                    03:61:f6:c6:77:21:bc:1a:ee:d0:6c:40:d4:3b:c2:
                    5a:5e:4e:7b:21:d7:05:33:4e:e7:bc:ea:1a:95:6c:
                    96:92:41:0a:b5:48:41:e7:28:76:f4:81:46:86:85:
                    fb:b0:c6:2a:6a:73:d2:b8:f9:f2:e3:a8:bd:0a:e2:
                    e7:fc:0f:6d:85:cd:9f:99:33:b3:5e:9b:b7:2d:5d:
                    04:80:85:7a:3d:72:15:b2:69:3b:2e:96:d3:de:74:
                    6d:76:64:c7:f5:b5:93:bf:fe:aa:9f:c8:41:dd:17:
                    4d:93:95:f4:18:4a:d5:a6:fb:6f:ee:5b:67:8b:dc:
                    d3:11:ea:f1:25:f4:9e:6d:71:d9:b4:10:fb:c5:78:
                    9c:32:02:34:ca:d6:03:43:e3:fd:ec:fd:e7:b2:5a:
                    99:0b:83:3f:87:d4:5c:f4:3a:91:f8:df:ac:05:05:
                    70:fe:c7:10:44:ce:e1:cb:18:48:40:a2:fa:5e:95:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4D:0B:BC:AB:F3:AA:98:9D:31:E0:92:01:5B:EA:28:40:EA:B5:B9
            X509v3 Authority Key Identifier:
                keyid:59:D8:03:6D:43:9B:80:3C:93:34:7B:27:8D:0E:6F:77:6B:A2:5B:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f76b879a1459ce86a185362e868785c2ae6a54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13ec1d4e-ed93-4f1e-829f-6d8b05ef73e0/28f76b879a1459ce86a185362e868785c2ae6a54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13ec1d4e-ed93-4f1e-829f-6d8b05ef73e0/28f76b879a1459ce86a185362e868785c2ae6a54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:31:f4:13:0d:19:fc:6f:1a:02:fd:9b:8d:de:1d:7e:4c:11:
         c3:8d:bb:f5:c9:64:2d:23:8e:0d:8b:83:b5:9c:39:c8:5c:a1:
         6a:10:d9:6e:ee:b8:55:b3:ce:4d:dd:e2:81:84:db:c7:52:18:
         bf:81:c1:ae:f5:60:39:c9:87:d9:08:d3:fb:c7:da:f2:db:4c:
         3f:fe:42:75:2e:75:c5:43:30:c7:2e:9e:ac:93:c8:f1:51:c1:
         4b:f6:bc:3e:9e:a2:7c:40:40:9c:8d:73:71:35:6e:23:e2:60:
         0f:34:0e:6b:8f:79:31:a1:3a:49:eb:bf:9b:d1:b7:2d:54:83:
         06:7d:3b:38:55:e3:28:9c:96:e1:84:f4:d5:26:e1:39:8e:35:
         6e:9c:40:55:3c:ee:69:af:37:50:61:53:64:66:82:de:b2:06:
         20:14:ec:2c:e5:72:42:5d:2b:6e:b4:cf:74:c4:c7:f1:ae:8a:
         4d:9b:3d:a1:33:c0:0a:99:6a:aa:ca:03:ca:66:43:61:0b:43:
         c8:8a:ff:81:0d:d5:d3:4e:8d:b1:36:1e:05:6b:6e:84:e2:8e:
         83:3e:b6:00:4c:a9:b4:26:4d:88:62:5e:01:05:5a:2d:09:5b:
         d8:70:8b:92:ec:8b:f1:1a:4f:a2:6b:aa:b6:e5:09:a9:ce:85:
         d4:3e:b7:a7
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKQNcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
Zjc2Yjg3OWExNDU5Y2U4NmExODUzNjJlODY4Nzg1YzJhZTZhNTQwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTA1MjE4WjAzMTEwLwYDVQQDEyhkNzM2MWJkMjQwODVj
Y2YwMGY5YzNiMzNkNzRhZThiMDdiNTliZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg3QbCea6dkSBHrL+wzudAD24m/BI1IfoxY+h9pm6BhVrR/Gy
gdtzy6LpvmLuSCuSbuoStAeVJxupyQnbTXks36bqthBJ6N5onHwDYfbGdyG8Gu7Q
bEDUO8JaXk57IdcFM07nvOoalWyWkkEKtUhB5yh29IFGhoX7sMYqanPSuPny46i9
CuLn/A9thc2fmTOzXpu3LV0EgIV6PXIVsmk7LpbT3nRtdmTH9bWTv/6qn8hB3RdN
k5X0GErVpvtv7ltni9zTEerxJfSebXHZtBD7xXicMgI0ytYDQ+P97P3nslqZC4M/
h9Rc9DqR+N+sBQVw/scQRM7hyxhIQKL6XpU/fwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFCVNC7yr86qYnTHgkgFb6ihA6rW5MB8GA1UdIwQYMBaAFFnYA21Dm4A8kzR7
J40Ob3drolvQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjhmNzZi
ODc5YTE0NTljZTg2YTE4NTM2MmU4Njg3ODVjMmFlNmE1NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTNlYzFkNGUtZWQ5My00ZjFlLTgyOWYtNmQ4YjA1
ZWY3M2UwLzI4Zjc2Yjg3OWExNDU5Y2U4NmExODUzNjJlODY4Nzg1YzJhZTZhNTQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xM2VjMWQ0ZS1lZDkzLTRmMWUtODI5Zi02ZDhi
MDVlZjczZTAvMjhmNzZiODc5YTE0NTljZTg2YTE4NTM2MmU4Njg3ODVjMmFlNmE1
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAIEx9BMNGfxvGgL9m43eHX5MEcONu/XJZC0jjg2Lg7WcOchc
oWoQ2W7uuFWzzk3d4oGE28dSGL+Bwa71YDnJh9kI0/vH2vLbTD/+QnUudcVDMMcu
nqyTyPFRwUv2vD6eonxAQJyNc3E1biPiYA80DmuPeTGhOknrv5vRty1UgwZ9OzhV
4yicluGE9NUm4TmONW6cQFU87mmvN1BhU2Rmgt6yBiAU7CzlckJdK260z3TEx/Gu
ik2bPaEzwAqZaqrKA8pmQ2ELQ8iK/4EN1dNOjbE2HgVrboTijoM+tgBMqbQmTYhi
XgEFWi0JW9hwi5Lsi/EaT6JrqrblCanOhdQ+t6c=
-----END CERTIFICATE-----