Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.mft
File:                     28bbc56a25d664ac18a328309550c0f6329ea362.mft (raw, json)
Hash identifier:          8DBh8fdgjEuS51aUsoMTJaq8PQXjF9pliQswo/40QQI=
Subject key identifier:   5C:3A:D5:80:42:AA:AF:21:FA:F7:32:3A:7D:6B:82:1A:6E:69:4E:F6
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       2758D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.mft
Manifest number:          012D
Signing time:             Tue 07 Nov 2023 12:19:29 +0000
Manifest this update:     Tue 07 Nov 2023 11:18:34 +0000
Manifest next update:     Fri 10 Nov 2023 13:07:34 +0000
Files and hashes:         1: 112990b8b5aca4ca74842f1a5bb3d49c7b41b779.roa (hash: m7+pphkCCfKz61IpW1UphnMoX2ygBoIXdaYGUmVzBN4=)
                          2: 1d618ffae2bf4c284d7823fc0af55c01772fe9ef.roa (hash: 10MvCnJmv6kM04lHTtQZWiN4J6D1RCVvpGZ567mBo2k=)
                          3: 2007f752ac6e03dc2cd11418240e6d0a46c4ebfe.roa (hash: FJW+9s5FX9jO9pYYTa3FuTxKNlEeE0TmuP6qyOmjYHE=)
                          4: 28bbc56a25d664ac18a328309550c0f6329ea362.crl (hash: ChPv2VNQXh+3V30/EEDR5huL95oPOnT+joeQJjHASc4=)
                          5: 328db06c50329b03fa32c029a89c95a342153033.roa (hash: eENil0GMtjSXHX1hcRhRmq/c+duBOveojlO1hkwFDLQ=)
                          6: 40294ef7b37f7cbff93bd1738111fdb909b0c00a.roa (hash: fsMR9u3ETHl6yvR3tcjwm2tdEz1Y7KGrLXbLrJ+7E/I=)
                          7: 40cd9323243fc7bca04c6ec8e989a83c8b13c5c2.roa (hash: hwY/kOs2ljv8ERMO8/crOYM7YH5oHg2yn0YneETOTGM=)
                          8: 418f4bfc3ed69015f16764bdb4801084b9e37f13.roa (hash: sHNK+YAe1KbJ6RJ0UDlwOjnlcAmocO/L3iWbKfcDTu0=)
                          9: 8ca6c6c32f57c8106b8493e8e87dc3e2153d76f0.roa (hash: CYe9t15Agi8Jksuy8J+dm9sDSR1Z71kXPQiQLMpHX2Y=)
                          10: 92b06f549ef556823fe08cc1b286cb54def0fce2.roa (hash: OhNaNqyKgM3T6YNtiQPqigu6GxKecEOIuENh5BRIUZg=)
                          11: 9d586fbfa382cd0bddc919c7a3e4268ec5ca1296.roa (hash: irT0jk/inz6vc3Ul+kM/3Wl0KpotMl8FhZEUCQecbyE=)
                          12: ac3da986cb103022905627b1e02c9c15f0a29b1e.roa (hash: GjGUTm6UlJfJf600r/GFxZ1dDanNSnf7QSADD4ZmJvo=)
                          13: ace847822e719ae09282dee8181c7743ca86b1f3.roa (hash: c1Pgfqv6j2NvrGFOLma6lBK8cyqbIxD2bl4xbqf0keI=)
                          14: baf1aee1bfc1e3b0461a3966b4a7b41955d74164.roa (hash: fqUwGuHewS3vtXnIp0OtpoYY/Xv34fqF8StpmbRGa7E=)
                          15: ca736cf96477b1b6ae2e9839aba6ccd0b7a0012b.roa (hash: OSlJQwK+79uwYBQY3WvI2nrMyGGARJKpOIJTJPHmZQs=)
                          16: cefcf80cc27b1bc6f67d598cfd82583bf172dca8.roa (hash: NI8URSvBMyp6UzoGT6j2Q1xph7nUvE5RsPEiwNNSEVY=)
                          17: dc310f14d26124aa498478f6b1fe531eca21c84e.roa (hash: L9cce/vDOdWTTRLn92f8FxBoCgNdRBENGgSo13OUz9Q=)
                          18: e005e0c3e5a5dde77fa8c64c0f89d08773990e30.roa (hash: DXQbmodfMS3fCcOPcEB9m4zxYJiGLPl4D+t5EJadxvE=)
                          19: efe796d5654afa3e6eed7eb29285a75e63c18509.roa (hash: 27JdE6VyFN884vft8QrVSNpt20BqlSze5AZfPqldYdQ=)
                          20: f772e7dbf22f6d3c66395d08f9a33e2aa84cc735.roa (hash: BlQ+zjOTP4w+IzDluggZiOpPDqoV3MK/zbXoFGsx2rY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578642 (0x2758d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Nov  7 11:18:34 2023 GMT
            Not After : Nov 10 13:07:34 2023 GMT
        Subject: CN=06a8617e89e08098f04f94b25d731c5f338ab17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:47:78:16:ea:a2:8f:21:34:95:04:3b:3c:
                    ae:ba:71:b9:c8:b5:7e:1b:d0:80:77:e5:3f:5e:29:
                    fb:f5:22:a8:ca:8d:87:60:b2:f5:d2:50:f3:3c:04:
                    6d:25:b7:ee:4a:ec:d5:2d:fc:57:77:e0:5b:71:dd:
                    00:ea:be:37:2e:46:2a:13:c4:47:77:4b:d3:9a:e6:
                    77:f6:bf:4e:00:f7:ea:8b:74:13:df:eb:a5:ac:cc:
                    e5:e1:87:9a:00:41:8e:7d:cc:43:97:2d:fb:61:ca:
                    f7:05:42:14:d6:ab:ec:e4:09:4b:ff:76:60:20:73:
                    98:4f:62:cc:20:79:6a:fc:bd:2f:fc:ce:0f:d2:4c:
                    65:5d:5f:5e:d2:85:f5:48:db:9a:a8:46:68:a6:c5:
                    c6:bf:e5:38:11:89:00:47:5f:15:ae:17:5e:f8:7d:
                    0d:a8:78:43:a5:d9:e2:17:d2:c2:3a:77:6d:a7:c5:
                    5b:a9:65:ce:d2:00:cf:b3:b4:6c:3e:1d:24:cf:9b:
                    24:26:89:b1:f9:1a:b5:aa:5d:61:48:69:b9:35:96:
                    c2:11:a6:b2:28:b9:7a:61:ef:21:e0:bf:5d:30:88:
                    63:b6:06:97:f1:8b:22:91:20:f2:a6:cf:1f:88:2e:
                    f8:77:ba:5c:01:7d:fd:7f:10:66:31:25:66:6f:6d:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:D5:80:42:AA:AF:21:FA:F7:32:3A:7D:6B:82:1A:6E:69:4E:F6
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:37:5e:6b:77:7e:65:41:10:b4:f6:c0:cb:a8:c9:0b:22:
         b4:88:6a:36:56:e6:28:fb:4b:63:69:5b:c9:0c:4a:c9:a7:53:
         d7:3b:21:73:72:e8:db:65:66:90:a5:f8:3b:2c:73:80:cd:6b:
         dc:f4:6d:b4:40:e3:b4:89:14:ee:b4:0c:3f:a7:92:97:1c:1e:
         47:49:f9:99:ca:2b:93:3d:fa:da:c6:12:af:18:1d:9d:e5:e1:
         c5:e5:81:b2:be:a6:20:13:b2:ad:48:63:f6:f3:ed:58:13:d2:
         d3:5f:be:eb:59:57:02:78:1f:ae:83:47:3e:1b:29:68:1f:bc:
         62:a6:ab:9c:77:93:f9:89:d9:b4:66:e6:4d:c8:df:4b:63:e7:
         c4:6f:f4:ab:a8:ba:9d:e5:e3:2c:43:79:bb:b7:c1:35:98:a4:
         a2:8e:72:c2:b2:ac:21:11:a3:84:13:f8:95:01:cc:0c:9f:fa:
         4d:34:97:bc:98:01:ed:b8:65:ff:ac:36:6c:9e:1e:9c:97:1a:
         4b:95:41:fe:46:85:e0:23:7c:2c:fb:f2:65:c6:24:bd:0b:e8:
         d5:36:74:0e:10:1d:f3:38:5d:b1:ab:76:f7:92:4d:05:4e:29:
         0e:5d:48:4d:d6:4f:9c:3d:a3:07:75:a8:ce:e8:27:9d:96:73:
         6b:9d:32:ac
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJ1jSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
YmJjNTZhMjVkNjY0YWMxOGEzMjgzMDk1NTBjMGY2MzI5ZWEzNjIwHhcNMjMxMTA3
MTExODM0WhcNMjMxMTEwMTMwNzM0WjAzMTEwLwYDVQQDEygwNmE4NjE3ZTg5ZTA4
MDk4ZjA0Zjk0YjI1ZDczMWM1ZjMzOGFiMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjYxHeBbqoo8hNJUEOzyuunG5yLV+G9CAd+U/Xin79SKoyo2H
YLL10lDzPARtJbfuSuzVLfxXd+Bbcd0A6r43LkYqE8RHd0vTmuZ39r9OAPfqi3QT
3+ulrMzl4YeaAEGOfcxDly37Ycr3BUIU1qvs5AlL/3ZgIHOYT2LMIHlq/L0v/M4P
0kxlXV9e0oX1SNuaqEZopsXGv+U4EYkAR18Vrhde+H0NqHhDpdniF9LCOndtp8Vb
qWXO0gDPs7RsPh0kz5skJomx+Rq1ql1hSGm5NZbCEaayKLl6Ye8h4L9dMIhjtgaX
8YsikSDyps8fiC74d7pcAX39fxBmMSVmb237nQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFFw61YBCqq8h+vcyOn1rghpuaU72MB8GA1UdIwQYMBaAFOxWMP+ndQU1YGwb
0Xk0OuMXY94tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjhiYmM1
NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzI4YmJjNTZhMjVkNjY0YWMxOGEzMjgzMDk1NTBjMGY2MzI5ZWEzNjIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMjhiYmM1NmEyNWQ2NjRhYzE4YTMyODMwOTU1MGMwZjYzMjllYTM2
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAFi9N15rd35lQRC09sDLqMkLIrSIajZW5ij7S2NpW8kMSsmn
U9c7IXNy6NtlZpCl+Dssc4DNa9z0bbRA47SJFO60DD+nkpccHkdJ+ZnKK5M9+trG
Eq8YHZ3l4cXlgbK+piATsq1IY/bz7VgT0tNfvutZVwJ4H66DRz4bKWgfvGKmq5x3
k/mJ2bRm5k3I30tj58Rv9Kuoup3l4yxDebu3wTWYpKKOcsKyrCERo4QT+JUBzAyf
+k00l7yYAe24Zf+sNmyeHpyXGkuVQf5GheAjfCz78mXGJL0L6NU2dA4QHfM4XbGr
dveSTQVOKQ5dSE3WT5w9owd1qM7oJ52Wc2udMqw=
-----END CERTIFICATE-----