Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft
File:                     BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json)
Hash identifier:          aBzDStPIO4YwkZVrMV1ExgqYLwE/Q2WkyDnfzInHI/k=
Subject key identifier:   6A:62:90:49:20:23:30:C1:D4:10:D5:B9:BD:D7:5E:F8:84:D5:E1:FC
Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC
Certificate issuer:       /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC
Certificate serial:       17DABDFB591EB93F224BB41DEE36871F16DBC017
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft
Manifest number:          BF
Signing time:             Fri 28 Mar 2025 07:39:08 +0000
Manifest this update:     Fri 28 Mar 2025 07:34:08 +0000
Manifest next update:     Wed 02 Apr 2025 11:22:08 +0000
Files and hashes:         1: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: qefcdKBbQ8rTrMpgo/t4zhuWfrSW4R/8kvtNUQX7kms=)
                          2: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: ugnOQ/P7mCIX6QQGP/fFl6Iat7DfhuBkhD2ncKXdkKY=)
                          3: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: qXLUa1DFAZMrZIlzarnZaCXNOtAwLQ/Wi2JutVkZxnE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:da:bd:fb:59:1e:b9:3f:22:4b:b4:1d:ee:36:87:1f:16:db:c0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC
        Validity
            Not Before: Mar 28 07:34:08 2025 GMT
            Not After : Apr  2 11:22:08 2025 GMT
        Subject: CN=6A629049202330C1D410D5B9BDD75EF884D5E1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:8c:7e:26:67:a0:7b:30:be:59:9a:87:60:
                    5c:b5:09:6c:6e:59:e0:fe:d3:92:2d:e5:58:57:db:
                    21:8c:cb:34:95:4b:92:36:99:fc:3c:95:fe:c7:a1:
                    d8:26:6d:11:0b:c6:e3:0f:2b:fc:62:54:e2:34:ca:
                    2c:35:0f:fa:00:12:45:8d:23:ab:46:66:80:6e:3d:
                    f5:b7:cd:b6:c0:c3:c5:81:70:8a:23:9a:0e:b9:cb:
                    fc:25:6b:17:87:cd:03:3e:98:a8:3d:e2:fd:96:23:
                    4b:23:32:f9:de:f0:83:22:d6:b8:5c:15:c5:01:6b:
                    5a:1a:44:82:e1:d0:43:10:cd:6b:02:0c:39:04:d9:
                    6c:e0:85:4f:fd:09:ab:1a:ee:34:3c:72:53:09:89:
                    7f:6a:03:8d:74:bf:37:24:68:99:4f:b6:cb:fb:19:
                    79:19:9a:c7:cf:44:b2:96:3e:c5:80:59:eb:9f:49:
                    03:7e:34:5a:aa:af:e0:c8:3e:2e:63:d0:bc:8d:d1:
                    fa:a4:56:47:be:19:3e:00:29:42:8b:c7:f7:a0:ab:
                    ee:1e:b5:ea:c2:da:bf:36:67:49:61:4b:a7:09:19:
                    81:85:0c:f3:eb:1c:34:e5:16:8d:9a:2f:7f:8c:a1:
                    47:16:8a:81:06:04:da:2c:7a:4d:50:f3:ae:f6:7c:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:62:90:49:20:23:30:C1:D4:10:D5:B9:BD:D7:5E:F8:84:D5:E1:FC
            X509v3 Authority Key Identifier:
                keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:8c:e1:dc:f2:af:90:6c:81:c3:29:f9:ed:be:5f:96:5c:
         cd:8b:e9:52:8d:ed:f5:0b:c5:c7:54:cc:84:39:3e:34:18:bd:
         0c:05:b6:ec:c7:92:fb:0b:6b:26:b1:85:e8:80:da:61:cf:9e:
         2a:61:1a:89:ff:52:eb:9f:e2:86:d6:7d:d3:d4:28:9f:35:70:
         96:a5:d5:14:39:b8:30:9f:62:1a:c7:26:25:43:89:83:79:0f:
         5f:8a:a2:2a:d9:69:04:24:50:39:92:79:9a:4d:39:2e:26:54:
         82:02:b7:4c:2e:04:0b:66:16:29:72:91:ba:8b:e5:68:07:75:
         e2:a8:44:48:8d:62:5f:33:9c:73:4f:fa:ff:b7:86:a8:42:f1:
         23:3d:86:1e:4c:9f:2b:d7:ba:20:0b:85:97:5b:4f:3b:34:9c:
         c5:ef:d0:50:57:bf:fd:c1:d3:95:aa:d1:10:f6:3e:fb:61:33:
         bc:9c:b0:fb:e3:5e:28:7d:7c:9e:6a:51:c0:ba:c4:92:9e:a3:
         84:ae:45:36:d9:ee:86:4e:d3:e3:74:81:5e:c8:38:9b:87:f4:
         42:07:93:45:e2:e7:0c:30:94:0b:74:06:e7:6c:e8:39:cf:3e:
         83:4f:5f:33:9a:83:50:ef:23:0d:6c:6d:9f:40:9d:f8:a8:cd:
         e6:ed:a0:65
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUF9q9+1keuT8iS7Qd7jaHHxbbwBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG
QTFCN0ZGQzAeFw0yNTAzMjgwNzM0MDhaFw0yNTA0MDIxMTIyMDhaMDMxMTAvBgNV
BAMTKDZBNjI5MDQ5MjAyMzMwQzFENDEwRDVCOUJERDc1RUY4ODRENUUxRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZox+JmegezC+WZqHYFy1CWxu
WeD+05It5VhX2yGMyzSVS5I2mfw8lf7HodgmbRELxuMPK/xiVOI0yiw1D/oAEkWN
I6tGZoBuPfW3zbbAw8WBcIojmg65y/wlaxeHzQM+mKg94v2WI0sjMvne8IMi1rhc
FcUBa1oaRILh0EMQzWsCDDkE2WzghU/9Casa7jQ8clMJiX9qA410vzckaJlPtsv7
GXkZmsfPRLKWPsWAWeufSQN+NFqqr+DIPi5j0LyN0fqkVke+GT4AKUKLx/egq+4e
terC2r82Z0lhS6cJGYGFDPPrHDTlFo2aL3+MoUcWioEGBNosek1Q8672fOlxAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUamKQSSAjMMHUENW5vdde+ITV4fwwHwYDVR0j
BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC
MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD
MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy
RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF
MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG
NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQtIzh3PKvkGyBwyn57b5fllzN
i+lSje31C8XHVMyEOT40GL0MBbbsx5L7C2smsYXogNphz54qYRqJ/1Lrn+KG1n3T
1CifNXCWpdUUObgwn2IaxyYlQ4mDeQ9fiqIq2WkEJFA5knmaTTkuJlSCArdMLgQL
ZhYpcpG6i+VoB3XiqERIjWJfM5xzT/r/t4aoQvEjPYYeTJ8r17ogC4WXW087NJzF
79BQV7/9wdOVqtEQ9j77YTO8nLD7414ofXyealHAusSSnqOErkU22e6GTtPjdIFe
yDibh/RCB5NF4ucMMJQLdAbnbOg5zz6DT18zmoNQ7yMNbG2fQJ34qM3m7aBl
-----END CERTIFICATE-----