Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
File:                     28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft (raw, json)
Hash identifier:          tcszOaUqgAwW8SoukGiaxaHcRbqmzcU/EXd9h/HADb0=
Subject key identifier:   D5:7A:74:C6:30:91:47:28:40:D5:1E:15:75:44:B8:B4:7D:7B:8D:93
Authority key identifier: 28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A
Certificate issuer:       /CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
Certificate serial:       717ABCE98B0A5F9C92E96034D74863949E96FF2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft
Manifest number:          A2
Signing time:             Fri 31 Jan 2025 06:27:33 +0000
Manifest this update:     Fri 31 Jan 2025 06:22:33 +0000
Manifest next update:     Thu 06 Feb 2025 00:39:33 +0000
Files and hashes:         1: 28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl (hash: FRa90tzqGX/pD63RyzOt12/Ow1FmefpJihtqfENGHeQ=)
                          2: 34352e3233362e3134382e302f32322d3234203d3e20323636383132.roa (hash: 4RBmOaZ/8ptxUw98iwedF18EHt/+p31FCBIRSCnLo4Q=)
                          3: 323830333a643861303a3a2f33322d3438203d3e20323636383132.roa (hash: lY1fT6QkZmYxNXre4stC5phZ+tO9O74AzD3ll5q4guQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7a:bc:e9:8b:0a:5f:9c:92:e9:60:34:d7:48:63:94:9e:96:ff:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A
        Validity
            Not Before: Jan 31 06:22:33 2025 GMT
            Not After : Feb  6 00:39:33 2025 GMT
        Subject: CN=D57A74C63091472840D51E157544B8B47D7B8D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:e2:76:54:97:ca:28:cb:f8:a4:c8:27:3b:
                    23:5c:92:90:a9:2f:50:a4:46:16:77:1c:14:9b:d9:
                    ec:ae:42:67:b8:65:fd:bb:48:8a:ee:04:76:61:67:
                    1c:a2:8e:03:9d:de:68:8b:ad:cd:00:0c:f2:81:a6:
                    93:7c:70:5a:dc:4a:12:f1:c8:68:ad:a3:93:32:62:
                    21:bc:4d:12:df:7f:9b:96:51:ef:0e:13:2c:e3:ef:
                    80:b8:a4:41:17:89:11:05:29:cc:05:83:1c:53:0d:
                    91:ae:c9:2b:f6:bd:52:c7:28:27:1e:73:fd:a1:f9:
                    16:e5:01:45:91:07:86:1f:18:7b:a7:b6:0b:ed:02:
                    b2:ff:08:1c:ed:c8:36:c1:82:1d:1e:67:a7:00:d4:
                    59:7d:14:55:71:69:44:ca:ec:f4:73:da:f2:6b:b9:
                    cb:c7:c7:ec:d2:e2:a0:3e:d7:b5:7e:92:0e:82:8d:
                    16:2d:a1:ef:b3:43:00:39:15:d7:4f:39:69:4a:b0:
                    d1:a1:59:70:ea:b9:a9:da:a4:67:6a:94:19:0f:1e:
                    7b:77:da:87:b9:f5:ff:1a:31:db:5c:35:f7:83:3f:
                    3b:49:b0:67:5f:d7:ae:00:87:53:31:ea:b0:c5:af:
                    28:33:be:df:8d:02:36:9e:c1:2c:03:97:7c:b9:08:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7A:74:C6:30:91:47:28:40:D5:1E:15:75:44:B8:B4:7D:7B:8D:93
            X509v3 Authority Key Identifier:
                keyid:28:AB:99:A5:1F:6C:69:81:A5:58:CD:0B:48:AC:F4:CD:CB:A9:53:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/111D092A6DA63F829977CF80EA5EAD226BC8733214E20AD24287A581FCCD8146/0/28AB99A51F6C6981A558CD0B48ACF4CDCBA9536A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7a:58:d1:1e:6e:58:33:b1:bc:81:46:46:94:b9:89:64:b3:
         20:0c:83:92:ee:a6:be:5a:dd:ff:d8:f8:e2:57:e1:61:3a:73:
         d6:07:c4:81:a1:73:28:e9:73:05:5c:50:fc:c7:3e:70:0b:f6:
         17:f9:0a:5e:30:02:19:22:4d:17:ec:6b:c1:d3:40:9a:b1:2e:
         a9:dc:92:1b:35:26:77:0e:68:12:db:ab:ce:d4:dd:a2:a8:a5:
         c9:23:f9:9f:17:bb:78:5b:2a:8a:7c:13:22:e2:b1:1d:49:1a:
         10:b6:18:e2:3a:46:a0:09:98:64:b4:18:d9:85:8b:4e:2f:e5:
         48:6f:e6:2f:db:52:20:2a:d6:a1:fe:7e:27:eb:9b:a5:fe:2a:
         17:47:2b:17:d4:4b:8c:aa:81:4e:70:51:1a:80:90:9e:e2:7e:
         bf:70:71:a1:30:c6:e3:4c:b2:6b:48:e3:55:45:cb:c1:75:c9:
         d3:83:df:6f:b4:f9:d5:fc:0e:29:cf:c1:8a:7d:f5:e9:3e:af:
         b1:dd:3e:da:eb:b7:ea:2a:4d:53:ad:cb:06:5d:5f:9a:33:bd:
         f4:e9:ae:d2:75:50:fb:03:61:eb:99:cc:1c:44:2f:56:da:58:
         67:23:f1:d1:f9:fa:e9:f3:31:06:c4:4f:04:af:43:ff:37:2f:
         92:45:42:3c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUcXq86YsKX5yS6WA010hjlJ6W/y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBQjk5QTUxRjZDNjk4MUE1NThDRDBCNDhBQ0Y0Q0RD
QkE5NTM2QTAeFw0yNTAxMzEwNjIyMzNaFw0yNTAyMDYwMDM5MzNaMDMxMTAvBgNV
BAMTKEQ1N0E3NEM2MzA5MTQ3Mjg0MEQ1MUUxNTc1NDRCOEI0N0Q3QjhEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtceJ2VJfKKMv4pMgnOyNckpCp
L1CkRhZ3HBSb2eyuQme4Zf27SIruBHZhZxyijgOd3miLrc0ADPKBppN8cFrcShLx
yGito5MyYiG8TRLff5uWUe8OEyzj74C4pEEXiREFKcwFgxxTDZGuySv2vVLHKCce
c/2h+RblAUWRB4YfGHuntgvtArL/CBztyDbBgh0eZ6cA1Fl9FFVxaUTK7PRz2vJr
ucvHx+zS4qA+17V+kg6CjRYtoe+zQwA5FddPOWlKsNGhWXDquanapGdqlBkPHnt3
2oe59f8aMdtcNfeDPztJsGdf164Ah1Mx6rDFrygzvt+NAjaewSwDl3y5CH5tAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU1Xp0xjCRRyhA1R4VdUS4tH17jZMwHwYDVR0j
BBgwFoAUKKuZpR9saYGlWM0LSKz0zcupU2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTFEMDkyQTZEQTYzRjgyOTk3N0NGODBFQTVFQUQyMjZC
Qzg3MzMyMTRFMjBBRDI0Mjg3QTU4MUZDQ0Q4MTQ2LzAvMjhBQjk5QTUxRjZDNjk4
MUE1NThDRDBCNDhBQ0Y0Q0RDQkE5NTM2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEFCOTlBNTFGNkM2OTgxQTU1
OENEMEI0OEFDRjRDRENCQTk1MzZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTExRDA5MkE2REE2M0Y4Mjk5NzdDRjgwRUE1RUFEMjI2QkM4NzMzMjE0
RTIwQUQyNDI4N0E1ODFGQ0NEODE0Ni8wLzI4QUI5OUE1MUY2QzY5ODFBNTU4Q0Qw
QjQ4QUNGNENEQ0JBOTUzNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0eljRHm5YM7G8gUZGlLmJZLMg
DIOS7qa+Wt3/2PjiV+FhOnPWB8SBoXMo6XMFXFD8xz5wC/YX+QpeMAIZIk0X7GvB
00CasS6p3JIbNSZ3DmgS26vO1N2iqKXJI/mfF7t4WyqKfBMi4rEdSRoQthjiOkag
CZhktBjZhYtOL+VIb+Yv21IgKtah/n4n65ul/ioXRysX1EuMqoFOcFEagJCe4n6/
cHGhMMbjTLJrSONVRcvBdcnTg99vtPnV/A4pz8GKffXpPq+x3T7a67fqKk1TrcsG
XV+aM7306a7SdVD7A2HrmcwcRC9W2lhnI/HR+frp8zEGxE8Er0P/Ny+SRUI8
-----END CERTIFICATE-----