Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
File:                     BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft (raw, json)
Hash identifier:          V+kJxXXkSqxgggFPq42acFQdNhlgcZs6ZuX9Qug4Ejo=
Subject key identifier:   12:55:CE:35:1D:51:3F:1A:84:EF:AB:94:01:29:91:EF:EA:9C:1F:B7
Authority key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3
Certificate issuer:       /CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
Certificate serial:       6CF64F1E07350B54F9EAE19F347B3902CA7D6CE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
Manifest number:          AD
Signing time:             Fri 31 Jan 2025 15:27:59 +0000
Manifest this update:     Fri 31 Jan 2025 15:22:59 +0000
Manifest next update:     Thu 06 Feb 2025 04:28:59 +0000
Files and hashes:         1: 323830333a6134303a3a2f34372d3438203d3e20323633383137.roa (hash: fUhc9LVKlYgmgZVyk/VxG5SAtNhAZ7+Kg1ywg5XmzoQ=)
                          2: BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl (hash: /L2xmLGYHmpbHXeQYKRB/HCOzJDwVJzSRggA6UzPsfc=)
                          3: 3133382e3138352e33302e302f32342d3234203d3e20323633383137.roa (hash: rQiysxzmMdIrOYhhQfHMd+oPXxGV3FcUdGKbZND/O/w=)
                          4: 3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa (hash: SJFXqJfWU/aYHbW9tcckHxxWhwj6swUDxWmctTio/+s=)
                          5: 3133382e3138352e33312e302f32342d3234203d3e20323633383137.roa (hash: VITa9LAbVBdCjrr+gIhHTyhqtSeLVPp6gxU/ibtjuGM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f6:4f:1e:07:35:0b:54:f9:ea:e1:9f:34:7b:39:02:ca:7d:6c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
        Validity
            Not Before: Jan 31 15:22:59 2025 GMT
            Not After : Feb  6 04:28:59 2025 GMT
        Subject: CN=1255CE351D513F1A84EFAB94012991EFEA9C1FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:82:8e:1f:7f:03:a8:80:8b:09:0c:63:5e:e3:
                    5b:a1:80:86:ec:08:ff:88:9d:88:d5:d0:6d:06:8e:
                    b3:f3:c9:a3:49:b3:c3:30:b9:e5:7f:77:50:66:a3:
                    c9:d5:96:29:2b:6d:c4:1b:86:36:11:91:a3:8c:45:
                    e3:80:ca:03:d6:87:89:f9:08:32:94:4f:83:bc:de:
                    f2:66:2f:ca:38:32:f9:7a:dd:50:e0:02:f8:c4:8d:
                    51:e3:f3:3a:f8:fe:fb:4d:a0:25:58:ee:97:0e:4d:
                    b4:2d:f0:32:7e:ac:ec:6c:6f:37:31:e6:1c:b0:bc:
                    24:8d:aa:2e:f5:56:e1:e8:ac:c5:3f:ff:31:4c:7d:
                    8e:2f:9c:7c:e9:f5:ed:12:22:3e:4d:0b:56:42:de:
                    b0:ed:24:94:07:cf:49:e7:84:58:d2:64:aa:2a:db:
                    b9:7f:92:16:7b:e3:ec:19:56:32:62:d5:fb:aa:93:
                    c7:a5:b9:e3:12:c0:01:32:ec:f7:de:9b:17:4d:5f:
                    77:dc:ae:7a:5b:2e:82:82:34:67:d3:c7:0f:08:1b:
                    07:5a:50:8b:72:01:13:0d:fa:c1:f4:4f:17:b5:c8:
                    f2:b9:61:82:c0:3e:4b:ed:7d:c0:fa:f8:cd:c0:63:
                    b0:9d:5b:16:2a:ad:29:9c:7d:2c:81:ed:58:97:f2:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:55:CE:35:1D:51:3F:1A:84:EF:AB:94:01:29:91:EF:EA:9C:1F:B7
            X509v3 Authority Key Identifier:
                keyid:BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:ce:67:37:07:16:26:ce:2d:3d:6c:18:7c:41:0a:ba:c4:
         28:5b:9a:a2:c2:de:6e:40:54:64:0d:ea:ad:dc:52:f9:a4:26:
         0f:7b:9a:db:68:93:e5:d1:b2:6a:a1:4f:12:a4:41:31:1c:1b:
         68:30:4d:e9:1a:1f:7f:a7:f4:2a:14:3f:56:4a:4e:d5:f6:94:
         6a:45:e9:2d:5a:e1:d6:33:db:e7:1d:05:c2:09:c4:69:73:2b:
         84:f2:b4:65:f6:1b:cf:4f:e3:62:4b:ec:01:a7:8f:61:91:1a:
         dd:c5:4b:34:1e:cb:e4:93:15:46:35:f1:13:bb:71:46:ec:8e:
         0e:72:5c:1b:0f:59:60:33:e2:f9:34:62:d6:e8:b7:f8:1d:a4:
         21:e3:5b:62:0c:67:8f:5b:5a:46:7f:39:62:5a:a5:9e:36:5b:
         b9:04:69:68:c4:3d:1f:d2:95:2a:f6:30:99:e1:1a:d7:5e:56:
         5a:71:49:53:35:26:c6:2b:e0:fd:56:1e:54:f7:2c:75:ae:70:
         72:e6:5e:18:3b:0f:2c:68:f1:e7:2b:8d:23:5d:95:51:65:25:
         7d:23:6c:75:66:c6:bf:df:34:c5:95:b2:46:3c:96:01:44:dc:
         61:2b:12:11:3b:58:19:e0:85:85:76:11:21:71:07:28:a8:24:
         a6:93:1e:bd
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbPZPHgc1C1T56uGfNHs5Asp9bOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3NjgzQTA5OTU4ODBGQjUxRjNCRjk4MjkzRURFQ0Qy
ODZBRjZBMzAeFw0yNTAxMzExNTIyNTlaFw0yNTAyMDYwNDI4NTlaMDMxMTAvBgNV
BAMTKDEyNTVDRTM1MUQ1MTNGMUE4NEVGQUI5NDAxMjk5MUVGRUE5QzFGQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsgo4ffwOogIsJDGNe41uhgIbs
CP+InYjV0G0GjrPzyaNJs8MwueV/d1Bmo8nVlikrbcQbhjYRkaOMReOAygPWh4n5
CDKUT4O83vJmL8o4Mvl63VDgAvjEjVHj8zr4/vtNoCVY7pcOTbQt8DJ+rOxsbzcx
5hywvCSNqi71VuHorMU//zFMfY4vnHzp9e0SIj5NC1ZC3rDtJJQHz0nnhFjSZKoq
27l/khZ74+wZVjJi1fuqk8elueMSwAEy7PfemxdNX3fcrnpbLoKCNGfTxw8IGwda
UItyARMN+sH0Txe1yPK5YYLAPkvtfcD6+M3AY7CdWxYqrSmcfSyB7ViX8sKDAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUElXONR1RPxqE76uUASmR7+qcH7cwHwYDVR0j
BBgwFoAUvnaDoJlYgPtR87+YKT7ezShq9qMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODgwMjRERTg3MzYwMzMxNTQxNTEyNTM1MjU1OThDRUM4
OUI5QTBERTA3NTExN0IxM0E2MEM4QjcxMjhFMkQwLzAvQkU3NjgzQTA5OTU4ODBG
QjUxRjNCRjk4MjkzRURFQ0QyODZBRjZBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRTc2ODNBMDk5NTg4MEZCNTFG
M0JGOTgyOTNFREVDRDI4NkFGNkEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg4MDI0REU4NzM2MDMzMTU0MTUxMjUzNTI1NTk4Q0VDODlCOUEwREUw
NzUxMTdCMTNBNjBDOEI3MTI4RTJEMC8wL0JFNzY4M0EwOTk1ODgwRkI1MUYzQkY5
ODI5M0VERUNEMjg2QUY2QTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcAM5nNwcWJs4tPWwYfEEKusQo
W5qiwt5uQFRkDeqt3FL5pCYPe5rbaJPl0bJqoU8SpEExHBtoME3pGh9/p/QqFD9W
Sk7V9pRqRektWuHWM9vnHQXCCcRpcyuE8rRl9hvPT+NiS+wBp49hkRrdxUs0Hsvk
kxVGNfETu3FG7I4OclwbD1lgM+L5NGLW6Lf4HaQh41tiDGePW1pGfzliWqWeNlu5
BGloxD0f0pUq9jCZ4RrXXlZacUlTNSbGK+D9Vh5U9yx1rnBy5l4YOw8saPHnK40j
XZVRZSV9I2x1Zsa/3zTFlbJGPJYBRNxhKxIRO1gZ4IWFdhEhcQcoqCSmkx69
-----END CERTIFICATE-----