Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/f1d0163a439efacc1ac476fcf9ca062330c6e918.mft
File:                     f1d0163a439efacc1ac476fcf9ca062330c6e918.mft (raw, json)
Hash identifier:          reXbYp0w0t41UTb0VYFM+2qAy/koh62Q1x6bRkGo02Y=
Subject key identifier:   9F:0C:A4:A0:77:2D:19:F6:EA:F9:8F:3F:16:26:31:E5:DC:6F:9B:6E
Authority key identifier: 29:E7:A3:95:52:0E:C9:87:60:8C:CF:1E:68:F0:1E:63:7C:B3:7A:1E
Certificate issuer:       /CN=f1d0163a439efacc1ac476fcf9ca062330c6e918
Certificate serial:       28A237
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1d0163a439efacc1ac476fcf9ca062330c6e918.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/f1d0163a439efacc1ac476fcf9ca062330c6e918.mft
Manifest number:          0E29
Signing time:             Mon 15 Apr 2024 08:20:31 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 10:16:16 +0000
Files and hashes:         1: bf3de33a4d97e4c468f37c1a6453dcd24654fd34.roa (hash: Q6pnigYz2lx8RVw1NDgcoW9VOMrFkwwzzbs23gxiDNA=)
                          2: f1d0163a439efacc1ac476fcf9ca062330c6e918.crl (hash: jF38wrGAb6sjRn8/VomSQTUrULUiiZ07CmTSEZujHM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2662967 (0x28a237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d0163a439efacc1ac476fcf9ca062330c6e918
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 10:16:16 2024 GMT
        Subject: CN=41a3b033364939c61ae4e1415e5cee3b77e6b2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:da:9f:1a:83:6b:0b:93:e6:c0:42:0d:a3:
                    53:39:b8:a5:b1:f9:13:13:f8:fe:44:b6:dd:9d:8d:
                    c0:c3:39:6a:3b:19:bc:3a:94:94:10:b8:90:11:73:
                    4e:bd:f4:45:6b:e7:96:5d:fa:65:28:63:44:b1:ab:
                    1f:24:b9:f1:3c:8c:74:e2:7e:19:a0:76:67:09:b7:
                    cf:b9:1f:ea:3c:cb:cc:68:87:e2:b8:c9:ae:db:a0:
                    40:d7:8d:b1:64:b7:bf:fd:86:08:3b:b3:af:fb:da:
                    d5:3f:77:d1:f0:6e:7a:41:ce:ab:c1:95:62:66:d6:
                    01:c3:5a:73:f6:ba:35:ea:4d:2b:a3:e2:ba:c0:97:
                    ec:61:dc:8d:b3:38:66:8a:08:9e:46:dd:20:fa:84:
                    73:2a:44:ae:62:66:bd:69:51:b4:36:73:61:3d:58:
                    e1:0e:e0:f8:c6:e8:73:b9:ec:36:74:5f:df:1d:9b:
                    8e:78:68:46:83:14:5f:67:40:f7:1b:28:19:5c:32:
                    cd:a6:5d:f9:b3:23:78:4c:82:4d:5f:8b:eb:38:19:
                    75:74:8d:8a:50:0b:fd:f1:f0:cb:f2:8b:26:3e:d3:
                    b9:6e:ee:95:cc:06:10:20:0f:fc:1e:37:36:15:63:
                    bc:66:3f:06:28:21:93:79:7c:bc:73:ed:5d:00:ab:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0C:A4:A0:77:2D:19:F6:EA:F9:8F:3F:16:26:31:E5:DC:6F:9B:6E
            X509v3 Authority Key Identifier:
                keyid:29:E7:A3:95:52:0E:C9:87:60:8C:CF:1E:68:F0:1E:63:7C:B3:7A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1d0163a439efacc1ac476fcf9ca062330c6e918.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/f1d0163a439efacc1ac476fcf9ca062330c6e918.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28f72468-71a7-4407-a293-3c4d482a2082/f1d0163a439efacc1ac476fcf9ca062330c6e918.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6f:c7:bb:2c:0a:3f:b9:98:e7:dd:9b:fa:ed:a5:75:c4:c6:
         7a:1d:6d:2a:cc:70:5f:35:ca:35:2c:5b:1c:6b:68:17:10:91:
         c9:83:a6:0f:dc:c5:ae:34:7a:df:df:51:3f:28:5b:7d:96:d9:
         86:c2:ed:69:14:07:67:c9:df:01:03:ff:59:11:5a:2c:98:77:
         f9:71:02:7f:5f:39:73:9e:4a:77:c5:f8:d2:9d:f4:75:91:bd:
         6c:a3:43:29:22:ba:90:29:d1:71:17:5b:0a:25:53:9b:ae:c5:
         6a:01:48:29:36:f2:80:4f:51:bf:9e:4d:33:8f:12:f8:85:72:
         06:77:6e:5f:31:4c:60:3c:72:a7:d0:e3:62:01:65:1f:6d:97:
         6f:66:a9:f0:55:88:7b:35:fa:bf:74:bd:44:6e:26:e5:f8:e9:
         b8:28:2c:83:dc:49:06:57:70:6c:d7:b1:b2:53:54:d1:86:d9:
         7b:46:5d:91:32:da:03:a1:7a:84:42:19:7a:69:48:ff:13:24:
         35:ce:c1:b0:cf:ca:8a:1a:4f:61:1b:91:01:2c:12:50:6e:f5:
         bf:08:28:c9:42:3e:84:ab:b0:04:d9:b4:d9:77:8d:e4:9d:d0:
         f9:f1:74:ca:4a:2f:7c:41:01:89:9b:ed:28:63:51:6b:3d:4d:
         0c:0f:03:13
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKKI3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYx
ZDAxNjNhNDM5ZWZhY2MxYWM0NzZmY2Y5Y2EwNjIzMzBjNmU5MTgwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MTAxNjE2WjAzMTEwLwYDVQQDEyg0MWEzYjAzMzM2NDkz
OWM2MWFlNGUxNDE1ZTVjZWUzYjc3ZTZiMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApKPanxqDawuT5sBCDaNTObilsfkTE/j+RLbdnY3AwzlqOxm8
OpSUELiQEXNOvfRFa+eWXfplKGNEsasfJLnxPIx04n4ZoHZnCbfPuR/qPMvMaIfi
uMmu26BA142xZLe//YYIO7Ov+9rVP3fR8G56Qc6rwZViZtYBw1pz9ro16k0ro+K6
wJfsYdyNszhmigieRt0g+oRzKkSuYma9aVG0NnNhPVjhDuD4xuhzuew2dF/fHZuO
eGhGgxRfZ0D3GygZXDLNpl35syN4TIJNX4vrOBl1dI2KUAv98fDL8osmPtO5bu6V
zAYQIA/8Hjc2FWO8Zj8GKCGTeXy8c+1dAKscZwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFJ8MpKB3LRn26vmPPxYmMeXcb5tuMB8GA1UdIwQYMBaAFCnno5VSDsmHYIzP
HmjwHmN8s3oeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjFkMDE2
M2E0MzllZmFjYzFhYzQ3NmZjZjljYTA2MjMzMGM2ZTkxOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjhmNzI0NjgtNzFhNy00NDA3LWEyOTMtM2M0ZDQ4
MmEyMDgyL2YxZDAxNjNhNDM5ZWZhY2MxYWM0NzZmY2Y5Y2EwNjIzMzBjNmU5MTgu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yOGY3MjQ2OC03MWE3LTQ0MDctYTI5My0zYzRk
NDgyYTIwODIvZjFkMDE2M2E0MzllZmFjYzFhYzQ3NmZjZjljYTA2MjMzMGM2ZTkx
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEJvx7ssCj+5mOfdm/rtpXXExnodbSrMcF81yjUsWxxraBcQ
kcmDpg/cxa40et/fUT8oW32W2YbC7WkUB2fJ3wED/1kRWiyYd/lxAn9fOXOeSnfF
+NKd9HWRvWyjQykiupAp0XEXWwolU5uuxWoBSCk28oBPUb+eTTOPEviFcgZ3bl8x
TGA8cqfQ42IBZR9tl29mqfBViHs1+r90vURuJuX46bgoLIPcSQZXcGzXsbJTVNGG
2XtGXZEy2gOheoRCGXppSP8TJDXOwbDPyooaT2EbkQEsElBu9b8IKMlCPoSrsATZ
tNl3jeSd0PnxdMpKL3xBAYmb7ShjUWs9TQwPAxM=
-----END CERTIFICATE-----