Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.mft
File:                     3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.mft (raw, json)
Hash identifier:          ispjJcGlfi5KDEgRz5YdwYFTG/9gVldnejKetftLwLU=
Subject key identifier:   7B:FA:C8:59:6A:21:89:8A:67:8D:D2:0F:9C:28:D6:06:ED:FF:74:30
Authority key identifier: A1:88:2D:3E:B4:49:04:90:10:F8:26:C3:E9:34:C6:82:9C:EA:91:81
Certificate issuer:       /CN=3bac802a13d8e3e1c4a05f9a396fca3ff0817e04
Certificate serial:       28B159
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.mft
Manifest number:          0DE9
Signing time:             Mon 15 Apr 2024 11:20:35 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:24:18 +0000
Files and hashes:         1: 3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.crl (hash: 5x2OyzWBu6EYZ8V1WFqMutGMgSMl2sffTl3alYXOBmM=)
                          2: ee3c678b86e83a8bd54e24c19ad80ead43941de2.roa (hash: 8dRkY9V74MWWXxtXvP1STiVQTc8/3nkryQCsSlktsD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666841 (0x28b159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bac802a13d8e3e1c4a05f9a396fca3ff0817e04
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:24:18 2024 GMT
        Subject: CN=9384e522a05151daec86e67a535b5164332ce9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:3d:3e:a6:c9:f1:96:aa:98:2a:de:e3:62:
                    e8:56:a8:12:ba:a5:79:89:e4:b7:61:53:ab:a9:95:
                    42:5c:e6:cb:4e:8a:a3:17:ad:75:d4:05:3c:83:2d:
                    a9:69:dd:9e:cd:e9:43:3e:01:9d:cf:7d:a5:08:cf:
                    55:34:37:d3:d6:41:78:9f:bb:d2:fa:5f:43:25:ad:
                    a2:87:80:5d:7c:73:1d:f5:86:81:4b:8f:94:77:d6:
                    29:66:59:2a:04:03:43:a4:f1:91:c8:ef:21:ac:32:
                    aa:61:b5:33:0e:6c:94:3e:9b:c3:29:36:82:fb:88:
                    a9:07:91:ab:dc:b5:10:3e:62:af:72:6c:df:cb:87:
                    8b:04:12:70:44:b5:5d:3f:da:16:d8:0a:05:1e:fd:
                    aa:c5:e8:db:9f:30:c6:12:4f:f4:84:fd:f3:e6:e4:
                    a1:9f:55:fd:84:2a:77:5e:0a:8d:a3:13:5e:b1:e1:
                    17:54:5a:c4:ba:be:cd:24:c5:e0:2b:72:20:24:e5:
                    49:7a:68:33:c1:bd:99:0e:78:8f:45:1f:c9:d8:da:
                    fd:16:7d:78:1e:c3:fb:ac:11:06:34:5b:0c:d4:a9:
                    ce:4a:d5:32:17:70:05:6d:fb:57:c0:39:5c:87:59:
                    2f:0e:bd:4d:bd:90:5d:ae:bc:2e:56:63:1c:1f:43:
                    29:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FA:C8:59:6A:21:89:8A:67:8D:D2:0F:9C:28:D6:06:ED:FF:74:30
            X509v3 Authority Key Identifier:
                keyid:A1:88:2D:3E:B4:49:04:90:10:F8:26:C3:E9:34:C6:82:9C:EA:91:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81c0ed88-23aa-434c-ab96-0650ae7fd486/3bac802a13d8e3e1c4a05f9a396fca3ff0817e04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:25:e6:ed:69:6c:1e:9a:be:af:40:02:7f:7f:fe:cf:e3:46:
         da:fe:d1:c8:0f:74:67:ec:46:51:a1:d7:90:23:1f:03:3b:e7:
         da:54:ad:2e:c5:ce:80:8d:42:4c:92:fa:c5:b9:8f:be:b2:f3:
         40:64:9b:b8:40:da:e1:0c:56:13:4c:29:8a:9b:fd:cd:d8:1e:
         7e:1d:ab:4a:6a:c7:e5:30:b4:b3:56:42:6f:9c:7a:f8:58:35:
         f9:ad:1f:80:9e:f5:90:53:33:51:53:ef:57:aa:8a:d2:c5:f8:
         5d:93:26:12:35:e3:e1:6c:64:ea:86:01:ac:eb:71:2d:44:47:
         62:e7:8e:2a:bd:d3:88:89:0c:13:7f:24:14:23:fa:66:63:0b:
         0a:20:9c:8c:11:fb:aa:a6:6b:29:ac:eb:ef:53:82:bf:0e:6e:
         43:44:9a:79:d1:c6:93:cf:94:6a:af:8c:73:f7:de:b4:07:9e:
         f7:b8:95:cd:72:2e:48:4d:4f:ba:a5:73:38:c3:9d:50:5c:f6:
         0f:6b:50:2f:57:a2:45:11:4b:18:ef:7a:12:04:d5:4e:df:c0:
         a3:6c:7a:dc:0f:4e:98:aa:82:80:20:81:4d:b9:cf:1b:b8:a6:
         d2:dd:7b:68:17:c9:92:34:00:1e:3a:55:26:6f:97:14:56:c9:
         dc:4a:ad:65
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKLFZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNi
YWM4MDJhMTNkOGUzZTFjNGEwNWY5YTM5NmZjYTNmZjA4MTdlMDQwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTMyNDE4WjAzMTEwLwYDVQQDEyg5Mzg0ZTUyMmEwNTE1
MWRhZWM4NmU2N2E1MzViNTE2NDMzMmNlOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgrc9PqbJ8ZaqmCre42LoVqgSuqV5ieS3YVOrqZVCXObLToqj
F6111AU8gy2pad2ezelDPgGdz32lCM9VNDfT1kF4n7vS+l9DJa2ih4BdfHMd9YaB
S4+Ud9YpZlkqBANDpPGRyO8hrDKqYbUzDmyUPpvDKTaC+4ipB5Gr3LUQPmKvcmzf
y4eLBBJwRLVdP9oW2AoFHv2qxejbnzDGEk/0hP3z5uShn1X9hCp3XgqNoxNeseEX
VFrEur7NJMXgK3IgJOVJemgzwb2ZDniPRR/J2Nr9Fn14HsP7rBEGNFsM1KnOStUy
F3AFbftXwDlch1kvDr1NvZBdrrwuVmMcH0MpaQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFHv6yFlqIYmKZ43SD5wo1gbt/3QwMB8GA1UdIwQYMBaAFKGILT60SQSQEPgm
w+k0xoKc6pGBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2JhYzgw
MmExM2Q4ZTNlMWM0YTA1ZjlhMzk2ZmNhM2ZmMDgxN2UwNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODFjMGVkODgtMjNhYS00MzRjLWFiOTYtMDY1MGFl
N2ZkNDg2LzNiYWM4MDJhMTNkOGUzZTFjNGEwNWY5YTM5NmZjYTNmZjA4MTdlMDQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MWMwZWQ4OC0yM2FhLTQzNGMtYWI5Ni0wNjUw
YWU3ZmQ0ODYvM2JhYzgwMmExM2Q4ZTNlMWM0YTA1ZjlhMzk2ZmNhM2ZmMDgxN2Uw
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAJkl5u1pbB6avq9AAn9//s/jRtr+0cgPdGfsRlGh15AjHwM7
59pUrS7FzoCNQkyS+sW5j76y80Bkm7hA2uEMVhNMKYqb/c3YHn4dq0pqx+UwtLNW
Qm+cevhYNfmtH4Ce9ZBTM1FT71eqitLF+F2TJhI14+FsZOqGAazrcS1ER2Lnjiq9
04iJDBN/JBQj+mZjCwognIwR+6qmayms6+9Tgr8ObkNEmnnRxpPPlGqvjHP33rQH
nve4lc1yLkhNT7qlczjDnVBc9g9rUC9XokURSxjvehIE1U7fwKNsetwPTpiqgoAg
gU25zxu4ptLde2gXyZI0AB46VSZvlxRWydxKrWU=
-----END CERTIFICATE-----