Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe99f78b-0340-4445-8425-dad4b56d10ce/bf24fd91440eab63914b29a50bfb1040fa9f2fdf.mft
File:                     bf24fd91440eab63914b29a50bfb1040fa9f2fdf.mft (raw, json)
Hash identifier:          ewp9CovxzaMAp10w5RS9UuTt9ZRl9nPtgPpNyomnP+4=
Subject key identifier:   1C:C1:0E:8D:06:74:A5:6C:51:8C:37:17:C8:56:9E:02:48:EE:A5:95
Authority key identifier: C1:F2:F0:8B:2A:39:0B:01:A7:40:BB:A1:D2:58:99:BA:67:D8:AA:41
Certificate issuer:       /CN=bf24fd91440eab63914b29a50bfb1040fa9f2fdf
Certificate serial:       280688
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf24fd91440eab63914b29a50bfb1040fa9f2fdf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fe99f78b-0340-4445-8425-dad4b56d10ce/bf24fd91440eab63914b29a50bfb1040fa9f2fdf.mft
Manifest number:          0E04
Signing time:             Mon 15 Apr 2024 08:20:49 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:40:16 +0000
Files and hashes:         1: 16f075d3db9bf54595a2e44e2809c51b3d753540.roa (hash: CAfxM2hDE114kG3To9CB3hIbIzDCWPRi/tsj/0xZLSs=)
                          2: bf24fd91440eab63914b29a50bfb1040fa9f2fdf.crl (hash: Uo/7i2W2rMr5rJ0ANtae+nSPMjJwq1x6v24hQj1Eajc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623112 (0x280688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf24fd91440eab63914b29a50bfb1040fa9f2fdf
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:40:16 2024 GMT
        Subject: CN=19a5c514e48c4c503c5d118db3c384970db0e3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:87:61:32:48:07:e8:a4:aa:1d:c2:c9:e5:
                    ac:78:d1:06:e2:56:8e:5b:96:41:b5:a9:09:46:0d:
                    76:f0:cb:0a:d0:e6:24:2d:c9:19:e7:64:cc:da:4d:
                    92:b5:48:7d:0a:36:84:72:77:a5:55:7a:76:25:92:
                    e7:3b:67:3e:72:8c:49:16:c4:f1:b2:d2:4a:20:bd:
                    d3:60:82:74:e8:bc:da:21:fd:43:80:da:bc:94:69:
                    05:84:4f:fc:71:f3:d5:bd:e3:08:ef:69:5b:b4:ef:
                    f1:2a:65:74:12:6a:be:97:4c:83:fe:04:90:e2:3e:
                    fa:7b:a2:7f:14:17:ce:ee:3b:f3:cd:ee:8c:48:dd:
                    67:56:f3:e4:c9:66:7e:45:53:63:60:ec:72:5b:06:
                    30:c5:88:5d:45:97:3d:20:e6:00:5c:3e:cd:38:c5:
                    a5:83:21:e2:0c:cc:4a:f5:20:06:08:02:68:a6:97:
                    45:b3:54:79:92:a4:3c:25:da:df:ef:14:8d:4d:9b:
                    2e:8d:6f:b9:a4:f5:ac:4d:e1:bf:2f:89:02:da:a2:
                    ca:67:02:04:ef:43:2f:2a:9b:21:f3:ea:74:64:21:
                    1a:c5:00:e2:6f:59:c2:d4:f8:ca:df:28:a0:02:24:
                    9b:31:71:74:57:5a:71:08:45:f1:7d:39:0b:52:67:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C1:0E:8D:06:74:A5:6C:51:8C:37:17:C8:56:9E:02:48:EE:A5:95
            X509v3 Authority Key Identifier:
                keyid:C1:F2:F0:8B:2A:39:0B:01:A7:40:BB:A1:D2:58:99:BA:67:D8:AA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf24fd91440eab63914b29a50bfb1040fa9f2fdf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe99f78b-0340-4445-8425-dad4b56d10ce/bf24fd91440eab63914b29a50bfb1040fa9f2fdf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fe99f78b-0340-4445-8425-dad4b56d10ce/bf24fd91440eab63914b29a50bfb1040fa9f2fdf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6f:de:73:1a:b6:9e:c7:f7:a6:9b:aa:0e:9b:cc:f4:71:78:
         05:5f:5b:e1:7d:7f:29:ee:c5:dd:b9:31:b9:e4:1a:2d:61:33:
         ac:41:25:c5:eb:ff:d2:d3:40:1b:bc:28:70:50:2f:3b:36:af:
         bb:e2:5b:65:59:fb:83:d9:15:38:76:41:2d:e4:79:67:54:33:
         e1:c5:96:e7:22:08:ac:1b:c4:16:ee:f5:94:04:06:a3:3a:99:
         33:de:0f:6e:13:5b:e6:82:1a:c6:b9:32:ce:e7:69:13:5d:85:
         76:bb:e8:0e:26:cd:2d:bd:9b:f1:ed:88:55:ba:54:13:57:5d:
         65:9c:79:89:4c:ee:ad:f5:61:06:5b:21:2a:f2:64:51:4d:35:
         5d:8b:dd:1c:a8:45:db:0f:d0:c2:b1:0d:1c:b7:1b:eb:8c:d2:
         0e:cb:e0:03:e4:d8:ec:42:3e:a3:d0:6e:37:c8:ec:0c:98:45:
         52:20:36:dd:68:c0:65:84:20:f6:f7:48:2e:3d:72:ea:e2:ea:
         7a:0a:00:8d:76:ec:cd:cf:68:3d:b6:e1:fb:ee:af:e6:72:3e:
         a5:84:c3:0f:79:e4:9d:68:1b:bf:e6:40:9d:17:32:52:35:c5:
         fb:58:f7:5b:84:d9:c6:88:44:f3:86:23:f1:e1:9a:ab:c4:8d:
         62:6c:5c:5d
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKAaIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
MjRmZDkxNDQwZWFiNjM5MTRiMjlhNTBiZmIxMDQwZmE5ZjJmZGYwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MDg0MDE2WjAzMTEwLwYDVQQDEygxOWE1YzUxNGU0OGM0
YzUwM2M1ZDExOGRiM2MzODQ5NzBkYjBlM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuKOHYTJIB+ikqh3CyeWseNEG4laOW5ZBtakJRg128MsK0OYk
LckZ52TM2k2StUh9CjaEcnelVXp2JZLnO2c+coxJFsTxstJKIL3TYIJ06LzaIf1D
gNq8lGkFhE/8cfPVveMI72lbtO/xKmV0Emq+l0yD/gSQ4j76e6J/FBfO7jvzze6M
SN1nVvPkyWZ+RVNjYOxyWwYwxYhdRZc9IOYAXD7NOMWlgyHiDMxK9SAGCAJoppdF
s1R5kqQ8Jdrf7xSNTZsujW+5pPWsTeG/L4kC2qLKZwIE70MvKpsh8+p0ZCEaxQDi
b1nC1PjK3yigAiSbMXF0V1pxCEXxfTkLUmfPHwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFBzBDo0GdKVsUYw3F8hWngJI7qWVMB8GA1UdIwQYMBaAFMHy8IsqOQsBp0C7
odJYmbpn2KpBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmYyNGZk
OTE0NDBlYWI2MzkxNGIyOWE1MGJmYjEwNDBmYTlmMmZkZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmU5OWY3OGItMDM0MC00NDQ1LTg0MjUtZGFkNGI1
NmQxMGNlL2JmMjRmZDkxNDQwZWFiNjM5MTRiMjlhNTBiZmIxMDQwZmE5ZjJmZGYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZTk5Zjc4Yi0wMzQwLTQ0NDUtODQyNS1kYWQ0
YjU2ZDEwY2UvYmYyNGZkOTE0NDBlYWI2MzkxNGIyOWE1MGJmYjEwNDBmYTlmMmZk
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEJv3nMatp7H96abqg6bzPRxeAVfW+F9fynuxd25MbnkGi1h
M6xBJcXr/9LTQBu8KHBQLzs2r7viW2VZ+4PZFTh2QS3keWdUM+HFluciCKwbxBbu
9ZQEBqM6mTPeD24TW+aCGsa5Ms7naRNdhXa76A4mzS29m/HtiFW6VBNXXWWceYlM
7q31YQZbISryZFFNNV2L3RyoRdsP0MKxDRy3G+uM0g7L4APk2OxCPqPQbjfI7AyY
RVIgNt1owGWEIPb3SC49curi6noKAI127M3PaD224fvur+ZyPqWEww955J1oG7/m
QJ0XMlI1xftY91uE2caIRPOGI/HhmqvEjWJsXF0=
-----END CERTIFICATE-----