Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/9016dbbb30f681076e85c5aae05e7a2e38e274e1.mft
File:                     9016dbbb30f681076e85c5aae05e7a2e38e274e1.mft (raw, json)
Hash identifier:          qg+GtZefzE3SCuLK5VSCqXjX5OyLFaHcFXiAqCuD9O0=
Subject key identifier:   24:35:E6:6F:92:27:61:10:D1:72:9D:08:87:87:A4:BC:3F:B3:E6:41
Authority key identifier: 98:7D:03:DA:94:57:29:BB:86:6D:34:CB:84:FB:AD:A2:01:AA:BC:FB
Certificate issuer:       /CN=9016dbbb30f681076e85c5aae05e7a2e38e274e1
Certificate serial:       12BE28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9016dbbb30f681076e85c5aae05e7a2e38e274e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/9016dbbb30f681076e85c5aae05e7a2e38e274e1.mft
Manifest number:          0958
Signing time:             Mon 15 Apr 2024 09:21:35 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:54:18 +0000
Files and hashes:         1: 9016dbbb30f681076e85c5aae05e7a2e38e274e1.crl (hash: 5yzsHvu7yCioyPQnaU6v9kjJxn26q0g2c7KPZHtIong=)
                          2: e03c163b64f4e53457d94eefe08e3157a200d727.roa (hash: Fx+NDnggQIHitlLcNFML6Sy0BMx7HdAkbx1+vgzWlI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228328 (0x12be28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9016dbbb30f681076e85c5aae05e7a2e38e274e1
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:54:18 2024 GMT
        Subject: CN=97d2d46ee5812d55c844c869687c99997a41160a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:36:27:36:7f:13:ee:13:df:96:dd:50:e9:
                    0d:de:48:30:20:56:35:7d:0d:06:3c:5e:6b:81:ec:
                    66:33:2a:4b:42:ff:e5:ee:c0:0f:4f:bf:94:19:97:
                    eb:66:d6:cf:46:94:be:bb:2d:e5:fb:5a:92:24:33:
                    ed:7a:72:3e:23:ab:6c:aa:be:c3:36:4a:01:3c:7e:
                    eb:ec:1b:a5:44:d4:fc:02:8b:fc:61:c5:d1:58:95:
                    f8:4c:4f:12:27:73:f5:df:ce:24:3a:76:61:d8:49:
                    da:e0:5e:ac:87:47:50:8d:51:87:6e:5e:79:8d:ea:
                    6d:dd:65:93:45:61:c0:c5:2c:36:cf:db:65:45:d7:
                    db:68:17:d9:6f:d0:20:a7:4f:11:f8:61:2d:0c:c7:
                    db:1a:7b:f3:7b:00:35:ec:5f:0a:7f:d9:32:b5:9d:
                    a8:18:b9:29:cc:76:d8:c4:0e:13:63:85:2b:33:86:
                    dc:c2:28:97:64:cf:5d:00:53:e8:47:cf:e0:ed:dd:
                    e6:21:38:2f:ce:6e:cf:0e:af:69:97:eb:55:bc:c1:
                    95:b8:60:fd:0b:9a:86:e3:2a:d7:a9:e6:3e:0e:be:
                    1c:91:f9:97:b3:41:3f:8a:e4:d6:e7:3a:02:32:dd:
                    fa:c4:35:95:5b:dd:ce:6a:05:94:27:ee:7d:85:b4:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:35:E6:6F:92:27:61:10:D1:72:9D:08:87:87:A4:BC:3F:B3:E6:41
            X509v3 Authority Key Identifier:
                keyid:98:7D:03:DA:94:57:29:BB:86:6D:34:CB:84:FB:AD:A2:01:AA:BC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9016dbbb30f681076e85c5aae05e7a2e38e274e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/9016dbbb30f681076e85c5aae05e7a2e38e274e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/9016dbbb30f681076e85c5aae05e7a2e38e274e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:1a:82:71:b4:21:71:e5:d7:a3:c9:07:30:73:94:84:7b:
         ca:81:8f:35:02:d7:e4:79:a5:35:1c:3b:df:ef:f1:8a:95:1f:
         46:d3:50:70:92:54:eb:ff:24:b2:c6:24:8b:6b:f3:84:75:82:
         86:b3:bd:a0:b7:98:e7:0d:e2:e8:9c:8f:e9:a9:11:c9:09:b0:
         f5:db:6d:79:b4:9e:b2:d2:80:0d:89:ae:da:3f:9d:4b:7f:8f:
         e4:bc:58:d9:31:bd:11:d8:e3:ab:ef:d1:47:20:0d:66:ac:d6:
         6d:2e:ea:c6:4c:d8:98:be:59:74:2a:45:4b:67:8c:82:d3:0d:
         46:ac:5c:02:ed:28:bc:5b:13:de:06:56:89:ed:15:8a:a1:bb:
         55:ed:9a:27:2f:8f:2c:6c:65:91:47:e8:d4:35:94:27:87:77:
         e1:b0:c4:df:22:e3:0b:8b:b0:9f:3c:3e:98:6d:8a:f2:dc:4c:
         dc:84:54:71:9f:5b:35:c8:dc:c7:a2:85:3e:4b:60:78:7a:04:
         e4:e2:d9:76:aa:01:ee:82:87:da:39:4b:6a:d8:09:1d:8b:7d:
         05:96:6e:8c:93:59:5a:0f:24:f6:00:1c:46:b6:88:fa:71:6c:
         49:29:93:77:bc:3e:d8:07:db:79:f0:d7:fd:10:b1:4d:9c:c4:
         bc:21:74:99
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDEr4oMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkw
MTZkYmJiMzBmNjgxMDc2ZTg1YzVhYWUwNWU3YTJlMzhlMjc0ZTEwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTE1NDE4WjAzMTEwLwYDVQQDEyg5N2QyZDQ2ZWU1ODEy
ZDU1Yzg0NGM4Njk2ODdjOTk5OTdhNDExNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx3s2JzZ/E+4T35bdUOkN3kgwIFY1fQ0GPF5rgexmMypLQv/l
7sAPT7+UGZfrZtbPRpS+uy3l+1qSJDPtenI+I6tsqr7DNkoBPH7r7BulRNT8Aov8
YcXRWJX4TE8SJ3P1384kOnZh2Ena4F6sh0dQjVGHbl55jept3WWTRWHAxSw2z9tl
RdfbaBfZb9Agp08R+GEtDMfbGnvzewA17F8Kf9kytZ2oGLkpzHbYxA4TY4UrM4bc
wiiXZM9dAFPoR8/g7d3mITgvzm7PDq9pl+tVvMGVuGD9C5qG4yrXqeY+Dr4ckfmX
s0E/iuTW5zoCMt36xDWVW93OagWUJ+59hbS+WwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFCQ15m+SJ2EQ0XKdCIeHpLw/s+ZBMB8GA1UdIwQYMBaAFJh9A9qUVym7hm00
y4T7raIBqrz7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTAxNmRi
YmIzMGY2ODEwNzZlODVjNWFhZTA1ZTdhMmUzOGUyNzRlMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDM3NDk0YWItOGFkZi00MDI3LTk3NWEtOTdhOTYw
OTM1MDJmLzkwMTZkYmJiMzBmNjgxMDc2ZTg1YzVhYWUwNWU3YTJlMzhlMjc0ZTEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMzc0OTRhYi04YWRmLTQwMjctOTc1YS05N2E5
NjA5MzUwMmYvOTAxNmRiYmIzMGY2ODEwNzZlODVjNWFhZTA1ZTdhMmUzOGUyNzRl
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBABnnGoJxtCFx5dejyQcwc5SEe8qBjzUC1+R5pTUcO9/v8YqV
H0bTUHCSVOv/JLLGJItr84R1goazvaC3mOcN4uicj+mpEckJsPXbbXm0nrLSgA2J
rto/nUt/j+S8WNkxvRHY46vv0UcgDWas1m0u6sZM2Ji+WXQqRUtnjILTDUasXALt
KLxbE94GVontFYqhu1XtmicvjyxsZZFH6NQ1lCeHd+GwxN8i4wuLsJ88PphtivLc
TNyEVHGfWzXI3MeihT5LYHh6BOTi2XaqAe6Ch9o5S2rYCR2LfQWWboyTWVoPJPYA
HEa2iPpxbEkpk3e8PtgH23nw1/0QsU2cxLwhdJk=
-----END CERTIFICATE-----