Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.mft
File:                     471b06a93ff238801ce6c8b4186977ced49f09f0.mft (raw, json)
Hash identifier:          aiBtN4U+v8FtUu4BE0PReXQUNobW7lF1dyuI8DIU2lA=
Subject key identifier:   10:A7:0B:77:7F:29:1D:4C:82:08:92:67:79:62:5A:E5:E3:E5:AB:CD
Authority key identifier: 7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64
Certificate issuer:       /CN=471b06a93ff238801ce6c8b4186977ced49f09f0
Certificate serial:       057B8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.mft
Manifest number:          02BD
Signing time:             Mon 15 Apr 2024 04:21:35 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 07:07:26 +0000
Files and hashes:         1: 320478ad4a9627c54130b7f8bfd7bf41e05690f5.roa (hash: 6H+F9ngWhQ960PUUG166LiekrtT04RzTmEnd/mEI+4E=)
                          2: 40e77fd9693fd44c9e617ea1c903960098863a3e.roa (hash: +OVjiIH17MHw6NvonpyB2VxHybbXd0WoLFbvhRm7Pwc=)
                          3: 471b06a93ff238801ce6c8b4186977ced49f09f0.crl (hash: w1PV72qV2CCQLHGJyEPa05in8cakpqiCK/p6fJ4LT1Q=)
                          4: 98aa986f296e86a5f12a90495238c701e683ddec.roa (hash: GZs0hPSlIM53DHP7zUfjf11rNnAkFdxyND9UxjjZcLQ=)
                          5: bb6e97c5edf5689e03cb31ff793b83815c426499.roa (hash: 1ihxRJJxVf9i/rZJ3MHaTglkJFkdgP8O05eytK4lDAc=)
                          6: c19ab2ac342db33ca23f55dd1f167e66bf79ae58.roa (hash: G8ZL6o4xawH6mY4X+DGwVBz3eqrhRGQ/6MEkU3RoQAo=)
                          7: f40a319953e0f18907810cef3e12622180014f72.roa (hash: 9FMR2WAGA8Cpn6HCmPixKlJUBS7I6H9UYDXI+8SW5wg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359307 (0x57b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471b06a93ff238801ce6c8b4186977ced49f09f0
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 07:07:26 2024 GMT
        Subject: CN=4f5e2ab9cd5a0be0188dd2ea1e4694e6281c1ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:55:85:e4:25:d0:e1:2b:4c:9d:4f:14:2e:
                    dd:c7:3b:96:55:ce:61:01:7a:d8:26:9f:b6:50:74:
                    45:74:69:ac:ed:0c:82:da:37:91:52:3b:51:ab:b3:
                    fc:c6:92:58:c1:a2:ca:a0:08:90:81:23:e3:4c:a3:
                    1d:70:ab:cc:f8:38:72:4b:7a:c5:56:68:d2:78:ac:
                    c7:f2:6c:ff:62:9a:98:31:af:94:ef:fe:e9:fe:ca:
                    65:01:b0:47:87:23:e9:e4:4f:75:27:26:66:43:e8:
                    67:f2:50:de:6f:30:c3:bf:78:2f:70:77:0a:05:39:
                    e3:5e:e3:9f:84:0d:71:08:10:40:e0:90:c9:62:b0:
                    f0:05:ab:0f:ad:7e:4d:0f:23:d8:ee:fa:5b:2d:19:
                    2e:27:65:75:18:4c:ad:1c:a1:3b:8a:6b:da:e3:cb:
                    0f:17:77:2e:0a:90:d3:24:0d:b6:1a:d2:aa:da:d3:
                    c9:a7:42:69:ac:13:e9:1d:74:1d:3b:5a:1d:6b:40:
                    eb:89:f2:de:31:79:a3:99:f2:c1:ec:30:e3:37:0b:
                    f9:6e:4f:b7:fa:90:72:af:c5:75:82:ff:8b:e9:58:
                    5c:12:e8:ec:90:2e:4d:4f:41:54:11:f4:55:14:7a:
                    0d:cd:6f:87:fa:2c:9b:ad:96:c3:75:de:13:f4:fe:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:0B:77:7F:29:1D:4C:82:08:92:67:79:62:5A:E5:E3:E5:AB:CD
            X509v3 Authority Key Identifier:
                keyid:7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fb:38:74:0f:e5:58:77:6f:0c:8f:2d:3b:e1:12:d8:f6:d4:
         22:7e:9b:67:e6:58:21:29:e2:7d:3b:2b:bd:5f:f4:fc:1b:51:
         b8:9f:fd:56:21:c9:5d:59:cd:bb:8a:2e:cd:7b:b7:17:1f:2e:
         48:1d:ce:94:ad:6b:50:23:24:cc:31:06:ab:25:bf:e8:31:6c:
         63:1f:48:5e:11:8c:2f:48:c7:38:fd:e2:9c:16:03:28:6e:ca:
         b0:42:27:40:be:36:3b:2a:70:a0:e3:43:ed:cd:54:af:c2:87:
         ac:15:ca:21:46:bb:39:3e:4c:11:8e:6b:d0:50:f1:d9:6b:46:
         49:f0:9e:71:62:0a:92:13:f0:3e:fc:f6:aa:56:f7:cf:45:4a:
         a0:be:cf:e8:1c:6b:d9:08:14:ca:ab:b2:ed:74:80:81:d1:80:
         d4:89:3f:c5:88:cb:b2:35:09:69:9a:9e:8b:59:f1:97:50:a9:
         de:1b:d3:f0:c4:5f:a5:28:39:30:3c:55:88:da:5f:12:3d:73:
         4b:10:fa:cf:36:da:a9:22:0e:27:4a:61:a3:e3:f4:b0:77:d8:
         04:ca:03:77:d5:de:80:5a:b9:7e:bd:c7:2d:67:8b:4c:3d:97:
         c9:15:ee:52:45:d5:34:3a:3f:f0:7c:6a:42:9e:d4:66:64:91:
         4f:93:67:cf
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDBXuLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
MWIwNmE5M2ZmMjM4ODAxY2U2YzhiNDE4Njk3N2NlZDQ5ZjA5ZjAwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDcwNzI2WjAzMTEwLwYDVQQDEyg0ZjVlMmFiOWNkNWEw
YmUwMTg4ZGQyZWExZTQ2OTRlNjI4MWMxZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjdJVheQl0OErTJ1PFC7dxzuWVc5hAXrYJp+2UHRFdGms7QyC
2jeRUjtRq7P8xpJYwaLKoAiQgSPjTKMdcKvM+DhyS3rFVmjSeKzH8mz/YpqYMa+U
7/7p/splAbBHhyPp5E91JyZmQ+hn8lDebzDDv3gvcHcKBTnjXuOfhA1xCBBA4JDJ
YrDwBasPrX5NDyPY7vpbLRkuJ2V1GEytHKE7imva48sPF3cuCpDTJA22GtKq2tPJ
p0JprBPpHXQdO1oda0DrifLeMXmjmfLB7DDjNwv5bk+3+pByr8V1gv+L6VhcEujs
kC5NT0FUEfRVFHoNzW+H+iybrZbDdd4T9P6RrwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFBCnC3d/KR1MggiSZ3liWuXj5avNMB8GA1UdIwQYMBaAFH4jmQvASDo6To7x
kgQPfgjBJ2hkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDcxYjA2
YTkzZmYyMzg4MDFjZTZjOGI0MTg2OTc3Y2VkNDlmMDlmMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDc2M2JkZmItYWMxOS00MGVmLThmYjQtMGU0ZjQ0
NTZhMDllLzQ3MWIwNmE5M2ZmMjM4ODAxY2U2YzhiNDE4Njk3N2NlZDQ5ZjA5ZjAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNzYzYmRmYi1hYzE5LTQwZWYtOGZiNC0wZTRm
NDQ1NmEwOWUvNDcxYjA2YTkzZmYyMzg4MDFjZTZjOGI0MTg2OTc3Y2VkNDlmMDlm
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAJ77OHQP5Vh3bwyPLTvhEtj21CJ+m2fmWCEp4n07K71f9Pwb
Ubif/VYhyV1ZzbuKLs17txcfLkgdzpSta1AjJMwxBqslv+gxbGMfSF4RjC9Ixzj9
4pwWAyhuyrBCJ0C+NjsqcKDjQ+3NVK/Ch6wVyiFGuzk+TBGOa9BQ8dlrRknwnnFi
CpIT8D789qpW989FSqC+z+gca9kIFMqrsu10gIHRgNSJP8WIy7I1CWmanotZ8ZdQ
qd4b0/DEX6UoOTA8VYjaXxI9c0sQ+s822qkiDidKYaPj9LB32ATKA3fV3oBauX69
xy1ni0w9l8kV7lJF1TQ6P/B8akKe1GZkkU+TZ88=
-----END CERTIFICATE-----