Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.mft
File:                     bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.mft (raw, json)
Hash identifier:          SsNIq4I0lJnOMrCk1s3vKX396R+6J6nmi3lzWieKXDA=
Subject key identifier:   97:6B:26:4E:86:B7:EC:C7:FD:78:0D:31:1C:77:AB:86:7E:BE:48:43
Authority key identifier: EF:AC:29:B0:98:0F:79:8C:78:5E:B3:53:1F:FB:55:9C:2E:34:FA:F0
Certificate issuer:       /CN=bb85d8416a3a6cc72fec0191c797cfa9f558ee3b
Certificate serial:       1DD03C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.mft
Manifest number:          0E04
Signing time:             Mon 15 Apr 2024 06:21:49 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:19:39 +0000
Files and hashes:         1: 4383323c833d2d9fddf40b1a158d551d4d05afac.roa (hash: D523q4aZL8pUPlGrp97t2aZwBtJuWTpnIoVSwWuthgA=)
                          2: bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.crl (hash: LEI0mHxfzERy9w/B/CrT2bEN7wSg9o13rP12Dt9k8JY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953852 (0x1dd03c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb85d8416a3a6cc72fec0191c797cfa9f558ee3b
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:19:39 2024 GMT
        Subject: CN=8b267c25948c3568576a469c4e1786521bde841a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:f8:a5:f0:df:97:04:ec:21:e7:d1:57:fa:
                    ee:a4:1e:40:cb:ad:99:99:62:91:20:bc:f0:2b:3c:
                    53:aa:f9:e1:57:1f:61:e3:27:24:3e:6b:e0:8b:c6:
                    6e:77:84:04:6f:d8:03:24:e5:a6:a7:23:5e:c9:05:
                    6c:cc:a8:dd:b4:58:a4:1e:e9:9f:68:43:8b:75:f9:
                    14:ca:ee:7a:2c:47:57:ce:cb:29:c5:ee:ec:1c:c2:
                    d8:29:2d:a7:7c:71:45:db:78:03:bb:26:65:fc:0e:
                    2c:e9:84:5d:66:b8:fb:3f:c5:e1:29:4b:cb:fa:b8:
                    68:6a:55:97:ac:5f:8a:49:b5:ec:e2:6f:e9:f8:cb:
                    ad:c1:f5:b9:2c:68:c0:4a:8e:a7:ec:02:a5:68:8d:
                    08:43:f1:fc:71:82:d4:3e:44:a3:b9:a8:92:de:53:
                    04:96:31:b6:59:05:d4:64:55:c3:44:9a:c2:8e:a6:
                    67:41:bb:f3:da:a4:32:23:b8:74:f0:4e:46:ac:f2:
                    5c:b1:08:55:07:96:d5:b3:94:fd:a1:d5:f8:f6:c8:
                    e7:69:85:35:e3:10:7e:9a:b3:3f:e5:a9:9e:9c:12:
                    6d:30:14:a3:ed:bb:a7:ad:58:d7:5c:ba:69:bc:03:
                    84:6f:df:f7:77:b6:01:d4:ce:c3:b8:2d:f9:6e:30:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6B:26:4E:86:B7:EC:C7:FD:78:0D:31:1C:77:AB:86:7E:BE:48:43
            X509v3 Authority Key Identifier:
                keyid:EF:AC:29:B0:98:0F:79:8C:78:5E:B3:53:1F:FB:55:9C:2E:34:FA:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:01:c2:f3:9e:32:6c:fa:d0:8e:8b:01:12:40:c6:89:9e:4f:
         eb:c0:4f:52:b2:33:74:e0:dd:a6:1b:aa:73:c8:08:91:8a:3a:
         af:ad:03:77:27:26:6b:ac:42:4a:c9:40:6d:41:a3:b9:37:c5:
         d7:48:b7:3d:7c:ca:1c:24:ba:14:82:b9:57:40:47:b5:0e:cf:
         7e:c3:dc:0a:18:15:d6:80:0d:f6:d3:29:67:53:88:27:a5:ec:
         5f:ea:13:b8:a0:12:c0:60:ab:61:a2:92:20:0d:c4:cd:9d:b2:
         34:16:ab:85:45:ce:34:26:54:b6:6a:cb:02:c3:1a:0a:c8:5a:
         4e:2e:1e:2d:c4:59:ae:a3:cb:cc:4a:ae:00:26:ab:b7:b5:fb:
         83:75:43:60:a5:0a:ce:95:f3:f8:65:2a:29:b6:2a:c3:02:3f:
         a6:29:77:83:f6:fe:0c:8d:08:1d:ef:6d:2c:ba:c7:fb:90:95:
         1c:4f:b0:5c:aa:5c:06:3a:4f:f2:55:0e:01:3f:8e:8a:f7:98:
         56:2c:48:77:f9:7f:8a:78:56:62:4b:16:44:1d:6c:8e:93:3c:
         ef:d3:28:12:f6:57:d1:16:ba:bc:61:ea:a4:d7:d9:aa:5f:d4:
         82:d5:f4:b5:50:30:79:fa:01:9f:6f:92:c6:dc:6d:ed:16:35:
         f5:08:bc:ee
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDHdA8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
ODVkODQxNmEzYTZjYzcyZmVjMDE5MWM3OTdjZmE5ZjU1OGVlM2IwHhcNMjQwNDE1
MDUyMDM5WhcNMjQwNDE4MDgxOTM5WjAzMTEwLwYDVQQDEyg4YjI2N2MyNTk0OGMz
NTY4NTc2YTQ2OWM0ZTE3ODY1MjFiZGU4NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv7b4pfDflwTsIefRV/rupB5Ay62ZmWKRILzwKzxTqvnhVx9h
4yckPmvgi8Zud4QEb9gDJOWmpyNeyQVszKjdtFikHumfaEOLdfkUyu56LEdXzssp
xe7sHMLYKS2nfHFF23gDuyZl/A4s6YRdZrj7P8XhKUvL+rhoalWXrF+KSbXs4m/p
+MutwfW5LGjASo6n7AKlaI0IQ/H8cYLUPkSjuaiS3lMEljG2WQXUZFXDRJrCjqZn
Qbvz2qQyI7h08E5GrPJcsQhVB5bVs5T9odX49sjnaYU14xB+mrM/5amenBJtMBSj
7bunrVjXXLppvAOEb9/3d7YB1M7DuC35bjBKCQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFJdrJk6Gt+zH/XgNMRx3q4Z+vkhDMB8GA1UdIwQYMBaAFO+sKbCYD3mMeF6z
Ux/7VZwuNPrwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmI4NWQ4
NDE2YTNhNmNjNzJmZWMwMTkxYzc5N2NmYTlmNTU4ZWUzYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGU3ODcxYTctOWI1Ni00OTFhLWI1MGYtYjk2MWUw
Nzg0MmFkL2JiODVkODQxNmEzYTZjYzcyZmVjMDE5MWM3OTdjZmE5ZjU1OGVlM2Iu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZTc4NzFhNy05YjU2LTQ5MWEtYjUwZi1iOTYx
ZTA3ODQyYWQvYmI4NWQ4NDE2YTNhNmNjNzJmZWMwMTkxYzc5N2NmYTlmNTU4ZWUz
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBABkBwvOeMmz60I6LARJAxomeT+vAT1KyM3Tg3aYbqnPICJGK
Oq+tA3cnJmusQkrJQG1Bo7k3xddItz18yhwkuhSCuVdAR7UOz37D3AoYFdaADfbT
KWdTiCel7F/qE7igEsBgq2GikiANxM2dsjQWq4VFzjQmVLZqywLDGgrIWk4uHi3E
Wa6jy8xKrgAmq7e1+4N1Q2ClCs6V8/hlKim2KsMCP6Ypd4P2/gyNCB3vbSy6x/uQ
lRxPsFyqXAY6T/JVDgE/jor3mFYsSHf5f4p4VmJLFkQdbI6TPO/TKBL2V9EWurxh
6qTX2apf1ILV9LVQMHn6AZ9vksbcbe0WNfUIvO4=
-----END CERTIFICATE-----