Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f8b4623-a353-407e-977a-a12d7feeff7e/6858fc8c50857d4476ea67245655829a81870394.mft
File:                     6858fc8c50857d4476ea67245655829a81870394.mft (raw, json)
Hash identifier:          8Sgydhk9WBqjkOltSGgEKY+qUL+UBhHd22K34oi4HrE=
Subject key identifier:   F3:3E:2E:50:A6:D6:F0:5B:24:47:5D:F8:04:6C:A9:4F:C3:45:B0:8B
Authority key identifier: 1E:BC:FD:74:D8:6F:16:00:E4:97:DF:77:E3:D4:47:BC:50:C8:31:55
Certificate issuer:       /CN=6858fc8c50857d4476ea67245655829a81870394
Certificate serial:       080EF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6858fc8c50857d4476ea67245655829a81870394.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f8b4623-a353-407e-977a-a12d7feeff7e/6858fc8c50857d4476ea67245655829a81870394.mft
Manifest number:          0416
Signing time:             Mon 15 Apr 2024 09:20:42 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:19:18 +0000
Files and hashes:         1: 6858fc8c50857d4476ea67245655829a81870394.crl (hash: v+UHwF55KPWBSihTqn4h+H297hrxhENc/wfkeZr0/mo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528113 (0x80ef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6858fc8c50857d4476ea67245655829a81870394
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:19:18 2024 GMT
        Subject: CN=611beaa9877e05f5ee7ecdd71ffd50147f20ca3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:fe:bc:4c:4d:27:5d:63:d5:82:16:89:3f:
                    be:ac:78:86:b3:dd:25:b7:50:4b:39:c3:33:8e:8a:
                    61:dc:06:45:31:d2:0f:ab:96:11:5b:e7:83:16:3b:
                    9e:d8:d5:fd:2a:0d:65:d7:f8:6e:9c:f6:3c:ce:01:
                    df:5f:70:30:a4:be:c2:ca:41:38:e0:55:d0:06:d7:
                    52:88:fb:94:18:3f:ea:8a:91:69:86:b2:d2:a7:bb:
                    62:a7:8f:91:75:ff:7f:cb:07:b7:9b:93:31:69:b8:
                    8c:51:39:f9:32:8c:ab:27:89:c2:6e:79:ca:94:35:
                    6e:5f:59:c5:d4:19:21:57:2a:2f:61:33:3a:75:2e:
                    6f:f7:79:47:d9:ca:dd:e8:49:45:37:8e:7d:f9:7c:
                    9c:8d:e4:24:14:3d:62:39:b9:1a:34:c4:55:4a:48:
                    37:31:e9:11:7c:ea:be:1f:f7:8f:a8:dd:95:a6:a2:
                    63:0b:30:38:d0:3c:e2:e9:51:5d:c1:84:86:94:2d:
                    9f:e9:95:5b:46:52:c1:a6:66:9d:59:a7:75:c6:64:
                    1a:59:6d:99:eb:6e:ba:38:3a:2a:96:f7:be:db:4e:
                    e4:de:55:b3:9f:7b:4d:c9:c2:3e:6c:e4:d0:12:4b:
                    07:3b:a4:23:07:bf:1e:3d:b1:e3:55:f1:c4:d8:58:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3E:2E:50:A6:D6:F0:5B:24:47:5D:F8:04:6C:A9:4F:C3:45:B0:8B
            X509v3 Authority Key Identifier:
                keyid:1E:BC:FD:74:D8:6F:16:00:E4:97:DF:77:E3:D4:47:BC:50:C8:31:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6858fc8c50857d4476ea67245655829a81870394.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f8b4623-a353-407e-977a-a12d7feeff7e/6858fc8c50857d4476ea67245655829a81870394.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f8b4623-a353-407e-977a-a12d7feeff7e/6858fc8c50857d4476ea67245655829a81870394.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:8f:50:b2:b6:74:94:2e:7a:3b:67:2c:9d:65:36:6c:9d:
         4f:16:f0:3f:7c:e0:9e:54:44:39:c3:14:36:24:c6:37:e6:59:
         a5:22:93:df:17:8c:93:7d:ec:c4:3a:78:d1:d0:0d:c7:49:bd:
         29:8e:c4:61:18:2f:15:63:3e:a4:43:4f:0b:27:dc:6e:23:f4:
         43:5e:65:3a:ae:dd:f8:95:f4:36:dd:0f:7f:4d:27:2e:23:8f:
         2c:75:3d:f8:fe:e1:56:58:2b:fe:0c:a9:d9:09:58:d5:a6:dc:
         e3:92:cc:00:7f:f1:e5:dd:17:b7:8d:9b:2b:b2:94:e7:6a:c2:
         5b:e5:8f:3d:f4:12:00:94:99:f0:78:3d:eb:04:40:69:c5:6e:
         f3:3a:85:20:92:75:aa:87:d5:3a:11:92:8a:f5:a3:48:5a:86:
         f6:d2:2a:8e:d3:93:91:51:72:a5:3f:af:a7:28:20:86:57:21:
         52:ed:f8:d2:3d:84:4d:54:8a:08:a3:c1:3e:6d:a7:2d:8e:02:
         d8:e8:bf:3b:ed:67:c9:ea:ff:03:cb:c6:73:b1:00:47:94:eb:
         89:1c:06:94:4e:84:cf:9c:c3:85:57:04:d6:fb:00:68:2e:bf:
         2b:c1:f0:22:0d:06:1c:e2:f5:17:51:d0:66:b0:87:06:58:11:
         7a:18:e1:58
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCA7xMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY4
NThmYzhjNTA4NTdkNDQ3NmVhNjcyNDU2NTU4MjlhODE4NzAzOTQwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTExOTE4WjAzMTEwLwYDVQQDEyg2MTFiZWFhOTg3N2Uw
NWY1ZWU3ZWNkZDcxZmZkNTAxNDdmMjBjYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkIz+vExNJ11j1YIWiT++rHiGs90lt1BLOcMzjoph3AZFMdIP
q5YRW+eDFjue2NX9Kg1l1/hunPY8zgHfX3AwpL7CykE44FXQBtdSiPuUGD/qipFp
hrLSp7tip4+Rdf9/ywe3m5MxabiMUTn5MoyrJ4nCbnnKlDVuX1nF1BkhVyovYTM6
dS5v93lH2crd6ElFN459+XycjeQkFD1iObkaNMRVSkg3MekRfOq+H/ePqN2VpqJj
CzA40Dzi6VFdwYSGlC2f6ZVbRlLBpmadWad1xmQaWW2Z6266ODoqlve+207k3lWz
n3tNycI+bOTQEksHO6QjB78ePbHjVfHE2Fg7PQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFPM+LlCm1vBbJEdd+ARsqU/DRbCLMB8GA1UdIwQYMBaAFB68/XTYbxYA5Jff
d+PUR7xQyDFVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjg1OGZj
OGM1MDg1N2Q0NDc2ZWE2NzI0NTY1NTgyOWE4MTg3MDM5NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGY4YjQ2MjMtYTM1My00MDdlLTk3N2EtYTEyZDdm
ZWVmZjdlLzY4NThmYzhjNTA4NTdkNDQ3NmVhNjcyNDU2NTU4MjlhODE4NzAzOTQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZjhiNDYyMy1hMzUzLTQwN2UtOTc3YS1hMTJk
N2ZlZWZmN2UvNjg1OGZjOGM1MDg1N2Q0NDc2ZWE2NzI0NTY1NTgyOWE4MTg3MDM5
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEj1j1CytnSULno7ZyydZTZsnU8W8D984J5URDnDFDYkxjfm
WaUik98XjJN97MQ6eNHQDcdJvSmOxGEYLxVjPqRDTwsn3G4j9ENeZTqu3fiV9Dbd
D39NJy4jjyx1Pfj+4VZYK/4MqdkJWNWm3OOSzAB/8eXdF7eNmyuylOdqwlvljz30
EgCUmfB4PesEQGnFbvM6hSCSdaqH1ToRkor1o0hahvbSKo7Tk5FRcqU/r6coIIZX
IVLt+NI9hE1UigijwT5tpy2OAtjovzvtZ8nq/wPLxnOxAEeU64kcBpROhM+cw4VX
BNb7AGguvyvB8CINBhzi9RdR0GawhwZYEXoY4Vg=
-----END CERTIFICATE-----