Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.mft
File:                     1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.mft (raw, json)
Hash identifier:          eCIj75S4JQiig5od4W+3qXtk9umaf70nq37Um2/8klU=
Subject key identifier:   31:8C:E8:87:7D:E1:7A:D9:3F:9E:40:35:C9:AF:60:2A:A6:76:63:61
Authority key identifier: 7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7
Certificate issuer:       /CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
Certificate serial:       280E2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.mft
Manifest number:          0DDC
Signing time:             Mon 15 Apr 2024 04:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 07:01:26 +0000
Files and hashes:         1: 08678512c28245c17f8a4405982716a0e5605e41.roa (hash: Xd0SJAzr0RKH/6mOSFx1nLBGTC+wW0RvahVzxvacaj8=)
                          2: 1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.crl (hash: aiYiI0yjFYHRdVZFwIPP09vCBOUxDlZP8DZrcv2UClU=)
                          3: dea89f86dec09a9ec3f974676fbe6b4821124bf2.roa (hash: PhQPpEG3GTcMtpT1uj0T+0j+j1H6Tk1upJNHQw7v9cE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625066 (0x280e2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 07:01:26 2024 GMT
        Subject: CN=5fa6b5958025280225dab2f4d86ad406f006b1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:d5:8b:dc:65:79:d4:be:f5:b5:68:a0:5d:
                    0c:2a:2e:92:31:21:d5:e2:06:3a:4b:e6:e8:e7:67:
                    93:0d:81:44:3e:35:7b:79:f2:5c:cf:80:b7:cf:2f:
                    45:c9:b1:e8:b8:40:cc:94:5e:0b:7f:1a:ae:67:5c:
                    68:bc:64:7c:e8:3c:b8:2d:12:c2:f5:c4:1c:de:37:
                    7d:ed:9a:4e:c3:70:b6:ac:e6:55:49:d1:01:07:01:
                    fa:c7:6b:13:00:1a:69:23:a8:8a:c6:b6:e2:1d:c3:
                    6a:ab:0b:b6:45:af:55:6e:d4:80:8b:ca:02:e9:81:
                    74:a3:f6:3d:d6:35:9d:29:03:1b:8e:b1:ed:41:71:
                    c9:cb:87:98:19:2d:d7:b6:32:9d:09:f1:76:5d:84:
                    06:bc:51:5d:e1:e1:6a:8f:4b:a9:a6:22:95:73:1a:
                    03:9c:ce:e4:89:18:17:d0:33:7d:4f:7b:5f:fa:57:
                    e9:62:bf:e8:55:6a:e7:61:80:64:12:67:13:ab:2a:
                    d5:af:6c:bb:22:96:81:07:1a:47:c1:ae:59:a7:ef:
                    2f:5b:05:7b:9f:82:dd:c5:ba:c2:64:a5:72:6e:8d:
                    f9:73:1f:3b:6f:4d:06:a6:7a:4c:e6:0e:d0:53:32:
                    6a:c0:6f:d0:0a:94:cf:5d:02:c1:5a:2e:be:70:27:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8C:E8:87:7D:E1:7A:D9:3F:9E:40:35:C9:AF:60:2A:A6:76:63:61
            X509v3 Authority Key Identifier:
                keyid:7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:d3:45:b4:11:46:8d:5c:49:ee:d8:86:95:db:2b:3d:3c:
         ee:0f:4b:fe:08:cd:2c:15:2c:ca:92:9a:e1:cd:ed:1e:a1:09:
         a3:76:bf:8b:65:41:a4:51:19:b5:ca:a2:20:9d:0a:49:b1:b9:
         c5:e3:27:bd:83:57:d6:21:d5:18:b2:a3:b6:57:20:6a:95:f1:
         23:e6:9f:4d:12:81:8c:70:90:a9:93:74:ba:97:04:73:c7:51:
         3c:df:54:87:ee:6a:68:06:da:fb:3c:49:5f:87:13:5b:01:90:
         b8:05:64:03:77:ee:e2:56:e6:52:aa:03:ba:91:ec:93:b2:bf:
         69:9e:1d:ae:b8:fc:68:ac:07:b4:b2:7c:39:42:19:62:37:b3:
         66:b2:73:ee:8f:bf:25:df:05:d0:91:b6:a6:c1:2f:27:54:7d:
         93:dc:25:4c:88:16:b8:d5:84:b3:3c:7b:e2:c6:a3:85:b2:6d:
         0c:2a:f4:5d:25:f0:3f:45:c0:ed:83:0e:05:c9:32:08:47:3d:
         8f:8b:0a:46:98:10:21:62:93:b8:6c:a5:e5:99:a5:ee:f9:0c:
         f6:81:1a:a6:77:98:b8:1e:e7:57:09:85:7e:7e:f0:58:0f:50:
         33:03:62:46:77:29:49:a9:96:fe:4c:ae:cc:61:84:82:ed:13:
         c4:90:ef:c7
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKA4qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
ZjFhODNiNDNhMTNhMjFkNjhlOGJjMTkwZjdlMmMxNjJlYzhiZjEwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDcwMTI2WjAzMTEwLwYDVQQDEyg1ZmE2YjU5NTgwMjUy
ODAyMjVkYWIyZjRkODZhZDQwNmYwMDZiMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkbPVi9xledS+9bVooF0MKi6SMSHV4gY6S+bo52eTDYFEPjV7
efJcz4C3zy9FybHouEDMlF4LfxquZ1xovGR86Dy4LRLC9cQc3jd97ZpOw3C2rOZV
SdEBBwH6x2sTABppI6iKxrbiHcNqqwu2Ra9VbtSAi8oC6YF0o/Y91jWdKQMbjrHt
QXHJy4eYGS3XtjKdCfF2XYQGvFFd4eFqj0uppiKVcxoDnM7kiRgX0DN9T3tf+lfp
Yr/oVWrnYYBkEmcTqyrVr2y7IpaBBxpHwa5Zp+8vWwV7n4LdxbrCZKVybo35cx87
b00GpnpM5g7QUzJqwG/QCpTPXQLBWi6+cCfc5wIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDGM6Id94XrZP55ANcmvYCqmdmNhMB8GA1UdIwQYMBaAFHs9QCfz/lONeIhB
MaHeXZAFB5y3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWZmMWE4
M2I0M2ExM2EyMWQ2OGU4YmMxOTBmN2UyYzE2MmVjOGJmMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWIyNDMyMTUtMjI0OS00NzRlLTkyYjMtYWQ5MzMx
NWFhNzdlLzFmZjFhODNiNDNhMTNhMjFkNjhlOGJjMTkwZjdlMmMxNjJlYzhiZjEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYjI0MzIxNS0yMjQ5LTQ3NGUtOTJiMy1hZDkz
MzE1YWE3N2UvMWZmMWE4M2I0M2ExM2EyMWQ2OGU4YmMxOTBmN2UyYzE2MmVjOGJm
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEbN00W0EUaNXEnu2IaV2ys9PO4PS/4IzSwVLMqSmuHN7R6h
CaN2v4tlQaRRGbXKoiCdCkmxucXjJ72DV9Yh1Riyo7ZXIGqV8SPmn00SgYxwkKmT
dLqXBHPHUTzfVIfuamgG2vs8SV+HE1sBkLgFZAN37uJW5lKqA7qR7JOyv2meHa64
/GisB7SyfDlCGWI3s2ayc+6PvyXfBdCRtqbBLydUfZPcJUyIFrjVhLM8e+LGo4Wy
bQwq9F0l8D9FwO2DDgXJMghHPY+LCkaYECFik7hspeWZpe75DPaBGqZ3mLge51cJ
hX5+8FgPUDMDYkZ3KUmplv5MrsxhhILtE8SQ78c=
-----END CERTIFICATE-----