Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.mft
File:                     89a6b799164b5797d1071c2a1f3f47ce007167fc.mft (raw, json)
Hash identifier:          NvXPF9lYG2UsE2Luk501h3UdY41R6lBmLpo9g0Zn1PA=
Subject key identifier:   25:99:86:FA:0C:41:1A:6F:45:CF:F8:25:37:C2:A1:46:AF:49:6F:F7
Authority key identifier: 38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08
Certificate issuer:       /CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
Certificate serial:       252D29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.mft
Manifest number:          0DE4
Signing time:             Mon 15 Apr 2024 10:21:06 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 13:11:25 +0000
Files and hashes:         1: 47018d42a6544115dda46c95936dbf365f8cc2b8.roa (hash: gcgguHZ3+vSftOIhY7tRf/xKcj/1b36EnPRollkLp4Y=)
                          2: 89a6b799164b5797d1071c2a1f3f47ce007167fc.crl (hash: cFDIfu6m26/mT+CrAQcVPR8HjTI2cLy8bkOwdRATuSg=)
                          3: 94701805ad3c23a65b3f6b7b354e822471b50bc8.roa (hash: 0N7XvkEjcKa9QAi0sCls5dMtQ+JoC0SDzPqp8AlhdDU=)
                          4: fccf8ef4cdfe1f13be28c2cb43e9ecb032ce80a9.roa (hash: ygTvPvKYTt2UUmO54ITyP6Wlnll5li6eMAznguCpbY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436393 (0x252d29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6b799164b5797d1071c2a1f3f47ce007167fc
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 13:11:25 2024 GMT
        Subject: CN=1e2aa4a5ce50e7e56d95b7720d7e80855f41205d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:7d:c1:bf:ab:4d:eb:7f:bd:27:83:4d:7e:
                    f5:a5:ca:51:37:63:68:e0:8f:75:3a:3f:ed:e3:4c:
                    09:83:94:1c:2c:13:94:29:73:06:ee:a4:a3:d4:79:
                    f9:c9:5b:32:a9:87:4d:28:97:67:09:4d:23:8f:4c:
                    3d:22:fc:89:38:05:8e:3c:8b:16:0c:12:56:2d:39:
                    19:2a:33:ed:7f:af:d8:39:37:88:31:13:cc:a5:03:
                    fd:ad:6f:87:6d:14:f6:c7:12:ad:56:1c:fe:f3:fc:
                    bf:dc:74:dc:1b:dd:45:dd:e1:43:02:bb:29:fe:35:
                    3d:8a:ff:ac:0b:d7:39:68:77:1b:b9:03:8a:90:28:
                    3f:23:08:50:5b:27:e5:c8:b9:9c:7f:cd:a2:e6:a8:
                    50:5d:fe:bc:dc:a4:ab:61:41:8e:bf:bf:35:34:cb:
                    5a:7b:73:ed:67:de:f4:7c:86:a8:b1:d5:35:1d:99:
                    35:73:9c:10:94:83:de:c0:e2:58:dc:bd:db:c2:f2:
                    58:89:11:aa:22:ce:91:b7:7c:b3:8c:a1:1f:c3:2b:
                    ca:bd:7c:c0:52:ef:05:fc:b3:f3:44:f0:68:19:87:
                    83:c9:a2:30:f5:52:4b:73:eb:24:42:23:0a:ff:8f:
                    d8:fd:6f:8c:b8:82:03:22:bf:f6:5a:57:f5:e7:98:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:99:86:FA:0C:41:1A:6F:45:CF:F8:25:37:C2:A1:46:AF:49:6F:F7
            X509v3 Authority Key Identifier:
                keyid:38:D9:A3:8D:AB:4B:8B:38:B6:8A:D7:F1:15:F1:3E:80:4D:A7:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a6b799164b5797d1071c2a1f3f47ce007167fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228d9c1b-7e0e-4cf4-8db2-63f87283d8e0/89a6b799164b5797d1071c2a1f3f47ce007167fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:6e:9e:f6:42:fa:29:5d:10:e2:af:c7:64:67:b0:ea:2b:
         cb:1c:00:01:70:95:9c:dd:09:a1:bf:43:7e:97:d9:a0:79:37:
         8b:ea:48:92:00:ef:ef:f9:6f:6f:c5:74:c9:35:79:31:87:e7:
         55:57:31:cb:38:f9:91:26:a2:13:d5:96:c0:03:fd:ac:96:7e:
         ac:5e:50:e7:86:98:b7:73:03:a9:c7:59:84:e3:d8:30:d5:e7:
         6b:cc:3a:07:f4:44:59:ed:cd:91:48:f2:70:31:e7:11:e7:e7:
         3a:a7:94:2d:4a:97:69:50:d2:b1:70:65:5f:ba:30:8e:79:9f:
         e9:a3:ae:61:12:0a:ea:4c:e1:e1:80:bc:6c:c3:a8:28:66:e5:
         8a:d9:41:4a:55:8b:82:b2:b8:4a:f8:53:a2:63:ab:af:6b:f1:
         cf:35:e1:19:98:a4:b8:56:1a:e8:f2:7d:ff:0c:2d:dc:f4:82:
         e4:dd:98:cd:10:48:49:37:b2:25:a0:96:b4:ad:39:22:af:b3:
         3e:74:d7:1c:b9:67:96:7b:42:83:7d:d9:80:56:18:aa:b2:b2:
         87:b9:26:47:76:78:19:be:18:8c:11:42:07:2a:ab:4d:77:b6:
         2e:b0:cf:70:d0:c2:16:6f:a6:03:19:20:08:c9:31:df:b2:6a:
         50:70:ce:c5
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJS0pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
YTZiNzk5MTY0YjU3OTdkMTA3MWMyYTFmM2Y0N2NlMDA3MTY3ZmMwHhcNMjQwNDE1
MDkyMDI1WhcNMjQwNDE4MTMxMTI1WjAzMTEwLwYDVQQDEygxZTJhYTRhNWNlNTBl
N2U1NmQ5NWI3NzIwZDdlODA4NTVmNDEyMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq1h9wb+rTet/vSeDTX71pcpRN2No4I91Oj/t40wJg5QcLBOU
KXMG7qSj1Hn5yVsyqYdNKJdnCU0jj0w9IvyJOAWOPIsWDBJWLTkZKjPtf6/YOTeI
MRPMpQP9rW+HbRT2xxKtVhz+8/y/3HTcG91F3eFDArsp/jU9iv+sC9c5aHcbuQOK
kCg/IwhQWyflyLmcf82i5qhQXf683KSrYUGOv781NMtae3PtZ970fIaosdU1HZk1
c5wQlIPewOJY3L3bwvJYiRGqIs6Rt3yzjKEfwyvKvXzAUu8F/LPzRPBoGYeDyaIw
9VJLc+skQiMK/4/Y/W+MuIIDIr/2Wlf155ioOwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFCWZhvoMQRpvRc/4JTfCoUavSW/3MB8GA1UdIwQYMBaAFDjZo42rS4s4torX
8RXxPoBNp4wIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODlhNmI3
OTkxNjRiNTc5N2QxMDcxYzJhMWYzZjQ3Y2UwMDcxNjdmYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjI4ZDljMWItN2UwZS00Y2Y0LThkYjItNjNmODcy
ODNkOGUwLzg5YTZiNzk5MTY0YjU3OTdkMTA3MWMyYTFmM2Y0N2NlMDA3MTY3ZmMu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMjhkOWMxYi03ZTBlLTRjZjQtOGRiMi02M2Y4
NzI4M2Q4ZTAvODlhNmI3OTkxNjRiNTc5N2QxMDcxYzJhMWYzZjQ3Y2UwMDcxNjdm
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAItobp72QvopXRDir8dkZ7DqK8scAAFwlZzdCaG/Q36X2aB5
N4vqSJIA7+/5b2/FdMk1eTGH51VXMcs4+ZEmohPVlsAD/ayWfqxeUOeGmLdzA6nH
WYTj2DDV52vMOgf0RFntzZFI8nAx5xHn5zqnlC1Kl2lQ0rFwZV+6MI55n+mjrmES
CupM4eGAvGzDqChm5YrZQUpVi4KyuEr4U6Jjq69r8c814RmYpLhWGujyff8MLdz0
guTdmM0QSEk3siWglrStOSKvsz501xy5Z5Z7QoN92YBWGKqysoe5Jkd2eBm+GIwR
Qgcqq013ti6wz3DQwhZvpgMZIAjJMd+yalBwzsU=
-----END CERTIFICATE-----