Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft
File:                     d170fa20ab91b4ab052483fd1d1a50af0baea258.mft (raw, json)
Hash identifier:          H6CX1kAQzU7LR+fuXmbmMWexmHVQBkjYzOCBhKDX41A=
Subject key identifier:   8E:B1:4F:0E:60:4C:B7:23:5B:E8:EB:E4:49:40:06:ED:B0:80:0D:8F
Authority key identifier: 03:A2:F3:95:BA:18:1F:A0:62:B4:C8:94:F9:BC:7C:6D:37:C5:C9:2F
Certificate issuer:       /CN=d170fa20ab91b4ab052483fd1d1a50af0baea258
Certificate serial:       0DA195
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d170fa20ab91b4ab052483fd1d1a50af0baea258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft
Manifest number:          0710
Signing time:             Mon 15 Apr 2024 11:21:11 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:46:18 +0000
Files and hashes:         1: 071090683047f4decc3dee0fd345405d06220f08.roa (hash: JaKteHhVdaWDx/qughknyuzI6+SqxuJe4olXUN1wiSE=)
                          2: d170fa20ab91b4ab052483fd1d1a50af0baea258.crl (hash: bntYQqTiIIASbuwOw74lRXLxx92Q6m7jnoYEh/CWw9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893333 (0xda195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fa20ab91b4ab052483fd1d1a50af0baea258
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:46:18 2024 GMT
        Subject: CN=a7c74f325e4d5906680323f116a01175752ea66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:38:a7:b2:d6:9b:d4:e3:84:7e:a0:d2:5d:
                    c0:85:36:b7:9c:90:24:71:5c:01:9f:25:6a:5f:50:
                    4c:f1:7c:fd:03:5f:b8:1b:60:91:7e:bd:42:f6:07:
                    c5:3b:bc:bd:57:01:e7:24:3c:e8:91:57:49:ea:db:
                    88:38:8f:3b:79:cb:67:a6:b8:d0:7b:19:47:ff:96:
                    fd:79:7b:76:ac:17:f2:d3:b1:76:5a:80:68:ea:a6:
                    e5:84:21:a5:c6:6e:83:63:58:16:18:01:75:68:33:
                    34:9c:6f:ee:68:54:5c:91:da:d7:be:f6:55:04:c6:
                    3e:fe:60:44:43:44:af:e3:05:f2:8b:58:52:a2:83:
                    0c:69:2f:70:14:af:3d:7e:f6:b4:30:bc:16:fe:30:
                    6a:13:4c:ab:38:60:24:90:52:f3:4b:09:b6:20:45:
                    94:59:ad:c8:05:c7:6c:11:9e:ea:90:58:25:5f:21:
                    1e:3d:e8:78:dc:2c:69:3c:3f:db:80:6d:08:e1:2a:
                    02:8c:28:2a:48:56:39:ac:6b:d5:91:a5:13:e5:80:
                    9f:b3:22:64:56:38:ee:6c:52:ca:7d:0a:f1:2f:d5:
                    cc:35:1e:d9:d5:11:28:4f:a2:c5:5d:98:ed:bc:b1:
                    46:58:43:1c:e3:c3:68:39:37:a6:05:b6:8a:3b:93:
                    64:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B1:4F:0E:60:4C:B7:23:5B:E8:EB:E4:49:40:06:ED:B0:80:0D:8F
            X509v3 Authority Key Identifier:
                keyid:03:A2:F3:95:BA:18:1F:A0:62:B4:C8:94:F9:BC:7C:6D:37:C5:C9:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d170fa20ab91b4ab052483fd1d1a50af0baea258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/280e091a-a757-48a5-84fc-8dcf46af0919/d170fa20ab91b4ab052483fd1d1a50af0baea258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:46:b0:db:ff:32:0d:ea:3f:07:7e:dc:cb:a2:54:3a:e4:f2:
         ac:f4:50:d9:79:7d:db:b0:d4:f7:34:9d:e7:dc:38:af:d8:7e:
         5a:94:04:7b:9e:08:18:4e:5e:62:cb:91:10:46:47:8a:fc:f1:
         28:81:3e:31:cb:27:1e:32:e8:7f:9d:b8:46:32:d0:6e:3d:6a:
         ad:1b:c9:01:87:de:32:de:f9:a7:76:f8:ed:ef:99:bd:c3:3c:
         60:67:da:71:99:5f:d6:f7:3f:0e:f1:b5:cb:07:18:5b:a6:a9:
         74:6f:47:70:ac:1e:d8:c1:be:4c:ed:da:20:d7:e0:5e:3f:65:
         89:bb:d1:90:80:76:2f:46:86:ac:5d:f0:c3:b3:ff:fa:a8:8a:
         f4:a3:db:21:12:be:39:85:0f:fd:47:5f:d4:44:81:fa:b3:de:
         b8:39:19:eb:f2:06:53:ee:b0:b8:96:7d:12:a2:ea:77:8b:8c:
         75:4b:c3:30:34:8e:63:1d:04:33:cf:57:86:21:df:7a:db:de:
         ce:46:7b:c5:f6:61:4f:ee:b1:ce:a2:1c:96:ef:19:04:5e:29:
         a9:c9:42:b4:19:24:c3:f3:ea:08:ea:b7:fd:cc:66:67:4c:d4:
         1f:3d:77:c2:6e:ca:c2:ed:8d:ee:18:e3:5d:2c:dc:37:e9:c7:
         2c:fd:80:8f
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDDaGVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQx
NzBmYTIwYWI5MWI0YWIwNTI0ODNmZDFkMWE1MGFmMGJhZWEyNTgwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTE0NjE4WjAzMTEwLwYDVQQDEyhhN2M3NGYzMjVlNGQ1
OTA2NjgwMzIzZjExNmEwMTE3NTc1MmVhNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk9M4p7LWm9TjhH6g0l3AhTa3nJAkcVwBnyVqX1BM8Xz9A1+4
G2CRfr1C9gfFO7y9VwHnJDzokVdJ6tuIOI87ectnprjQexlH/5b9eXt2rBfy07F2
WoBo6qblhCGlxm6DY1gWGAF1aDM0nG/uaFRckdrXvvZVBMY+/mBEQ0Sv4wXyi1hS
ooMMaS9wFK89fva0MLwW/jBqE0yrOGAkkFLzSwm2IEWUWa3IBcdsEZ7qkFglXyEe
Peh43CxpPD/bgG0I4SoCjCgqSFY5rGvVkaUT5YCfsyJkVjjubFLKfQrxL9XMNR7Z
1REoT6LFXZjtvLFGWEMc48NoOTemBbaKO5NkwQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFI6xTw5gTLcjW+jr5ElABu2wgA2PMB8GA1UdIwQYMBaAFAOi85W6GB+gYrTI
lPm8fG03xckvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDE3MGZh
MjBhYjkxYjRhYjA1MjQ4M2ZkMWQxYTUwYWYwYmFlYTI1OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjgwZTA5MWEtYTc1Ny00OGE1LTg0ZmMtOGRjZjQ2
YWYwOTE5L2QxNzBmYTIwYWI5MWI0YWIwNTI0ODNmZDFkMWE1MGFmMGJhZWEyNTgu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yODBlMDkxYS1hNzU3LTQ4YTUtODRmYy04ZGNm
NDZhZjA5MTkvZDE3MGZhMjBhYjkxYjRhYjA1MjQ4M2ZkMWQxYTUwYWYwYmFlYTI1
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAAlGsNv/Mg3qPwd+3MuiVDrk8qz0UNl5fduw1Pc0nefcOK/Y
flqUBHueCBhOXmLLkRBGR4r88SiBPjHLJx4y6H+duEYy0G49aq0byQGH3jLe+ad2
+O3vmb3DPGBn2nGZX9b3Pw7xtcsHGFumqXRvR3CsHtjBvkzt2iDX4F4/ZYm70ZCA
di9Ghqxd8MOz//qoivSj2yESvjmFD/1HX9REgfqz3rg5GevyBlPusLiWfRKi6neL
jHVLwzA0jmMdBDPPV4Yh33rb3s5Ge8X2YU/usc6iHJbvGQReKanJQrQZJMPz6gjq
t/3MZmdM1B89d8JuysLtje4Y410s3Dfpxyz9gI8=
-----END CERTIFICATE-----