Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28beff0e-9024-4dc9-9378-a51c93d31b40/a688c0525a518b387b90466674e0c6cda36fc3e2.mft
File:                     a688c0525a518b387b90466674e0c6cda36fc3e2.mft (raw, json)
Hash identifier:          PxxEq+5NvpxJjfBYwE9zWHmRXXQQZAMNFgq/8dzw4uA=
Subject key identifier:   E0:A6:D4:F9:0A:14:3D:C5:F7:B0:C0:95:69:71:4E:57:A2:D5:16:01
Authority key identifier: A3:19:78:59:9A:54:4F:60:C6:0F:A3:A6:74:EB:47:3E:7C:89:D3:AA
Certificate issuer:       /CN=a688c0525a518b387b90466674e0c6cda36fc3e2
Certificate serial:       049988
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a688c0525a518b387b90466674e0c6cda36fc3e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28beff0e-9024-4dc9-9378-a51c93d31b40/a688c0525a518b387b90466674e0c6cda36fc3e2.mft
Manifest number:          024C
Signing time:             Mon 15 Apr 2024 07:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 09:19:17 +0000
Files and hashes:         1: a688c0525a518b387b90466674e0c6cda36fc3e2.crl (hash: +mX/ddUdJwRhI/YleEFJJuh0OTSE2KpJEjZvdSMRI48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301448 (0x49988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a688c0525a518b387b90466674e0c6cda36fc3e2
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 09:19:17 2024 GMT
        Subject: CN=62ce6d82f16a0c107018b0e7ea9bed0dcf64419d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:ed:0d:43:f6:95:16:a3:38:1e:a6:22:1c:
                    9f:7d:57:e9:f7:44:de:93:df:43:ae:31:14:28:48:
                    e2:62:54:67:17:49:9c:16:97:83:a8:f2:a2:94:b0:
                    e6:20:2d:80:c3:60:7c:21:66:67:89:63:cb:0a:98:
                    10:04:f1:3d:13:0e:65:38:89:32:0f:39:f1:98:bb:
                    9e:3e:f8:0c:69:50:40:f4:08:3c:55:71:3f:c6:bd:
                    3f:70:86:59:bb:93:d6:6d:0e:bf:16:b8:c9:8b:bf:
                    d0:31:b1:ac:b2:27:48:58:cb:63:a3:a7:e5:0e:54:
                    a0:2d:f3:a7:94:ef:b6:4a:32:b6:65:e3:12:5b:77:
                    c0:6d:61:83:95:f7:e4:38:94:e6:1a:4b:69:bc:41:
                    ca:76:14:4e:00:0a:c6:77:7c:86:8b:7c:02:40:d1:
                    1e:26:33:f2:d3:0d:a5:a9:65:ae:1a:45:06:0e:ae:
                    8b:97:83:61:55:92:05:c9:a9:cc:c8:74:df:df:fb:
                    36:82:9e:64:b0:06:4d:80:7c:e5:cd:d3:a8:4b:7e:
                    76:09:0b:d1:76:f8:d7:d8:c8:a5:6c:59:88:54:1d:
                    c4:6d:3a:31:7c:d5:6f:22:15:bc:72:3d:a8:eb:0a:
                    bb:39:44:f1:dc:92:1b:6f:09:40:9a:ad:29:31:e3:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A6:D4:F9:0A:14:3D:C5:F7:B0:C0:95:69:71:4E:57:A2:D5:16:01
            X509v3 Authority Key Identifier:
                keyid:A3:19:78:59:9A:54:4F:60:C6:0F:A3:A6:74:EB:47:3E:7C:89:D3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a688c0525a518b387b90466674e0c6cda36fc3e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28beff0e-9024-4dc9-9378-a51c93d31b40/a688c0525a518b387b90466674e0c6cda36fc3e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28beff0e-9024-4dc9-9378-a51c93d31b40/a688c0525a518b387b90466674e0c6cda36fc3e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:f6:50:63:83:51:6f:fb:02:8b:06:23:9b:da:5e:45:0f:
         f4:d3:24:a8:92:68:62:61:5d:1e:28:d3:83:4e:04:d9:9e:0c:
         d3:04:26:1b:70:e8:77:e7:65:11:44:6c:1a:79:9c:17:bf:57:
         c0:55:dd:88:39:cd:d0:9b:90:1c:c6:6c:d1:8b:7c:a0:8a:fe:
         cb:db:c8:a0:b8:1b:ca:ae:df:f5:57:f7:73:a3:12:b8:60:9b:
         1b:41:5b:87:7f:25:e5:88:79:ab:c7:14:c5:00:ea:95:00:a1:
         b8:8f:15:ad:5c:7d:fc:70:6a:0b:f5:4c:51:db:40:87:c3:57:
         f0:66:c3:0c:ed:c9:e8:55:a3:c6:1a:33:9e:a2:b4:56:ca:2d:
         e5:88:e0:37:26:bc:e3:a7:6c:a0:cf:c8:e2:5e:4f:4b:7b:42:
         71:3b:71:64:64:b2:68:25:95:d5:d1:82:72:6e:01:1b:fc:5a:
         9d:ab:0c:a2:9e:19:36:7e:62:52:9b:28:c7:91:e5:c8:36:e7:
         e2:c3:07:54:40:0b:ba:70:38:a1:59:92:46:32:d7:74:de:84:
         ac:b8:7b:49:c9:7d:49:38:f8:45:61:59:fd:51:4f:2f:3a:63:
         f6:ac:62:95:84:00:38:06:a9:69:f9:3d:65:bf:23:75:e9:f7:
         9c:21:63:d2
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDBJmIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
ODhjMDUyNWE1MThiMzg3YjkwNDY2Njc0ZTBjNmNkYTM2ZmMzZTIwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MDkxOTE3WjAzMTEwLwYDVQQDEyg2MmNlNmQ4MmYxNmEw
YzEwNzAxOGIwZTdlYTliZWQwZGNmNjQ0MTlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq5TtDUP2lRajOB6mIhyffVfp90Tek99DrjEUKEjiYlRnF0mc
FpeDqPKilLDmIC2Aw2B8IWZniWPLCpgQBPE9Ew5lOIkyDznxmLuePvgMaVBA9Ag8
VXE/xr0/cIZZu5PWbQ6/FrjJi7/QMbGssidIWMtjo6flDlSgLfOnlO+2SjK2ZeMS
W3fAbWGDlffkOJTmGktpvEHKdhROAArGd3yGi3wCQNEeJjPy0w2lqWWuGkUGDq6L
l4NhVZIFyanMyHTf3/s2gp5ksAZNgHzlzdOoS352CQvRdvjX2MilbFmIVB3EbTox
fNVvIhW8cj2o6wq7OUTx3JIbbwlAmq0pMeNbBQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFOCm1PkKFD3F97DAlWlxTlei1RYBMB8GA1UdIwQYMBaAFKMZeFmaVE9gxg+j
pnTrRz58idOqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTY4OGMw
NTI1YTUxOGIzODdiOTA0NjY2NzRlMGM2Y2RhMzZmYzNlMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjhiZWZmMGUtOTAyNC00ZGM5LTkzNzgtYTUxYzkz
ZDMxYjQwL2E2ODhjMDUyNWE1MThiMzg3YjkwNDY2Njc0ZTBjNmNkYTM2ZmMzZTIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yOGJlZmYwZS05MDI0LTRkYzktOTM3OC1hNTFj
OTNkMzFiNDAvYTY4OGMwNTI1YTUxOGIzODdiOTA0NjY2NzRlMGM2Y2RhMzZmYzNl
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAG509lBjg1Fv+wKLBiOb2l5FD/TTJKiSaGJhXR4o04NOBNme
DNMEJhtw6HfnZRFEbBp5nBe/V8BV3Yg5zdCbkBzGbNGLfKCK/svbyKC4G8qu3/VX
93OjErhgmxtBW4d/JeWIeavHFMUA6pUAobiPFa1cffxwagv1TFHbQIfDV/Bmwwzt
yehVo8YaM56itFbKLeWI4DcmvOOnbKDPyOJeT0t7QnE7cWRksmglldXRgnJuARv8
Wp2rDKKeGTZ+YlKbKMeR5cg25+LDB1RAC7pwOKFZkkYy13TehKy4e0nJfUk4+EVh
Wf1RTy86Y/asYpWEADgGqWn5PWW/I3Xp95whY9I=
-----END CERTIFICATE-----