Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/bb19c09d60068941cd9accf181184832d6474490.mft
File:                     bb19c09d60068941cd9accf181184832d6474490.mft (raw, json)
Hash identifier:          OSM6jI1yml9K3pkwLAZsMZfmB3LfSywJt5wckHalhjk=
Subject key identifier:   15:8F:16:23:D1:4D:5C:6B:38:71:E4:1C:65:BF:9A:98:86:21:4E:AC
Authority key identifier: C1:72:FA:27:6B:4C:45:67:77:A6:D3:24:4B:19:58:A3:30:93:22:4D
Certificate issuer:       /CN=bb19c09d60068941cd9accf181184832d6474490
Certificate serial:       22E4B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb19c09d60068941cd9accf181184832d6474490.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/bb19c09d60068941cd9accf181184832d6474490.mft
Manifest number:          0E04
Signing time:             Mon 15 Apr 2024 09:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:34:18 +0000
Files and hashes:         1: 660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa (hash: FByPYP367i2do57T85giIikXWRRu2a6bd1OA5Lp4j94=)
                          2: bb19c09d60068941cd9accf181184832d6474490.crl (hash: E1Q1/cnXYt85JV2WEHDeGqRhFW3J7XcucriLDu9RxF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286770 (0x22e4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb19c09d60068941cd9accf181184832d6474490
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:34:18 2024 GMT
        Subject: CN=7aa989cf87dda1a8ac29fb173191d0ce747286c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:56:0c:e8:bb:23:59:0c:32:1f:41:b7:93:
                    f9:e4:88:21:fd:b7:2e:64:ee:de:3d:f6:9e:78:e5:
                    7f:2f:15:a1:48:c0:e6:bc:9c:7e:97:cb:e2:f4:8e:
                    3a:01:ce:ff:bd:13:80:82:13:3e:17:73:7e:68:dd:
                    f0:49:77:b7:73:5b:56:04:e5:8a:61:14:87:20:0f:
                    a6:0a:cc:35:71:3c:0f:ed:97:d3:79:b4:a6:d8:ce:
                    2a:07:27:f5:eb:d4:f3:8d:1a:2e:56:4b:5d:b3:36:
                    db:11:98:ae:73:a8:56:0b:93:a2:69:37:89:68:03:
                    1b:4d:2e:58:f2:1d:88:b4:b5:9c:48:2b:a8:d8:df:
                    71:96:ce:be:06:33:39:45:d7:e4:3b:c9:a9:3f:5d:
                    fd:9e:3e:a3:2e:f1:a8:49:2c:ef:85:c0:63:68:4a:
                    b8:e2:b2:07:fc:c5:9f:ee:49:37:91:82:60:7c:d4:
                    c4:8a:b5:b3:ab:27:37:6d:dc:0c:34:f7:b5:48:14:
                    d8:ac:06:20:9f:22:66:b7:32:46:58:d3:e5:66:83:
                    49:70:3f:df:89:27:b1:d2:e5:0e:d7:3a:2f:cd:cc:
                    82:8c:43:8b:9f:34:3b:2d:d2:cc:f3:f0:45:5e:89:
                    ec:f7:6b:c8:ea:c5:a7:aa:6f:8e:27:e0:b6:79:b2:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8F:16:23:D1:4D:5C:6B:38:71:E4:1C:65:BF:9A:98:86:21:4E:AC
            X509v3 Authority Key Identifier:
                keyid:C1:72:FA:27:6B:4C:45:67:77:A6:D3:24:4B:19:58:A3:30:93:22:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb19c09d60068941cd9accf181184832d6474490.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/bb19c09d60068941cd9accf181184832d6474490.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/bb19c09d60068941cd9accf181184832d6474490.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:de:05:6f:5a:e7:27:bd:ae:7c:10:b2:11:6a:c7:5e:12:d4:
         1d:ae:c5:19:89:a3:2d:73:30:de:fa:75:63:63:ba:2b:f1:55:
         08:f6:16:5b:f5:4a:90:d8:07:7a:d9:25:1f:b3:43:7f:e4:04:
         c5:67:dc:c7:c3:25:d5:36:e7:4d:17:7f:de:ec:01:4a:7a:7c:
         8c:df:8a:13:fa:19:fa:e4:37:b7:93:34:91:d9:ee:c2:d4:1b:
         7d:dd:22:48:4c:5a:4a:66:76:7e:29:c3:c8:68:73:e5:ed:3e:
         2f:45:93:7f:6a:b1:47:31:2b:8b:0c:a2:c8:be:87:60:29:bd:
         d9:fa:41:a7:38:61:e7:91:a1:0f:5a:72:42:a9:da:8e:48:f8:
         b3:4f:36:47:54:bc:2b:2c:e1:f7:c3:76:51:76:98:1f:a4:34:
         3f:76:41:a3:f1:1b:ec:e2:4d:01:f6:39:90:15:32:b9:74:02:
         40:f1:bd:7f:7f:45:1b:7d:b6:69:0e:0a:0f:50:f3:47:1e:c3:
         a4:c9:9a:c7:f5:b3:2a:6a:d9:24:44:0d:6d:fd:ac:ef:7c:d3:
         95:a1:9e:53:29:b2:b3:a9:dc:ba:0e:08:15:79:ce:6a:ac:0d:
         92:4b:f6:c5:64:2f:c8:70:af:1c:6a:18:f3:3d:a6:fb:8f:0b:
         a9:97:01:11
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIuSyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
MTljMDlkNjAwNjg5NDFjZDlhY2NmMTgxMTg0ODMyZDY0NzQ0OTAwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MDkzNDE4WjAzMTEwLwYDVQQDEyg3YWE5ODljZjg3ZGRh
MWE4YWMyOWZiMTczMTkxZDBjZTc0NzI4NmMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjgpWDOi7I1kMMh9Bt5P55Igh/bcuZO7ePfaeeOV/LxWhSMDm
vJx+l8vi9I46Ac7/vROAghM+F3N+aN3wSXe3c1tWBOWKYRSHIA+mCsw1cTwP7ZfT
ebSm2M4qByf169TzjRouVktdszbbEZiuc6hWC5OiaTeJaAMbTS5Y8h2ItLWcSCuo
2N9xls6+BjM5RdfkO8mpP139nj6jLvGoSSzvhcBjaEq44rIH/MWf7kk3kYJgfNTE
irWzqyc3bdwMNPe1SBTYrAYgnyJmtzJGWNPlZoNJcD/fiSex0uUO1zovzcyCjEOL
nzQ7LdLM8/BFXons92vI6sWnqm+OJ+C2ebJ/zQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFBWPFiPRTVxrOHHkHGW/mpiGIU6sMB8GA1UdIwQYMBaAFMFy+idrTEVnd6bT
JEsZWKMwkyJNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmIxOWMw
OWQ2MDA2ODk0MWNkOWFjY2YxODExODQ4MzJkNjQ3NDQ5MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmQzZTU5NTMtNzlhZS00NjRiLWExNTctNDkxMzI0
OWRkZGQxL2JiMTljMDlkNjAwNjg5NDFjZDlhY2NmMTgxMTg0ODMyZDY0NzQ0OTAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZDNlNTk1My03OWFlLTQ2NGItYTE1Ny00OTEz
MjQ5ZGRkZDEvYmIxOWMwOWQ2MDA2ODk0MWNkOWFjY2YxODExODQ4MzJkNjQ3NDQ5
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAAHeBW9a5ye9rnwQshFqx14S1B2uxRmJoy1zMN76dWNjuivx
VQj2Flv1SpDYB3rZJR+zQ3/kBMVn3MfDJdU2500Xf97sAUp6fIzfihP6GfrkN7eT
NJHZ7sLUG33dIkhMWkpmdn4pw8hoc+XtPi9Fk39qsUcxK4sMosi+h2Apvdn6Qac4
YeeRoQ9ackKp2o5I+LNPNkdUvCss4ffDdlF2mB+kND92QaPxG+ziTQH2OZAVMrl0
AkDxvX9/RRt9tmkOCg9Q80cew6TJmsf1sypq2SREDW39rO9805WhnlMpsrOp3LoO
CBV5zmqsDZJL9sVkL8hwrxxqGPM9pvuPC6mXARE=
-----END CERTIFICATE-----