Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/5a3df344441b276a4625cddb05e287e9dd06da42.mft
File:                     5a3df344441b276a4625cddb05e287e9dd06da42.mft (raw, json)
Hash identifier:          bUiOlw/whEarVySrgKOnBRZnSUsgMd4+7QAOviVQH/M=
Subject key identifier:   9B:F2:FE:E4:E5:8C:F7:85:19:F8:23:06:7D:2D:F4:43:C5:8F:0E:99
Authority key identifier: C4:CA:E7:84:95:AD:65:2A:72:DA:4B:0F:4E:C6:1D:E3:79:FC:75:58
Certificate issuer:       /CN=5a3df344441b276a4625cddb05e287e9dd06da42
Certificate serial:       28D255
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a3df344441b276a4625cddb05e287e9dd06da42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/5a3df344441b276a4625cddb05e287e9dd06da42.mft
Manifest number:          0E17
Signing time:             Mon 15 Apr 2024 04:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:33:26 +0000
Files and hashes:         1: 3592751cb9dcb10e63e396c4863c3137b593db87.roa (hash: BIAVNnWD39RyUx+4Ippi1OiG6CGv59jAHckdx/vfqAA=)
                          2: 5a3df344441b276a4625cddb05e287e9dd06da42.crl (hash: 9PoQ6hCxRWuvuFnAkNtclkE7KAtUFE/gNiXiED+tYHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2675285 (0x28d255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3df344441b276a4625cddb05e287e9dd06da42
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:33:26 2024 GMT
        Subject: CN=b6a56a80e9ba7141066c22e6b2da9336bfbf613e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:e2:09:4f:60:3e:9e:dd:27:58:2e:50:d7:
                    53:e4:c0:20:97:71:d7:05:cb:1e:0d:d4:66:d6:ce:
                    ec:21:3f:ae:f7:6e:2a:9b:0a:2d:34:3d:ab:46:9e:
                    65:93:18:6d:93:4f:00:87:34:65:4a:56:45:65:fd:
                    36:fb:eb:25:0a:1c:6b:7c:c7:af:8a:07:95:24:58:
                    56:be:c2:89:3a:f5:5b:97:31:73:0c:bd:7f:c9:97:
                    56:0f:d5:de:d1:41:35:b3:a8:25:3b:e2:20:65:32:
                    4b:b5:60:44:28:bf:48:9b:9c:8f:cb:ec:3a:7b:7f:
                    58:17:97:a3:44:3b:f9:8f:a3:02:eb:6e:80:1b:89:
                    17:24:be:f3:e2:9e:52:91:39:c0:b7:b0:62:01:d7:
                    d8:e6:e9:ca:13:4b:61:81:e5:0c:15:20:72:91:32:
                    ac:89:15:ed:8a:38:ea:e9:de:e0:54:40:86:25:55:
                    96:81:62:7e:50:1d:dd:ab:f4:f9:ed:15:19:3f:91:
                    44:db:f4:11:01:e2:d1:b2:57:4a:0c:58:0b:14:fc:
                    61:29:ed:8c:e6:82:eb:53:0f:ee:7a:6d:98:7f:4e:
                    d7:99:20:53:5e:4e:33:29:32:2d:0c:b0:a7:aa:f9:
                    cd:83:95:dd:47:61:eb:b0:81:ba:ef:5d:18:47:62:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F2:FE:E4:E5:8C:F7:85:19:F8:23:06:7D:2D:F4:43:C5:8F:0E:99
            X509v3 Authority Key Identifier:
                keyid:C4:CA:E7:84:95:AD:65:2A:72:DA:4B:0F:4E:C6:1D:E3:79:FC:75:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a3df344441b276a4625cddb05e287e9dd06da42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/5a3df344441b276a4625cddb05e287e9dd06da42.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/5a3df344441b276a4625cddb05e287e9dd06da42.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:ef:e6:c9:0f:7b:ee:5a:8f:d5:89:05:59:1d:72:f3:07:
         76:03:3c:0a:8e:4a:26:f0:71:3b:73:fd:e4:c4:6f:df:6b:aa:
         62:3f:b9:88:a8:c8:90:ed:f9:66:fb:9f:4f:85:b9:af:64:28:
         1d:5e:79:11:54:fe:5e:a0:c1:a7:ba:7b:14:2f:27:64:38:d4:
         f6:4f:85:6d:8d:f1:73:eb:07:8e:0e:6e:5b:19:08:0c:b9:2e:
         47:8e:fb:55:2a:17:73:21:7e:c5:62:05:8c:17:2e:5a:65:f1:
         bc:56:60:d7:00:03:90:c1:43:04:80:4d:3f:1c:d6:a4:20:6a:
         b1:cf:e4:d4:7b:19:cc:34:f6:48:66:38:c4:5e:47:ad:6b:ae:
         85:3b:a2:bb:8e:08:10:18:88:c5:ca:08:ed:24:70:c4:e7:b0:
         c9:0f:bc:a8:20:e8:0b:02:b2:de:22:63:b1:1f:85:01:21:89:
         2b:4d:5b:37:43:1e:dc:10:72:5c:cc:b9:71:b0:97:f3:42:48:
         7c:9a:01:46:27:21:30:de:cd:27:02:73:b9:41:fd:40:7b:0f:
         8f:6f:e4:2a:ef:dd:19:f9:b1:cf:31:9f:2a:2a:9c:04:dd:e9:
         c3:b8:a0:60:ad:fb:74:80:7c:87:5a:43:d9:b9:bc:f9:c9:67:
         bc:43:77:df
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKNJVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
M2RmMzQ0NDQxYjI3NmE0NjI1Y2RkYjA1ZTI4N2U5ZGQwNmRhNDIwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDUzMzI2WjAzMTEwLwYDVQQDEyhiNmE1NmE4MGU5YmE3
MTQxMDY2YzIyZTZiMmRhOTMzNmJmYmY2MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoaniCU9gPp7dJ1guUNdT5MAgl3HXBcseDdRm1s7sIT+u924q
mwotND2rRp5lkxhtk08AhzRlSlZFZf02++slChxrfMevigeVJFhWvsKJOvVblzFz
DL1/yZdWD9Xe0UE1s6glO+IgZTJLtWBEKL9Im5yPy+w6e39YF5ejRDv5j6MC626A
G4kXJL7z4p5SkTnAt7BiAdfY5unKE0thgeUMFSBykTKsiRXtijjq6d7gVECGJVWW
gWJ+UB3dq/T57RUZP5FE2/QRAeLRsldKDFgLFPxhKe2M5oLrUw/uem2Yf07XmSBT
Xk4zKTItDLCnqvnNg5XdR2HrsIG6710YR2L+hwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFJvy/uTljPeFGfgjBn0t9EPFjw6ZMB8GA1UdIwQYMBaAFMTK54SVrWUqctpL
D07GHeN5/HVYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWEzZGYz
NDQ0NDFiMjc2YTQ2MjVjZGRiMDVlMjg3ZTlkZDA2ZGE0Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzAwNGIxZWEtNDVmZC00OTU4LWJjMGYtODVjM2Vl
NDQ1MmU3LzVhM2RmMzQ0NDQxYjI3NmE0NjI1Y2RkYjA1ZTI4N2U5ZGQwNmRhNDIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMDA0YjFlYS00NWZkLTQ5NTgtYmMwZi04NWMz
ZWU0NDUyZTcvNWEzZGYzNDQ0NDFiMjc2YTQ2MjVjZGRiMDVlMjg3ZTlkZDA2ZGE0
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAJSy7+bJD3vuWo/ViQVZHXLzB3YDPAqOSibwcTtz/eTEb99r
qmI/uYioyJDt+Wb7n0+Fua9kKB1eeRFU/l6gwae6exQvJ2Q41PZPhW2N8XPrB44O
blsZCAy5LkeO+1UqF3MhfsViBYwXLlpl8bxWYNcAA5DBQwSATT8c1qQgarHP5NR7
Gcw09khmOMReR61rroU7oruOCBAYiMXKCO0kcMTnsMkPvKgg6AsCst4iY7EfhQEh
iStNWzdDHtwQclzMuXGwl/NCSHyaAUYnITDezScCc7lB/UB7D49v5Crv3Rn5sc8x
nyoqnATd6cO4oGCt+3SAfIdaQ9m5vPnJZ7xDd98=
-----END CERTIFICATE-----