Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.mft
File:                     98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.mft (raw, json)
Hash identifier:          mv1dGjo4n1Hw6eDZ368JiQSWDZKsFfI92EcuhlhmwEY=
Subject key identifier:   37:16:B7:83:24:32:06:F5:4E:85:85:EE:52:09:E9:04:F7:F9:AF:BC
Authority key identifier: EF:BA:9A:1B:CE:DD:C3:BE:B9:A3:F5:8D:37:F8:C3:2C:41:4E:03:2C
Certificate issuer:       /CN=98ed72dea7a8aa7184e7d6198a0c657cfa9458fb
Certificate serial:       20CF64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.mft
Manifest number:          0DFE
Signing time:             Mon 15 Apr 2024 11:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:32:18 +0000
Files and hashes:         1: 03f509083b7ef629edb5fa576e0411529f0d373c.roa (hash: 2oKfjyAHfMAiL/pU9nky7TKTcsQpomR5BC5mJw6SmIM=)
                          2: 2d673f5f10ed0aa25324f7c490933bd3db2d4ed6.roa (hash: WF8PEp+j3TbF2X+v9Sl9R04evjSczNTCDke8+3dnQ4E=)
                          3: 63fc60848f557080f751f99352034c33d60bd1d1.roa (hash: RVZpN68rsMJim/BY1O5rYVsxlV1SXh6Rzt9h79vqWT4=)
                          4: 79f77c8f0b6ba159c6afbe6e0c3f5ef21479fbc5.roa (hash: on43XuFBPTEoXKIKG3HBpYWyv7lXegLhQKqHHd9+ZIw=)
                          5: 98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.crl (hash: vKVaRsg80LqZVO1ZPv5flaaF7SL7hoy6cOVX30EX1Kk=)
                          6: adbc8a75d93c9178f6d20591eac9cbab3420f482.roa (hash: NiA6PfgiM4DxKhyxC/jN8ucBDzI/cPpzclh1Uo1V7jE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150244 (0x20cf64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ed72dea7a8aa7184e7d6198a0c657cfa9458fb
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:32:18 2024 GMT
        Subject: CN=7afa72c802ceefca8daa2056d786008aa30ccccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:6f:be:e0:09:93:5e:6e:6e:c8:85:fc:d6:
                    b7:ce:c4:80:a4:11:3a:31:ca:d2:d6:b6:6a:dd:7e:
                    8a:4e:1a:5d:17:1d:cb:fb:a9:8b:f3:46:dc:7f:c8:
                    a2:6f:89:12:f6:70:29:af:3f:d8:be:0a:65:23:db:
                    8a:39:25:1c:c7:6d:52:b0:26:b7:e2:7c:72:d1:db:
                    ea:de:eb:ee:ec:2b:ca:9d:e1:a5:c6:5d:ff:66:23:
                    0c:24:45:a2:e0:fa:e4:f6:ad:6d:93:cc:ba:1c:64:
                    ad:9d:dc:e7:b1:2a:33:b1:ee:a0:4a:d5:99:4a:4b:
                    c7:0b:10:11:c5:be:e5:d7:40:91:e0:2b:77:93:c2:
                    17:78:41:7e:b4:77:86:7d:f8:fa:9a:40:5d:1e:f9:
                    2a:68:32:40:74:1c:ea:44:7c:d7:29:c3:bc:bf:a2:
                    dc:63:8d:51:8a:e8:f4:02:8b:55:1e:bb:7b:a8:b0:
                    ce:e5:1a:e5:7f:75:f2:f1:2e:c9:ca:33:a5:4d:b4:
                    3d:e6:1d:bc:c8:b4:c8:f9:6f:0a:09:40:98:88:98:
                    96:56:4c:db:59:b2:cc:36:23:9f:37:38:a4:dc:1d:
                    c5:bf:b4:07:ab:ee:7e:94:76:3e:51:79:4a:1d:14:
                    a1:25:8c:f7:4a:7b:7b:3d:49:37:01:9d:75:b6:bb:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:B7:83:24:32:06:F5:4E:85:85:EE:52:09:E9:04:F7:F9:AF:BC
            X509v3 Authority Key Identifier:
                keyid:EF:BA:9A:1B:CE:DD:C3:BE:B9:A3:F5:8D:37:F8:C3:2C:41:4E:03:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3111c8fc-9f5a-4cbd-af4d-f75e816d868b/98ed72dea7a8aa7184e7d6198a0c657cfa9458fb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:05:6f:dc:6d:d8:f3:23:2e:4f:f0:8f:29:00:98:44:64:
         81:60:9f:c6:41:ac:4e:63:66:92:15:b0:05:42:26:90:d5:4e:
         ba:f0:ab:28:4c:aa:7f:17:39:d9:2b:88:ff:d7:31:6c:9f:15:
         86:c9:77:1a:3e:0a:c1:f1:95:01:f3:ee:02:38:f4:3a:93:b8:
         5d:3f:57:49:b7:9a:6b:08:02:42:7d:e2:e0:83:f2:3d:0c:73:
         56:09:74:18:93:c2:0e:64:bf:01:a0:23:14:ca:59:06:56:f5:
         16:7b:12:85:ae:20:e9:46:16:80:ed:90:a4:e4:3e:2a:22:e7:
         8b:e7:e4:3e:f3:b1:0c:1c:49:90:77:f5:75:36:b5:48:8e:14:
         fb:b6:48:b2:81:19:ed:90:84:e8:b7:22:fa:48:d4:05:04:8c:
         8c:52:02:b2:df:51:5c:57:d4:b4:07:09:48:11:0e:17:43:7c:
         14:8f:a6:45:a1:34:c8:3b:67:38:8a:c3:fd:74:94:0f:48:86:
         d7:d9:81:b3:11:6d:6d:e6:03:3f:97:32:ed:ee:06:01:c1:4c:
         18:b6:d3:e6:58:88:9b:a9:d4:82:5d:2b:e2:1f:59:e5:ee:ee:
         cd:9e:12:39:b3:cd:41:27:95:c3:60:31:b3:15:4d:a7:5c:2a:
         a8:b5:b1:2b
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIM9kMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk4
ZWQ3MmRlYTdhOGFhNzE4NGU3ZDYxOThhMGM2NTdjZmE5NDU4ZmIwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTIzMjE4WjAzMTEwLwYDVQQDEyg3YWZhNzJjODAyY2Vl
ZmNhOGRhYTIwNTZkNzg2MDA4YWEzMGNjY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAghVvvuAJk15ubsiF/Na3zsSApBE6McrS1rZq3X6KThpdFx3L
+6mL80bcf8iib4kS9nAprz/YvgplI9uKOSUcx21SsCa34nxy0dvq3uvu7CvKneGl
xl3/ZiMMJEWi4Prk9q1tk8y6HGStndznsSozse6gStWZSkvHCxARxb7l10CR4Ct3
k8IXeEF+tHeGffj6mkBdHvkqaDJAdBzqRHzXKcO8v6LcY41Riuj0AotVHrt7qLDO
5Rrlf3Xy8S7JyjOlTbQ95h28yLTI+W8KCUCYiJiWVkzbWbLMNiOfNzik3B3Fv7QH
q+5+lHY+UXlKHRShJYz3Snt7PUk3AZ11truoeQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDcWt4MkMgb1ToWF7lIJ6QT3+a+8MB8GA1UdIwQYMBaAFO+6mhvO3cO+uaP1
jTf4wyxBTgMsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOThlZDcy
ZGVhN2E4YWE3MTg0ZTdkNjE5OGEwYzY1N2NmYTk0NThmYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzExMWM4ZmMtOWY1YS00Y2JkLWFmNGQtZjc1ZTgx
NmQ4NjhiLzk4ZWQ3MmRlYTdhOGFhNzE4NGU3ZDYxOThhMGM2NTdjZmE5NDU4ZmIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMTExYzhmYy05ZjVhLTRjYmQtYWY0ZC1mNzVl
ODE2ZDg2OGIvOThlZDcyZGVhN2E4YWE3MTg0ZTdkNjE5OGEwYzY1N2NmYTk0NThm
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEuzBW/cbdjzIy5P8I8pAJhEZIFgn8ZBrE5jZpIVsAVCJpDV
TrrwqyhMqn8XOdkriP/XMWyfFYbJdxo+CsHxlQHz7gI49DqTuF0/V0m3mmsIAkJ9
4uCD8j0Mc1YJdBiTwg5kvwGgIxTKWQZW9RZ7EoWuIOlGFoDtkKTkPioi54vn5D7z
sQwcSZB39XU2tUiOFPu2SLKBGe2QhOi3IvpI1AUEjIxSArLfUVxX1LQHCUgRDhdD
fBSPpkWhNMg7ZziKw/10lA9IhtfZgbMRbW3mAz+XMu3uBgHBTBi20+ZYiJup1IJd
K+IfWeXu7s2eEjmzzUEnlcNgMbMVTadcKqi1sSs=
-----END CERTIFICATE-----