Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/338b6081-6457-4280-b304-03e9ab35c8e4/570c7ac7ee3129ad73ed625107de65a7ff01f3e7.mft
File:                     570c7ac7ee3129ad73ed625107de65a7ff01f3e7.mft (raw, json)
Hash identifier:          K2BvF3ZfS23dh4827JYTbz8z9r2TEkz3On5yepU5GyE=
Subject key identifier:   05:E9:8D:E3:EA:AB:BE:28:FC:C9:7B:37:FA:F4:18:E9:B7:19:8D:00
Authority key identifier: FE:22:AE:8A:AC:81:EB:C5:7E:F3:CD:3A:7F:B6:08:AE:70:C8:8B:06
Certificate issuer:       /CN=570c7ac7ee3129ad73ed625107de65a7ff01f3e7
Certificate serial:       0A1391
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/570c7ac7ee3129ad73ed625107de65a7ff01f3e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/338b6081-6457-4280-b304-03e9ab35c8e4/570c7ac7ee3129ad73ed625107de65a7ff01f3e7.mft
Manifest number:          0508
Signing time:             Mon 15 Apr 2024 07:21:27 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 10:19:17 +0000
Files and hashes:         1: 570c7ac7ee3129ad73ed625107de65a7ff01f3e7.crl (hash: /MQB5lB0tPJpDAAVHZK5ZRkfLQpcllqeagGLPTd5nZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660369 (0xa1391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570c7ac7ee3129ad73ed625107de65a7ff01f3e7
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 10:19:17 2024 GMT
        Subject: CN=7c30bff6d9f961f0b598630b21c92f6f144d18d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:ee:e2:b7:33:28:27:04:d0:b9:45:71:c3:
                    af:51:1d:6b:96:f6:67:9f:40:21:88:a4:89:5b:43:
                    68:bd:ec:8c:ba:79:57:d2:b7:e5:5a:91:4f:05:a0:
                    ae:83:71:c7:2f:db:97:1b:2b:3c:af:dd:0e:78:78:
                    6a:85:e6:01:d7:02:99:37:08:99:73:8b:f6:0d:ab:
                    d4:0a:f6:ed:e9:18:1b:55:34:ae:48:af:8c:4d:28:
                    70:4f:19:29:0a:5f:b0:ad:20:2c:06:1f:b6:1f:ef:
                    60:c2:29:83:ef:b1:0b:20:77:f9:75:c8:00:d8:d3:
                    ce:59:7f:22:85:1e:83:8b:83:6b:0b:a0:0f:7b:3e:
                    c0:23:d6:5e:fa:12:56:38:a4:cb:bd:91:0a:9c:b4:
                    fe:10:29:63:b9:8f:31:52:98:0c:51:b5:89:c3:2f:
                    0b:c3:11:a4:0c:f1:fd:80:27:75:ba:1c:2f:c9:22:
                    cb:56:1b:94:90:5d:10:7f:c0:92:24:ed:92:33:9c:
                    d6:3f:3f:79:99:ef:25:f6:12:43:64:55:ae:39:02:
                    2f:6b:73:86:0d:7e:b8:d1:d9:9f:e3:75:89:c9:99:
                    cc:bc:7e:25:55:cd:b9:26:f5:76:c4:fb:db:20:c6:
                    83:0b:54:c7:46:be:05:f9:a0:96:47:7b:37:e3:dc:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E9:8D:E3:EA:AB:BE:28:FC:C9:7B:37:FA:F4:18:E9:B7:19:8D:00
            X509v3 Authority Key Identifier:
                keyid:FE:22:AE:8A:AC:81:EB:C5:7E:F3:CD:3A:7F:B6:08:AE:70:C8:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/570c7ac7ee3129ad73ed625107de65a7ff01f3e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/338b6081-6457-4280-b304-03e9ab35c8e4/570c7ac7ee3129ad73ed625107de65a7ff01f3e7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/338b6081-6457-4280-b304-03e9ab35c8e4/570c7ac7ee3129ad73ed625107de65a7ff01f3e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:03:4a:aa:6d:1f:0e:7f:88:a0:3d:31:7d:97:0e:c6:d1:03:
         0d:f9:8f:1a:59:b0:36:05:a8:4c:e1:91:70:66:70:34:b0:56:
         68:7f:cb:43:f9:ca:37:ca:69:b8:c3:09:9b:3c:f3:88:dd:0f:
         fa:2e:35:f8:cf:86:c8:9b:68:7f:25:89:c6:ab:7c:89:71:19:
         14:20:70:23:6e:38:60:57:ef:b2:91:ae:71:45:ff:86:0f:37:
         00:62:d5:46:2b:15:89:0b:14:83:31:25:8c:1b:09:b4:4d:c3:
         91:14:aa:6e:39:32:ca:a2:e0:a6:bd:f7:1e:58:51:f9:27:ee:
         57:33:15:87:a9:5e:35:52:68:a2:de:a3:9f:60:11:ec:19:bc:
         cd:15:93:08:be:7b:dd:1b:71:34:e7:12:9b:1f:dd:e9:22:0b:
         d6:65:3a:e3:95:8e:2e:a7:8d:2c:e0:c2:4d:77:b6:ae:36:7c:
         20:f1:71:de:e0:98:91:a3:09:c4:80:02:ce:33:72:a1:e3:a3:
         45:7e:50:26:c6:b6:c1:61:f9:b2:29:e8:ba:2a:cc:55:b5:05:
         ad:79:89:45:74:cc:75:97:1c:bb:b3:eb:ca:85:04:76:cd:1f:
         8a:c6:a9:27:56:03:03:eb:cc:bf:55:7e:69:cf:1a:6a:24:50:
         6d:f6:23:70
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDChORMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU3
MGM3YWM3ZWUzMTI5YWQ3M2VkNjI1MTA3ZGU2NWE3ZmYwMWYzZTcwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MTAxOTE3WjAzMTEwLwYDVQQDEyg3YzMwYmZmNmQ5Zjk2
MWYwYjU5ODYzMGIyMWM5MmY2ZjE0NGQxOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlgnu4rczKCcE0LlFccOvUR1rlvZnn0AhiKSJW0NoveyMunlX
0rflWpFPBaCug3HHL9uXGys8r90OeHhqheYB1wKZNwiZc4v2DavUCvbt6RgbVTSu
SK+MTShwTxkpCl+wrSAsBh+2H+9gwimD77ELIHf5dcgA2NPOWX8ihR6Di4NrC6AP
ez7AI9Ze+hJWOKTLvZEKnLT+ECljuY8xUpgMUbWJwy8LwxGkDPH9gCd1uhwvySLL
VhuUkF0Qf8CSJO2SM5zWPz95me8l9hJDZFWuOQIva3OGDX640dmf43WJyZnMvH4l
Vc25JvV2xPvbIMaDC1THRr4F+aCWR3s349y/vwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFAXpjePqq74o/Ml7N/r0GOm3GY0AMB8GA1UdIwQYMBaAFP4iroqsgevFfvPN
On+2CK5wyIsGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTcwYzdh
YzdlZTMxMjlhZDczZWQ2MjUxMDdkZTY1YTdmZjAxZjNlNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzM4YjYwODEtNjQ1Ny00MjgwLWIzMDQtMDNlOWFi
MzVjOGU0LzU3MGM3YWM3ZWUzMTI5YWQ3M2VkNjI1MTA3ZGU2NWE3ZmYwMWYzZTcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMzhiNjA4MS02NDU3LTQyODAtYjMwNC0wM2U5
YWIzNWM4ZTQvNTcwYzdhYzdlZTMxMjlhZDczZWQ2MjUxMDdkZTY1YTdmZjAxZjNl
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEYDSqptHw5/iKA9MX2XDsbRAw35jxpZsDYFqEzhkXBmcDSw
Vmh/y0P5yjfKabjDCZs884jdD/ouNfjPhsibaH8licarfIlxGRQgcCNuOGBX77KR
rnFF/4YPNwBi1UYrFYkLFIMxJYwbCbRNw5EUqm45Msqi4Ka99x5YUfkn7lczFYep
XjVSaKLeo59gEewZvM0Vkwi+e90bcTTnEpsf3ekiC9ZlOuOVji6njSzgwk13tq42
fCDxcd7gmJGjCcSAAs4zcqHjo0V+UCbGtsFh+bIp6LoqzFW1Ba15iUV0zHWXHLuz
68qFBHbNH4rGqSdWAwPrzL9VfmnPGmokUG32I3A=
-----END CERTIFICATE-----