Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.mft
File:                     0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.mft (raw, json)
Hash identifier:          zorQHdWncX8jJv8UC3gpwwkw0iHTOz1aYmtr0VQBrP8=
Subject key identifier:   BF:30:34:BD:C1:88:DF:40:6B:6E:AE:D7:B7:A6:D3:8F:F8:6F:F0:64
Authority key identifier: A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46
Certificate issuer:       /CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
Certificate serial:       0FBF12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.mft
Manifest number:          0821
Signing time:             Mon 15 Apr 2024 08:21:08 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:52:16 +0000
Files and hashes:         1: 0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.crl (hash: tn0NCJqHdstpoIZ6Mfh8CSEFPoITYsf6M6gYgcGJagY=)
                          2: 4e42a3a8408cf702ee37a2e49b87653c9266465f.roa (hash: ud7LxiQTZ0tIRgPsh8j03sAhdTPXAeVM+39M9VviL8I=)
                          3: 6fbe64768d0f1b0aec0b393e8bf34fc62a338b2d.roa (hash: 9Sc0f101cnjavHo6Yy2l7R9v1tU8rudGw9Q2PKFzazg=)
                          4: cea5ea90978b309311e56784da587155a855d939.roa (hash: AriMbTfnQMzlMKLKqU3QzoPgTeqCerMcJSzIElreZHQ=)
                          5: da9266f87c3123ce40fc6cc9e8ba66e4cedf6685.roa (hash: xPUPd8dXUaVSSC4QZKlQVxvmJM+HsWznI+NZatHww7I=)
                          6: e16eb6237e1b679ec6d5e7330dcc6d32f3fb3092.roa (hash: yV14Z8frwls5Fz+r8IILnqw4nxKPuZ2pcqq7iMm4icw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031954 (0xfbf12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:52:16 2024 GMT
        Subject: CN=609ec89a1388332b60b7af7ec9de7afca863353d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:a8:9e:3d:fc:b2:56:ef:b2:cf:49:9e:f4:
                    4d:27:44:ac:2f:d1:64:1d:21:14:06:76:b0:a3:b1:
                    77:b7:99:01:20:4b:a6:a0:d1:86:30:81:92:1b:69:
                    ee:50:f2:55:16:63:52:0b:7d:64:10:95:da:0a:30:
                    5a:1d:c2:07:96:d8:9a:27:fa:57:9f:2e:52:3f:1a:
                    62:b8:7f:54:bb:e6:f2:b7:46:c5:6a:ad:0b:ce:6d:
                    6e:f9:f4:26:db:aa:83:50:a1:6b:5d:14:fa:b2:ca:
                    e5:6c:ab:d9:f7:63:f2:df:e0:a2:80:1d:5a:e9:a1:
                    d8:91:c9:4d:fc:25:e0:ff:47:a6:24:c7:2a:f5:b9:
                    b4:dd:de:09:62:f3:22:e2:c4:8a:41:8b:fd:e9:fa:
                    1e:aa:08:9b:7d:0f:77:88:db:3e:c2:c6:c6:dc:7a:
                    22:4e:18:43:c7:68:7f:d0:de:94:aa:2c:d8:81:85:
                    d5:79:f0:7d:27:0f:64:b7:f4:c5:24:cd:38:3d:9f:
                    cb:6b:c8:00:8f:2e:46:18:63:a0:59:cd:3a:30:77:
                    a6:cc:49:0a:ff:3c:e3:58:80:3e:a1:87:6b:d8:bb:
                    d0:25:8d:09:01:ec:2a:62:5b:26:4b:3a:2d:95:fd:
                    5f:0e:4b:13:17:27:3a:0c:7b:b7:51:ed:e7:41:8a:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:30:34:BD:C1:88:DF:40:6B:6E:AE:D7:B7:A6:D3:8F:F8:6F:F0:64
            X509v3 Authority Key Identifier:
                keyid:A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:cf:69:be:16:2f:fc:81:5d:98:1d:cd:aa:df:6c:d4:b0:
         3c:4c:6d:17:19:c6:ff:61:12:1c:18:b1:cf:99:fa:99:54:b8:
         a9:7b:18:47:9e:3c:35:05:41:68:8d:be:3d:04:62:53:a2:32:
         3f:a6:04:68:95:db:26:f3:41:db:ed:7a:d6:db:3d:23:b2:fb:
         85:2f:07:fd:09:d7:fb:ec:bb:d5:2b:e5:b0:22:92:e6:b0:0e:
         43:93:32:e5:67:68:ca:71:16:3b:ab:5f:04:d0:ab:1a:60:7e:
         8c:f5:d9:c1:ec:d5:9f:0d:34:4e:ad:d8:50:af:15:ec:66:ef:
         c0:a0:26:ce:1c:51:7e:4a:5b:b2:f4:70:47:d3:34:5b:1b:87:
         f2:c6:f3:72:0b:89:8c:6b:20:b9:70:ae:98:20:a0:59:80:ba:
         2d:70:9a:77:78:49:3d:7a:b7:08:40:7e:81:a8:00:8d:70:2a:
         09:21:f9:f9:74:3e:68:5b:35:5f:54:3f:b0:25:c3:fc:fd:57:
         3e:b7:1a:d2:0d:41:14:32:04:dd:2e:1e:d8:c5:4a:86:43:40:
         58:3b:44:97:0e:66:bc:c8:c2:19:da:6e:f2:4d:fb:ac:bb:cb:
         12:88:c4:61:47:80:ea:86:a5:98:0f:d6:a2:51:d4:5b:20:07:
         7d:2d:17:71
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDD78SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
ZDQxYWViNmZiOGFlYmUwODc3ZDY1MzMxMGNlNmQ5MGE2NzhmYjkwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MDk1MjE2WjAzMTEwLwYDVQQDEyg2MDllYzg5YTEzODgz
MzJiNjBiN2FmN2VjOWRlN2FmY2E4NjMzNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAntmonj38slbvss9JnvRNJ0SsL9FkHSEUBnawo7F3t5kBIEum
oNGGMIGSG2nuUPJVFmNSC31kEJXaCjBaHcIHltiaJ/pXny5SPxpiuH9Uu+byt0bF
aq0Lzm1u+fQm26qDUKFrXRT6ssrlbKvZ92Py3+CigB1a6aHYkclN/CXg/0emJMcq
9bm03d4JYvMi4sSKQYv96foeqgibfQ93iNs+wsbG3HoiThhDx2h/0N6UqizYgYXV
efB9Jw9kt/TFJM04PZ/La8gAjy5GGGOgWc06MHemzEkK/zzjWIA+oYdr2LvQJY0J
AewqYlsmSzotlf1fDksTFyc6DHu3Ue3nQYrJjQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFL8wNL3BiN9Aa26u17em04/4b/BkMB8GA1UdIwQYMBaAFKZYiLDbKzUFaiqM
cLbAFLxOZp9GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGZkNDFh
ZWI2ZmI4YWViZTA4NzdkNjUzMzEwY2U2ZDkwYTY3OGZiOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzVjZDU2ZTUtMDZlOS00YWYxLTkwZDQtNTE2NGE2
MTQ0ZjU1LzBmZDQxYWViNmZiOGFlYmUwODc3ZDY1MzMxMGNlNmQ5MGE2NzhmYjku
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNWNkNTZlNS0wNmU5LTRhZjEtOTBkNC01MTY0
YTYxNDRmNTUvMGZkNDFhZWI2ZmI4YWViZTA4NzdkNjUzMzEwY2U2ZDkwYTY3OGZi
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAFxaz2m+Fi/8gV2YHc2q32zUsDxMbRcZxv9hEhwYsc+Z+plU
uKl7GEeePDUFQWiNvj0EYlOiMj+mBGiV2ybzQdvtetbbPSOy+4UvB/0J1/vsu9Ur
5bAikuawDkOTMuVnaMpxFjurXwTQqxpgfoz12cHs1Z8NNE6t2FCvFexm78CgJs4c
UX5KW7L0cEfTNFsbh/LG83ILiYxrILlwrpggoFmAui1wmnd4ST16twhAfoGoAI1w
Kgkh+fl0PmhbNV9UP7Alw/z9Vz63GtINQRQyBN0uHtjFSoZDQFg7RJcOZrzIwhna
bvJN+6y7yxKIxGFHgOqGpZgP1qJR1FsgB30tF3E=
-----END CERTIFICATE-----