Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/a41461d6dfd488d8de0a70d45ae114eaacb32c16.mft
File:                     a41461d6dfd488d8de0a70d45ae114eaacb32c16.mft (raw, json)
Hash identifier:          +H7y6agvvjm8JFT910k1b1aj+AjLOFz1aHOmZhxOgX0=
Subject key identifier:   51:0D:83:52:E6:98:6C:EC:B2:65:F6:87:95:93:07:A5:9F:60:B0:16
Authority key identifier: 3F:C2:89:8A:AD:81:6B:C3:8B:05:5D:3B:D5:44:9D:77:B1:FF:5A:6F
Certificate issuer:       /CN=a41461d6dfd488d8de0a70d45ae114eaacb32c16
Certificate serial:       20E435
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a41461d6dfd488d8de0a70d45ae114eaacb32c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/a41461d6dfd488d8de0a70d45ae114eaacb32c16.mft
Manifest number:          0DF9
Signing time:             Mon 15 Apr 2024 05:21:12 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:26:17 +0000
Files and hashes:         1: a41461d6dfd488d8de0a70d45ae114eaacb32c16.crl (hash: nwt9gGafNuFQhF2ZpJFyjV7FjL46dCM8zwgrE32l4vc=)
                          2: d6d02dc1a7bafbfb2fb30b7e0bf4acb04d51e5ab.roa (hash: 1dEIKU5jS9UwQNCOJJEWTkkg4G+Vty24UUUsrRedDaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155573 (0x20e435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41461d6dfd488d8de0a70d45ae114eaacb32c16
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:26:17 2024 GMT
        Subject: CN=31a57f2349d0ccd15940022c971ac7ca436a8126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:07:c9:f5:f9:01:75:f0:52:66:32:1e:ba:
                    1a:a6:2a:fa:5a:10:bd:91:2e:0a:77:ec:c3:c5:62:
                    15:a8:47:bb:d6:5d:fb:4f:23:1e:84:7d:07:a3:0e:
                    77:85:a8:74:0d:43:29:57:93:12:93:99:8f:62:78:
                    b2:89:2c:d6:f8:92:b4:66:69:93:cd:73:1b:6f:d7:
                    60:0b:91:77:61:5e:89:7c:fd:9f:de:60:d0:74:0b:
                    58:d4:1b:ff:aa:5f:e6:75:18:46:11:27:b8:97:c4:
                    43:13:7e:b1:0b:1a:86:13:9c:33:86:ae:21:fd:07:
                    9a:0a:6f:62:42:0c:90:a0:fb:d5:b2:6a:69:fe:61:
                    fc:72:2a:4b:5d:6d:af:6d:36:1b:7a:5e:ca:0e:f2:
                    78:0b:ea:49:a0:37:0b:6a:34:38:39:c0:2e:c4:da:
                    7d:a8:5d:8f:e6:32:f7:0f:ba:19:64:df:29:b7:3e:
                    0f:b4:eb:93:8e:f8:f6:81:9b:05:69:87:3f:9c:a3:
                    f3:a5:2e:4d:8f:57:3f:44:0f:af:25:bd:ac:be:91:
                    bd:26:33:19:81:e4:27:9d:b5:34:b9:d4:53:ce:47:
                    fb:86:3d:df:9b:9a:a6:45:e3:6f:53:6c:75:08:c5:
                    8a:3e:71:56:5a:5a:24:af:42:29:51:e7:54:15:31:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0D:83:52:E6:98:6C:EC:B2:65:F6:87:95:93:07:A5:9F:60:B0:16
            X509v3 Authority Key Identifier:
                keyid:3F:C2:89:8A:AD:81:6B:C3:8B:05:5D:3B:D5:44:9D:77:B1:FF:5A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a41461d6dfd488d8de0a70d45ae114eaacb32c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/a41461d6dfd488d8de0a70d45ae114eaacb32c16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/a41461d6dfd488d8de0a70d45ae114eaacb32c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:74:c3:d4:83:44:8d:a6:d8:3c:b3:98:3a:6f:40:a7:db:54:
         e7:dc:e8:48:91:31:97:d9:dd:b8:ee:21:5b:f8:dd:1f:2e:3f:
         89:f5:01:e0:03:4f:e2:21:58:7f:28:a6:0b:d4:47:be:0a:86:
         b1:b6:6c:68:ce:64:53:c4:dc:88:14:99:e4:cc:e6:5d:79:6c:
         73:2e:b4:30:8a:fc:47:bc:88:7e:73:7f:43:28:1e:d2:2a:a6:
         c6:f5:81:0c:4e:7b:10:c4:f6:7d:28:96:cc:a3:e3:5c:1b:f4:
         e3:1c:56:e3:99:41:62:fc:07:6c:a4:d7:03:46:24:f0:10:d1:
         d9:8f:b4:01:e8:83:22:a3:b5:b0:c3:68:92:e7:6d:8f:f7:1e:
         32:78:38:13:06:e1:0a:6b:4a:a6:ce:fb:20:f8:a8:a9:e6:9e:
         d4:7d:e0:cb:32:28:cc:5a:b1:fb:a2:cd:d9:ac:ec:21:e2:b8:
         99:c3:3a:10:fd:ad:79:f3:b6:28:31:08:de:b6:e8:e5:ce:07:
         fc:eb:64:71:87:df:20:2b:2a:65:de:2e:ea:7e:c0:d9:10:78:
         0a:73:f4:1c:85:64:2c:da:18:d2:1b:09:77:e0:ed:e9:80:66:
         44:60:a9:cd:bd:d4:cf:c9:fa:09:bc:91:20:e9:d9:9f:57:7f:
         30:6c:a7:8c
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIOQ1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE0
MTQ2MWQ2ZGZkNDg4ZDhkZTBhNzBkNDVhZTExNGVhYWNiMzJjMTYwHhcNMjQwNDE1
MDQyMDE3WhcNMjQwNDE4MDYyNjE3WjAzMTEwLwYDVQQDEygzMWE1N2YyMzQ5ZDBj
Y2QxNTk0MDAyMmM5NzFhYzdjYTQzNmE4MTI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoUQHyfX5AXXwUmYyHroapir6WhC9kS4Kd+zDxWIVqEe71l37
TyMehH0How53hah0DUMpV5MSk5mPYniyiSzW+JK0ZmmTzXMbb9dgC5F3YV6JfP2f
3mDQdAtY1Bv/ql/mdRhGESe4l8RDE36xCxqGE5wzhq4h/QeaCm9iQgyQoPvVsmpp
/mH8cipLXW2vbTYbel7KDvJ4C+pJoDcLajQ4OcAuxNp9qF2P5jL3D7oZZN8ptz4P
tOuTjvj2gZsFaYc/nKPzpS5Nj1c/RA+vJb2svpG9JjMZgeQnnbU0udRTzkf7hj3f
m5qmReNvU2x1CMWKPnFWWlokr0IpUedUFTEi+wIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFFENg1LmmGzssmX2h5WTB6WfYLAWMB8GA1UdIwQYMBaAFD/CiYqtgWvDiwVd
O9VEnXex/1pvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTQxNDYx
ZDZkZmQ0ODhkOGRlMGE3MGQ0NWFlMTE0ZWFhY2IzMmMxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2I1YjU4ZWQtOTY5YS00MGY5LWI4MTQtMWY5ZTdh
ZThhYTBjL2E0MTQ2MWQ2ZGZkNDg4ZDhkZTBhNzBkNDVhZTExNGVhYWNiMzJjMTYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zYjViNThlZC05NjlhLTQwZjktYjgxNC0xZjll
N2FlOGFhMGMvYTQxNDYxZDZkZmQ0ODhkOGRlMGE3MGQ0NWFlMTE0ZWFhY2IzMmMx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEN0w9SDRI2m2DyzmDpvQKfbVOfc6EiRMZfZ3bjuIVv43R8u
P4n1AeADT+IhWH8opgvUR74KhrG2bGjOZFPE3IgUmeTM5l15bHMutDCK/Ee8iH5z
f0MoHtIqpsb1gQxOexDE9n0olsyj41wb9OMcVuOZQWL8B2yk1wNGJPAQ0dmPtAHo
gyKjtbDDaJLnbY/3HjJ4OBMG4QprSqbO+yD4qKnmntR94MsyKMxasfuizdms7CHi
uJnDOhD9rXnztigxCN626OXOB/zrZHGH3yArKmXeLup+wNkQeApz9ByFZCzaGNIb
CXfg7emAZkRgqc291M/J+gm8kSDp2Z9XfzBsp4w=
-----END CERTIFICATE-----