Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.mft
File:                     8a52488a17bd4e27c842765d04aa1a4a5371aba0.mft (raw, json)
Hash identifier:          TzS5nQF+M4A9y7aamRH9dT8TKjhaRaLhsTs8hLd3Tdg=
Subject key identifier:   33:6B:B9:17:61:81:48:A8:AB:0E:58:DC:AE:C1:60:6C:21:F2:7C:9D
Authority key identifier: 1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
Certificate issuer:       /CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Certificate serial:       036740
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.mft
Manifest number:          01A7
Signing time:             Mon 15 Apr 2024 08:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:42:16 +0000
Files and hashes:         1: 01de77fdae304c1e3232dccd0635ca2cc22d219d.roa (hash: HhOmRmwxuBalqJdkmZ5rnkQnah/UnKVHeiDr33XgIEY=)
                          2: 174cf68406f1e2a983b785143f735d3916c101fd.roa (hash: UffJKoaEwP/+7HuG6CTeKq+Ph5wn3qU2znn417kTKJQ=)
                          3: 71c668f56360345e07a22396da09da773f2aed49.roa (hash: jo/f7L1rte1IPsIGmpD9Mume0oKxsXiHs/u6yyZ/Nj4=)
                          4: 77a81c5714a15614f6b66b1ffbf6045e969f5253.roa (hash: 89x4Ekx9ryDFew5nirQKEmIbCO2OmFoqSQXs2xhniLc=)
                          5: 77deff81deb9f1fd3dda93113338cd8bac1d9f8f.roa (hash: XJsYGYF1xhFw+M9+4IPdLZ8lfDLz1I0F8HJmOODGgEY=)
                          6: 8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl (hash: phBzzvgX856LPz9WlGbcjv0N6/Y1hdgT1RCG/eMiKes=)
                          7: 8cfc6036a0f1c49fb7f9a7e847c877e2cd22e00c.roa (hash: Sb6zP3ovppf+/fY36HrNxZOJ/rqB5+sNoI9U0Qg/DJc=)
                          8: 8f38119768d8d02f354e6802a753f92e0aa095e4.roa (hash: JKVxVSWyBb7ERuxpNLorFxx99PTvqnwvjZVmwWy4hg8=)
                          9: a7b4c9de5db63e59c23c7f7da8e3c8951f1eabd7.roa (hash: faWsIdr1XwlRkFi8YdvmjM+WZFolmBNB+BaoWGnwi5g=)
                          10: e72bd47358c4fab06a0d7c6df2d49fca258c4979.roa (hash: P+gwPWLW/Opo13otNqo4PzyDDbBfXDtcNLKS/IL0VS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223040 (0x36740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:42:16 2024 GMT
        Subject: CN=406f1948eb6d71476f15476b952961a88dde6c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:c4:19:42:df:eb:ba:78:84:71:f9:fe:eb:
                    79:b8:a3:56:40:ab:ae:7c:31:ab:9e:28:d4:f4:e7:
                    65:a6:ed:48:55:4b:bc:74:77:c4:df:43:c9:28:72:
                    92:42:99:2e:a9:c7:df:fc:f7:f8:4d:5a:89:7b:d3:
                    56:69:8d:fe:f8:b3:60:88:d5:df:61:23:b4:3e:0e:
                    61:d8:c1:5b:e4:c9:35:77:9c:38:0a:e3:68:71:29:
                    55:6f:5e:c8:31:40:97:20:55:ab:01:ec:8c:fc:4c:
                    5b:4d:b1:26:15:c2:fa:92:51:d4:a8:a4:ef:69:2b:
                    84:04:f6:ae:4e:29:85:cf:ec:1f:93:ab:8c:89:5b:
                    0b:a4:c0:f7:81:0e:c8:89:3a:93:13:1f:02:0d:2e:
                    26:3e:0e:38:77:6c:5b:7e:58:21:d2:f2:d1:87:e3:
                    9b:4d:5f:b2:50:bb:89:13:2a:94:df:ca:55:56:c1:
                    62:7b:f4:74:f1:65:bc:27:d1:2d:67:21:22:d0:09:
                    e5:95:65:e0:11:7d:6e:c4:6a:0b:ef:02:89:c8:8c:
                    64:f1:c9:78:0f:0b:8e:9d:a6:ae:6f:7e:87:49:66:
                    80:e3:55:a9:67:32:95:8f:40:75:86:22:0a:5e:63:
                    f1:67:71:36:6e:dd:17:71:9d:f9:ab:52:1d:72:d7:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6B:B9:17:61:81:48:A8:AB:0E:58:DC:AE:C1:60:6C:21:F2:7C:9D
            X509v3 Authority Key Identifier:
                keyid:1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:37:43:ca:19:ce:5b:c9:2c:9c:68:cf:cb:e3:b1:2f:60:fd:
         f6:fd:4b:23:bd:5f:f8:00:5e:6f:da:23:24:d4:96:25:ec:b4:
         03:73:60:9b:79:86:59:da:89:96:23:fd:db:5f:9b:9a:6e:d9:
         62:bb:37:d3:26:24:48:b5:05:2a:1e:29:7d:29:6a:5d:0e:46:
         fc:3b:7a:f7:62:c8:85:39:6d:af:f6:4f:ef:f2:27:82:a6:d9:
         ca:83:06:a8:53:aa:49:a3:7b:9b:65:b4:bb:c1:fa:57:f9:fc:
         e5:25:c7:6e:be:92:1e:ba:40:26:e6:67:45:f9:23:30:f6:61:
         e9:3f:c8:64:2c:1a:ce:a9:94:a2:3b:3f:b6:67:cc:b4:6e:94:
         58:27:dd:75:79:df:fc:02:e6:f5:7d:2c:81:d8:7c:e7:92:70:
         4d:62:14:45:93:6e:f9:74:1f:70:79:4d:a8:f4:76:f9:1a:3a:
         44:1b:1a:20:18:08:ba:c5:4e:8b:4f:f0:e4:e6:a1:73:ca:a9:
         23:46:15:66:73:57:79:28:56:6c:ad:40:c6:6b:3e:a8:ee:43:
         c2:c8:9c:1e:d6:22:09:92:e4:0d:0c:ee:36:83:1f:f2:98:23:
         5b:9a:06:a4:09:8c:ab:06:a3:8a:fe:5e:ea:1e:0d:de:4a:70:
         cd:46:48:c6
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDA2dAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhh
NTI0ODhhMTdiZDRlMjdjODQyNzY1ZDA0YWExYTRhNTM3MWFiYTAwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MDk0MjE2WjAzMTEwLwYDVQQDEyg0MDZmMTk0OGViNmQ3
MTQ3NmYxNTQ3NmI5NTI5NjFhODhkZGU2YzI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqe3EGULf67p4hHH5/ut5uKNWQKuufDGrnijU9Odlpu1IVUu8
dHfE30PJKHKSQpkuqcff/Pf4TVqJe9NWaY3++LNgiNXfYSO0Pg5h2MFb5Mk1d5w4
CuNocSlVb17IMUCXIFWrAeyM/ExbTbEmFcL6klHUqKTvaSuEBPauTimFz+wfk6uM
iVsLpMD3gQ7IiTqTEx8CDS4mPg44d2xbflgh0vLRh+ObTV+yULuJEyqU38pVVsFi
e/R08WW8J9EtZyEi0AnllWXgEX1uxGoL7wKJyIxk8cl4DwuOnaaub36HSWaA41Wp
ZzKVj0B1hiIKXmPxZ3E2bt0XcZ35q1Idctf5EQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDNruRdhgUioqw5Y3K7BYGwh8nydMB8GA1UdIwQYMBaAFBpvNMmnFdfmWYPl
2yC1eLKf/HkZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGE1MjQ4
OGExN2JkNGUyN2M4NDI3NjVkMDRhYTFhNGE1MzcxYWJhMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDBlNTMwYmYtZWJmNy00NWUyLWJlMGYtNTIwODFm
NWYxNjhjLzhhNTI0ODhhMTdiZDRlMjdjODQyNzY1ZDA0YWExYTRhNTM3MWFiYTAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MGU1MzBiZi1lYmY3LTQ1ZTItYmUwZi01MjA4
MWY1ZjE2OGMvOGE1MjQ4OGExN2JkNGUyN2M4NDI3NjVkMDRhYTFhNGE1MzcxYWJh
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGQ3Q8oZzlvJLJxoz8vjsS9g/fb9SyO9X/gAXm/aIyTUliXs
tANzYJt5hlnaiZYj/dtfm5pu2WK7N9MmJEi1BSoeKX0pal0ORvw7evdiyIU5ba/2
T+/yJ4Km2cqDBqhTqkmje5tltLvB+lf5/OUlx26+kh66QCbmZ0X5IzD2Yek/yGQs
Gs6plKI7P7ZnzLRulFgn3XV53/wC5vV9LIHYfOeScE1iFEWTbvl0H3B5Taj0dvka
OkQbGiAYCLrFTotP8OTmoXPKqSNGFWZzV3koVmytQMZrPqjuQ8LInB7WIgmS5A0M
7jaDH/KYI1uaBqQJjKsGo4r+XuoeDd5KcM1GSMY=
-----END CERTIFICATE-----