Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40ffbe0b-779c-4015-8ba7-12a85f779e86/9fe5b490e01916025ea9800035a06ad620448a40.mft
File:                     9fe5b490e01916025ea9800035a06ad620448a40.mft (raw, json)
Hash identifier:          84p6TNAgGwP3TEpwCS0kt1GkObO1djeBY33S45pINRk=
Subject key identifier:   2F:6B:29:C7:5F:BE:C8:EB:54:1D:25:06:DF:AE:CE:D2:A1:10:6E:87
Authority key identifier: 26:87:E1:88:0A:7B:5F:53:A0:05:E3:90:14:F7:4B:40:18:74:16:78
Certificate issuer:       /CN=9fe5b490e01916025ea9800035a06ad620448a40
Certificate serial:       26D3B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe5b490e01916025ea9800035a06ad620448a40.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40ffbe0b-779c-4015-8ba7-12a85f779e86/9fe5b490e01916025ea9800035a06ad620448a40.mft
Manifest number:          0E18
Signing time:             Mon 15 Apr 2024 09:20:52 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:45:18 +0000
Files and hashes:         1: 7846da06d1e65078662f2d710e884b59f1678b6a.roa (hash: rNr7WciecqYC+LYNPCqBpIsctVRjZrIp5lRK2KH12P0=)
                          2: 9fe5b490e01916025ea9800035a06ad620448a40.crl (hash: yVdnq/A312DQSOWp2cYaOT+pIj8o1xCseuA+gEDVsEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544569 (0x26d3b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe5b490e01916025ea9800035a06ad620448a40
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:45:18 2024 GMT
        Subject: CN=9eee88fc1df9fbbd0cd483078303e2b496f1adbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:af:ff:92:ff:fe:fd:70:9f:04:68:56:ff:
                    f6:6c:29:9f:08:62:39:97:5a:60:c5:96:15:e7:a8:
                    3a:9a:0b:67:86:cb:0e:d0:74:ec:1a:74:95:7d:bd:
                    59:0e:02:ac:41:02:f1:ac:00:0c:a0:6b:e3:1f:91:
                    c6:69:29:d9:ee:26:67:a5:e2:51:b1:8b:ce:03:30:
                    ab:d1:1c:8f:91:d3:09:e5:e8:dc:14:b1:a8:5b:b6:
                    66:06:bf:c1:f7:42:38:63:e8:54:0b:b6:21:8b:c8:
                    d4:a9:91:34:0d:67:d9:4f:f2:c3:28:06:5c:01:53:
                    93:3b:98:48:79:31:62:34:2b:1d:f3:94:36:9b:d4:
                    48:bb:a6:40:24:b7:64:ec:34:09:be:b7:26:9d:e2:
                    c8:f8:cf:95:55:09:d0:96:66:0f:d9:f4:a5:75:bc:
                    6d:65:ae:eb:db:14:b7:85:1c:14:96:21:10:59:b1:
                    91:73:67:45:51:b5:b9:a3:7a:83:6a:a4:70:cc:a7:
                    d5:4c:f6:7a:87:71:f8:9e:1f:11:f2:bb:d1:71:89:
                    54:40:9f:c2:43:e9:de:2c:e9:da:dc:5f:47:08:81:
                    ea:c4:4e:c2:72:ef:2a:21:63:fe:aa:39:48:cf:23:
                    e2:36:54:12:8b:56:8d:17:74:c2:f6:79:3f:f7:b6:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:29:C7:5F:BE:C8:EB:54:1D:25:06:DF:AE:CE:D2:A1:10:6E:87
            X509v3 Authority Key Identifier:
                keyid:26:87:E1:88:0A:7B:5F:53:A0:05:E3:90:14:F7:4B:40:18:74:16:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe5b490e01916025ea9800035a06ad620448a40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40ffbe0b-779c-4015-8ba7-12a85f779e86/9fe5b490e01916025ea9800035a06ad620448a40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40ffbe0b-779c-4015-8ba7-12a85f779e86/9fe5b490e01916025ea9800035a06ad620448a40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:19:d7:ea:0a:b9:b8:fe:ba:12:94:ad:06:60:10:1d:7f:
         2c:cf:cc:7b:b4:f0:80:15:c1:ca:2f:84:94:43:f6:d7:b5:c8:
         ea:12:a9:31:5f:db:d8:c2:3c:eb:b1:da:63:1e:8c:c1:75:20:
         06:91:ab:74:46:ec:0f:80:9e:70:42:f4:b8:60:58:9f:35:b8:
         50:15:f5:96:69:1b:49:f4:7b:2b:0d:c4:ea:15:b8:7f:76:35:
         a8:08:29:e6:89:a1:c0:56:86:66:d1:65:cd:62:9e:ae:8b:49:
         6b:db:21:a3:93:0e:98:b5:7a:f2:f2:71:bd:5c:d7:b2:ec:b2:
         b8:1f:47:ba:b2:4f:df:51:22:21:73:88:d9:e2:0c:61:7d:57:
         76:91:70:a2:65:a3:9e:0c:c7:20:4b:29:81:be:d3:c1:0e:2b:
         04:cb:9c:72:5c:8b:40:6c:cb:64:e4:7f:07:7f:09:0e:09:3c:
         ed:b0:15:41:00:00:e2:7c:6b:f8:b8:77:cd:14:0c:ba:18:05:
         66:5b:8b:e1:09:87:9c:fb:95:34:3e:86:af:11:62:ca:5e:c4:
         34:28:55:69:ff:c1:80:39:2c:68:25:7b:3c:d8:0b:74:38:51:
         99:b4:81:74:e9:1e:a2:18:dd:c6:b8:0d:12:c0:3a:b2:84:ff:
         37:a0:fc:68
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJtO5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
ZTViNDkwZTAxOTE2MDI1ZWE5ODAwMDM1YTA2YWQ2MjA0NDhhNDAwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MDk0NTE4WjAzMTEwLwYDVQQDEyg5ZWVlODhmYzFkZjlm
YmJkMGNkNDgzMDc4MzAzZTJiNDk2ZjFhZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0gev/5L//v1wnwRoVv/2bCmfCGI5l1pgxZYV56g6mgtnhssO
0HTsGnSVfb1ZDgKsQQLxrAAMoGvjH5HGaSnZ7iZnpeJRsYvOAzCr0RyPkdMJ5ejc
FLGoW7ZmBr/B90I4Y+hUC7Yhi8jUqZE0DWfZT/LDKAZcAVOTO5hIeTFiNCsd85Q2
m9RIu6ZAJLdk7DQJvrcmneLI+M+VVQnQlmYP2fSldbxtZa7r2xS3hRwUliEQWbGR
c2dFUbW5o3qDaqRwzKfVTPZ6h3H4nh8R8rvRcYlUQJ/CQ+neLOna3F9HCIHqxE7C
cu8qIWP+qjlIzyPiNlQSi1aNF3TC9nk/97a56QIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFC9rKcdfvsjrVB0lBt+uztKhEG6HMB8GA1UdIwQYMBaAFCaH4YgKe19ToAXj
kBT3S0AYdBZ4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZlNWI0
OTBlMDE5MTYwMjVlYTk4MDAwMzVhMDZhZDYyMDQ0OGE0MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDBmZmJlMGItNzc5Yy00MDE1LThiYTctMTJhODVm
Nzc5ZTg2LzlmZTViNDkwZTAxOTE2MDI1ZWE5ODAwMDM1YTA2YWQ2MjA0NDhhNDAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MGZmYmUwYi03NzljLTQwMTUtOGJhNy0xMmE4
NWY3NzllODYvOWZlNWI0OTBlMDE5MTYwMjVlYTk4MDAwMzVhMDZhZDYyMDQ0OGE0
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEo9GdfqCrm4/roSlK0GYBAdfyzPzHu08IAVwcovhJRD9te1
yOoSqTFf29jCPOux2mMejMF1IAaRq3RG7A+AnnBC9LhgWJ81uFAV9ZZpG0n0eysN
xOoVuH92NagIKeaJocBWhmbRZc1inq6LSWvbIaOTDpi1evLycb1c17LssrgfR7qy
T99RIiFziNniDGF9V3aRcKJlo54MxyBLKYG+08EOKwTLnHJci0Bsy2Tkfwd/CQ4J
PO2wFUEAAOJ8a/i4d80UDLoYBWZbi+EJh5z7lTQ+hq8RYspexDQoVWn/wYA5LGgl
ezzYC3Q4UZm0gXTpHqIY3ca4DRLAOrKE/zeg/Gg=
-----END CERTIFICATE-----