Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft
File:                     cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft (raw, json)
Hash identifier:          yXStym5nNGXqLsSM4sbpUcpiSviToNzvqHCE94Ynchc=
Subject key identifier:   AF:2C:E6:5F:28:64:BB:5E:DE:2F:A1:99:42:F8:AB:4C:FD:8F:20:97
Authority key identifier: D8:5F:CD:C2:99:4C:C0:F3:B5:2F:B3:B0:3E:11:C9:F3:49:0D:83:A0
Certificate issuer:       /CN=cef9aa9384c1285b595d5d1c9bba5d693217df5c
Certificate serial:       29538D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft
Manifest number:          0E0F
Signing time:             Mon 15 Apr 2024 08:21:00 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:00:16 +0000
Files and hashes:         1: 742ebc6816c96bb3570554d10b51f96025d430e0.roa (hash: QXVIcLVs/r2kX+e+eJWR7A9REXCxSx2ph+xS7FGWrrA=)
                          2: 9ec494bb8fbc57cfea14073560e5c8817788fd56.roa (hash: VxcH06pUqhL+bNOe+SJ0ox+P0vIGYHUU7rILPS1DvOA=)
                          3: cef9aa9384c1285b595d5d1c9bba5d693217df5c.crl (hash: 4aQyaIOKExl94HIdG9rIxWJRcaJJzMeG+ASN3EeUKVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708365 (0x29538d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef9aa9384c1285b595d5d1c9bba5d693217df5c
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:00:16 2024 GMT
        Subject: CN=280cdabeb1a404370687592939079ea46d7903f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:fd:39:74:4a:36:9e:d4:f9:df:b2:aa:b7:
                    3d:5b:1b:bb:71:59:8d:fb:54:34:ca:43:71:55:64:
                    3f:6d:b2:0b:6f:14:9c:82:3a:9b:3c:37:cb:9c:3a:
                    08:b8:20:61:85:83:da:8c:f9:72:fc:f9:67:46:69:
                    1c:64:46:de:eb:23:ad:54:fc:0a:38:cc:78:4b:87:
                    15:fb:29:84:48:72:44:74:15:7e:3a:17:b7:c4:67:
                    17:e3:05:b4:7f:01:21:0a:b7:72:72:8d:0b:7d:f3:
                    b4:bf:3e:1b:ed:43:d6:7d:f7:0a:7a:5a:4e:33:67:
                    c0:97:f9:bd:74:a6:4b:9d:26:57:bc:5c:26:ed:3a:
                    1e:e4:f4:ab:f0:66:f5:c8:57:c1:5e:e4:30:80:45:
                    97:18:b4:54:74:8d:78:de:d7:8f:7e:2d:01:81:7d:
                    f9:b0:f5:97:e3:85:a9:4d:4f:6e:3b:39:ab:c3:76:
                    94:9e:b4:1a:8d:75:f7:0e:78:8f:cd:cc:f5:42:e1:
                    05:6c:46:3c:a2:db:18:36:54:47:9e:9c:7b:26:5a:
                    f1:a0:82:8e:5c:21:6e:e6:86:14:92:f7:87:ec:b8:
                    04:85:0f:5c:be:dc:93:f5:a6:55:3d:98:64:bb:41:
                    17:3f:10:2d:0e:3e:c6:31:21:be:54:e4:fb:32:6a:
                    d1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:E6:5F:28:64:BB:5E:DE:2F:A1:99:42:F8:AB:4C:FD:8F:20:97
            X509v3 Authority Key Identifier:
                keyid:D8:5F:CD:C2:99:4C:C0:F3:B5:2F:B3:B0:3E:11:C9:F3:49:0D:83:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:73:fe:63:db:ef:ba:1b:c5:ee:6a:35:b3:1b:bb:61:f1:38:
         0b:c8:e7:8f:66:db:c8:e2:fc:41:30:0d:fe:37:03:bd:a3:f0:
         d6:03:48:f6:70:10:6b:6a:23:f5:0b:e1:c6:cb:25:82:38:95:
         ec:ab:4f:f3:f8:2f:b3:b8:67:73:8e:8c:a2:7b:c1:87:a3:90:
         84:e2:08:67:37:c0:68:cc:c1:08:3c:c8:ab:3c:52:b5:81:e8:
         5e:33:e8:ee:bb:1c:3b:5e:e9:f5:19:8b:9c:03:b3:fa:f2:da:
         53:8b:0c:53:c5:84:ff:7b:54:03:0c:4a:b6:86:ab:ce:25:fc:
         4f:62:12:1e:85:97:e1:09:ba:9d:61:fa:ce:3d:f6:8d:61:5a:
         69:a9:9f:d4:51:d7:69:f1:1e:d5:5a:81:01:11:d2:ef:bc:a8:
         c1:0b:20:1b:cc:f7:fd:07:3c:c8:5b:ee:42:be:9b:e2:21:15:
         cd:66:96:4e:11:db:6e:0e:a9:c5:f2:24:0e:9e:a7:70:4e:21:
         d2:87:c0:32:be:f2:c0:ec:2f:1e:91:ae:d3:70:14:b5:e7:c3:
         36:41:1a:e4:2a:ee:95:dc:3f:69:6b:a9:95:52:ef:de:7b:7e:
         7d:b4:8a:84:1e:39:8f:ed:cc:e8:68:d5:bc:6c:e2:bb:5e:6f:
         12:c7:c4:fc
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKVONMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
ZjlhYTkzODRjMTI4NWI1OTVkNWQxYzliYmE1ZDY5MzIxN2RmNWMwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MDkwMDE2WjAzMTEwLwYDVQQDEygyODBjZGFiZWIxYTQw
NDM3MDY4NzU5MjkzOTA3OWVhNDZkNzkwM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqMD9OXRKNp7U+d+yqrc9Wxu7cVmN+1Q0ykNxVWQ/bbILbxSc
gjqbPDfLnDoIuCBhhYPajPly/PlnRmkcZEbe6yOtVPwKOMx4S4cV+ymESHJEdBV+
Ohe3xGcX4wW0fwEhCrdyco0LffO0vz4b7UPWffcKelpOM2fAl/m9dKZLnSZXvFwm
7Toe5PSr8Gb1yFfBXuQwgEWXGLRUdI143tePfi0BgX35sPWX44WpTU9uOzmrw3aU
nrQajXX3DniPzcz1QuEFbEY8otsYNlRHnpx7JlrxoIKOXCFu5oYUkveH7LgEhQ9c
vtyT9aZVPZhku0EXPxAtDj7GMSG+VOT7MmrRUQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFK8s5l8oZLte3i+hmUL4q0z9jyCXMB8GA1UdIwQYMBaAFNhfzcKZTMDztS+z
sD4RyfNJDYOgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2VmOWFh
OTM4NGMxMjg1YjU5NWQ1ZDFjOWJiYTVkNjkzMjE3ZGY1Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGIxNTIwOTktYzFhMS00NGY2LTk4NTYtN2RhYWVi
M2ZkNTllL2NlZjlhYTkzODRjMTI4NWI1OTVkNWQxYzliYmE1ZDY5MzIxN2RmNWMu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YjE1MjA5OS1jMWExLTQ0ZjYtOTg1Ni03ZGFh
ZWIzZmQ1OWUvY2VmOWFhOTM4NGMxMjg1YjU5NWQ1ZDFjOWJiYTVkNjkzMjE3ZGY1
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAFdz/mPb77obxe5qNbMbu2HxOAvI549m28ji/EEwDf43A72j
8NYDSPZwEGtqI/UL4cbLJYI4leyrT/P4L7O4Z3OOjKJ7wYejkITiCGc3wGjMwQg8
yKs8UrWB6F4z6O67HDte6fUZi5wDs/ry2lOLDFPFhP97VAMMSraGq84l/E9iEh6F
l+EJup1h+s499o1hWmmpn9RR12nxHtVagQER0u+8qMELIBvM9/0HPMhb7kK+m+Ih
Fc1mlk4R224OqcXyJA6ep3BOIdKHwDK+8sDsLx6RrtNwFLXnwzZBGuQq7pXcP2lr
qZVS7957fn20ioQeOY/tzOho1bxs4rtebxLHxPw=
-----END CERTIFICATE-----