Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f20e2a3-f951-49cd-b72f-f45a7a8f58ad/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.mft
File:                     41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.mft (raw, json)
Hash identifier:          yOnRGWMqxeQlfr7silqdGO00c9ZIFDtUrzmAO7En7BM=
Subject key identifier:   59:75:DC:E5:C9:08:4F:FB:D9:D0:50:64:42:D0:56:31:27:4E:29:0B
Authority key identifier: DE:3E:AA:FE:F9:FB:D2:DD:DE:8D:11:CD:ED:D9:F0:F7:CA:F5:12:51
Certificate issuer:       /CN=41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4
Certificate serial:       1CB69F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f20e2a3-f951-49cd-b72f-f45a7a8f58ad/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.mft
Manifest number:          0E05
Signing time:             Mon 15 Apr 2024 11:21:27 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:04:18 +0000
Files and hashes:         1: 41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.crl (hash: OuqaAYdKAIsOEu7HfBMiKkD5UtdGdVnu5ytJ+MhoiY4=)
                          2: b8940576fcbe7eeb94d38ea8c9e8384e2bec6f39.roa (hash: Okbw0gyId53egCk+eLQIAPTzJF+1THDsGpkJ9CjEj4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881759 (0x1cb69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:04:18 2024 GMT
        Subject: CN=bedf04b7d821a70894ee7f7f7295900daacbb169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:3c:ce:af:c5:ea:08:53:86:5a:53:af:f4:
                    8b:86:75:aa:11:cc:34:a5:07:6d:14:3d:52:6e:79:
                    ba:d9:71:9d:ab:f7:54:ef:23:49:2f:9a:cd:ed:25:
                    40:3a:19:59:35:17:25:23:20:91:a8:12:13:04:1e:
                    af:be:34:e5:bc:ba:40:86:fa:8d:53:21:b5:f4:ec:
                    9a:e2:9c:31:c9:ec:3f:6f:03:82:08:29:42:b9:68:
                    87:59:d6:a9:37:c6:17:16:90:85:60:73:7d:c0:e9:
                    a7:6e:e5:69:11:92:8f:8b:2c:4c:6c:3d:69:af:45:
                    f6:02:54:6d:89:3a:a6:45:56:11:86:e8:2b:a4:9b:
                    a5:34:42:3f:44:4e:1d:c4:55:34:c3:d6:0c:c9:0e:
                    5c:55:bc:fa:4d:b3:bc:42:bd:6d:51:c6:d2:24:a3:
                    41:9d:d9:50:fc:fe:ce:5a:cd:91:f4:8a:e6:82:ae:
                    c1:d8:67:91:3f:ff:2c:5b:08:8d:02:db:c3:51:57:
                    a6:51:50:75:ec:7d:b7:8f:28:e5:bc:bf:4a:3a:61:
                    aa:7d:c9:c2:d1:7a:a9:ab:c7:6d:7f:40:b8:55:06:
                    85:d8:60:15:8f:d4:07:49:af:f0:35:a6:da:4e:4c:
                    79:52:62:4b:e0:7b:fb:dd:11:3c:b1:cf:37:58:2b:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:75:DC:E5:C9:08:4F:FB:D9:D0:50:64:42:D0:56:31:27:4E:29:0B
            X509v3 Authority Key Identifier:
                keyid:DE:3E:AA:FE:F9:FB:D2:DD:DE:8D:11:CD:ED:D9:F0:F7:CA:F5:12:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f20e2a3-f951-49cd-b72f-f45a7a8f58ad/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f20e2a3-f951-49cd-b72f-f45a7a8f58ad/41ad9c079e8f4e29b613d947dfc3f8f0d9db8ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8f:bf:0e:22:f7:f3:ca:98:01:ff:fc:9c:f7:f4:77:23:ac:
         33:0a:88:71:0f:9d:ca:06:5d:18:85:96:aa:ee:81:28:ba:8e:
         0c:db:1f:d3:06:3a:a4:2d:83:47:2b:6e:bc:de:ce:0b:b5:07:
         26:5b:43:2d:ec:25:a7:4a:0b:f7:35:05:68:97:13:fe:43:0d:
         8e:68:d5:eb:03:d2:64:e3:c1:7b:2d:2e:1e:0d:b5:b4:e9:b9:
         f2:af:c0:74:e0:1b:0e:a7:5a:f8:b4:d6:e0:02:db:c2:d7:b9:
         d4:d5:56:ff:2d:43:37:80:ff:77:f0:1a:69:fd:94:54:e2:1f:
         1d:49:bd:a7:d7:13:f1:c1:3e:92:d1:06:b1:1b:f0:91:10:b0:
         78:75:f3:57:4a:ed:84:9b:90:87:ce:d6:a7:39:f2:1c:3c:9a:
         93:02:e1:69:45:cd:5f:6e:34:3d:b2:08:96:6f:b1:d9:3f:fa:
         7b:0d:b2:84:ff:df:01:35:d9:b8:de:d3:9c:17:b2:aa:3d:54:
         4a:ad:52:e9:c4:a1:dd:0b:0b:73:86:eb:cf:43:85:2f:06:92:
         47:5f:cc:b8:62:79:e2:b6:41:d1:30:0f:10:e8:3a:f0:7c:37:
         27:ae:1d:c5:eb:70:8c:b4:f0:6e:fd:03:97:c6:c2:c4:73:90:
         04:81:71:09
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDHLafMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
YWQ5YzA3OWU4ZjRlMjliNjEzZDk0N2RmYzNmOGYwZDlkYjhlZTQwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTMwNDE4WjAzMTEwLwYDVQQDEyhiZWRmMDRiN2Q4MjFh
NzA4OTRlZTdmN2Y3Mjk1OTAwZGFhY2JiMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjaU8zq/F6ghThlpTr/SLhnWqEcw0pQdtFD1Sbnm62XGdq/dU
7yNJL5rN7SVAOhlZNRclIyCRqBITBB6vvjTlvLpAhvqNUyG19Oya4pwxyew/bwOC
CClCuWiHWdapN8YXFpCFYHN9wOmnbuVpEZKPiyxMbD1pr0X2AlRtiTqmRVYRhugr
pJulNEI/RE4dxFU0w9YMyQ5cVbz6TbO8Qr1tUcbSJKNBndlQ/P7OWs2R9Irmgq7B
2GeRP/8sWwiNAtvDUVemUVB17H23jyjlvL9KOmGqfcnC0Xqpq8dtf0C4VQaF2GAV
j9QHSa/wNabaTkx5UmJL4Hv73RE8sc83WCvCFQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFFl13OXJCE/72dBQZELQVjEnTikLMB8GA1UdIwQYMBaAFN4+qv75+9Ld3o0R
ze3Z8PfK9RJRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDFhZDlj
MDc5ZThmNGUyOWI2MTNkOTQ3ZGZjM2Y4ZjBkOWRiOGVlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGYyMGUyYTMtZjk1MS00OWNkLWI3MmYtZjQ1YTdh
OGY1OGFkLzQxYWQ5YzA3OWU4ZjRlMjliNjEzZDk0N2RmYzNmOGYwZDlkYjhlZTQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZjIwZTJhMy1mOTUxLTQ5Y2QtYjcyZi1mNDVh
N2E4ZjU4YWQvNDFhZDljMDc5ZThmNGUyOWI2MTNkOTQ3ZGZjM2Y4ZjBkOWRiOGVl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAD6Pvw4i9/PKmAH//Jz39HcjrDMKiHEPncoGXRiFlqrugSi6
jgzbH9MGOqQtg0crbrzezgu1ByZbQy3sJadKC/c1BWiXE/5DDY5o1esD0mTjwXst
Lh4NtbTpufKvwHTgGw6nWvi01uAC28LXudTVVv8tQzeA/3fwGmn9lFTiHx1JvafX
E/HBPpLRBrEb8JEQsHh181dK7YSbkIfO1qc58hw8mpMC4WlFzV9uND2yCJZvsdk/
+nsNsoT/3wE12bje05wXsqo9VEqtUunEod0LC3OG689DhS8GkkdfzLhieeK2QdEw
DxDoOvB8NyeuHcXrcIy08G79A5fGwsRzkASBcQk=
-----END CERTIFICATE-----