Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/5d3cf2f8cfb3657f866677511306c8536579ab5a.mft
File:                     5d3cf2f8cfb3657f866677511306c8536579ab5a.mft (raw, json)
Hash identifier:          zsx0izIJcRRDuvc/c9BVKsBZan9/33nGGra65+SXbgA=
Subject key identifier:   37:A5:4B:D5:CE:20:7B:87:EF:9A:2F:E1:9D:63:44:E8:91:B5:4A:D4
Authority key identifier: 7E:77:46:78:0A:D0:AC:23:5A:5F:79:ED:E4:F4:C9:AB:40:96:FB:FA
Certificate issuer:       /CN=5d3cf2f8cfb3657f866677511306c8536579ab5a
Certificate serial:       28E42F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3cf2f8cfb3657f866677511306c8536579ab5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/5d3cf2f8cfb3657f866677511306c8536579ab5a.mft
Manifest number:          0DFD
Signing time:             Mon 15 Apr 2024 11:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:50:18 +0000
Files and hashes:         1: 2140e3b44430e0d26a76ba7e711f6b183c79ab3f.roa (hash: DpCVHjNTrrNSSkmnvJVsbTZvo0ZfO/2S7B8XygDbWx4=)
                          2: 5d3cf2f8cfb3657f866677511306c8536579ab5a.crl (hash: AwdIieORi7CJUQ9jfGCfALmldiX3WW3ZLiJDQgjWNuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679855 (0x28e42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3cf2f8cfb3657f866677511306c8536579ab5a
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:50:18 2024 GMT
        Subject: CN=07fa75efb0fbbfcd0c28c8da5ee6a4ee7f66db38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:bc:e5:78:1d:6a:67:dd:f5:76:f6:6d:af:
                    60:1d:9e:6c:fb:0e:0b:be:81:60:06:23:87:ea:77:
                    c5:b1:17:8b:64:3e:fe:da:25:2d:44:76:9a:3f:0c:
                    90:19:4a:9b:74:54:ba:24:53:0d:c0:66:8f:14:d0:
                    35:f4:b7:fb:b8:0a:69:89:ef:f4:29:e9:cb:0e:55:
                    ab:84:81:ca:41:c9:cf:88:99:7a:94:7f:48:57:2b:
                    19:48:f7:04:0b:b1:92:a6:db:d2:8f:0f:c7:61:8d:
                    df:ae:4d:a9:ec:f6:6c:60:11:ba:8c:ba:f3:2b:6c:
                    e1:1b:2d:f0:49:31:ed:3f:19:dd:e7:90:47:3e:74:
                    95:b7:23:e7:ff:a9:55:1c:1f:be:1a:d2:2a:17:c1:
                    35:52:64:4e:33:f7:cb:9f:0b:55:9b:c7:ab:2b:5d:
                    4b:e0:16:08:76:af:e4:6e:9b:b6:cc:e4:a1:1c:fb:
                    29:77:9e:03:1e:15:83:a9:d9:c1:7a:ae:cd:62:7b:
                    fd:39:c1:c3:b5:43:47:7f:5f:12:d9:6d:b5:36:0d:
                    b5:7c:20:ab:2a:ce:81:7e:96:c2:ee:dd:48:5a:d5:
                    f1:ec:a3:a1:02:14:bd:4e:e7:6c:4c:ec:c9:75:f8:
                    bc:e6:b3:98:bc:66:5a:fb:79:fb:36:35:4c:ff:64:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:4B:D5:CE:20:7B:87:EF:9A:2F:E1:9D:63:44:E8:91:B5:4A:D4
            X509v3 Authority Key Identifier:
                keyid:7E:77:46:78:0A:D0:AC:23:5A:5F:79:ED:E4:F4:C9:AB:40:96:FB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3cf2f8cfb3657f866677511306c8536579ab5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/5d3cf2f8cfb3657f866677511306c8536579ab5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50290e9b-49dc-4760-9d13-189cdcb58e66/5d3cf2f8cfb3657f866677511306c8536579ab5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:26:0a:f9:9a:96:3d:e6:72:00:54:85:bd:19:65:00:4a:4c:
         b6:22:80:67:ba:47:d9:71:a6:40:85:bf:ef:5d:51:b2:4e:5b:
         df:89:3f:3a:30:1f:89:78:74:e2:a3:82:a3:d4:d3:f7:55:3b:
         86:03:e4:bf:3b:ec:04:0f:b6:ab:f2:44:9c:a4:52:e6:f2:bb:
         85:5b:86:64:2c:e9:3a:db:23:72:b2:ad:6b:e5:00:65:e4:b8:
         2c:58:c1:37:05:44:06:05:7b:2d:26:e1:54:ac:8c:5b:3f:7c:
         a8:e3:cb:1e:ff:69:08:02:fa:b4:ba:29:2d:60:28:10:9e:55:
         85:14:bb:d6:4c:d1:2f:2e:e7:22:ca:a1:77:84:9e:d3:fb:ae:
         c8:2c:d5:20:92:e5:71:f4:5a:22:e5:55:54:48:bc:f0:d7:ec:
         30:25:9e:32:46:3f:7d:ee:1c:a8:a6:41:27:95:ae:e4:cc:15:
         71:ba:3c:97:34:f5:8d:32:9d:d9:6b:a6:43:85:cd:48:b1:80:
         64:45:81:cb:99:7f:05:6f:5e:c4:d8:ca:69:96:af:57:e0:18:
         52:a3:17:57:e7:1e:db:aa:14:4f:fa:81:bc:6e:33:32:fb:77:
         43:40:97:e7:b4:39:7f:b9:b0:c8:1a:4b:11:3a:b0:70:56:3a:
         00:62:5d:74
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKOQvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
M2NmMmY4Y2ZiMzY1N2Y4NjY2Nzc1MTEzMDZjODUzNjU3OWFiNWEwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTM1MDE4WjAzMTEwLwYDVQQDEygwN2ZhNzVlZmIwZmJi
ZmNkMGMyOGM4ZGE1ZWU2YTRlZTdmNjZkYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAljG85Xgdamfd9Xb2ba9gHZ5s+w4LvoFgBiOH6nfFsReLZD7+
2iUtRHaaPwyQGUqbdFS6JFMNwGaPFNA19Lf7uAppie/0KenLDlWrhIHKQcnPiJl6
lH9IVysZSPcEC7GSptvSjw/HYY3frk2p7PZsYBG6jLrzK2zhGy3wSTHtPxnd55BH
PnSVtyPn/6lVHB++GtIqF8E1UmROM/fLnwtVm8erK11L4BYIdq/kbpu2zOShHPsp
d54DHhWDqdnBeq7NYnv9OcHDtUNHf18S2W21Ng21fCCrKs6BfpbC7t1IWtXx7KOh
AhS9TudsTOzJdfi85rOYvGZa+3n7NjVM/2S1YwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDelS9XOIHuH75ov4Z1jROiRtUrUMB8GA1UdIwQYMBaAFH53RngK0KwjWl95
7eT0yatAlvv6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzY2Yy
ZjhjZmIzNjU3Zjg2NjY3NzUxMTMwNmM4NTM2NTc5YWI1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTAyOTBlOWItNDlkYy00NzYwLTlkMTMtMTg5Y2Rj
YjU4ZTY2LzVkM2NmMmY4Y2ZiMzY1N2Y4NjY2Nzc1MTEzMDZjODUzNjU3OWFiNWEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MDI5MGU5Yi00OWRjLTQ3NjAtOWQxMy0xODlj
ZGNiNThlNjYvNWQzY2YyZjhjZmIzNjU3Zjg2NjY3NzUxMTMwNmM4NTM2NTc5YWI1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAAwmCvmalj3mcgBUhb0ZZQBKTLYigGe6R9lxpkCFv+9dUbJO
W9+JPzowH4l4dOKjgqPU0/dVO4YD5L877AQPtqvyRJykUubyu4VbhmQs6TrbI3Ky
rWvlAGXkuCxYwTcFRAYFey0m4VSsjFs/fKjjyx7/aQgC+rS6KS1gKBCeVYUUu9ZM
0S8u5yLKoXeEntP7rsgs1SCS5XH0WiLlVVRIvPDX7DAlnjJGP33uHKimQSeVruTM
FXG6PJc09Y0yndlrpkOFzUixgGRFgcuZfwVvXsTYymmWr1fgGFKjF1fnHtuqFE/6
gbxuMzL7d0NAl+e0OX+5sMgaSxE6sHBWOgBiXXQ=
-----END CERTIFICATE-----