Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52ff13f5-28e6-4f34-9b4e-6704da5df527/956f8953f1d3dc1051b4d99ce55948bdd781d440.mft
File:                     956f8953f1d3dc1051b4d99ce55948bdd781d440.mft (raw, json)
Hash identifier:          h7ggzK0fHwas07mn+wBLAFII0v7pql7Owx7P3BayR/8=
Subject key identifier:   30:33:D4:9C:FF:8A:38:68:B2:91:CA:67:BE:B6:CA:15:09:8C:1C:B8
Authority key identifier: B1:25:10:A8:77:55:2B:F5:5A:4A:06:C3:89:C1:BB:58:CC:CE:C7:9B
Certificate issuer:       /CN=956f8953f1d3dc1051b4d99ce55948bdd781d440
Certificate serial:       16F915
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/956f8953f1d3dc1051b4d99ce55948bdd781d440.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52ff13f5-28e6-4f34-9b4e-6704da5df527/956f8953f1d3dc1051b4d99ce55948bdd781d440.mft
Manifest number:          0BA6
Signing time:             Mon 15 Apr 2024 07:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 10:04:17 +0000
Files and hashes:         1: 956f8953f1d3dc1051b4d99ce55948bdd781d440.crl (hash: /Om25PMOWvJd1RvQaIR1q6JVLKcpjIrRRKGeh+L4V9I=)
                          2: e7f5b1490a0bbf3cc2130ce18a1ff5ffa2fc226a.roa (hash: wOsnvNc3iFM2dxJFe47XwHKz7iMTkijPdI1KWpxKehA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505557 (0x16f915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956f8953f1d3dc1051b4d99ce55948bdd781d440
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 10:04:17 2024 GMT
        Subject: CN=c91672c3f5882ab4bf176f5fd5131c07ca571faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:f7:1a:65:fc:79:4d:19:7c:bb:f9:03:6b:
                    88:c6:48:9b:3a:f4:35:76:6e:a0:04:a2:14:92:f3:
                    c5:75:b1:ff:0e:6f:42:c3:bd:4b:69:87:4c:ab:0d:
                    dd:4e:cb:b2:d1:65:3d:f3:05:66:e8:1a:7d:22:98:
                    92:fc:32:eb:ba:7c:e8:15:55:5a:b2:bd:d4:d0:09:
                    42:26:50:d1:4d:1c:26:28:f9:b2:e3:f7:02:b8:c6:
                    ec:20:1e:a7:69:c6:38:53:18:5f:47:52:19:c0:96:
                    c6:29:07:99:ee:a1:bc:d4:67:f0:13:84:12:6e:48:
                    57:d0:49:f1:b0:11:ea:2a:d1:5c:64:56:32:3c:37:
                    3d:db:7b:fa:df:c4:28:ac:eb:e1:ed:84:be:b1:ad:
                    fe:d2:ee:e1:b4:de:bc:bf:4d:03:48:eb:ce:ac:dc:
                    71:55:e5:d0:55:51:48:f2:36:2a:ae:9e:56:aa:87:
                    58:21:f2:9f:92:00:79:b9:29:c7:ac:3d:0a:b7:2e:
                    30:56:a6:92:b8:e3:d6:c6:05:a5:99:e1:16:68:86:
                    80:9d:63:ef:75:ae:0b:5c:44:4f:0b:3c:e3:c0:fc:
                    1d:c0:3d:ea:38:ac:71:51:43:b1:61:f1:8b:c0:34:
                    a9:bf:1e:9f:2c:6a:b3:fa:29:1d:a0:83:f0:5a:10:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:D4:9C:FF:8A:38:68:B2:91:CA:67:BE:B6:CA:15:09:8C:1C:B8
            X509v3 Authority Key Identifier:
                keyid:B1:25:10:A8:77:55:2B:F5:5A:4A:06:C3:89:C1:BB:58:CC:CE:C7:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/956f8953f1d3dc1051b4d99ce55948bdd781d440.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52ff13f5-28e6-4f34-9b4e-6704da5df527/956f8953f1d3dc1051b4d99ce55948bdd781d440.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52ff13f5-28e6-4f34-9b4e-6704da5df527/956f8953f1d3dc1051b4d99ce55948bdd781d440.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:db:18:81:9f:26:b8:16:d0:63:97:32:5f:27:34:e6:fd:
         99:71:66:7d:c0:a3:e0:3d:3b:4c:f2:21:bc:39:ad:a3:26:3d:
         17:ae:c8:80:78:dd:b9:21:02:ff:d5:83:7c:20:b7:e2:b4:95:
         a3:12:12:a7:7c:a0:e6:f1:38:be:0c:61:79:72:97:07:94:67:
         14:42:38:8b:26:56:d0:16:3e:d7:f0:6b:f2:bb:bc:55:1a:1d:
         34:b6:fc:6b:50:76:4f:c3:c3:9e:9f:17:83:3a:f2:04:f5:22:
         fb:0d:37:76:0c:97:3f:c1:c3:d6:f7:72:1c:db:94:ca:f2:e0:
         98:70:93:af:20:6e:02:f4:ad:45:2e:68:7b:1e:9f:a6:01:81:
         17:66:8a:fd:8b:a1:16:ea:c8:b3:bf:4f:80:61:6f:54:6d:88:
         8e:ca:18:87:ce:f2:a9:ab:b2:21:9f:7e:b6:a5:71:b5:52:6e:
         3d:11:96:ec:df:d2:26:31:53:88:69:b2:83:64:5f:6a:c0:a0:
         9c:54:41:46:7c:2b:ca:0a:58:7a:dc:2c:df:62:6b:6a:08:43:
         46:b3:f8:74:5f:e8:da:ba:f0:9b:02:20:e3:f8:28:01:e0:23:
         e0:04:20:7e:3f:34:35:d6:9c:d3:56:47:29:bb:38:ba:6d:f6:
         45:05:77:25
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDFvkVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk1
NmY4OTUzZjFkM2RjMTA1MWI0ZDk5Y2U1NTk0OGJkZDc4MWQ0NDAwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MTAwNDE3WjAzMTEwLwYDVQQDEyhjOTE2NzJjM2Y1ODgy
YWI0YmYxNzZmNWZkNTEzMWMwN2NhNTcxZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnTz3GmX8eU0ZfLv5A2uIxkibOvQ1dm6gBKIUkvPFdbH/Dm9C
w71LaYdMqw3dTsuy0WU98wVm6Bp9IpiS/DLrunzoFVVasr3U0AlCJlDRTRwmKPmy
4/cCuMbsIB6nacY4UxhfR1IZwJbGKQeZ7qG81GfwE4QSbkhX0EnxsBHqKtFcZFYy
PDc923v638QorOvh7YS+sa3+0u7htN68v00DSOvOrNxxVeXQVVFI8jYqrp5WqodY
IfKfkgB5uSnHrD0Kty4wVqaSuOPWxgWlmeEWaIaAnWPvda4LXERPCzzjwPwdwD3q
OKxxUUOxYfGLwDSpvx6fLGqz+ikdoIPwWhBcQQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDAz1Jz/ijhospHKZ762yhUJjBy4MB8GA1UdIwQYMBaAFLElEKh3VSv1WkoG
w4nBu1jMzsebMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTU2Zjg5
NTNmMWQzZGMxMDUxYjRkOTljZTU1OTQ4YmRkNzgxZDQ0MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTJmZjEzZjUtMjhlNi00ZjM0LTliNGUtNjcwNGRh
NWRmNTI3Lzk1NmY4OTUzZjFkM2RjMTA1MWI0ZDk5Y2U1NTk0OGJkZDc4MWQ0NDAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MmZmMTNmNS0yOGU2LTRmMzQtOWI0ZS02NzA0
ZGE1ZGY1MjcvOTU2Zjg5NTNmMWQzZGMxMDUxYjRkOTljZTU1OTQ4YmRkNzgxZDQ0
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAIBO2xiBnya4FtBjlzJfJzTm/ZlxZn3Ao+A9O0zyIbw5raMm
PReuyIB43bkhAv/Vg3wgt+K0laMSEqd8oObxOL4MYXlylweUZxRCOIsmVtAWPtfw
a/K7vFUaHTS2/GtQdk/Dw56fF4M68gT1IvsNN3YMlz/Bw9b3chzblMry4Jhwk68g
bgL0rUUuaHsen6YBgRdmiv2LoRbqyLO/T4Bhb1RtiI7KGIfO8qmrsiGffralcbVS
bj0Rluzf0iYxU4hpsoNkX2rAoJxUQUZ8K8oKWHrcLN9ia2oIQ0az+HRf6Nq68JsC
IOP4KAHgI+AEIH4/NDXWnNNWRym7OLpt9kUFdyU=
-----END CERTIFICATE-----