Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/4994ee0e52e1277a1f22a5f986e22d9914db47a9.mft
File:                     4994ee0e52e1277a1f22a5f986e22d9914db47a9.mft (raw, json)
Hash identifier:          yyb+IH3oHn9E5S3opF3WcOd3raoxSRmi0mBzHEspjxU=
Subject key identifier:   E1:A7:BA:BF:14:41:CD:03:AB:94:77:97:E7:5B:48:97:6E:62:81:95
Authority key identifier: 6A:9B:2A:B0:36:CB:DE:68:D8:27:18:43:08:78:B3:79:67:EF:EC:14
Certificate issuer:       /CN=4994ee0e52e1277a1f22a5f986e22d9914db47a9
Certificate serial:       09F9A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4994ee0e52e1277a1f22a5f986e22d9914db47a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/4994ee0e52e1277a1f22a5f986e22d9914db47a9.mft
Manifest number:          0525
Signing time:             Mon 15 Apr 2024 10:21:08 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 13:17:25 +0000
Files and hashes:         1: 4994ee0e52e1277a1f22a5f986e22d9914db47a9.crl (hash: ufaeZSIqW1++8w5BatcDKAJS0S7Rd/r+aCNLUe2Odvk=)
                          2: 6b13815bbdc3c4d79bfc7708189765f1a8e74b78.roa (hash: FFZmsDjDilB2CIpFcxiKxn3Mto0NdOW0Vkt6S0O1HzA=)
                          3: bd5f15eeacaf9df9834d26e94836db897972b69d.roa (hash: 33IgyuxLqg3HM86ERh1iD+BNwgpYhRJuLsjhDj7AUvA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653729 (0x9f9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4994ee0e52e1277a1f22a5f986e22d9914db47a9
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 13:17:25 2024 GMT
        Subject: CN=5b889cca03bcc090a488100de7b89d0d41d99994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:92:e1:71:14:b8:c8:f5:49:35:c5:47:14:07:
                    06:1b:7b:e1:e5:54:a5:bd:c6:16:64:56:b9:d6:dd:
                    91:98:48:62:98:91:6f:11:cb:cc:2a:8e:02:e3:d0:
                    6d:cc:fd:18:17:83:b0:08:82:59:65:ad:b9:99:13:
                    eb:d7:66:b8:7d:35:ba:4c:20:ce:af:1e:38:57:c5:
                    fa:55:01:65:51:ab:69:4f:ca:43:ba:aa:08:f4:d2:
                    05:a5:4c:76:cc:2f:30:90:02:8a:45:0b:54:e7:80:
                    47:b2:80:2a:db:b1:4b:4a:71:ff:84:ee:d2:7a:e7:
                    a7:c5:1c:53:26:3e:68:85:34:12:0e:e9:7b:79:ca:
                    22:b3:5b:b5:85:3e:30:6e:4d:29:3d:30:cc:77:60:
                    41:8d:43:92:ca:61:7c:ff:d9:35:b1:57:fb:9b:47:
                    6c:ac:c4:08:23:b4:a1:eb:4a:86:e0:e5:db:3a:0a:
                    62:21:f5:3e:99:17:bd:33:b6:d0:af:06:67:9c:af:
                    0f:fa:b1:2a:93:f1:ed:1e:d9:51:3c:4a:35:0b:10:
                    3d:90:99:6b:4b:66:c9:81:0f:23:e5:bb:57:c0:80:
                    24:5b:b4:84:00:64:e6:8f:c3:65:68:38:c3:cd:59:
                    90:a5:7d:2a:a5:e8:bd:7c:c8:69:ab:19:5a:5c:b6:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:BA:BF:14:41:CD:03:AB:94:77:97:E7:5B:48:97:6E:62:81:95
            X509v3 Authority Key Identifier:
                keyid:6A:9B:2A:B0:36:CB:DE:68:D8:27:18:43:08:78:B3:79:67:EF:EC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4994ee0e52e1277a1f22a5f986e22d9914db47a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/4994ee0e52e1277a1f22a5f986e22d9914db47a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f7f60-0dda-4f8f-81d2-390cdc5ec1ce/4994ee0e52e1277a1f22a5f986e22d9914db47a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e1:0d:fe:e6:5b:ac:ea:24:37:c3:a9:07:f6:53:60:3b:ac:
         0c:27:27:45:5c:09:d8:cc:b3:f1:4e:ee:6f:89:95:ce:33:4d:
         e3:79:f0:be:99:36:98:8d:73:8b:27:f5:5a:53:55:b2:9e:d4:
         85:7f:44:89:e7:80:70:10:95:09:35:96:ca:ba:07:0b:b2:e7:
         4e:c7:59:da:0f:be:48:53:7d:33:12:88:aa:33:c4:87:f0:48:
         cf:b2:44:96:20:b9:26:3d:22:71:98:18:66:bf:e3:ce:43:6a:
         15:34:f1:7e:0f:f2:02:76:24:4d:6f:67:ec:ba:e6:bc:0b:ab:
         d2:0d:3e:ac:f8:a5:bd:54:bd:01:7c:64:8c:11:31:f3:fe:7f:
         2c:96:f3:3d:ac:59:14:a9:b7:ca:84:77:13:bb:63:0b:cb:27:
         84:d4:f0:2c:a3:cc:5b:d0:59:b4:55:1e:05:db:a0:a1:65:26:
         79:d6:68:b0:2d:bf:73:13:0b:26:f9:35:ad:38:7b:f1:cb:50:
         66:f3:df:32:a6:dc:d6:a8:8b:3c:88:17:55:2c:3f:03:6d:aa:
         ea:65:a9:1f:1f:a0:97:77:5c:60:c7:8b:fc:6a:ef:92:bc:41:
         79:30:6d:f2:51:a4:74:83:0b:c6:f8:1b:33:94:70:7a:5c:47:
         61:cf:18:b3
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCfmhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
OTRlZTBlNTJlMTI3N2ExZjIyYTVmOTg2ZTIyZDk5MTRkYjQ3YTkwHhcNMjQwNDE1
MDkyMDI1WhcNMjQwNDE4MTMxNzI1WjAzMTEwLwYDVQQDEyg1Yjg4OWNjYTAzYmNj
MDkwYTQ4ODEwMGRlN2I4OWQwZDQxZDk5OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjJLhcRS4yPVJNcVHFAcGG3vh5VSlvcYWZFa51t2RmEhimJFv
EcvMKo4C49BtzP0YF4OwCIJZZa25mRPr12a4fTW6TCDOrx44V8X6VQFlUatpT8pD
uqoI9NIFpUx2zC8wkAKKRQtU54BHsoAq27FLSnH/hO7SeuenxRxTJj5ohTQSDul7
ecois1u1hT4wbk0pPTDMd2BBjUOSymF8/9k1sVf7m0dsrMQII7Sh60qG4OXbOgpi
IfU+mRe9M7bQrwZnnK8P+rEqk/HtHtlRPEo1CxA9kJlrS2bJgQ8j5btXwIAkW7SE
AGTmj8NlaDjDzVmQpX0qpei9fMhpqxlaXLZDPQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFOGnur8UQc0Dq5R3l+dbSJduYoGVMB8GA1UdIwQYMBaAFGqbKrA2y95o2CcY
Qwh4s3ln7+wUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDk5NGVl
MGU1MmUxMjc3YTFmMjJhNWY5ODZlMjJkOTkxNGRiNDdhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWE5ZjdmNjAtMGRkYS00ZjhmLTgxZDItMzkwY2Rj
NWVjMWNlLzQ5OTRlZTBlNTJlMTI3N2ExZjIyYTVmOTg2ZTIyZDk5MTRkYjQ3YTku
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YTlmN2Y2MC0wZGRhLTRmOGYtODFkMi0zOTBj
ZGM1ZWMxY2UvNDk5NGVlMGU1MmUxMjc3YTFmMjJhNWY5ODZlMjJkOTkxNGRiNDdh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBADjhDf7mW6zqJDfDqQf2U2A7rAwnJ0VcCdjMs/FO7m+Jlc4z
TeN58L6ZNpiNc4sn9VpTVbKe1IV/RInngHAQlQk1lsq6Bwuy507HWdoPvkhTfTMS
iKozxIfwSM+yRJYguSY9InGYGGa/485DahU08X4P8gJ2JE1vZ+y65rwLq9INPqz4
pb1UvQF8ZIwRMfP+fyyW8z2sWRSpt8qEdxO7YwvLJ4TU8CyjzFvQWbRVHgXboKFl
JnnWaLAtv3MTCyb5Na04e/HLUGbz3zKm3NaoizyIF1UsPwNtquplqR8foJd3XGDH
i/xq75K8QXkwbfJRpHSDC8b4GzOUcHpcR2HPGLM=
-----END CERTIFICATE-----