Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.mft
File:                     71dea23d89f89e25e8692a6c0b1c413e909da1ca.mft (raw, json)
Hash identifier:          f58p1RZ5QC/PLTwLr/GIPZ+/EnUu0vktROEcNI63mDo=
Subject key identifier:   F3:3E:89:7C:A8:25:5E:85:4C:41:2B:BC:30:A0:F9:E6:33:66:C1:16
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       2645A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.mft
Manifest number:          0E1E
Signing time:             Mon 15 Apr 2024 08:21:23 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 10:00:16 +0000
Files and hashes:         1: 0bb5ad9c4a8ef70811d72bc4ebb7a22b2e25d8e0.roa (hash: AwgBTMvc+/xsjdy1CmTkFDdwb7Nt6FWlvENebB4lGLQ=)
                          2: 227c7f3cf39897d646da669d36720413c27a2d96.roa (hash: xgb/YUp4OmIb+ORhIQhZbsf2bBMwV8JHJWqjivHQRkc=)
                          3: 71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl (hash: FOv+2JYK5gHVU+Bh49Rwcrosn7WX40Q+6qXwFg6/3JI=)
                          4: ab6e1b2c5635e4fcbcbcf3653de539fdef075af8.roa (hash: LyeYKnSua3IyA2hi9gyRHWKfPM2+4FNBL9NIMaXGmJM=)
                          5: ac3e34ccad1eed457d891aabfd7028190014857d.roa (hash: OaJKpr0l8dOQleB+MezIgBt1efvExzcT9AF7a/XSDfg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2508199 (0x2645a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 10:00:16 2024 GMT
        Subject: CN=8ac0402637552def3efad80cbef2305de181d4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:46:84:ec:92:bb:1a:77:58:cb:a7:07:e8:
                    55:56:0a:d1:fe:96:da:68:d7:cb:b3:e8:7f:75:1a:
                    73:a4:c8:8b:be:f3:76:34:d1:a7:66:80:26:22:b4:
                    f8:bb:61:70:5f:61:bd:42:41:21:4b:a3:16:f5:ab:
                    da:26:11:91:0b:c7:90:8b:f5:be:3b:6c:a9:6b:2e:
                    e5:68:b2:46:05:b9:a6:fd:a7:05:32:28:c0:c1:dc:
                    43:1a:ae:ab:e6:a4:fb:1f:e2:67:70:66:4a:f6:c0:
                    c9:25:44:de:9e:73:21:37:cf:d2:4e:9c:f5:57:99:
                    33:bb:f2:c2:0e:50:4b:b3:b2:34:7c:9b:7c:a4:6d:
                    df:28:60:1c:6c:05:09:c9:d0:36:bb:d4:c2:19:a3:
                    33:c6:3d:72:91:7e:0c:4e:33:29:a0:e6:31:ae:fb:
                    d9:f4:97:2b:5a:b0:cd:89:a7:7a:61:cb:8f:09:58:
                    f2:a3:50:f5:88:fc:66:92:c6:85:35:86:ee:42:c3:
                    45:e4:15:cf:77:81:18:f6:a6:e9:73:2f:a1:12:c2:
                    19:56:31:4b:b6:02:51:c9:b1:e1:18:4d:cc:a7:e0:
                    7d:37:07:f0:15:80:bc:68:ef:c5:76:67:93:3b:be:
                    18:02:e0:57:d5:76:78:2b:39:3e:8f:35:a2:31:74:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3E:89:7C:A8:25:5E:85:4C:41:2B:BC:30:A0:F9:E6:33:66:C1:16
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:98:b1:64:85:c9:ea:fc:f7:63:77:59:15:61:85:d8:8c:d7:
         75:91:d9:6f:e4:20:29:c6:f1:17:a2:24:51:7d:82:df:05:9d:
         c6:9c:d7:17:aa:5b:61:09:58:fe:54:57:89:cc:b2:eb:cb:70:
         b9:46:b2:ca:e3:bd:d2:f0:db:9a:5b:e3:68:5e:91:01:5a:9c:
         60:39:2e:7a:17:2b:da:f5:4e:45:06:eb:22:fa:bb:37:03:31:
         ec:13:5e:a4:d5:a9:17:0a:90:04:11:0e:01:07:a3:36:21:2d:
         4a:11:2a:53:41:47:69:25:7e:21:96:a4:ec:8c:f8:d4:b3:90:
         f0:58:19:ee:56:d6:f9:00:06:18:04:19:7d:7a:f5:af:a9:13:
         dc:c9:6a:36:43:b9:6f:f4:29:a7:4f:ea:6b:ed:38:20:07:8d:
         3e:0b:6c:10:7a:d4:70:d2:6a:a2:0b:81:dd:da:cd:da:b8:1d:
         c5:85:93:41:36:ac:b3:1e:22:a1:e7:f2:ba:89:2a:81:59:df:
         70:b6:1b:07:db:41:b1:e1:b3:0a:a3:26:f0:81:78:7f:54:ea:
         33:1b:f1:f1:54:30:6a:d1:21:8c:c0:3d:11:dc:ef:1d:e0:62:
         53:02:09:20:f2:84:dc:7c:a8:7b:44:aa:e5:66:e3:29:78:47:
         79:0a:28:d6
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJkWnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
ZGVhMjNkODlmODllMjVlODY5MmE2YzBiMWM0MTNlOTA5ZGExY2EwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MTAwMDE2WjAzMTEwLwYDVQQDEyg4YWMwNDAyNjM3NTUy
ZGVmM2VmYWQ4MGNiZWYyMzA1ZGUxODFkNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmzBGhOySuxp3WMunB+hVVgrR/pbaaNfLs+h/dRpzpMiLvvN2
NNGnZoAmIrT4u2FwX2G9QkEhS6MW9avaJhGRC8eQi/W+O2ypay7laLJGBbmm/acF
MijAwdxDGq6r5qT7H+JncGZK9sDJJUTennMhN8/STpz1V5kzu/LCDlBLs7I0fJt8
pG3fKGAcbAUJydA2u9TCGaMzxj1ykX4MTjMpoOYxrvvZ9JcrWrDNiad6YcuPCVjy
o1D1iPxmksaFNYbuQsNF5BXPd4EY9qbpcy+hEsIZVjFLtgJRybHhGE3Mp+B9Nwfw
FYC8aO/FdmeTO74YAuBX1XZ4Kzk+jzWiMXQ5RwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFPM+iXyoJV6FTEErvDCg+eYzZsEWMB8GA1UdIwQYMBaAFLmaRc/clgAPAvwG
bM+YWfBSwphfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzFkZWEy
M2Q4OWY4OWUyNWU4NjkyYTZjMGIxYzQxM2U5MDlkYTFjYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVlODc1MmQtM2I5ZC00OTBhLWI4OGYtODE1MTM4
MDZjNGRhLzcxZGVhMjNkODlmODllMjVlODY5MmE2YzBiMWM0MTNlOTA5ZGExY2Eu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWU4NzUyZC0zYjlkLTQ5MGEtYjg4Zi04MTUx
MzgwNmM0ZGEvNzFkZWEyM2Q4OWY4OWUyNWU4NjkyYTZjMGIxYzQxM2U5MDlkYTFj
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAAmYsWSFyer892N3WRVhhdiM13WR2W/kICnG8ReiJFF9gt8F
ncac1xeqW2EJWP5UV4nMsuvLcLlGssrjvdLw25pb42hekQFanGA5LnoXK9r1TkUG
6yL6uzcDMewTXqTVqRcKkAQRDgEHozYhLUoRKlNBR2klfiGWpOyM+NSzkPBYGe5W
1vkABhgEGX169a+pE9zJajZDuW/0KadP6mvtOCAHjT4LbBB61HDSaqILgd3azdq4
HcWFk0E2rLMeIqHn8rqJKoFZ33C2GwfbQbHhswqjJvCBeH9U6jMb8fFUMGrRIYzA
PRHc7x3gYlMCCSDyhNx8qHtEquVm4yl4R3kKKNY=
-----END CERTIFICATE-----