Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.mft
File:                     e8fb249d4f9466e3a1a3e886e27e824279d45530.mft (raw, json)
Hash identifier:          +QeootCNDki0Iisg0c6fk5BiIofsXSnzObomg1XIA4g=
Subject key identifier:   4C:C9:7C:88:6B:A8:8C:D3:D0:83:01:EF:6F:21:B6:28:65:D7:61:37
Authority key identifier: 0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
Certificate issuer:       /CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
Certificate serial:       1727CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.mft
Manifest number:          0C18
Signing time:             Mon 15 Apr 2024 02:21:10 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 03:12:29 +0000
Files and hashes:         1: a9ce102d572b3e7ac7bbab7afd6cf427f78dfad0.roa (hash: B/s27VXmA+aV7+rgdAB7peNIVLx41TH+2IXAIenPxec=)
                          2: e8fb249d4f9466e3a1a3e886e27e824279d45530.crl (hash: GWsJSG/WgrcLfcLaFxspdvzRJHZYi+pEgcjH5WUl4g4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517515 (0x1727cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 03:12:29 2024 GMT
        Subject: CN=b9443a613e1b1973cca88b3a4a203e7778e182a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:79:87:8f:b2:3f:9a:93:71:32:e1:00:73:
                    55:32:f8:55:02:c4:13:42:1d:4a:65:77:a2:f0:93:
                    a7:32:ac:70:06:dd:93:ec:12:72:5a:8b:ae:55:ee:
                    88:53:fa:21:e9:0c:f5:74:b7:f3:7a:cc:4c:6f:72:
                    c5:7a:e9:95:4c:54:1e:68:f7:79:42:fc:2a:09:36:
                    49:8f:fa:49:2b:af:77:26:f2:5c:52:ac:7c:5d:5c:
                    93:8c:09:c3:e7:d6:33:1e:81:6f:0a:12:0a:b8:0c:
                    53:eb:00:8c:95:07:66:7f:4e:5b:b8:fd:ff:2a:a9:
                    8f:5d:9a:30:de:9b:35:eb:9a:bc:2a:0c:d5:95:5b:
                    9e:90:2f:b4:45:63:15:c2:d5:af:22:8a:51:43:ad:
                    0c:26:7b:8a:41:e5:20:a8:1e:0f:0b:73:3e:60:33:
                    fd:46:4c:f3:a0:17:80:08:8d:39:5b:0f:a4:0e:65:
                    f3:fe:a0:8a:a4:ef:5d:2b:b2:c2:da:8e:30:aa:30:
                    e2:4f:31:89:22:60:a8:45:9f:0a:d7:13:4b:a8:f3:
                    38:3c:94:bc:ca:e0:e1:9b:fc:5d:c1:0c:93:d0:c5:
                    ac:c7:af:9e:3b:d5:d5:ee:eb:b2:51:98:a0:84:6d:
                    a3:1d:1b:7b:5a:53:3f:5c:02:49:2a:c8:e8:c1:c9:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C9:7C:88:6B:A8:8C:D3:D0:83:01:EF:6F:21:B6:28:65:D7:61:37
            X509v3 Authority Key Identifier:
                keyid:0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:6f:99:ed:e0:2a:68:f3:c2:b7:a7:fb:0d:25:fc:d5:4b:
         53:c9:b9:1a:a6:f9:3f:5b:43:35:9f:60:b9:23:06:38:38:f1:
         d9:f1:66:18:59:20:71:86:d3:3c:38:8c:f9:11:11:c0:71:31:
         1b:62:61:12:97:66:51:d0:b8:94:24:b7:77:1f:d9:cf:cc:b8:
         74:c1:3f:74:4d:77:18:46:ff:96:94:56:b9:86:3f:e2:84:20:
         33:a4:f6:1e:0f:80:59:4f:85:ca:a7:f9:3b:a9:eb:3a:20:bf:
         02:49:4c:ac:4a:8e:ea:87:37:6c:32:e8:b7:48:e2:f8:92:b9:
         9b:b7:3c:7a:00:82:c3:0d:e6:12:6a:b6:0f:ef:da:a9:f3:fc:
         91:04:a2:37:8a:29:c6:69:7f:af:e7:91:8a:93:28:62:78:96:
         ff:93:2c:f5:dd:b9:43:19:20:48:2e:e7:4b:1c:13:9f:7f:96:
         a0:8e:65:b8:45:8c:59:77:cc:86:a2:de:09:c3:de:67:17:f1:
         b9:2e:82:45:cb:77:76:01:d2:6c:e1:57:c6:35:f1:9c:ba:7d:
         ce:46:f2:45:32:85:0c:fa:22:3b:0c:29:80:4a:13:d2:c3:fd:
         54:b9:33:bf:6c:06:5c:d6:a5:8b:8a:d9:e4:5d:0b:dd:2b:57:
         ca:54:58:74
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDFyfLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
ZmIyNDlkNGY5NDY2ZTNhMWEzZTg4NmUyN2U4MjQyNzlkNDU1MzAwHhcNMjQwNDE1
MDEyMDI5WhcNMjQwNDE4MDMxMjI5WjAzMTEwLwYDVQQDEyhiOTQ0M2E2MTNlMWIx
OTczY2NhODhiM2E0YTIwM2U3Nzc4ZTE4MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgY55h4+yP5qTcTLhAHNVMvhVAsQTQh1KZXei8JOnMqxwBt2T
7BJyWouuVe6IU/oh6Qz1dLfzesxMb3LFeumVTFQeaPd5QvwqCTZJj/pJK693JvJc
Uqx8XVyTjAnD59YzHoFvChIKuAxT6wCMlQdmf05buP3/KqmPXZow3ps165q8KgzV
lVuekC+0RWMVwtWvIopRQ60MJnuKQeUgqB4PC3M+YDP9RkzzoBeACI05Ww+kDmXz
/qCKpO9dK7LC2o4wqjDiTzGJImCoRZ8K1xNLqPM4PJS8yuDhm/xdwQyT0MWsx6+e
O9XV7uuyUZighG2jHRt7WlM/XAJJKsjowclRVwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFEzJfIhrqIzT0IMB728htihl12E3MB8GA1UdIwQYMBaAFA4INbhDieV+VluH
n0YCFUanGFQIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThmYjI0
OWQ0Zjk0NjZlM2ExYTNlODg2ZTI3ZTgyNDI3OWQ0NTUzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjYxNDcwMTctNDU0OS00YTI3LWE4NmItZDQ2MmIz
ODExNjEwL2U4ZmIyNDlkNGY5NDY2ZTNhMWEzZTg4NmUyN2U4MjQyNzlkNDU1MzAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NjE0NzAxNy00NTQ5LTRhMjctYTg2Yi1kNDYy
YjM4MTE2MTAvZThmYjI0OWQ0Zjk0NjZlM2ExYTNlODg2ZTI3ZTgyNDI3OWQ0NTUz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBABuMb5nt4Cpo88K3p/sNJfzVS1PJuRqm+T9bQzWfYLkjBjg4
8dnxZhhZIHGG0zw4jPkREcBxMRtiYRKXZlHQuJQkt3cf2c/MuHTBP3RNdxhG/5aU
VrmGP+KEIDOk9h4PgFlPhcqn+Tup6zogvwJJTKxKjuqHN2wy6LdI4viSuZu3PHoA
gsMN5hJqtg/v2qnz/JEEojeKKcZpf6/nkYqTKGJ4lv+TLPXduUMZIEgu50scE59/
lqCOZbhFjFl3zIai3gnD3mcX8bkugkXLd3YB0mzhV8Y18Zy6fc5G8kUyhQz6IjsM
KYBKE9LD/VS5M79sBlzWpYuK2eRdC90rV8pUWHQ=
-----END CERTIFICATE-----