Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/72201ce88caa8d6bed08962d2748088a683dfa85.mft
File:                     72201ce88caa8d6bed08962d2748088a683dfa85.mft (raw, json)
Hash identifier:          iDokFXG7TKknfdX+SUUBEDlLNnwm2Peg/F7rNN052Ss=
Subject key identifier:   E3:9A:C7:2F:53:C6:9C:2E:99:A9:09:FB:E1:1A:76:83:2F:68:7A:0A
Authority key identifier: 52:EB:65:C3:55:06:AE:0F:46:15:3A:00:53:32:2A:5A:86:CD:B3:8A
Certificate issuer:       /CN=72201ce88caa8d6bed08962d2748088a683dfa85
Certificate serial:       21149D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72201ce88caa8d6bed08962d2748088a683dfa85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/72201ce88caa8d6bed08962d2748088a683dfa85.mft
Manifest number:          0DF2
Signing time:             Mon 15 Apr 2024 04:21:08 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 06:49:26 +0000
Files and hashes:         1: 72201ce88caa8d6bed08962d2748088a683dfa85.crl (hash: bcpSJzppYQn1nJVlnNz3ddq6g/s2nJbPZlsxZl5YPvk=)
                          2: 83aaf4fe840568f4e712624c077f412d05cef870.roa (hash: qK1O4l2W2pfrqTmFyqVwazfJEI6ZA0H5unQC8CS/hbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167965 (0x21149d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72201ce88caa8d6bed08962d2748088a683dfa85
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 06:49:26 2024 GMT
        Subject: CN=b9ad9be90942b01411854053053bcf061f439bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:8d:bc:ff:8c:cb:df:63:a9:e5:84:bb:4e:
                    df:43:b1:3b:44:10:4c:08:8c:82:f3:53:e3:67:08:
                    3a:e4:79:f0:06:0e:a5:07:79:dc:ed:8e:6f:70:3f:
                    86:4a:e6:14:34:b0:6a:de:21:ec:9c:b5:41:8a:fe:
                    1a:93:60:03:ca:d5:c2:9a:fe:54:a2:2f:25:a0:7c:
                    ff:dc:68:79:e5:14:10:d4:dc:2c:c6:85:b5:90:9b:
                    ed:b5:6c:08:6a:06:42:97:28:17:2b:d4:b1:08:e0:
                    78:66:72:99:3b:8b:c7:3a:9f:c9:15:57:1d:56:b0:
                    ed:38:f6:05:3e:80:d6:60:6b:39:ed:31:a6:2c:4a:
                    0a:e7:2d:77:d1:8f:84:7b:32:d6:3b:c3:5d:00:f2:
                    2f:90:70:72:bb:78:99:99:dc:60:53:ad:e8:d2:d0:
                    14:ce:b9:38:fc:f7:dc:13:ad:72:34:7c:c6:f3:b1:
                    ad:21:44:ec:57:a4:1c:1a:51:df:9f:62:3f:cb:de:
                    38:ad:5e:c3:1d:92:c1:16:94:20:de:1a:d8:f3:7e:
                    c5:88:ed:03:ba:15:91:c0:7a:7c:a1:a5:9b:cb:f5:
                    8a:b8:22:95:f4:68:2c:74:91:20:77:e5:a9:0a:38:
                    f2:21:ae:88:ea:9a:b1:e5:b7:df:f4:42:eb:e7:e2:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9A:C7:2F:53:C6:9C:2E:99:A9:09:FB:E1:1A:76:83:2F:68:7A:0A
            X509v3 Authority Key Identifier:
                keyid:52:EB:65:C3:55:06:AE:0F:46:15:3A:00:53:32:2A:5A:86:CD:B3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72201ce88caa8d6bed08962d2748088a683dfa85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/72201ce88caa8d6bed08962d2748088a683dfa85.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/72201ce88caa8d6bed08962d2748088a683dfa85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:97:27:f3:1d:e4:02:9b:bd:ea:d9:fd:8d:ba:d4:a2:cf:
         0e:1e:73:88:ad:78:a9:cc:36:e1:db:cd:4b:da:83:ee:0a:58:
         83:b3:1c:13:ac:09:05:b3:21:cb:1a:00:25:3d:cd:9b:05:91:
         10:19:fc:92:ad:2c:b4:e8:86:25:62:76:dc:1d:97:a9:69:2b:
         ea:24:51:ae:bf:00:50:fc:8a:2c:36:63:0e:03:9a:ed:5f:cb:
         85:d1:95:2a:c2:6b:89:b4:af:2a:ab:7a:3a:1c:92:31:d5:63:
         a0:41:cb:29:c0:30:0d:6f:79:f0:3d:da:47:47:e8:41:cb:1b:
         a1:21:fb:c3:18:c2:2a:c0:21:46:37:7f:ad:cd:44:b2:30:0b:
         69:2c:21:3b:6f:7b:59:e4:b6:ce:5c:aa:d3:ed:4f:34:15:a6:
         f3:92:54:c1:cf:19:3f:c0:70:80:83:8f:5b:29:e2:f9:1b:05:
         ea:72:9d:f9:96:95:e2:19:01:1e:ef:22:bf:25:56:72:27:6c:
         65:09:b3:27:19:6a:f7:65:39:81:f0:2b:88:26:5b:ad:e7:25:
         16:69:83:0d:88:cf:68:84:59:07:fe:83:02:1a:ac:d0:14:d0:
         b2:cf:ec:6d:eb:19:03:82:c6:c2:f6:6d:b2:db:bb:3e:06:1c:
         b9:fc:2b:9a
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIRSdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcy
MjAxY2U4OGNhYThkNmJlZDA4OTYyZDI3NDgwODhhNjgzZGZhODUwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDY0OTI2WjAzMTEwLwYDVQQDEyhiOWFkOWJlOTA5NDJi
MDE0MTE4NTQwNTMwNTNiY2YwNjFmNDM5YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx0SNvP+My99jqeWEu07fQ7E7RBBMCIyC81PjZwg65HnwBg6l
B3nc7Y5vcD+GSuYUNLBq3iHsnLVBiv4ak2ADytXCmv5Uoi8loHz/3Gh55RQQ1Nws
xoW1kJvttWwIagZClygXK9SxCOB4ZnKZO4vHOp/JFVcdVrDtOPYFPoDWYGs57TGm
LEoK5y130Y+EezLWO8NdAPIvkHByu3iZmdxgU63o0tAUzrk4/PfcE61yNHzG87Gt
IUTsV6QcGlHfn2I/y944rV7DHZLBFpQg3hrY837FiO0DuhWRwHp8oaWby/WKuCKV
9GgsdJEgd+WpCjjyIa6I6pqx5bff9ELr5+IhewIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFOOaxy9TxpwumakJ++EadoMvaHoKMB8GA1UdIwQYMBaAFFLrZcNVBq4PRhU6
AFMyKlqGzbOKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzIyMDFj
ZTg4Y2FhOGQ2YmVkMDg5NjJkMjc0ODA4OGE2ODNkZmE4NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjc2MGIzMTktMDI2Yi00NDY4LWIwMWUtYTRhNTQw
MzZmNDRiLzcyMjAxY2U4OGNhYThkNmJlZDA4OTYyZDI3NDgwODhhNjgzZGZhODUu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NzYwYjMxOS0wMjZiLTQ0NjgtYjAxZS1hNGE1
NDAzNmY0NGIvNzIyMDFjZTg4Y2FhOGQ2YmVkMDg5NjJkMjc0ODA4OGE2ODNkZmE4
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAE1clyfzHeQCm73q2f2NutSizw4ec4iteKnMNuHbzUvag+4K
WIOzHBOsCQWzIcsaACU9zZsFkRAZ/JKtLLTohiVidtwdl6lpK+okUa6/AFD8iiw2
Yw4Dmu1fy4XRlSrCa4m0ryqrejockjHVY6BByynAMA1vefA92kdH6EHLG6Eh+8MY
wirAIUY3f63NRLIwC2ksITtve1nkts5cqtPtTzQVpvOSVMHPGT/AcICDj1sp4vkb
BepynfmWleIZAR7vIr8lVnInbGUJsycZavdlOYHwK4gmW63nJRZpgw2Iz2iEWQf+
gwIarNAU0LLP7G3rGQOCxsL2bbLbuz4GHLn8K5o=
-----END CERTIFICATE-----