Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67a1f8ed-032f-4c71-bf47-5fdd4dbfece1/474ec6caa1b5b0fda0089cc7f13761d63d204439.mft
File:                     474ec6caa1b5b0fda0089cc7f13761d63d204439.mft (raw, json)
Hash identifier:          WWGWnegYJ9vZvQDeIIUx1l11+RUtejeuMrmLhTNG1X4=
Subject key identifier:   FD:C8:A9:13:49:AD:01:22:02:52:FD:FE:8C:6E:BC:73:DF:76:62:4E
Authority key identifier: 55:3A:C3:5B:C6:2E:07:17:03:1A:61:54:AC:44:FC:AB:09:60:D2:5D
Certificate issuer:       /CN=474ec6caa1b5b0fda0089cc7f13761d63d204439
Certificate serial:       1954C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/474ec6caa1b5b0fda0089cc7f13761d63d204439.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67a1f8ed-032f-4c71-bf47-5fdd4dbfece1/474ec6caa1b5b0fda0089cc7f13761d63d204439.mft
Manifest number:          0CAD
Signing time:             Mon 15 Apr 2024 03:21:23 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:19:17 +0000
Files and hashes:         1: 00ebbf4c3e3564389b1965d23fc5dfbd85859b4b.roa (hash: sNJvGuC2JijkTjLkdLRsqCPIm822EJrzsfa4aC0fR3U=)
                          2: 474ec6caa1b5b0fda0089cc7f13761d63d204439.crl (hash: UBOu/qTXO6AXid7Mf1M7b3eydLyBAbol5PO0u41JWuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660096 (0x1954c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474ec6caa1b5b0fda0089cc7f13761d63d204439
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 06:19:17 2024 GMT
        Subject: CN=3353cdaa7f89f163a04888c40ac6b1f659e8537e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:7a:35:ba:3e:7b:3e:81:de:fa:b9:34:e0:
                    88:36:17:9e:03:b6:55:3b:e9:93:dd:a7:9f:b9:47:
                    e4:c0:1d:11:ad:3d:41:fe:16:38:10:74:f3:ef:69:
                    13:43:39:28:6b:e2:74:3b:cc:3b:61:a4:8a:e1:29:
                    0b:1b:7e:11:88:42:e1:f6:3a:b4:5c:1d:e5:86:68:
                    5d:99:47:02:63:9a:84:b4:dd:7c:aa:9a:10:0c:22:
                    11:a3:83:ca:f9:e5:9e:59:44:ae:ab:6d:24:0a:99:
                    79:bf:82:0b:cc:40:32:8b:3e:3a:aa:81:30:60:4c:
                    d7:14:f2:ba:0b:0c:ca:0c:14:23:68:d9:13:c8:63:
                    c8:1f:03:44:b1:55:31:e7:4c:05:8c:72:27:b8:2e:
                    57:b9:a1:86:7a:c3:93:1d:a3:bf:39:4a:bf:a5:99:
                    82:be:6f:d4:c4:c2:88:68:ba:1e:83:13:52:99:2e:
                    80:97:62:e8:eb:26:54:81:90:8b:6d:4a:90:24:90:
                    78:74:c6:f6:e0:21:96:e7:ff:b2:d6:1b:48:a7:8f:
                    a2:c9:87:ea:a2:0a:c1:52:46:7c:df:fe:3c:38:6e:
                    65:00:45:df:fb:dc:3e:91:15:b3:12:85:62:fb:f6:
                    10:a5:12:6f:36:af:7b:cf:da:50:e9:c9:88:a6:9d:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C8:A9:13:49:AD:01:22:02:52:FD:FE:8C:6E:BC:73:DF:76:62:4E
            X509v3 Authority Key Identifier:
                keyid:55:3A:C3:5B:C6:2E:07:17:03:1A:61:54:AC:44:FC:AB:09:60:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/474ec6caa1b5b0fda0089cc7f13761d63d204439.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67a1f8ed-032f-4c71-bf47-5fdd4dbfece1/474ec6caa1b5b0fda0089cc7f13761d63d204439.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67a1f8ed-032f-4c71-bf47-5fdd4dbfece1/474ec6caa1b5b0fda0089cc7f13761d63d204439.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:05:c1:72:0a:8c:43:26:83:20:e2:a9:79:c9:5e:f4:ee:d4:
         0d:d8:d4:d0:0b:fc:b6:27:a8:6c:d1:7e:f4:67:40:aa:7e:de:
         f4:fb:a4:f5:d8:61:c1:46:c7:3b:8d:72:88:1b:3a:22:1c:63:
         19:07:1a:e0:23:06:7b:68:30:5e:ad:f9:96:e4:00:46:51:fa:
         84:7f:7e:6f:09:2f:a8:71:06:6b:eb:f0:fe:bf:9c:d8:b6:53:
         0d:44:e1:95:a1:7e:61:75:b9:4d:b8:48:c4:04:25:26:ae:eb:
         a5:00:07:e3:b9:2e:e2:e6:c0:93:ec:8b:da:ec:1b:85:76:ff:
         96:86:80:9d:9e:77:ff:4c:74:76:11:34:71:3e:85:ea:7d:51:
         d3:1b:42:a5:c3:1a:7d:3f:e3:6a:3b:7e:ec:65:39:4a:9c:0f:
         ea:77:b2:b1:97:21:99:47:77:a6:ae:a3:19:39:ac:5e:fb:b9:
         43:c9:cc:3e:6d:d4:32:99:62:ae:af:fd:f9:f3:06:42:2d:d2:
         51:ba:21:3a:f6:80:20:99:bc:69:aa:b1:22:14:77:ea:2c:83:
         3e:3b:4e:c2:71:78:0a:4f:56:ad:c1:9c:8d:52:f6:31:5c:6a:
         94:62:ac:40:14:15:b3:bf:59:7f:f9:9f:f6:ef:cb:d0:f3:3a:
         91:11:b7:2c
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDGVTAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
NGVjNmNhYTFiNWIwZmRhMDA4OWNjN2YxMzc2MWQ2M2QyMDQ0MzkwHhcNMjQwNDE1
MDIyMDE3WhcNMjQwNDE4MDYxOTE3WjAzMTEwLwYDVQQDEygzMzUzY2RhYTdmODlm
MTYzYTA0ODg4YzQwYWM2YjFmNjU5ZTg1MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg/R6Nbo+ez6B3vq5NOCINheeA7ZVO+mT3aefuUfkwB0RrT1B
/hY4EHTz72kTQzkoa+J0O8w7YaSK4SkLG34RiELh9jq0XB3lhmhdmUcCY5qEtN18
qpoQDCIRo4PK+eWeWUSuq20kCpl5v4ILzEAyiz46qoEwYEzXFPK6CwzKDBQjaNkT
yGPIHwNEsVUx50wFjHInuC5XuaGGesOTHaO/OUq/pZmCvm/UxMKIaLoegxNSmS6A
l2Lo6yZUgZCLbUqQJJB4dMb24CGW5/+y1htIp4+iyYfqogrBUkZ83/48OG5lAEXf
+9w+kRWzEoVi+/YQpRJvNq97z9pQ6cmIpp1VdwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFP3IqRNJrQEiAlL9/oxuvHPfdmJOMB8GA1UdIwQYMBaAFFU6w1vGLgcXAxph
VKxE/KsJYNJdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDc0ZWM2
Y2FhMWI1YjBmZGEwMDg5Y2M3ZjEzNzYxZDYzZDIwNDQzOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdhMWY4ZWQtMDMyZi00YzcxLWJmNDctNWZkZDRk
YmZlY2UxLzQ3NGVjNmNhYTFiNWIwZmRhMDA4OWNjN2YxMzc2MWQ2M2QyMDQ0Mzku
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2ExZjhlZC0wMzJmLTRjNzEtYmY0Ny01ZmRk
NGRiZmVjZTEvNDc0ZWM2Y2FhMWI1YjBmZGEwMDg5Y2M3ZjEzNzYxZDYzZDIwNDQz
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAHgFwXIKjEMmgyDiqXnJXvTu1A3Y1NAL/LYnqGzRfvRnQKp+
3vT7pPXYYcFGxzuNcogbOiIcYxkHGuAjBntoMF6t+ZbkAEZR+oR/fm8JL6hxBmvr
8P6/nNi2Uw1E4ZWhfmF1uU24SMQEJSau66UAB+O5LuLmwJPsi9rsG4V2/5aGgJ2e
d/9MdHYRNHE+hep9UdMbQqXDGn0/42o7fuxlOUqcD+p3srGXIZlHd6auoxk5rF77
uUPJzD5t1DKZYq6v/fnzBkIt0lG6ITr2gCCZvGmqsSIUd+osgz47TsJxeApPVq3B
nI1S9jFcapRirEAUFbO/WX/5n/bvy9DzOpERtyw=
-----END CERTIFICATE-----