Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.mft
File:                     ca3e60b9e70de193811d28eb980481081c28545b.mft (raw, json)
Hash identifier:          HtHampMPHcXN0cNmVt8F8VuNlTbsNZeWykkGvg6FnGs=
Subject key identifier:   0A:CC:54:43:83:20:1E:F0:65:44:F7:30:3C:8C:16:5D:81:13:BA:A0
Authority key identifier: 55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
Certificate issuer:       /CN=ca3e60b9e70de193811d28eb980481081c28545b
Certificate serial:       12F705
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.mft
Manifest number:          09AF
Signing time:             Mon 15 Apr 2024 06:20:56 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:46:39 +0000
Files and hashes:         1: 1de710dc16bb92a421fc5738a3e88bf52a4a5396.roa (hash: hZhXrs56HtLN8D4ExvrSd9eh2hc0dblQPCpJV6acCtQ=)
                          2: 47d12964732ae0b5f27db126880d04fc702f8f85.roa (hash: NzePO0gKqCS3VXJ/hgrx75UFIBvbHHLN2tQ6l6sLUIQ=)
                          3: 5f76aa1c55ba39a20ac12ec117d5d41e7ca62013.roa (hash: 9qcVM1+0BCl5zSwOOtG/Cw0sh0y6Zhm4YT/cawU57vI=)
                          4: 95fdfd4e9b9baee8c0365e19429bc1d7768e4047.roa (hash: WdW2yWQovwmqlCpCbjYLHIo+3Dqd4O92FirpZ9DH1XE=)
                          5: ca3e60b9e70de193811d28eb980481081c28545b.crl (hash: 8fbtr/w/lwqByeHKQHXNjLxmfNfKUGN0mBC8yw2Eh6M=)
                          6: e643bddd421dbccf95432c0ae3f5e0625e7422f1.roa (hash: +BjvELS0AGcO8nsenkdtD5fZMiQScPVT1MEb6RHwyHY=)
                          7: ff06c6635f391e22c0615b1ac2c3a7b0a53e0dcc.roa (hash: jC4cpUA2VIiu8URN4rzhxuyYADFYrROsd8WwbAlD70Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242885 (0x12f705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3e60b9e70de193811d28eb980481081c28545b
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:46:39 2024 GMT
        Subject: CN=fcbc6697aea7e83949af17752740e7d5400c408e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:c1:41:ed:6a:16:c4:0b:dc:fe:7f:db:68:
                    37:cb:1c:30:3e:27:8d:0d:41:ce:39:f6:8d:ce:da:
                    19:72:18:47:62:fd:3b:ba:d7:d8:d3:33:60:3f:b4:
                    b3:88:c8:31:0f:57:2f:1e:46:2e:96:ae:f4:67:19:
                    90:c1:02:6d:b0:b2:9c:24:cc:fd:0a:32:ed:d7:ff:
                    6f:db:aa:72:ce:8c:1d:e6:a6:b9:13:90:c0:bf:a1:
                    5c:88:3b:15:a4:30:98:ed:58:c9:82:f7:8b:49:6c:
                    50:6c:4d:b6:ba:a6:ed:22:f9:2d:f0:c6:02:f2:2b:
                    4e:f6:75:4f:2d:9a:5a:f2:09:8a:f0:9a:1b:f2:a0:
                    21:1f:91:ed:5a:1a:b1:ca:3b:4d:63:36:a3:41:5e:
                    d6:1f:e3:28:1c:f0:fe:d1:df:37:ec:25:30:69:e8:
                    fc:94:e8:0e:d3:19:92:2a:7d:f3:f5:58:34:cb:3a:
                    e1:e4:b7:52:01:39:3b:8a:2c:f8:07:99:ce:67:9c:
                    f6:b4:56:c5:11:ed:36:2e:4f:ae:cd:6f:c4:18:d2:
                    f2:6b:42:ab:6c:bd:9f:5e:a3:87:b8:65:ed:87:f0:
                    96:3f:fa:23:e1:90:99:83:5a:a5:ba:28:c1:a7:21:
                    af:24:2e:c7:d4:74:69:fa:36:4b:a3:ae:ab:db:2c:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CC:54:43:83:20:1E:F0:65:44:F7:30:3C:8C:16:5D:81:13:BA:A0
            X509v3 Authority Key Identifier:
                keyid:55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:72:5e:62:90:2d:f9:47:f5:6a:95:09:79:ef:93:e9:20:4a:
         e6:ee:f8:4a:c2:01:37:f0:85:2c:70:34:28:61:ee:2d:dd:d2:
         aa:44:b8:3f:06:66:d1:79:1f:91:6b:f6:d5:28:f3:c2:31:49:
         f9:45:2c:4f:40:86:bf:c8:81:25:68:68:cf:b4:3b:c1:e0:32:
         eb:6b:6c:60:2d:80:c0:dc:61:28:51:37:ff:1c:13:ec:da:5d:
         31:17:2f:2b:65:d2:7c:28:30:fa:2e:79:1b:f6:75:17:3d:60:
         9f:c7:0e:25:4f:bf:f6:e6:1f:83:46:b5:4b:a0:20:f7:98:70:
         cf:2c:42:6c:40:5f:58:23:38:87:fd:fc:96:c8:5d:2e:b8:33:
         f6:9b:6e:2d:57:eb:2b:ad:8c:12:aa:ac:14:0e:65:f8:e5:73:
         f4:43:38:08:ab:5b:70:c2:db:ea:da:53:67:13:61:f6:a2:1a:
         df:62:db:53:41:65:90:4d:7d:26:c6:96:c2:09:14:85:75:a1:
         d5:92:56:18:04:75:30:a2:76:62:47:cb:dd:ad:35:bd:a3:03:
         c8:44:ae:fa:8c:8c:87:52:e6:12:c9:c8:4a:9c:92:13:a8:38:
         d5:6b:cd:eb:b4:19:ba:7d:19:09:93:d3:55:c1:c1:a6:7b:73:
         62:70:59:64
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDEvcFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
M2U2MGI5ZTcwZGUxOTM4MTFkMjhlYjk4MDQ4MTA4MWMyODU0NWIwHhcNMjQwNDE1
MDUyMDM5WhcNMjQwNDE4MDc0NjM5WjAzMTEwLwYDVQQDEyhmY2JjNjY5N2FlYTdl
ODM5NDlhZjE3NzUyNzQwZTdkNTQwMGM0MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhoHBQe1qFsQL3P5/22g3yxwwPieNDUHOOfaNztoZchhHYv07
utfY0zNgP7SziMgxD1cvHkYulq70ZxmQwQJtsLKcJMz9CjLt1/9v26pyzowd5qa5
E5DAv6FciDsVpDCY7VjJgveLSWxQbE22uqbtIvkt8MYC8itO9nVPLZpa8gmK8Job
8qAhH5HtWhqxyjtNYzajQV7WH+MoHPD+0d837CUwaej8lOgO0xmSKn3z9Vg0yzrh
5LdSATk7iiz4B5nOZ5z2tFbFEe02Lk+uzW/EGNLya0KrbL2fXqOHuGXth/CWP/oj
4ZCZg1qluijBpyGvJC7H1HRp+jZLo66r2yz51QIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFArMVEODIB7wZUT3MDyMFl2BE7qgMB8GA1UdIwQYMBaAFFUJtzGQwOSfsNPv
BJDyEgExQtR5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2EzZTYw
YjllNzBkZTE5MzgxMWQyOGViOTgwNDgxMDgxYzI4NTQ1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmIwNjBjN2EtMjQ5YS00ZGUxLWIzYmMtZDM5NzE5
OTNmN2Y5L2NhM2U2MGI5ZTcwZGUxOTM4MTFkMjhlYjk4MDQ4MTA4MWMyODU0NWIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YjA2MGM3YS0yNDlhLTRkZTEtYjNiYy1kMzk3
MTk5M2Y3ZjkvY2EzZTYwYjllNzBkZTE5MzgxMWQyOGViOTgwNDgxMDgxYzI4NTQ1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGlyXmKQLflH9WqVCXnvk+kgSubu+ErCATfwhSxwNChh7i3d
0qpEuD8GZtF5H5Fr9tUo88IxSflFLE9Ahr/IgSVoaM+0O8HgMutrbGAtgMDcYShR
N/8cE+zaXTEXLytl0nwoMPoueRv2dRc9YJ/HDiVPv/bmH4NGtUugIPeYcM8sQmxA
X1gjOIf9/JbIXS64M/abbi1X6yutjBKqrBQOZfjlc/RDOAirW3DC2+raU2cTYfai
Gt9i21NBZZBNfSbGlsIJFIV1odWSVhgEdTCidmJHy92tNb2jA8hErvqMjIdS5hLJ
yEqckhOoONVrzeu0Gbp9GQmT01XBwaZ7c2JwWWQ=
-----END CERTIFICATE-----