Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c33718f-fc58-4edd-9bec-28312459ee34/67d53affef11c516462c0e074e52840a3c1f0661.mft
File:                     67d53affef11c516462c0e074e52840a3c1f0661.mft (raw, json)
Hash identifier:          8u2LYbQjACoJ/+Hf5BeWQi8Q7HMYvoLkPkwvpTSVe/Y=
Subject key identifier:   86:53:EF:8E:AF:D6:12:4D:E5:7A:62:57:FF:38:CE:8E:45:4B:8F:B8
Authority key identifier: 5A:F5:BD:C8:E8:D4:4D:65:6E:D1:9C:20:D8:06:9C:58:80:82:B2:19
Certificate issuer:       /CN=67d53affef11c516462c0e074e52840a3c1f0661
Certificate serial:       26EDCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/67d53affef11c516462c0e074e52840a3c1f0661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c33718f-fc58-4edd-9bec-28312459ee34/67d53affef11c516462c0e074e52840a3c1f0661.mft
Manifest number:          0DF3
Signing time:             Mon 15 Apr 2024 09:21:02 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:48:18 +0000
Files and hashes:         1: 67d53affef11c516462c0e074e52840a3c1f0661.crl (hash: wQVqbJDMrgGTR2tyligAJ0vTpx096+aWWD/BjECKJ/c=)
                          2: dd5490a66175a2b3feefecb1233d8a2ec8de084f.roa (hash: 1IydpW9T46iJftFJbpt0w18C45f2jos8WCaoXv7255U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551244 (0x26edcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d53affef11c516462c0e074e52840a3c1f0661
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:48:18 2024 GMT
        Subject: CN=bfda0e649c21c6ede0c668fb705aa449ef1a51a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:3d:45:73:a0:45:00:97:63:30:0c:35:02:
                    6d:61:67:45:28:8b:6e:4c:09:32:80:34:b7:5f:8d:
                    a7:d1:35:be:0f:53:b8:c7:f3:1c:58:c1:48:29:e3:
                    1a:0b:30:64:1d:0b:25:45:72:62:06:93:3a:ce:dd:
                    15:c2:e8:23:40:da:12:c3:89:79:14:f9:fb:e5:9c:
                    36:7b:54:b6:7f:de:f9:51:31:54:31:42:34:0f:6e:
                    35:a2:33:47:3c:d1:8d:cc:3b:93:f0:fc:af:b5:6d:
                    40:b3:c5:1f:94:ba:c7:82:cd:a6:00:d5:bc:bc:fa:
                    bb:d2:52:f7:3e:46:1b:47:11:55:56:cb:1f:3f:30:
                    c2:e6:77:53:4f:3e:85:ce:9f:f3:82:22:2e:61:f1:
                    26:3c:eb:e2:95:aa:97:98:e5:77:f8:69:46:4f:cd:
                    4a:44:11:02:4a:73:e3:aa:ab:db:51:09:4e:4d:61:
                    8b:6c:53:29:28:15:6a:0d:cd:bd:35:74:b5:e0:f9:
                    78:a7:d2:a0:95:0a:3d:64:97:27:63:8d:0b:66:6b:
                    de:c8:58:2c:71:d0:68:b6:68:63:f8:86:11:d6:6d:
                    8d:da:1a:cd:c1:b5:b1:94:a9:97:1b:51:26:64:91:
                    90:b5:37:65:30:b9:bb:2a:e7:38:9f:bb:4e:12:1c:
                    44:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:53:EF:8E:AF:D6:12:4D:E5:7A:62:57:FF:38:CE:8E:45:4B:8F:B8
            X509v3 Authority Key Identifier:
                keyid:5A:F5:BD:C8:E8:D4:4D:65:6E:D1:9C:20:D8:06:9C:58:80:82:B2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/67d53affef11c516462c0e074e52840a3c1f0661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c33718f-fc58-4edd-9bec-28312459ee34/67d53affef11c516462c0e074e52840a3c1f0661.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c33718f-fc58-4edd-9bec-28312459ee34/67d53affef11c516462c0e074e52840a3c1f0661.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:17:f4:a2:80:5e:13:ce:d4:18:b6:a8:63:61:6b:c1:f2:
         d1:b5:c7:91:10:c7:21:7c:ef:f9:84:00:dd:9c:85:55:9c:08:
         e8:b1:ee:7c:39:44:99:a0:15:dd:b1:57:e8:34:d6:c0:65:b6:
         75:25:be:ce:88:d5:62:21:44:dd:be:8c:11:bd:70:f2:42:a7:
         e0:35:f0:2d:e8:cf:ef:2a:5b:73:88:ae:1d:35:65:4b:a9:27:
         95:48:b5:c8:37:3d:8e:e9:40:c3:e1:a2:2f:89:17:84:7b:2b:
         67:6a:0c:9a:20:5d:4d:57:ba:31:6f:2d:d3:80:30:13:af:9d:
         c8:0b:74:cc:39:ba:6f:5d:63:8b:7b:7e:78:7f:03:49:48:f5:
         04:e7:d9:c2:cb:74:6b:a3:25:23:b8:e3:79:ca:a2:98:b9:55:
         8f:b0:7e:76:f5:95:3a:34:e4:46:65:b9:19:ec:e7:59:0c:7a:
         a8:26:da:0d:55:bf:04:93:d6:6e:47:bb:77:2c:3b:72:df:00:
         d9:c4:75:17:c8:b3:25:52:7a:21:e5:d1:b9:db:50:f9:fc:bb:
         69:05:01:fa:5c:87:77:12:6d:c1:cf:fc:71:fd:3b:4f:72:21:
         1d:76:a6:7b:42:3d:91:c7:f3:e9:e0:27:49:0b:5e:c5:f6:e3:
         b3:67:4a:c1
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJu3MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY3
ZDUzYWZmZWYxMWM1MTY0NjJjMGUwNzRlNTI4NDBhM2MxZjA2NjEwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTA0ODE4WjAzMTEwLwYDVQQDEyhiZmRhMGU2NDljMjFj
NmVkZTBjNjY4ZmI3MDVhYTQ0OWVmMWE1MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgI89RXOgRQCXYzAMNQJtYWdFKItuTAkygDS3X42n0TW+D1O4
x/McWMFIKeMaCzBkHQslRXJiBpM6zt0VwugjQNoSw4l5FPn75Zw2e1S2f975UTFU
MUI0D241ojNHPNGNzDuT8PyvtW1As8UflLrHgs2mANW8vPq70lL3PkYbRxFVVssf
PzDC5ndTTz6Fzp/zgiIuYfEmPOvilaqXmOV3+GlGT81KRBECSnPjqqvbUQlOTWGL
bFMpKBVqDc29NXS14Pl4p9KglQo9ZJcnY40LZmveyFgscdBotmhj+IYR1m2N2hrN
wbWxlKmXG1EmZJGQtTdlMLm7Kuc4n7tOEhxEXQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFIZT746v1hJN5XpiV/84zo5FS4+4MB8GA1UdIwQYMBaAFFr1vcjo1E1lbtGc
INgGnFiAgrIZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjdkNTNh
ZmZlZjExYzUxNjQ2MmMwZTA3NGU1Mjg0MGEzYzFmMDY2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmMzMzcxOGYtZmM1OC00ZWRkLTliZWMtMjgzMTI0
NTllZTM0LzY3ZDUzYWZmZWYxMWM1MTY0NjJjMGUwNzRlNTI4NDBhM2MxZjA2NjEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzMzNzE4Zi1mYzU4LTRlZGQtOWJlYy0yODMx
MjQ1OWVlMzQvNjdkNTNhZmZlZjExYzUxNjQ2MmMwZTA3NGU1Mjg0MGEzYzFmMDY2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAJ0SF/SigF4TztQYtqhjYWvB8tG1x5EQxyF87/mEAN2chVWc
COix7nw5RJmgFd2xV+g01sBltnUlvs6I1WIhRN2+jBG9cPJCp+A18C3oz+8qW3OI
rh01ZUupJ5VItcg3PY7pQMPhoi+JF4R7K2dqDJogXU1XujFvLdOAMBOvncgLdMw5
um9dY4t7fnh/A0lI9QTn2cLLdGujJSO443nKopi5VY+wfnb1lTo05EZluRns51kM
eqgm2g1VvwST1m5Hu3csO3LfANnEdRfIsyVSeiHl0bnbUPn8u2kFAfpch3cSbcHP
/HH9O09yIR12pntCPZHH8+ngJ0kLXsX247NnSsE=
-----END CERTIFICATE-----