Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/2fb556622985526f071e39da340bb282a107986e.mft
File:                     2fb556622985526f071e39da340bb282a107986e.mft (raw, json)
Hash identifier:          We3Eipoh4S6Xq1Y8tSGWyQE2Ton7DQ3YNqy2GF+aGao=
Subject key identifier:   79:0E:D3:37:04:2A:E3:75:29:41:0C:19:E4:17:C5:98:D5:80:BF:B1
Authority key identifier: A3:38:C6:1B:95:60:5A:C9:08:B7:81:80:63:5D:64:25:62:BD:3D:95
Certificate issuer:       /CN=2fb556622985526f071e39da340bb282a107986e
Certificate serial:       1313C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fb556622985526f071e39da340bb282a107986e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/2fb556622985526f071e39da340bb282a107986e.mft
Manifest number:          69
Signing time:             Mon 15 Apr 2024 08:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 11:00:16 +0000
Files and hashes:         1: 1605f1ecd03f340f24d3d84d7ea65a533fc22104.roa (hash: YQdmpgKrhib2979nW2IDJDUViyebYDfmejTEKOXAeZ4=)
                          2: 2fb556622985526f071e39da340bb282a107986e.crl (hash: EOmJbppZxH1weT35saUPlevFK29BOUTzhwsUZSrBqUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250249 (0x1313c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb556622985526f071e39da340bb282a107986e
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 11:00:16 2024 GMT
        Subject: CN=cbbe4fa125739c407bf89990e8adb8fc1276709e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:5f:b2:c1:25:c1:c5:34:fc:34:b7:b3:c7:
                    c0:43:85:b8:8f:02:09:0e:f9:9d:c4:c0:56:52:77:
                    83:af:50:05:d6:da:5c:74:97:59:66:f0:6d:58:6b:
                    c1:72:4e:f2:4c:ae:59:4b:9f:80:4b:af:58:43:70:
                    02:2d:64:38:18:f5:8e:cf:cf:8f:b7:b9:6f:ea:b5:
                    aa:12:39:b6:73:05:58:67:0e:46:08:31:93:09:0b:
                    65:54:18:af:24:5f:af:01:31:bf:6e:cb:e6:1d:a3:
                    3f:75:d4:ff:26:76:1e:71:38:cf:e8:91:a5:e2:20:
                    c4:a8:cf:d5:a0:2f:14:58:98:63:81:30:62:78:83:
                    5c:b8:9d:ed:26:7f:a0:f5:eb:4b:d8:82:f8:77:e2:
                    fc:92:cd:da:ed:93:1f:78:90:01:94:24:41:01:9a:
                    e2:e5:f9:bd:41:16:9e:ac:b9:38:e8:e6:0d:8f:2a:
                    dd:21:21:a0:b2:33:9a:8b:40:b8:43:20:55:30:50:
                    d5:61:e9:dd:0e:b5:7a:50:95:63:45:a6:91:c4:e0:
                    b7:51:53:82:a1:dc:b3:18:b6:ab:b8:4d:2c:69:3a:
                    45:b5:0a:fb:bf:7a:d7:60:51:ab:af:26:5c:d5:f1:
                    b1:35:05:80:6b:20:cc:9c:b5:dd:89:ca:75:5e:01:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0E:D3:37:04:2A:E3:75:29:41:0C:19:E4:17:C5:98:D5:80:BF:B1
            X509v3 Authority Key Identifier:
                keyid:A3:38:C6:1B:95:60:5A:C9:08:B7:81:80:63:5D:64:25:62:BD:3D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fb556622985526f071e39da340bb282a107986e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/2fb556622985526f071e39da340bb282a107986e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/2fb556622985526f071e39da340bb282a107986e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:1b:9d:6e:6c:b9:09:d5:7d:5f:ec:f3:81:59:c9:f1:34:
         87:dc:32:c1:91:b5:5f:67:4b:8c:7c:0a:22:39:58:d2:a1:bd:
         62:1c:f8:6c:33:70:3f:05:5e:57:39:b1:b6:5f:91:21:81:48:
         10:b7:84:c7:1a:b2:68:cb:d8:33:f9:42:64:d5:2d:b7:3f:1a:
         4a:f0:31:8b:8c:bb:bf:53:5b:91:4f:e0:8e:ae:98:f2:3a:ba:
         7b:a3:c6:ff:f3:67:5a:79:57:82:c3:73:3f:f1:30:45:ac:b4:
         3c:f0:62:9e:af:f0:e2:f7:34:f6:d2:00:d0:4c:63:2d:95:31:
         c1:d4:68:25:1c:2e:0e:17:9c:04:f7:c1:5c:a8:b6:d2:ec:69:
         e0:74:fc:18:c5:4c:c4:57:2d:30:82:7a:cd:da:76:df:90:52:
         ce:cf:54:48:7f:e0:35:e3:61:fa:dc:9a:7f:0e:1f:b8:f6:c4:
         60:3c:a4:90:89:49:41:2f:ca:67:90:18:05:a9:d9:70:f9:7a:
         4b:4e:63:28:e4:ce:3c:e4:e7:d8:d6:c8:00:1a:06:ab:41:ba:
         da:2b:95:db:04:e5:8e:b5:b8:f3:02:22:35:30:1b:ac:ef:99:
         d8:a4:5b:dc:ff:b6:68:ae:b5:66:98:41:dd:73:45:c4:19:0d:
         d4:d0:df:93
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDExPJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
YjU1NjYyMjk4NTUyNmYwNzFlMzlkYTM0MGJiMjgyYTEwNzk4NmUwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MTEwMDE2WjAzMTEwLwYDVQQDEyhjYmJlNGZhMTI1NzM5
YzQwN2JmODk5OTBlOGFkYjhmYzEyNzY3MDllMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlbVfssElwcU0/DS3s8fAQ4W4jwIJDvmdxMBWUneDr1AF1tpc
dJdZZvBtWGvBck7yTK5ZS5+AS69YQ3ACLWQ4GPWOz8+Pt7lv6rWqEjm2cwVYZw5G
CDGTCQtlVBivJF+vATG/bsvmHaM/ddT/JnYecTjP6JGl4iDEqM/VoC8UWJhjgTBi
eINcuJ3tJn+g9etL2IL4d+L8ks3a7ZMfeJABlCRBAZri5fm9QRaerLk46OYNjyrd
ISGgsjOai0C4QyBVMFDVYendDrV6UJVjRaaRxOC3UVOCodyzGLaruE0saTpFtQr7
v3rXYFGrryZc1fGxNQWAayDMnLXdicp1XgEGFQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFHkO0zcEKuN1KUEMGeQXxZjVgL+xMB8GA1UdIwQYMBaAFKM4xhuVYFrJCLeB
gGNdZCVivT2VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmZiNTU2
NjIyOTg1NTI2ZjA3MWUzOWRhMzQwYmIyODJhMTA3OTg2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzI2ODBhNTItZTQ2MS00OTAzLWIzYzMtNTNkNGY0
YmIzYTkyLzJmYjU1NjYyMjk4NTUyNmYwNzFlMzlkYTM0MGJiMjgyYTEwNzk4NmUu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MjY4MGE1Mi1lNDYxLTQ5MDMtYjNjMy01M2Q0
ZjRiYjNhOTIvMmZiNTU2NjIyOTg1NTI2ZjA3MWUzOWRhMzQwYmIyODJhMTA3OTg2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAI8YG51ubLkJ1X1f7POBWcnxNIfcMsGRtV9nS4x8CiI5WNKh
vWIc+GwzcD8FXlc5sbZfkSGBSBC3hMcasmjL2DP5QmTVLbc/GkrwMYuMu79TW5FP
4I6umPI6unujxv/zZ1p5V4LDcz/xMEWstDzwYp6v8OL3NPbSANBMYy2VMcHUaCUc
Lg4XnAT3wVyottLsaeB0/BjFTMRXLTCCes3adt+QUs7PVEh/4DXjYfrcmn8OH7j2
xGA8pJCJSUEvymeQGAWp2XD5ektOYyjkzjzk59jWyAAaBqtButorldsE5Y61uPMC
IjUwG6zvmdikW9z/tmiutWaYQd1zRcQZDdTQ35M=
-----END CERTIFICATE-----