Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84f8251f-bd1d-4d19-b7fe-e91005911862/989ea633e7daf573e96420aae6397a0be425d5f7.mft
File:                     989ea633e7daf573e96420aae6397a0be425d5f7.mft (raw, json)
Hash identifier:          i+tvEkuafpdCAHE4obabrEsDG0bVeTdFlJ9cqxU46PY=
Subject key identifier:   33:6D:FE:46:B6:47:E7:EE:7B:03:D8:18:85:18:A6:92:59:78:7B:D5
Authority key identifier: 9D:C3:A5:10:A6:C7:A2:D0:9F:F6:13:CD:CA:9C:90:E2:8A:BD:AD:2B
Certificate issuer:       /CN=989ea633e7daf573e96420aae6397a0be425d5f7
Certificate serial:       07450D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/989ea633e7daf573e96420aae6397a0be425d5f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84f8251f-bd1d-4d19-b7fe-e91005911862/989ea633e7daf573e96420aae6397a0be425d5f7.mft
Manifest number:          03D8
Signing time:             Mon 15 Apr 2024 09:21:41 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:38:18 +0000
Files and hashes:         1: 989ea633e7daf573e96420aae6397a0be425d5f7.crl (hash: gTpRP9Zo0uMXdVY8aXC7IElHUVSWFU6FcfuDTJ9nWeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476429 (0x7450d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989ea633e7daf573e96420aae6397a0be425d5f7
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:38:18 2024 GMT
        Subject: CN=11e489b5c9f88ee45a0e1a9f8d4a3bb85af7e1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:e4:d6:26:b1:69:94:5c:77:12:0f:76:3e:
                    d3:08:06:d4:d7:a1:c0:6f:a7:e7:79:2d:bf:fe:c5:
                    e7:55:6c:6d:24:64:cd:35:57:91:00:4d:c2:b7:c4:
                    f7:4d:8e:64:6c:b9:24:33:3a:52:c9:aa:2e:01:8d:
                    8a:8e:56:c8:df:2c:86:51:96:b3:68:27:f9:a6:dc:
                    42:2c:b5:a4:a4:75:e2:55:fa:45:67:36:50:c7:d4:
                    7e:17:0d:f6:85:73:ba:67:97:2e:5a:c9:c2:4a:50:
                    bd:8a:40:d9:e1:da:8b:79:85:ea:f7:6d:7a:01:3b:
                    ac:95:a7:a8:21:a3:95:16:a2:ab:5f:41:69:7f:05:
                    5b:1a:2d:30:ab:c6:7c:03:79:e3:2e:97:f2:9c:12:
                    4a:b9:49:6c:d2:c2:10:c6:bb:8f:0c:0c:59:3e:d1:
                    ac:8c:c2:0e:f6:a3:85:21:39:6b:6e:d9:2c:01:be:
                    31:4a:8e:6b:62:ee:32:50:cb:57:34:d0:35:e6:28:
                    15:c6:63:76:5e:20:da:0d:fa:20:68:32:97:d5:d4:
                    23:2b:f6:e8:3a:9d:ab:c2:90:8b:95:00:d0:2e:53:
                    bf:ac:f5:4a:31:41:36:27:69:c9:08:e1:44:50:da:
                    79:57:a2:05:16:90:10:f6:af:f7:78:1e:9c:91:0c:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6D:FE:46:B6:47:E7:EE:7B:03:D8:18:85:18:A6:92:59:78:7B:D5
            X509v3 Authority Key Identifier:
                keyid:9D:C3:A5:10:A6:C7:A2:D0:9F:F6:13:CD:CA:9C:90:E2:8A:BD:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/989ea633e7daf573e96420aae6397a0be425d5f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84f8251f-bd1d-4d19-b7fe-e91005911862/989ea633e7daf573e96420aae6397a0be425d5f7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84f8251f-bd1d-4d19-b7fe-e91005911862/989ea633e7daf573e96420aae6397a0be425d5f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4f:25:1f:e4:32:90:63:44:5f:7f:7f:2e:08:de:41:9d:73:
         cf:cc:c4:ea:0d:78:60:5b:43:86:19:77:9e:a2:eb:d9:e4:75:
         68:6e:12:37:f0:a3:09:97:58:a2:42:6b:20:ac:07:84:1e:80:
         05:0e:9d:4e:9b:d0:08:15:d6:10:16:5b:35:7f:36:56:55:f9:
         bc:29:42:a8:a7:c4:24:37:9f:b9:37:cb:4b:d2:28:8d:14:7d:
         7d:22:d0:2f:86:64:ea:0b:a1:11:4a:b0:06:4e:da:5e:ad:4f:
         8f:e2:3f:70:d4:50:2b:f8:4a:11:16:2f:14:e5:1f:a3:50:d1:
         37:0d:f0:6c:5d:cd:80:fe:25:48:02:cc:3b:3b:7b:bd:79:49:
         df:a3:03:ee:ff:12:be:b7:23:a5:86:75:c3:ea:fb:c5:02:a4:
         28:a9:d1:25:b3:da:b0:70:f8:24:73:12:58:2f:4c:6e:95:34:
         7b:1d:d3:8b:1b:70:f9:cc:88:6d:48:2f:ed:cc:11:df:79:26:
         bf:36:77:d6:4a:aa:ac:26:e5:4d:86:bd:d5:95:eb:ca:82:6b:
         10:c0:89:f0:fd:67:bd:52:61:f6:01:5b:b0:fd:96:fb:84:03:
         22:6f:cd:c3:00:1e:00:d1:e7:bb:f0:7c:56:ad:64:b9:5a:38:
         7c:c3:58:dc
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDB0UNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk4
OWVhNjMzZTdkYWY1NzNlOTY0MjBhYWU2Mzk3YTBiZTQyNWQ1ZjcwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MDkzODE4WjAzMTEwLwYDVQQDEygxMWU0ODliNWM5Zjg4
ZWU0NWEwZTFhOWY4ZDRhM2JiODVhZjdlMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo8Dk1iaxaZRcdxIPdj7TCAbU16HAb6fneS2//sXnVWxtJGTN
NVeRAE3Ct8T3TY5kbLkkMzpSyaouAY2KjlbI3yyGUZazaCf5ptxCLLWkpHXiVfpF
ZzZQx9R+Fw32hXO6Z5cuWsnCSlC9ikDZ4dqLeYXq9216ATuslaeoIaOVFqKrX0Fp
fwVbGi0wq8Z8A3njLpfynBJKuUls0sIQxruPDAxZPtGsjMIO9qOFITlrbtksAb4x
So5rYu4yUMtXNNA15igVxmN2XiDaDfogaDKX1dQjK/boOp2rwpCLlQDQLlO/rPVK
MUE2J2nJCOFEUNp5V6IFFpAQ9q/3eB6ckQw+zwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDNt/ka2R+fuewPYGIUYppJZeHvVMB8GA1UdIwQYMBaAFJ3DpRCmx6LQn/YT
zcqckOKKva0rMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTg5ZWE2
MzNlN2RhZjU3M2U5NjQyMGFhZTYzOTdhMGJlNDI1ZDVmNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRmODI1MWYtYmQxZC00ZDE5LWI3ZmUtZTkxMDA1
OTExODYyLzk4OWVhNjMzZTdkYWY1NzNlOTY0MjBhYWU2Mzk3YTBiZTQyNWQ1Zjcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGY4MjUxZi1iZDFkLTRkMTktYjdmZS1lOTEw
MDU5MTE4NjIvOTg5ZWE2MzNlN2RhZjU3M2U5NjQyMGFhZTYzOTdhMGJlNDI1ZDVm
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAHRPJR/kMpBjRF9/fy4I3kGdc8/MxOoNeGBbQ4YZd56i69nk
dWhuEjfwowmXWKJCayCsB4QegAUOnU6b0AgV1hAWWzV/NlZV+bwpQqinxCQ3n7k3
y0vSKI0UfX0i0C+GZOoLoRFKsAZO2l6tT4/iP3DUUCv4ShEWLxTlH6NQ0TcN8Gxd
zYD+JUgCzDs7e715Sd+jA+7/Er63I6WGdcPq+8UCpCip0SWz2rBw+CRzElgvTG6V
NHsd04sbcPnMiG1IL+3MEd95Jr82d9ZKqqwm5U2GvdWV68qCaxDAifD9Z71SYfYB
W7D9lvuEAyJvzcMAHgDR57vwfFatZLlaOHzDWNw=
-----END CERTIFICATE-----