Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/bd7470bf15ce9876c85e0d7efef9582f422f82e6.mft
File:                     bd7470bf15ce9876c85e0d7efef9582f422f82e6.mft (raw, json)
Hash identifier:          btIg3e4i8bu8VZYAAqJJwo6TdwVrLCQWevvAvqI9we4=
Subject key identifier:   D2:A3:5E:36:1D:A0:12:46:F6:6D:CC:87:35:25:2B:AA:29:06:EA:1C
Authority key identifier: 30:B2:26:EA:4A:C4:E7:5D:C4:06:92:9D:C2:E8:55:9B:BE:08:F6:6B
Certificate issuer:       /CN=bd7470bf15ce9876c85e0d7efef9582f422f82e6
Certificate serial:       28B15A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7470bf15ce9876c85e0d7efef9582f422f82e6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/bd7470bf15ce9876c85e0d7efef9582f422f82e6.mft
Manifest number:          0E14
Signing time:             Mon 15 Apr 2024 06:21:38 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:38:39 +0000
Files and hashes:         1: 2e3a6cfcb09b346edb041ec27b7df7deaa040ace.roa (hash: ygRXC+XnaTE2sr+pIAeaYSyy7+N2iwqg2jx+0wgqV+k=)
                          2: bd7470bf15ce9876c85e0d7efef9582f422f82e6.crl (hash: euwxPBbesg1+Xxl/GNm1oKy6oQdx86KJT68+bNfG4WQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666842 (0x28b15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7470bf15ce9876c85e0d7efef9582f422f82e6
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:38:39 2024 GMT
        Subject: CN=a7d7399c39cb5e165792f1f936e8fda74391c63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:ea:70:d3:6e:fc:e5:1b:7d:69:14:42:70:
                    31:45:3a:12:9f:0f:c1:8e:1e:aa:62:0f:75:c1:3e:
                    13:c3:b8:aa:54:8c:ca:e6:8b:b2:98:35:3b:48:42:
                    3b:66:e8:72:45:1d:b2:49:49:35:91:15:2d:b3:6a:
                    1b:dd:19:29:d2:99:5e:04:49:31:80:48:95:bc:fb:
                    a1:9f:d1:5e:3b:c9:98:c6:bb:51:98:6d:25:ab:8d:
                    4c:e2:81:6f:96:88:9d:aa:a5:ef:31:58:3f:73:82:
                    c8:11:4f:92:80:b5:91:d2:4c:0e:4a:4e:78:bb:99:
                    a1:a0:eb:a7:d5:3b:92:4a:31:76:5d:38:e0:8c:ef:
                    5f:eb:69:00:85:ba:66:ac:13:e4:62:03:ce:a0:1f:
                    1c:47:1f:81:b9:8c:15:51:22:c5:aa:08:dd:9f:f4:
                    17:11:2a:8d:84:9b:d9:28:69:b4:c6:5c:da:5d:1d:
                    d3:b4:ec:4d:14:dd:96:9b:b6:b7:fc:01:78:a0:34:
                    0c:0a:0f:d3:8f:34:9f:0d:5b:42:fb:19:9d:29:90:
                    11:74:6d:bf:9e:f2:47:38:9a:6b:7c:8b:03:bd:a6:
                    56:91:27:de:78:bb:02:77:ca:5f:29:3e:59:26:eb:
                    15:39:ca:95:2b:31:17:9e:a8:4d:9e:b3:67:81:fe:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A3:5E:36:1D:A0:12:46:F6:6D:CC:87:35:25:2B:AA:29:06:EA:1C
            X509v3 Authority Key Identifier:
                keyid:30:B2:26:EA:4A:C4:E7:5D:C4:06:92:9D:C2:E8:55:9B:BE:08:F6:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7470bf15ce9876c85e0d7efef9582f422f82e6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/bd7470bf15ce9876c85e0d7efef9582f422f82e6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/bd7470bf15ce9876c85e0d7efef9582f422f82e6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:e2:4e:05:1c:a9:da:3c:d0:f9:95:6f:67:d3:d3:ac:14:
         fa:b9:75:05:05:e7:2f:86:73:94:a3:6d:78:4c:21:3d:61:97:
         46:bb:66:d6:0e:6e:ff:a4:33:87:b0:42:74:6b:3e:a0:a0:a2:
         4f:77:07:00:fb:82:82:ff:be:af:19:c8:f7:c3:07:fc:1b:38:
         be:68:ec:eb:f6:51:bf:d3:45:08:a1:33:24:9d:ec:8e:29:da:
         f3:e7:7d:96:d1:fc:a5:0c:55:3c:1f:fc:49:a5:88:57:6f:6b:
         85:e3:05:bf:09:d3:11:55:7f:a2:3c:a2:23:9b:84:79:bf:be:
         af:25:eb:d7:28:4b:a8:04:87:d3:c5:b6:ed:00:7b:de:4d:e3:
         7c:43:a4:28:e4:98:49:53:ad:a6:43:04:ad:17:aa:23:4d:d3:
         f3:fd:79:be:02:aa:36:80:4c:61:cf:3b:ae:cd:4c:ba:7e:91:
         ba:d9:12:b1:f2:42:74:dc:b0:aa:63:47:7b:d4:05:92:f5:b4:
         22:3d:22:cd:35:eb:19:2c:29:d0:ef:9b:ac:aa:76:22:82:64:
         86:27:84:76:ee:6e:a0:b6:6a:aa:61:4a:33:23:23:3f:95:15:
         27:e2:88:0c:12:b2:a7:80:7c:94:eb:97:72:c8:fe:34:28:05:
         6d:e7:66:45
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKLFaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJk
NzQ3MGJmMTVjZTk4NzZjODVlMGQ3ZWZlZjk1ODJmNDIyZjgyZTYwHhcNMjQwNDE1
MDUyMDM5WhcNMjQwNDE4MDgzODM5WjAzMTEwLwYDVQQDEyhhN2Q3Mzk5YzM5Y2I1
ZTE2NTc5MmYxZjkzNmU4ZmRhNzQzOTFjNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr/PqcNNu/OUbfWkUQnAxRToSnw/Bjh6qYg91wT4Tw7iqVIzK
5ouymDU7SEI7ZuhyRR2ySUk1kRUts2ob3Rkp0pleBEkxgEiVvPuhn9FeO8mYxrtR
mG0lq41M4oFvloidqqXvMVg/c4LIEU+SgLWR0kwOSk54u5mhoOun1TuSSjF2XTjg
jO9f62kAhbpmrBPkYgPOoB8cRx+BuYwVUSLFqgjdn/QXESqNhJvZKGm0xlzaXR3T
tOxNFN2Wm7a3/AF4oDQMCg/TjzSfDVtC+xmdKZARdG2/nvJHOJprfIsDvaZWkSfe
eLsCd8pfKT5ZJusVOcqVKzEXnqhNnrNngf4NxwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFNKjXjYdoBJG9m3MhzUlK6opBuocMB8GA1UdIwQYMBaAFDCyJupKxOddxAaS
ncLoVZu+CPZrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmQ3NDcw
YmYxNWNlOTg3NmM4NWUwZDdlZmVmOTU4MmY0MjJmODJlNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGJlN2M2MTgtN2E4Ni00NzVhLTlhNGEtMjBjZmQ1
OWVlNjZiL2JkNzQ3MGJmMTVjZTk4NzZjODVlMGQ3ZWZlZjk1ODJmNDIyZjgyZTYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YmU3YzYxOC03YTg2LTQ3NWEtOWE0YS0yMGNm
ZDU5ZWU2NmIvYmQ3NDcwYmYxNWNlOTg3NmM4NWUwZDdlZmVmOTU4MmY0MjJmODJl
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAJRt4k4FHKnaPND5lW9n09OsFPq5dQUF5y+Gc5SjbXhMIT1h
l0a7ZtYObv+kM4ewQnRrPqCgok93BwD7goL/vq8ZyPfDB/wbOL5o7Ov2Ub/TRQih
MySd7I4p2vPnfZbR/KUMVTwf/EmliFdva4XjBb8J0xFVf6I8oiObhHm/vq8l69co
S6gEh9PFtu0Ae95N43xDpCjkmElTraZDBK0XqiNN0/P9eb4CqjaATGHPO67NTLp+
kbrZErHyQnTcsKpjR3vUBZL1tCI9Is016xksKdDvm6yqdiKCZIYnhHbubqC2aqph
SjMjIz+VFSfiiAwSsqeAfJTrl3LI/jQoBW3nZkU=
-----END CERTIFICATE-----