Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/0d1877bd36cc5ccc64afec2ed652685f0453ae84.mft
File:                     0d1877bd36cc5ccc64afec2ed652685f0453ae84.mft (raw, json)
Hash identifier:          rXp1OqizxqgX001danbXEfywO0L3BOUa4lqKztsp4a4=
Subject key identifier:   F7:3C:A3:22:E6:E6:80:D5:AC:0E:DA:AF:03:79:80:FF:4E:59:4B:95
Authority key identifier: E3:B9:A9:81:C1:3F:1A:C1:D3:30:19:F3:49:06:4A:2D:30:8D:CF:6E
Certificate issuer:       /CN=0d1877bd36cc5ccc64afec2ed652685f0453ae84
Certificate serial:       28B2FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1877bd36cc5ccc64afec2ed652685f0453ae84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/0d1877bd36cc5ccc64afec2ed652685f0453ae84.mft
Manifest number:          0DFC
Signing time:             Mon 15 Apr 2024 02:20:57 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:22:29 +0000
Files and hashes:         1: 05ef366e1825af2da94c55869a4a1962c3b6f6ec.roa (hash: gfdH0w5B0RXVCGtgKZOAOEAbekJuiidrb+8A/BVlr1Q=)
                          2: 0d1877bd36cc5ccc64afec2ed652685f0453ae84.crl (hash: b6AzzJOQToqeYDwRQyId0lZZ5rdFPg52W53RaE0sSWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2667261 (0x28b2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1877bd36cc5ccc64afec2ed652685f0453ae84
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:22:29 2024 GMT
        Subject: CN=284edac63d7ebbf1bd9f2132460de7c10f489444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:58:4d:10:75:55:3c:24:65:c8:9d:e2:84:12:
                    d8:13:b1:e9:58:77:e7:83:2d:16:cf:ad:e3:05:6a:
                    78:00:1f:86:b8:9b:d7:9f:51:1a:26:b0:1b:88:1e:
                    1e:0e:3d:de:73:55:5c:50:a8:84:50:65:69:ea:15:
                    db:a3:a9:d2:56:a4:29:54:3e:3e:ca:4d:9b:bd:cd:
                    70:0b:88:a9:49:36:2b:48:69:dd:98:5c:00:a6:06:
                    6f:5b:66:d4:6f:30:b7:ad:e0:49:69:d0:80:39:03:
                    43:2c:1d:cd:2f:90:b8:94:c0:30:9c:d7:24:10:19:
                    1f:5a:1a:d9:9c:59:0f:98:c5:58:bc:72:32:86:5a:
                    cf:20:f7:5c:6f:db:d9:b3:bb:b7:46:e9:03:22:19:
                    26:61:a9:47:19:d4:bd:28:d4:83:53:0c:5c:d7:eb:
                    a6:8d:ba:9b:23:4f:6b:78:27:49:e5:6b:60:e4:33:
                    52:8e:47:e2:0e:9a:9e:3b:57:6a:56:d4:2e:46:12:
                    18:35:e9:8a:f1:6b:2d:2e:38:6a:e9:81:59:13:68:
                    41:c2:9f:70:a3:32:dc:f7:bc:cc:d0:ee:a7:60:4a:
                    2f:43:23:4f:b3:37:7f:80:b7:95:31:4d:63:39:dc:
                    60:0f:ce:61:e1:6d:10:5e:22:3e:06:7a:4f:61:5a:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:A3:22:E6:E6:80:D5:AC:0E:DA:AF:03:79:80:FF:4E:59:4B:95
            X509v3 Authority Key Identifier:
                keyid:E3:B9:A9:81:C1:3F:1A:C1:D3:30:19:F3:49:06:4A:2D:30:8D:CF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1877bd36cc5ccc64afec2ed652685f0453ae84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/0d1877bd36cc5ccc64afec2ed652685f0453ae84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/0d1877bd36cc5ccc64afec2ed652685f0453ae84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c3:de:87:38:54:4e:35:5f:f0:50:a0:92:4a:16:c5:d5:1a:
         0f:ae:29:3d:a6:fe:b2:f1:50:38:69:26:87:aa:ad:34:bd:9e:
         9f:fa:d5:c1:eb:94:20:de:1f:86:80:eb:46:2d:ff:04:31:26:
         e6:0d:7f:b9:56:36:95:05:64:a8:07:e6:80:e1:72:3c:d6:06:
         90:55:c7:7e:32:38:6b:a8:b0:97:a1:68:12:b7:c2:2e:01:df:
         82:f8:e7:ee:0a:72:bb:58:ff:ff:0b:8c:22:ee:a9:ef:be:47:
         7b:2a:04:48:fc:cf:7c:07:7d:26:31:66:74:b7:ca:8f:42:c3:
         c2:96:82:bc:53:05:b2:f1:c5:e4:30:63:9c:92:cb:0a:a0:dc:
         89:bd:8f:bd:99:00:3e:06:a3:a6:c9:72:e8:eb:87:26:52:54:
         df:47:97:fb:df:f8:d5:61:4d:03:d4:ce:95:63:21:84:3a:0b:
         94:d3:0d:2d:05:4e:4b:1e:59:29:5e:ea:bb:06:29:8a:ad:c9:
         18:57:0b:a6:d3:eb:f6:1e:6c:3c:94:bf:79:c7:67:be:69:c6:
         6f:a4:0c:98:cd:45:90:5c:7d:70:1f:d1:18:74:4d:eb:6f:d9:
         39:8b:4d:2a:30:e6:10:f0:81:ba:5b:d9:e3:bd:4b:05:95:4f:
         dc:63:c9:0a
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKLL9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBk
MTg3N2JkMzZjYzVjY2M2NGFmZWMyZWQ2NTI2ODVmMDQ1M2FlODQwHhcNMjQwNDE1
MDEyMDI5WhcNMjQwNDE4MDQyMjI5WjAzMTEwLwYDVQQDEygyODRlZGFjNjNkN2Vi
YmYxYmQ5ZjIxMzI0NjBkZTdjMTBmNDg5NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAglhNEHVVPCRlyJ3ihBLYE7HpWHfngy0Wz63jBWp4AB+GuJvX
n1EaJrAbiB4eDj3ec1VcUKiEUGVp6hXbo6nSVqQpVD4+yk2bvc1wC4ipSTYrSGnd
mFwApgZvW2bUbzC3reBJadCAOQNDLB3NL5C4lMAwnNckEBkfWhrZnFkPmMVYvHIy
hlrPIPdcb9vZs7u3RukDIhkmYalHGdS9KNSDUwxc1+umjbqbI09reCdJ5Wtg5DNS
jkfiDpqeO1dqVtQuRhIYNemK8WstLjhq6YFZE2hBwp9wozLc97zM0O6nYEovQyNP
szd/gLeVMU1jOdxgD85h4W0QXiI+BnpPYVq+ZQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFPc8oyLm5oDVrA7arwN5gP9OWUuVMB8GA1UdIwQYMBaAFOO5qYHBPxrB0zAZ
80kGSi0wjc9uMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGQxODc3
YmQzNmNjNWNjYzY0YWZlYzJlZDY1MjY4NWYwNDUzYWU4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTQzYWNiYzUtNWY2ZC00ZTQxLWE5ZjItN2IyNDQ4
ODkzZjIwLzBkMTg3N2JkMzZjYzVjY2M2NGFmZWMyZWQ2NTI2ODVmMDQ1M2FlODQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NDNhY2JjNS01ZjZkLTRlNDEtYTlmMi03YjI0
NDg4OTNmMjAvMGQxODc3YmQzNmNjNWNjYzY0YWZlYzJlZDY1MjY4NWYwNDUzYWU4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBABfD3oc4VE41X/BQoJJKFsXVGg+uKT2m/rLxUDhpJoeqrTS9
np/61cHrlCDeH4aA60Yt/wQxJuYNf7lWNpUFZKgH5oDhcjzWBpBVx34yOGuosJeh
aBK3wi4B34L45+4KcrtY//8LjCLuqe++R3sqBEj8z3wHfSYxZnS3yo9Cw8KWgrxT
BbLxxeQwY5ySywqg3Im9j72ZAD4Go6bJcujrhyZSVN9Hl/vf+NVhTQPUzpVjIYQ6
C5TTDS0FTkseWSle6rsGKYqtyRhXC6bT6/YebDyUv3nHZ75pxm+kDJjNRZBcfXAf
0Rh0Tetv2TmLTSow5hDwgbpb2eO9SwWVT9xjyQo=
-----END CERTIFICATE-----