Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft
File:                     e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft (raw, json)
Hash identifier:          GmAri+94w/SSPd8CCaRb50+uVBoZ/l7l6vTg6hROTAU=
Subject key identifier:   64:31:FE:C3:26:FB:D5:84:BE:0E:34:50:62:11:EC:F0:00:29:E5:E7
Authority key identifier: 71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63
Certificate issuer:       /CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf
Certificate serial:       2788F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft
Manifest number:          0E18
Signing time:             Mon 15 Apr 2024 09:20:48 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:55:18 +0000
Files and hashes:         1: 370f118922072584f5eebe8a3dbae438bdf847f8.roa (hash: gk/U5i7gTKq5ehssFjud5S8NltnvmWLbjdzJCSJPQo0=)
                          2: e8b953b12842ffe0d97ca6fedbe7550e5a400acf.crl (hash: RbA7IdpEafGzKHvUR1QAmpeHUogdkYAunylDAymsFzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2590962 (0x2788f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b953b12842ffe0d97ca6fedbe7550e5a400acf
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:55:18 2024 GMT
        Subject: CN=4a455ec363fbd376568e4e332633954de44b5406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:74:5a:68:8d:68:ea:5a:85:17:92:9d:ac:
                    62:60:46:13:e1:fc:0b:d8:0f:46:be:04:e7:b3:30:
                    0a:6a:4d:65:b1:6b:4e:bb:9b:72:a4:72:94:4e:c0:
                    a0:ab:07:96:7d:35:82:b0:ce:38:1b:03:50:1a:75:
                    4b:e8:58:8c:df:2c:79:df:4a:51:53:b3:64:1a:27:
                    e9:33:55:72:b0:43:29:e6:41:9e:45:a0:69:98:b0:
                    38:8a:88:3a:1d:df:95:28:aa:00:d8:d0:11:e0:f9:
                    2f:41:76:b4:0b:71:f3:cc:3c:51:47:67:80:83:af:
                    42:d8:28:b9:8e:55:33:53:d6:61:df:c8:7b:16:0f:
                    40:39:67:76:92:66:f9:bb:8b:b1:d6:ad:d1:94:49:
                    75:e6:a7:2b:0b:ab:da:fe:b3:cb:7e:25:cc:e3:27:
                    a1:34:bf:a8:08:8b:73:95:65:a8:40:17:0d:27:f2:
                    03:7e:75:a4:fe:ae:ef:35:a1:f8:02:ec:eb:62:83:
                    1f:50:f9:c8:c7:2a:ca:a9:2f:49:57:b9:2f:4d:15:
                    63:d8:d3:26:0c:58:3a:92:60:7b:67:b6:71:00:9f:
                    ca:9d:0e:4d:ee:04:e7:a0:0a:1b:54:81:3a:7a:a4:
                    38:b2:fd:ce:06:ad:94:c8:21:5f:cb:e5:6c:af:24:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:31:FE:C3:26:FB:D5:84:BE:0E:34:50:62:11:EC:F0:00:29:E5:E7
            X509v3 Authority Key Identifier:
                keyid:71:85:EB:FB:A8:0B:53:41:D8:52:3D:48:A0:FD:52:94:2E:E5:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958c92c8-a386-49c3-9691-8ee3c4ff17ee/e8b953b12842ffe0d97ca6fedbe7550e5a400acf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:42:eb:10:fd:86:17:27:f9:42:2a:f9:b5:02:10:f8:f3:
         f1:ba:92:25:0b:6f:4e:c3:de:b3:31:13:71:03:b3:87:ec:eb:
         e5:01:22:2e:a5:bd:c2:24:cc:05:3d:93:66:f8:8d:a2:67:17:
         c9:c5:4d:1c:3f:fd:e7:c9:3f:52:b1:7c:a2:8f:72:76:85:c4:
         9f:58:2c:89:9c:f1:bb:6c:68:f4:54:5b:cd:8e:a4:93:94:f9:
         30:e4:bd:cf:74:a9:96:52:cd:25:a3:fc:29:53:35:ca:b5:48:
         68:94:ec:b1:5d:15:00:d0:ec:08:b3:82:ce:0a:6b:a9:62:1b:
         f3:60:6f:2a:72:11:2c:31:dd:7b:13:be:3a:1b:d7:38:85:85:
         d8:11:11:7d:94:46:24:6e:96:d4:21:0d:91:fc:4c:97:92:95:
         11:b8:f5:76:2e:88:de:9e:3c:65:df:53:6f:89:39:6e:00:9d:
         0e:39:d6:0d:0c:26:9b:aa:84:8c:01:2f:f2:57:c7:9f:09:c0:
         14:52:0d:4d:a2:18:6d:05:14:0b:57:3a:b2:7e:e2:58:46:db:
         e9:6b:d6:ab:bd:f7:22:4c:00:5c:67:e9:db:2b:27:24:19:99:
         59:16:8c:0a:77:8e:c2:9b:6f:46:f5:09:6a:c2:33:15:78:67:
         96:58:07:62
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJ4jyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
Yjk1M2IxMjg0MmZmZTBkOTdjYTZmZWRiZTc1NTBlNWE0MDBhY2YwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTA1NTE4WjAzMTEwLwYDVQQDEyg0YTQ1NWVjMzYzZmJk
Mzc2NTY4ZTRlMzMyNjMzOTU0ZGU0NGI1NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqFV0WmiNaOpahReSnaxiYEYT4fwL2A9GvgTnszAKak1lsWtO
u5typHKUTsCgqweWfTWCsM44GwNQGnVL6FiM3yx530pRU7NkGifpM1VysEMp5kGe
RaBpmLA4iog6Hd+VKKoA2NAR4PkvQXa0C3HzzDxRR2eAg69C2Ci5jlUzU9Zh38h7
Fg9AOWd2kmb5u4ux1q3RlEl15qcrC6va/rPLfiXM4yehNL+oCItzlWWoQBcNJ/ID
fnWk/q7vNaH4AuzrYoMfUPnIxyrKqS9JV7kvTRVj2NMmDFg6kmB7Z7ZxAJ/KnQ5N
7gTnoAobVIE6eqQ4sv3OBq2UyCFfy+VsryQ16QIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFGQx/sMm+9WEvg40UGIR7PAAKeXnMB8GA1UdIwQYMBaAFHGF6/uoC1NB2FI9
SKD9UpQu5U5jMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThiOTUz
YjEyODQyZmZlMGQ5N2NhNmZlZGJlNzU1MGU1YTQwMGFjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU4YzkyYzgtYTM4Ni00OWMzLTk2OTEtOGVlM2M0
ZmYxN2VlL2U4Yjk1M2IxMjg0MmZmZTBkOTdjYTZmZWRiZTc1NTBlNWE0MDBhY2Yu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NThjOTJjOC1hMzg2LTQ5YzMtOTY5MS04ZWUz
YzRmZjE3ZWUvZThiOTUzYjEyODQyZmZlMGQ5N2NhNmZlZGJlNzU1MGU1YTQwMGFj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAFx8QusQ/YYXJ/lCKvm1AhD48/G6kiULb07D3rMxE3EDs4fs
6+UBIi6lvcIkzAU9k2b4jaJnF8nFTRw//efJP1KxfKKPcnaFxJ9YLImc8btsaPRU
W82OpJOU+TDkvc90qZZSzSWj/ClTNcq1SGiU7LFdFQDQ7Aizgs4Ka6liG/Ngbypy
ESwx3XsTvjob1ziFhdgREX2URiRultQhDZH8TJeSlRG49XYuiN6ePGXfU2+JOW4A
nQ451g0MJpuqhIwBL/JXx58JwBRSDU2iGG0FFAtXOrJ+4lhG2+lr1qu99yJMAFxn
6dsrJyQZmVkWjAp3jsKbb0b1CWrCMxV4Z5ZYB2I=
-----END CERTIFICATE-----