Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/9fec437d32aba48264306d179703acc9a82f83bf.mft
File:                     9fec437d32aba48264306d179703acc9a82f83bf.mft (raw, json)
Hash identifier:          jwQcZgusKA/PLiBDgR/eAWcctAh5Ko09vXSJqCbaj8k=
Subject key identifier:   03:99:CF:DF:5B:5D:2F:69:C3:74:13:B5:B2:3F:37:88:AA:13:F2:05
Authority key identifier: F5:9C:4E:7B:E4:22:40:A1:FC:48:47:88:B5:A5:DE:FC:97:12:D4:71
Certificate issuer:       /CN=9fec437d32aba48264306d179703acc9a82f83bf
Certificate serial:       28A8A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fec437d32aba48264306d179703acc9a82f83bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/9fec437d32aba48264306d179703acc9a82f83bf.mft
Manifest number:          0DE4
Signing time:             Mon 15 Apr 2024 04:21:42 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 06:09:26 +0000
Files and hashes:         1: 9fec437d32aba48264306d179703acc9a82f83bf.crl (hash: wnrx5r4l8oFrJcvAQmyWmnqrtIK1vmbXCPXb2UNAbpI=)
                          2: d788656ff0db075eddc7c3e2186903600ca2ada6.roa (hash: 0uEKkOKdIFefDOh6sYGYxPi/YPCyPi58kyz/h63t45Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664611 (0x28a8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fec437d32aba48264306d179703acc9a82f83bf
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 06:09:26 2024 GMT
        Subject: CN=faa492321b4e490ed0efccb1534ee6af9e2e0f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:48:8d:83:2a:ac:5a:7f:ec:1c:59:b8:72:
                    ae:85:96:ac:6a:40:66:0b:57:cc:9c:c1:4f:d3:c6:
                    71:6f:92:71:89:e1:be:d5:63:6c:45:5f:f3:29:df:
                    62:46:52:b4:6d:73:01:2a:c8:59:e2:c3:1b:91:d2:
                    92:02:28:1b:30:d7:ee:94:0d:ab:2f:2f:75:92:81:
                    53:91:00:8a:53:08:ef:05:c8:95:0f:a3:63:49:f6:
                    f8:9e:f2:65:f7:1a:f5:94:6c:03:78:8c:ed:f5:58:
                    55:78:d3:72:e6:4e:fb:08:c5:b4:2e:7e:a0:c8:21:
                    81:f3:1e:2e:ab:4b:29:dc:79:20:04:ad:b5:de:46:
                    14:90:3e:c6:5f:ef:29:78:df:59:c9:71:90:93:90:
                    42:e2:1a:02:43:27:58:2a:af:44:e4:dd:08:d6:f3:
                    58:49:71:5f:02:89:02:07:2f:d4:4f:0c:2e:eb:60:
                    d8:63:44:da:18:8c:27:68:25:49:87:2f:9a:82:9f:
                    02:fd:14:68:3a:c6:da:0e:1b:9e:fe:e6:e2:88:32:
                    9e:f3:69:56:43:ef:63:c5:c3:c7:da:04:64:10:f0:
                    e7:8f:58:da:79:2b:83:16:04:58:53:27:8e:b3:c6:
                    a5:05:fd:24:36:d0:64:5f:7e:e2:ec:fb:08:c4:ca:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:99:CF:DF:5B:5D:2F:69:C3:74:13:B5:B2:3F:37:88:AA:13:F2:05
            X509v3 Authority Key Identifier:
                keyid:F5:9C:4E:7B:E4:22:40:A1:FC:48:47:88:B5:A5:DE:FC:97:12:D4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fec437d32aba48264306d179703acc9a82f83bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/9fec437d32aba48264306d179703acc9a82f83bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/9fec437d32aba48264306d179703acc9a82f83bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:27:db:75:9b:dd:43:9b:67:f5:8a:61:e4:88:e1:b9:b0:e1:
         e7:6e:45:d9:e3:b2:c4:98:35:ea:2c:4a:0e:57:44:72:8c:08:
         8a:e2:c5:57:d1:59:70:c5:55:67:de:32:79:9e:1a:e3:35:40:
         ac:4d:06:a0:fd:75:2f:73:f8:c5:29:3d:d6:79:7f:52:17:e3:
         c2:8d:44:39:16:ed:07:a6:02:59:fa:53:94:df:0a:83:92:43:
         04:67:a4:51:f4:f3:ed:9b:6c:16:a1:b6:97:16:28:47:e6:34:
         14:e7:6c:91:31:77:64:9d:54:a4:c3:ab:29:f3:69:ee:87:11:
         c8:44:70:36:83:0c:94:31:f7:dc:46:cf:81:e0:e9:65:33:4a:
         7e:dd:99:c0:1d:ef:40:4c:ff:c1:d6:88:98:43:06:0d:d7:37:
         da:b3:73:0c:ea:4d:cd:d4:11:7a:62:69:89:5b:ac:68:75:ae:
         af:9d:36:83:4b:18:a0:cb:f7:94:a7:99:44:06:11:69:d0:5c:
         d2:3a:e0:1b:6b:bb:ed:4c:11:88:8b:f5:48:b4:e8:be:41:13:
         f6:a9:41:70:ee:7d:43:12:cb:c5:b5:8f:06:cb:4a:66:56:8b:
         b3:14:df:77:d0:c6:97:c7:ed:d4:e1:8e:2c:c4:59:9c:14:86:
         91:85:06:a7
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKKijMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
ZWM0MzdkMzJhYmE0ODI2NDMwNmQxNzk3MDNhY2M5YTgyZjgzYmYwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDYwOTI2WjAzMTEwLwYDVQQDEyhmYWE0OTIzMjFiNGU0
OTBlZDBlZmNjYjE1MzRlZTZhZjllMmUwZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjAhIjYMqrFp/7BxZuHKuhZasakBmC1fMnMFP08Zxb5JxieG+
1WNsRV/zKd9iRlK0bXMBKshZ4sMbkdKSAigbMNfulA2rLy91koFTkQCKUwjvBciV
D6NjSfb4nvJl9xr1lGwDeIzt9VhVeNNy5k77CMW0Ln6gyCGB8x4uq0sp3HkgBK21
3kYUkD7GX+8peN9ZyXGQk5BC4hoCQydYKq9E5N0I1vNYSXFfAokCBy/UTwwu62DY
Y0TaGIwnaCVJhy+agp8C/RRoOsbaDhue/ubiiDKe82lWQ+9jxcPH2gRkEPDnj1ja
eSuDFgRYUyeOs8alBf0kNtBkX37i7PsIxMr+CwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFAOZz99bXS9pw3QTtbI/N4iqE/IFMB8GA1UdIwQYMBaAFPWcTnvkIkCh/EhH
iLWl3vyXEtRxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZlYzQz
N2QzMmFiYTQ4MjY0MzA2ZDE3OTcwM2FjYzlhODJmODNiZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTYzNDdlZTktODEzZS00OWIzLTk5MzYtZDU4NThh
NTU1ZjBhLzlmZWM0MzdkMzJhYmE0ODI2NDMwNmQxNzk3MDNhY2M5YTgyZjgzYmYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjM0N2VlOS04MTNlLTQ5YjMtOTkzNi1kNTg1
OGE1NTVmMGEvOWZlYzQzN2QzMmFiYTQ4MjY0MzA2ZDE3OTcwM2FjYzlhODJmODNi
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBADcn23Wb3UObZ/WKYeSI4bmw4eduRdnjssSYNeosSg5XRHKM
CIrixVfRWXDFVWfeMnmeGuM1QKxNBqD9dS9z+MUpPdZ5f1IX48KNRDkW7QemAln6
U5TfCoOSQwRnpFH08+2bbBahtpcWKEfmNBTnbJExd2SdVKTDqynzae6HEchEcDaD
DJQx99xGz4Hg6WUzSn7dmcAd70BM/8HWiJhDBg3XN9qzcwzqTc3UEXpiaYlbrGh1
rq+dNoNLGKDL95SnmUQGEWnQXNI64Btru+1MEYiL9Ui06L5BE/apQXDufUMSy8W1
jwbLSmZWi7MU33fQxpfH7dThjizEWZwUhpGFBqc=
-----END CERTIFICATE-----