Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/713466eb5a3bd118b72f0078eea3bb990f763363.mft
File:                     713466eb5a3bd118b72f0078eea3bb990f763363.mft (raw, json)
Hash identifier:          p8AgWShQu68DkTVEbShlFSSS4+g+Sn2XbSca2lWL1mw=
Subject key identifier:   E0:83:FC:A8:76:AD:67:0B:43:17:63:08:D4:CF:04:E6:85:44:DC:8C
Authority key identifier: A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B
Certificate issuer:       /CN=713466eb5a3bd118b72f0078eea3bb990f763363
Certificate serial:       25008A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/713466eb5a3bd118b72f0078eea3bb990f763363.mft
Manifest number:          0D1F
Signing time:             Tue 23 Jan 2024 06:21:23 +0000
Manifest this update:     Tue 23 Jan 2024 05:21:22 +0000
Manifest next update:     Fri 26 Jan 2024 08:19:22 +0000
Files and hashes:         1: 57b47327e53b7a7cbee7f9d90c352dfe90e5bdd4.roa (hash: ItrJbinsQ8ZX2RfTI5ccPs9jxwhfUL11SHsWaBfXcfQ=)
                          2: 5cd38425b4de6d896176f9d464ec4b92fed90810.roa (hash: B4goT/oSXB/UGx3bAnZNu5RBe0PgsXg9d8/Qgh8/Gl4=)
                          3: 64aff6d0f6d37383d54978f5e72b1ddb1622cf07.roa (hash: IQRPDhCtQ5BAgc6+nTKzUUO3xFq0XytQMwOfj8fHHgM=)
                          4: 713466eb5a3bd118b72f0078eea3bb990f763363.crl (hash: ofFTZOgmNoNTHSucm/AVVc3F4yGbQ9G4leDvoTzv1Zc=)
                          5: 7c7d2781bf9acc0b03bb3483d2f9b690b5f44d48.roa (hash: LMU0A1igyqNKXz0D+dFyd/nafwwyg+3NX9pLs4x3UlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424970 (0x25008a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713466eb5a3bd118b72f0078eea3bb990f763363
        Validity
            Not Before: Jan 23 05:21:22 2024 GMT
            Not After : Jan 26 08:19:22 2024 GMT
        Subject: CN=ad5e508a748f90d3497ea74aea6df0d6243fac58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:04:27:42:15:54:d3:d2:e3:a5:0a:03:c6:c9:
                    2f:ec:a2:9c:7b:73:56:3c:2a:00:07:05:86:85:d9:
                    2b:e5:3c:bf:2a:40:12:99:b6:c9:e6:7e:59:72:5f:
                    ca:af:90:dd:d1:9e:de:5b:a6:0f:7b:2e:6f:2f:b8:
                    a9:71:17:03:a2:86:3c:5f:9c:82:07:15:0e:91:31:
                    fe:9a:7b:f9:6e:60:54:bc:71:9d:31:13:af:e4:11:
                    f0:cf:eb:72:7a:9a:44:fa:cb:7d:ad:54:f8:8d:92:
                    70:1b:01:f4:32:23:cf:bc:59:c9:35:12:4b:26:d4:
                    d1:6d:f3:cf:ed:ad:d8:12:c1:5f:96:b4:93:dc:05:
                    0e:da:22:50:79:9b:1b:1f:4f:7f:23:e7:a1:6e:a5:
                    ba:a2:7f:df:fd:f7:9b:ec:92:81:9b:3a:d6:3b:d0:
                    85:ec:bb:5b:b1:9a:60:e9:44:bc:3a:d7:f5:f6:36:
                    a4:e0:ba:43:6b:d3:42:37:c3:3b:c9:96:a2:a9:07:
                    39:79:68:98:b3:5a:bb:f2:c9:8a:cf:59:8c:e4:df:
                    95:fc:91:9a:84:3b:41:f2:6a:6e:a2:80:d0:8b:fc:
                    16:66:54:d1:16:02:d0:ee:62:c5:fa:96:df:51:f5:
                    ab:1d:3f:98:c1:50:52:fe:3c:2c:48:31:ae:50:36:
                    4d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:83:FC:A8:76:AD:67:0B:43:17:63:08:D4:CF:04:E6:85:44:DC:8C
            X509v3 Authority Key Identifier:
                keyid:A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/713466eb5a3bd118b72f0078eea3bb990f763363.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/713466eb5a3bd118b72f0078eea3bb990f763363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:39:8d:a4:24:2e:83:ea:15:ca:84:7a:d1:5b:bf:33:3a:09:
         89:07:09:b3:61:ad:f7:c7:ae:9f:aa:8b:20:28:0b:04:c5:ab:
         84:18:6f:35:ca:35:03:38:a6:19:0a:94:07:48:7c:f6:28:54:
         61:2b:aa:54:71:01:92:32:2f:48:1d:3c:f4:1d:a9:1f:ad:12:
         7a:2c:06:f3:d4:36:d5:78:13:77:4d:21:89:b3:fe:c4:95:b7:
         3e:70:2a:88:e9:da:f8:ab:bc:8c:6e:6c:f5:f8:82:1a:98:4e:
         5b:be:18:7a:f9:bf:5a:11:4a:98:ec:d7:b1:2f:89:67:af:af:
         c2:51:c5:6e:a0:79:fb:98:d5:2d:b3:bc:77:a9:a2:05:64:e8:
         c9:f2:5e:d2:31:5e:d8:18:79:9a:2f:2c:5a:cc:f1:27:0a:58:
         b8:a4:d0:c6:e2:62:45:83:13:e8:ab:37:18:67:0f:ae:38:35:
         d6:42:30:15:b6:11:81:d6:dd:55:5d:4e:3c:92:34:7b:32:db:
         51:3a:36:13:19:42:01:be:44:b7:cb:86:11:21:12:2d:9e:e8:
         b9:4a:4e:c9:c7:a3:52:69:5b:bd:8d:d7:7d:e3:42:44:d1:6b:
         aa:8a:9b:37:7d:e7:5f:d4:8a:16:25:d8:52:27:ca:fe:f1:29:
         de:f5:d0:a9
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJQCKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
MzQ2NmViNWEzYmQxMThiNzJmMDA3OGVlYTNiYjk5MGY3NjMzNjMwHhcNMjQwMTIz
MDUyMTIyWhcNMjQwMTI2MDgxOTIyWjAzMTEwLwYDVQQDEyhhZDVlNTA4YTc0OGY5
MGQzNDk3ZWE3NGFlYTZkZjBkNjI0M2ZhYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6gQnQhVU09LjpQoDxskv7KKce3NWPCoABwWGhdkr5Ty/KkAS
mbbJ5n5Zcl/Kr5Dd0Z7eW6YPey5vL7ipcRcDooY8X5yCBxUOkTH+mnv5bmBUvHGd
MROv5BHwz+tyeppE+st9rVT4jZJwGwH0MiPPvFnJNRJLJtTRbfPP7a3YEsFflrST
3AUO2iJQeZsbH09/I+ehbqW6on/f/feb7JKBmzrWO9CF7LtbsZpg6US8Otf19jak
4LpDa9NCN8M7yZaiqQc5eWiYs1q78smKz1mM5N+V/JGahDtB8mpuooDQi/wWZlTR
FgLQ7mLF+pbfUfWrHT+YwVBS/jwsSDGuUDZNuwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFOCD/Kh2rWcLQxdjCNTPBOaFRNyMMB8GA1UdIwQYMBaAFKA3yoBUiJ7dJT8U
SQpNmB6zU9gLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzEzNDY2
ZWI1YTNiZDExOGI3MmYwMDc4ZWVhM2JiOTkwZjc2MzM2My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY5ZTVmYjgtOGIyZi00YWJhLWI1MjMtMmY1OTAw
Y2JjNGU4LzcxMzQ2NmViNWEzYmQxMThiNzJmMDA3OGVlYTNiYjk5MGY3NjMzNjMu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjllNWZiOC04YjJmLTRhYmEtYjUyMy0yZjU5
MDBjYmM0ZTgvNzEzNDY2ZWI1YTNiZDExOGI3MmYwMDc4ZWVhM2JiOTkwZjc2MzM2
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAHg5jaQkLoPqFcqEetFbvzM6CYkHCbNhrffHrp+qiyAoCwTF
q4QYbzXKNQM4phkKlAdIfPYoVGErqlRxAZIyL0gdPPQdqR+tEnosBvPUNtV4E3dN
IYmz/sSVtz5wKojp2virvIxubPX4ghqYTlu+GHr5v1oRSpjs17EviWevr8JRxW6g
efuY1S2zvHepogVk6MnyXtIxXtgYeZovLFrM8ScKWLik0MbiYkWDE+irNxhnD644
NdZCMBW2EYHW3VVdTjySNHsy21E6NhMZQgG+RLfLhhEhEi2e6LlKTsnHo1JpW72N
133jQkTRa6qKmzd951/UihYl2FInyv7xKd710Kk=
-----END CERTIFICATE-----