Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.mft
File:                     baeea1c2e5b60654afd780eaa676eed50b19b634.mft (raw, json)
Hash identifier:          BSYcAk2GAkYv/EsnW1Z+uVvF9N+TwYCMW9eNuoOXwa4=
Subject key identifier:   E3:95:72:6E:97:C9:24:85:37:1E:A0:E5:E5:D0:7B:17:1E:D3:39:2E
Authority key identifier: 53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE
Certificate issuer:       /CN=baeea1c2e5b60654afd780eaa676eed50b19b634
Certificate serial:       167AE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.mft
Manifest number:          0B5B
Signing time:             Mon 15 Apr 2024 07:21:09 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:20:17 +0000
Files and hashes:         1: 8e5a2101426841f22d48ecb7123e67551cbe8603.roa (hash: agwkFHPeoTy2I/c4eG3TlvkCW+3xy442OX7/lI/esW0=)
                          2: baeea1c2e5b60654afd780eaa676eed50b19b634.crl (hash: O+KT1h61e2B01u5QWMZOXBv9gza2syk0O1Iaw8MCza4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473256 (0x167ae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baeea1c2e5b60654afd780eaa676eed50b19b634
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 07:20:17 2024 GMT
        Subject: CN=c7b5838b80e0cd7ce9e72cb25aa5ccc3d893f965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:b7:4a:e8:a6:71:15:05:d6:f5:cb:46:dd:
                    e2:e7:67:86:78:1d:4a:54:33:6d:b8:f4:90:c2:a2:
                    6f:8c:7d:1b:5a:ef:3c:4f:35:47:4d:cc:bc:b7:e8:
                    2e:16:55:e3:d7:42:77:5c:d7:bf:46:87:a6:64:67:
                    e1:80:ef:a0:ff:ac:cc:e0:33:b0:a0:5b:43:0a:82:
                    ce:22:1c:c9:77:cd:ce:73:a6:72:80:f2:df:13:94:
                    cd:44:67:fd:9f:91:80:0a:0d:5a:7b:48:5a:0d:c7:
                    33:5b:0b:e4:46:3e:ed:a7:6e:3c:42:d4:0e:e0:6c:
                    2d:dc:b4:f7:89:a3:1b:8b:9a:e3:70:2e:89:2b:be:
                    25:2c:04:ad:db:17:e9:c3:3a:07:1d:f4:dc:27:a5:
                    a7:8c:af:d2:a6:ee:fa:de:f5:f3:a7:e7:33:20:e9:
                    38:0f:6e:6c:de:97:20:fc:4d:a0:04:ca:fc:b3:b6:
                    c3:0f:5e:a6:20:22:9d:cc:4a:cf:2a:8b:4f:e4:36:
                    04:8d:75:47:b8:bf:b7:5a:50:07:af:82:02:f8:4b:
                    9f:f8:ad:85:1f:6f:b5:23:06:7c:72:63:39:6d:e9:
                    f8:cb:44:56:c3:ee:f3:d4:fc:d6:b4:9c:8e:76:21:
                    ed:88:db:ae:99:9c:ac:bd:56:c3:8a:56:f9:29:b1:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:72:6E:97:C9:24:85:37:1E:A0:E5:E5:D0:7B:17:1E:D3:39:2E
            X509v3 Authority Key Identifier:
                keyid:53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:6b:c9:23:c9:4d:fa:ab:1a:6a:e0:da:b4:fb:f2:46:71:
         45:33:41:3a:6e:20:d1:ac:08:67:81:9b:b0:af:db:00:c9:3a:
         18:61:c6:84:3e:a4:8d:43:66:66:3e:87:18:fc:bd:e9:9a:91:
         02:21:04:1d:90:e9:ce:ce:a6:e7:12:6d:10:ba:05:ae:f5:e4:
         56:eb:61:bc:1a:34:5e:f0:28:c8:df:54:d9:16:40:3c:2f:67:
         63:a2:69:73:33:0e:a8:9a:b2:7b:c9:4a:0e:6b:13:ab:45:d5:
         5d:76:d9:ac:9f:0d:dc:11:45:06:e5:53:72:30:74:8c:c2:e7:
         2c:52:eb:b7:a1:ca:c9:2b:22:c3:3b:8c:ab:8c:d4:48:30:0a:
         05:6f:a6:ec:e1:1c:79:db:8c:47:10:bf:da:60:8a:29:e5:28:
         25:cd:27:d3:ba:bf:2a:97:7e:07:8f:de:1e:4e:4b:41:e0:4a:
         7d:68:42:f0:ad:cb:27:b3:0a:95:b7:11:0d:ee:a4:ad:dc:1f:
         93:dc:9a:ae:e5:5d:8d:37:b3:46:a9:a3:6d:b2:74:38:f0:37:
         ab:2c:0e:93:f1:0d:2b:b6:b6:e1:5d:f3:51:ff:57:ef:25:a7:
         cb:c5:63:11:43:61:aa:b9:b7:16:be:c8:4d:f5:a7:6e:10:4c:
         3e:e7:5c:72
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDFnroMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh
ZWVhMWMyZTViNjA2NTRhZmQ3ODBlYWE2NzZlZWQ1MGIxOWI2MzQwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MDcyMDE3WjAzMTEwLwYDVQQDEyhjN2I1ODM4YjgwZTBj
ZDdjZTllNzJjYjI1YWE1Y2NjM2Q4OTNmOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo2e3SuimcRUF1vXLRt3i52eGeB1KVDNtuPSQwqJvjH0bWu88
TzVHTcy8t+guFlXj10J3XNe/RoemZGfhgO+g/6zM4DOwoFtDCoLOIhzJd83Oc6Zy
gPLfE5TNRGf9n5GACg1ae0haDcczWwvkRj7tp248QtQO4Gwt3LT3iaMbi5rjcC6J
K74lLASt2xfpwzoHHfTcJ6WnjK/Spu763vXzp+czIOk4D25s3pcg/E2gBMr8s7bD
D16mICKdzErPKotP5DYEjXVHuL+3WlAHr4IC+Euf+K2FH2+1IwZ8cmM5ben4y0RW
w+7z1PzWtJyOdiHtiNuumZysvVbDilb5KbH8ewIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFOOVcm6XySSFNx6g5eXQexce0zkuMB8GA1UdIwQYMBaAFFPhTVZN/aDGK3GU
l5p0mIHtpfP+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmFlZWEx
YzJlNWI2MDY1NGFmZDc4MGVhYTY3NmVlZDUwYjE5YjYzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOThmOTRlZmYtODNlZS00NmZkLThmNzAtMzEzZGI2
NzRiOGMzL2JhZWVhMWMyZTViNjA2NTRhZmQ3ODBlYWE2NzZlZWQ1MGIxOWI2MzQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OGY5NGVmZi04M2VlLTQ2ZmQtOGY3MC0zMTNk
YjY3NGI4YzMvYmFlZWExYzJlNWI2MDY1NGFmZDc4MGVhYTY3NmVlZDUwYjE5YjYz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAErma8kjyU36qxpq4Nq0+/JGcUUzQTpuINGsCGeBm7Cv2wDJ
OhhhxoQ+pI1DZmY+hxj8vemakQIhBB2Q6c7OpucSbRC6Ba715FbrYbwaNF7wKMjf
VNkWQDwvZ2OiaXMzDqiasnvJSg5rE6tF1V122ayfDdwRRQblU3IwdIzC5yxS67eh
yskrIsM7jKuM1EgwCgVvpuzhHHnbjEcQv9pgiinlKCXNJ9O6vyqXfgeP3h5OS0Hg
Sn1oQvCtyyezCpW3EQ3upK3cH5Pcmq7lXY03s0apo22ydDjwN6ssDpPxDSu2tuFd
81H/V+8lp8vFYxFDYaq5txa+yE31p24QTD7nXHI=
-----END CERTIFICATE-----