Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0ba35c1-a531-4002-aa35-b7967ec9396e/3203505ab76bd3839a8949841a4e1f0daf411624.mft
File:                     3203505ab76bd3839a8949841a4e1f0daf411624.mft (raw, json)
Hash identifier:          lZpRHUHCI/61M6l/owXyann8zP2G7qTgdiaVL9InZXk=
Subject key identifier:   68:92:DE:13:33:41:CB:08:63:D9:C4:EA:18:C5:A3:31:45:1F:6F:81
Authority key identifier: A9:2A:04:C3:AE:50:46:DB:6C:DB:22:E1:0E:AE:C3:1B:C4:5C:65:3A
Certificate issuer:       /CN=3203505ab76bd3839a8949841a4e1f0daf411624
Certificate serial:       05533F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3203505ab76bd3839a8949841a4e1f0daf411624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0ba35c1-a531-4002-aa35-b7967ec9396e/3203505ab76bd3839a8949841a4e1f0daf411624.mft
Manifest number:          02DE
Signing time:             Mon 15 Apr 2024 11:21:42 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 14:19:18 +0000
Files and hashes:         1: 3203505ab76bd3839a8949841a4e1f0daf411624.crl (hash: jh6dEfK0CtuL6zQPOducDLvttxmfnaURlEO6P4FzB1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348991 (0x5533f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3203505ab76bd3839a8949841a4e1f0daf411624
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 14:19:18 2024 GMT
        Subject: CN=2ae2f3fd9d258999e1b0ba15a8b64802a36ed7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:96:50:b9:47:3c:f7:9c:f7:4a:eb:db:2b:
                    2f:11:53:a2:b9:84:b7:41:19:c7:48:de:dd:72:78:
                    84:d7:1a:9a:41:41:18:aa:7a:ad:2f:19:7b:15:c1:
                    42:32:6f:76:0e:58:15:00:fa:81:e7:32:ca:3a:ea:
                    a7:c3:ab:6e:66:95:d2:39:2a:e4:5f:cc:fd:31:9a:
                    f3:69:e8:5b:41:04:b3:fd:26:3d:66:8d:aa:30:ac:
                    22:00:55:40:a4:2d:de:40:41:7b:d7:89:f0:4a:f8:
                    72:b5:cd:33:3b:96:76:b6:80:e3:95:89:7f:ae:c7:
                    c2:5f:3b:5b:16:55:89:c3:3a:88:d7:93:44:11:39:
                    a0:19:a4:9d:ce:75:69:82:7f:9a:80:26:d6:59:4c:
                    07:52:52:e0:12:df:16:bb:34:29:4f:c1:29:8f:77:
                    f8:a5:88:a3:4a:a1:a5:aa:5e:eb:57:c6:a7:54:a6:
                    e1:77:81:37:d3:7b:58:61:c8:4c:9e:fe:b5:f4:1c:
                    74:50:df:c6:16:4e:0e:17:e2:77:42:a2:06:5b:43:
                    90:d2:cc:7a:fc:79:c3:4e:56:ff:b3:76:f3:22:5e:
                    6d:76:ca:24:09:58:f2:2d:48:1a:1f:b7:2f:e5:74:
                    e7:b2:0c:e2:d5:7b:6b:9c:3b:ba:f8:66:ab:e5:3b:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:92:DE:13:33:41:CB:08:63:D9:C4:EA:18:C5:A3:31:45:1F:6F:81
            X509v3 Authority Key Identifier:
                keyid:A9:2A:04:C3:AE:50:46:DB:6C:DB:22:E1:0E:AE:C3:1B:C4:5C:65:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3203505ab76bd3839a8949841a4e1f0daf411624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0ba35c1-a531-4002-aa35-b7967ec9396e/3203505ab76bd3839a8949841a4e1f0daf411624.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0ba35c1-a531-4002-aa35-b7967ec9396e/3203505ab76bd3839a8949841a4e1f0daf411624.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:4a:a9:96:27:07:fd:da:82:b8:da:e6:5a:d0:85:78:72:
         54:c2:0e:2f:ea:40:47:41:a0:c8:21:45:03:b8:58:11:80:a9:
         e5:e0:2c:ab:4f:59:38:7a:53:63:ff:b5:c9:15:0c:d3:80:71:
         fc:95:03:b9:29:62:eb:42:4a:5c:3a:4f:6d:b6:61:f6:97:22:
         7e:8b:d3:1f:b3:8f:77:0d:f5:ba:b8:3a:b4:e4:a4:d9:db:ae:
         60:d4:d4:86:a7:1e:0e:20:ef:27:ad:c2:77:1f:10:f0:b5:3f:
         72:94:60:59:7b:c9:77:a3:b1:73:d8:20:21:b6:6f:ba:65:d8:
         b0:e3:f1:1b:f7:d2:c0:ed:65:96:1a:3c:9e:8c:07:df:17:2a:
         ec:12:64:44:21:08:cb:a3:9b:d9:78:bb:e1:39:ec:b3:43:51:
         94:50:f5:29:52:8b:30:c4:86:b0:00:55:98:f5:c1:06:fb:64:
         7c:31:af:19:9c:b7:0f:2f:f3:a4:bf:3d:eb:23:11:0d:07:56:
         7f:3b:28:0c:f4:3e:f9:93:34:7e:28:1e:b1:02:00:eb:48:6f:
         55:15:37:c4:01:d5:b5:e9:c8:53:a1:d7:f7:0d:de:76:40:b0:
         29:a1:78:7c:d0:d7:2a:0f:9e:4e:33:5d:af:12:cb:f7:fc:e9:
         f0:c9:e6:26
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDBVM/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMy
MDM1MDVhYjc2YmQzODM5YTg5NDk4NDFhNGUxZjBkYWY0MTE2MjQwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTQxOTE4WjAzMTEwLwYDVQQDEygyYWUyZjNmZDlkMjU4
OTk5ZTFiMGJhMTVhOGI2NDgwMmEzNmVkN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnaiWULlHPPec90rr2ysvEVOiuYS3QRnHSN7dcniE1xqaQUEY
qnqtLxl7FcFCMm92DlgVAPqB5zLKOuqnw6tuZpXSOSrkX8z9MZrzaehbQQSz/SY9
Zo2qMKwiAFVApC3eQEF714nwSvhytc0zO5Z2toDjlYl/rsfCXztbFlWJwzqI15NE
ETmgGaSdznVpgn+agCbWWUwHUlLgEt8WuzQpT8Epj3f4pYijSqGlql7rV8anVKbh
d4E303tYYchMnv619Bx0UN/GFk4OF+J3QqIGW0OQ0sx6/HnDTlb/s3bzIl5tdsok
CVjyLUgaH7cv5XTnsgzi1XtrnDu6+Gar5TuaMwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFGiS3hMzQcsIY9nE6hjFozFFH2+BMB8GA1UdIwQYMBaAFKkqBMOuUEbbbNsi
4Q6uwxvEXGU6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzIwMzUw
NWFiNzZiZDM4MzlhODk0OTg0MWE0ZTFmMGRhZjQxMTYyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBiYTM1YzEtYTUzMS00MDAyLWFhMzUtYjc5Njdl
YzkzOTZlLzMyMDM1MDVhYjc2YmQzODM5YTg5NDk4NDFhNGUxZjBkYWY0MTE2MjQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGJhMzVjMS1hNTMxLTQwMDItYWEzNS1iNzk2
N2VjOTM5NmUvMzIwMzUwNWFiNzZiZDM4MzlhODk0OTg0MWE0ZTFmMGRhZjQxMTYy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAFq6SqmWJwf92oK42uZa0IV4clTCDi/qQEdBoMghRQO4WBGA
qeXgLKtPWTh6U2P/tckVDNOAcfyVA7kpYutCSlw6T222YfaXIn6L0x+zj3cN9bq4
OrTkpNnbrmDU1IanHg4g7yetwncfEPC1P3KUYFl7yXejsXPYICG2b7pl2LDj8Rv3
0sDtZZYaPJ6MB98XKuwSZEQhCMujm9l4u+E57LNDUZRQ9SlSizDEhrAAVZj1wQb7
ZHwxrxmctw8v86S/PesjEQ0HVn87KAz0PvmTNH4oHrECAOtIb1UVN8QB1bXpyFOh
1/cN3nZAsCmheHzQ1yoPnk4zXa8Sy/f86fDJ5iY=
-----END CERTIFICATE-----