Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a133021f-9ef7-4081-bbaf-b430161f270f/204ad8fc6b3a56871d09ceb332c932ad175a605b.mft
File:                     204ad8fc6b3a56871d09ceb332c932ad175a605b.mft (raw, json)
Hash identifier:          BZypDs7YwtxVDGuy7KbzNyoD7PYC1nL00AeRvWaF1iY=
Subject key identifier:   9D:51:2F:AF:64:D0:7C:81:FC:59:B5:E4:55:75:75:D6:93:DC:83:FA
Authority key identifier: 95:0A:A4:35:8F:E9:BD:E7:96:BF:B1:9E:6F:CD:4C:A4:46:A8:0F:EC
Certificate issuer:       /CN=204ad8fc6b3a56871d09ceb332c932ad175a605b
Certificate serial:       28F5F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/204ad8fc6b3a56871d09ceb332c932ad175a605b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a133021f-9ef7-4081-bbaf-b430161f270f/204ad8fc6b3a56871d09ceb332c932ad175a605b.mft
Manifest number:          0DF2
Signing time:             Mon 15 Apr 2024 06:22:01 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:26:39 +0000
Files and hashes:         1: 204ad8fc6b3a56871d09ceb332c932ad175a605b.crl (hash: 3fOISUBN+H6qtjkySOS9jwiP3GXlnY1gbumbIVjGVSY=)
                          2: 60a60fc839cd665b74c08d6e95e73add9912407b.roa (hash: 7P0Uhxu17U8dzQM4A5GqgX+/tRVMZ/Bvvs75/5CGFfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2684407 (0x28f5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204ad8fc6b3a56871d09ceb332c932ad175a605b
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:26:39 2024 GMT
        Subject: CN=f2dcfea1b4a6dc922293f270444cb91efa662d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:72:fa:4a:71:9c:47:c6:a9:bc:68:5a:1d:
                    25:e7:7d:84:99:2e:ea:a0:4f:93:a3:91:f7:05:ab:
                    d7:85:63:92:f0:6e:fe:69:f6:a7:d0:6d:1a:ec:53:
                    b9:30:16:f3:72:8e:9d:3b:9f:b2:a9:f4:80:21:6c:
                    3e:4b:da:11:d5:7b:0f:7f:22:6d:46:0e:9b:90:5a:
                    39:09:94:6e:d0:18:9d:0a:49:bb:91:01:1d:78:d2:
                    93:fc:e3:16:38:8d:9c:1a:0d:46:c2:6b:2a:69:f7:
                    30:bd:b0:a1:96:cc:45:e9:bd:81:0d:c7:c6:d9:1a:
                    fc:51:26:8b:3a:60:e8:36:6d:41:72:21:be:83:ba:
                    96:a5:b1:5d:37:f4:d1:43:ee:30:7f:6d:43:d7:46:
                    5f:06:23:e4:72:5f:e6:1f:e1:91:e0:32:f1:20:9b:
                    cd:a7:be:4f:83:6f:54:24:1c:35:47:f7:c9:5a:f7:
                    e6:9d:a6:a6:30:99:b9:7c:4d:96:bd:ef:43:0a:42:
                    45:9a:6a:fc:5d:c2:9d:5b:9b:b0:ee:26:7f:72:06:
                    1e:3c:91:90:9a:96:28:87:b9:00:7d:91:af:44:fd:
                    cf:eb:38:d4:63:27:70:bc:3c:30:c0:aa:e1:3e:43:
                    cc:7d:8b:58:3b:78:39:ea:ab:81:62:ef:a5:58:e4:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:2F:AF:64:D0:7C:81:FC:59:B5:E4:55:75:75:D6:93:DC:83:FA
            X509v3 Authority Key Identifier:
                keyid:95:0A:A4:35:8F:E9:BD:E7:96:BF:B1:9E:6F:CD:4C:A4:46:A8:0F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/204ad8fc6b3a56871d09ceb332c932ad175a605b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a133021f-9ef7-4081-bbaf-b430161f270f/204ad8fc6b3a56871d09ceb332c932ad175a605b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a133021f-9ef7-4081-bbaf-b430161f270f/204ad8fc6b3a56871d09ceb332c932ad175a605b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:2e:ad:9d:b1:cb:7c:29:22:c2:1b:f3:d1:e7:82:80:da:
         cc:b4:04:29:79:d1:b7:ed:00:d7:b0:4f:a8:09:c3:f5:ad:3d:
         25:17:d9:a2:6d:fc:d5:35:0e:58:6c:ba:a8:6f:92:b1:56:99:
         ee:7a:58:e8:33:e9:12:25:c2:c6:d1:cd:6e:cb:e7:e1:a5:25:
         84:58:6d:ac:79:4c:2d:d2:78:91:23:ad:54:41:f6:df:11:23:
         21:45:0e:9e:eb:0e:c4:0c:e6:45:1c:29:b1:12:91:2a:d1:6a:
         bb:2d:84:e3:e6:74:c2:c1:c1:e2:aa:c7:e2:55:47:d9:f2:e7:
         5c:06:17:89:6b:96:d0:b9:36:03:40:02:7a:38:30:70:f8:1a:
         e9:5a:1e:e4:8b:58:37:da:63:5a:7c:ce:da:d4:12:d9:49:a0:
         1e:3f:c0:64:5e:a9:74:39:1a:f0:65:39:cc:4f:d3:37:76:80:
         c5:b8:c8:4d:99:88:4a:e6:7a:d7:b1:10:3b:51:71:fd:68:3c:
         c6:3d:5f:70:76:90:8b:c0:58:56:f8:1e:8d:8a:c8:0b:0f:12:
         4b:b7:34:53:e2:c9:7b:3b:69:a0:3b:33:7d:c0:1b:2a:c1:51:
         cb:a4:19:14:c1:13:2f:df:b5:7c:af:65:86:59:37:81:d9:e5:
         45:39:e8:09
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKPX3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIw
NGFkOGZjNmIzYTU2ODcxZDA5Y2ViMzMyYzkzMmFkMTc1YTYwNWIwHhcNMjQwNDE1
MDUyMDM5WhcNMjQwNDE4MDgyNjM5WjAzMTEwLwYDVQQDEyhmMmRjZmVhMWI0YTZk
YzkyMjI5M2YyNzA0NDRjYjkxZWZhNjYyZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlX5y+kpxnEfGqbxoWh0l532EmS7qoE+To5H3BavXhWOS8G7+
afan0G0a7FO5MBbzco6dO5+yqfSAIWw+S9oR1XsPfyJtRg6bkFo5CZRu0BidCkm7
kQEdeNKT/OMWOI2cGg1GwmsqafcwvbChlsxF6b2BDcfG2Rr8USaLOmDoNm1BciG+
g7qWpbFdN/TRQ+4wf21D10ZfBiPkcl/mH+GR4DLxIJvNp75Pg29UJBw1R/fJWvfm
naamMJm5fE2Wve9DCkJFmmr8XcKdW5uw7iZ/cgYePJGQmpYoh7kAfZGvRP3P6zjU
YydwvDwwwKrhPkPMfYtYO3g56quBYu+lWOSjWQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFJ1RL69k0HyB/Fm15FV1ddaT3IP6MB8GA1UdIwQYMBaAFJUKpDWP6b3nlr+x
nm/NTKRGqA/sMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjA0YWQ4
ZmM2YjNhNTY4NzFkMDljZWIzMzJjOTMyYWQxNzVhNjA1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTEzMzAyMWYtOWVmNy00MDgxLWJiYWYtYjQzMDE2
MWYyNzBmLzIwNGFkOGZjNmIzYTU2ODcxZDA5Y2ViMzMyYzkzMmFkMTc1YTYwNWIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMTMzMDIxZi05ZWY3LTQwODEtYmJhZi1iNDMw
MTYxZjI3MGYvMjA0YWQ4ZmM2YjNhNTY4NzFkMDljZWIzMzJjOTMyYWQxNzVhNjA1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAENdLq2dsct8KSLCG/PR54KA2sy0BCl50bftANewT6gJw/Wt
PSUX2aJt/NU1DlhsuqhvkrFWme56WOgz6RIlwsbRzW7L5+GlJYRYbax5TC3SeJEj
rVRB9t8RIyFFDp7rDsQM5kUcKbESkSrRarsthOPmdMLBweKqx+JVR9ny51wGF4lr
ltC5NgNAAno4MHD4GulaHuSLWDfaY1p8ztrUEtlJoB4/wGReqXQ5GvBlOcxP0zd2
gMW4yE2ZiErmetexEDtRcf1oPMY9X3B2kIvAWFb4Ho2KyAsPEku3NFPiyXs7aaA7
M33AGyrBUcukGRTBEy/ftXyvZYZZN4HZ5UU56Ak=
-----END CERTIFICATE-----