Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.mft
File:                     2d287d9bace0aaa89c8a18b31d258122387e847f.mft (raw, json)
Hash identifier:          k6MxazpJn/COkAjR4FSUs+VeFOOhpXUVoDtVP00l8JU=
Subject key identifier:   1A:EF:81:E2:40:BF:F8:63:96:31:B1:DE:61:42:5F:F8:78:12:FF:EF
Authority key identifier: 80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Certificate issuer:       /CN=2d287d9bace0aaa89c8a18b31d258122387e847f
Certificate serial:       111CC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.mft
Manifest number:          08AD
Signing time:             Mon 15 Apr 2024 03:20:25 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:15:17 +0000
Files and hashes:         1: 2d287d9bace0aaa89c8a18b31d258122387e847f.crl (hash: +ynoxlIrgWEC3lfEsTSJTwlBfHngI8nv07MODe4CmT0=)
                          2: e2489f77e25c534b9cdae6b60e6e67a9dcccc16d.roa (hash: jwtaiDcq6UtnCESxVydUh60OkPTuARJpQ7geOsEaCpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121478 (0x111cc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:15:17 2024 GMT
        Subject: CN=a224cb7ec55d8c239d508f386607b4a3cc0a5458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:86:da:c8:28:29:6a:05:5e:a7:03:4b:6b:
                    93:78:eb:c2:f0:60:de:cd:d4:01:7b:27:17:a6:ca:
                    bd:39:27:5a:3b:31:8b:23:94:ba:5c:0f:cd:8d:16:
                    d2:08:77:33:7e:bc:1e:1b:eb:63:a6:49:d4:e8:cf:
                    73:bf:17:2f:40:d6:15:50:7f:99:ea:77:ac:a3:45:
                    c3:d2:ba:72:99:d1:4f:b4:40:12:83:bb:b5:91:f8:
                    a4:93:d8:08:c1:7d:16:64:68:f3:00:5d:f8:d2:2f:
                    4b:6c:d5:10:ec:63:79:85:41:fe:23:f8:0a:0d:2b:
                    3f:c8:d2:4f:b3:70:f4:58:c6:be:7e:0d:13:65:1e:
                    a7:6d:f1:57:04:c5:e2:07:6f:86:44:88:e1:f2:e6:
                    f1:97:10:13:c3:72:49:07:15:6b:7c:64:78:4f:fc:
                    91:f8:a6:13:37:92:dd:81:e6:0b:7f:30:e0:9f:ad:
                    c2:b0:33:39:cc:5e:96:8f:cc:96:35:77:01:fa:30:
                    a9:e0:28:6f:c0:27:1f:0c:6a:15:94:0f:9a:1a:b3:
                    6e:63:9b:37:a2:52:3b:5a:14:a6:99:27:4c:ef:2b:
                    61:72:8d:00:2a:68:19:3c:1d:75:35:b4:f0:6d:15:
                    7f:ec:9f:bc:a3:38:24:a5:67:71:57:cd:74:66:da:
                    97:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:81:E2:40:BF:F8:63:96:31:B1:DE:61:42:5F:F8:78:12:FF:EF
            X509v3 Authority Key Identifier:
                keyid:80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e3:08:3f:5a:69:0f:48:ce:0a:5b:bb:73:71:ed:c1:46:ef:
         aa:ca:37:0f:25:ee:c6:ed:3c:16:48:03:17:9b:1b:1b:a3:80:
         18:93:db:2e:3a:d9:9e:7d:6a:6c:33:cd:fb:e1:43:ed:9e:a5:
         47:be:de:e7:91:d7:4b:f7:64:41:d3:0f:25:e1:88:a5:6e:1c:
         97:ce:14:42:77:82:c8:8d:50:f2:46:b2:c9:93:22:9a:b5:15:
         0f:bb:27:a4:7d:00:ce:96:59:2a:05:ec:de:77:09:df:66:fc:
         0a:14:f6:4b:f1:9b:cc:75:4c:99:5f:1f:4f:09:45:37:1d:c1:
         b2:a4:ed:13:7c:b0:ce:59:83:22:cd:e1:00:de:4b:c1:f6:7e:
         1e:82:88:08:9a:da:66:75:29:d2:b7:15:17:9d:d5:c5:28:9d:
         f9:be:a4:6d:2e:1e:30:d4:4e:db:08:8f:31:13:d1:65:08:c4:
         4f:9e:92:99:6c:56:73:2d:6a:cb:bd:13:6a:4a:65:f9:79:34:
         5c:3a:29:9a:eb:cc:7a:4a:17:de:4f:3f:e9:7e:fc:12:18:b5:
         a5:81:2f:35:be:b5:57:55:60:51:97:59:b0:f2:08:cf:61:25:
         5e:f7:21:16:a8:34:99:08:9b:bc:c8:79:fc:cc:3a:8b:2c:81:
         01:42:d3:51
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDERzGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJk
Mjg3ZDliYWNlMGFhYTg5YzhhMThiMzFkMjU4MTIyMzg3ZTg0N2YwHhcNMjQwNDE1
MDIyMDE3WhcNMjQwNDE4MDUxNTE3WjAzMTEwLwYDVQQDEyhhMjI0Y2I3ZWM1NWQ4
YzIzOWQ1MDhmMzg2NjA3YjRhM2NjMGE1NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmTKG2sgoKWoFXqcDS2uTeOvC8GDezdQBeycXpsq9OSdaOzGL
I5S6XA/NjRbSCHczfrweG+tjpknU6M9zvxcvQNYVUH+Z6neso0XD0rpymdFPtEAS
g7u1kfikk9gIwX0WZGjzAF340i9LbNUQ7GN5hUH+I/gKDSs/yNJPs3D0WMa+fg0T
ZR6nbfFXBMXiB2+GRIjh8ubxlxATw3JJBxVrfGR4T/yR+KYTN5LdgeYLfzDgn63C
sDM5zF6Wj8yWNXcB+jCp4ChvwCcfDGoVlA+aGrNuY5s3olI7WhSmmSdM7ythco0A
KmgZPB11NbTwbRV/7J+8ozgkpWdxV810ZtqX9wIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFBrvgeJAv/hjljGx3mFCX/h4Ev/vMB8GA1UdIwQYMBaAFIA01X8ACnTUO36I
mhIZjIfmXQDNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmQyODdk
OWJhY2UwYWFhODljOGExOGIzMWQyNTgxMjIzODdlODQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTIwYTAyMWEtNTk3YS00M2M4LTk3MGMtMTdlNTY0
NjBhMjQ0LzJkMjg3ZDliYWNlMGFhYTg5YzhhMThiMzFkMjU4MTIyMzg3ZTg0N2Yu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjBhMDIxYS01OTdhLTQzYzgtOTcwYy0xN2U1
NjQ2MGEyNDQvMmQyODdkOWJhY2UwYWFhODljOGExOGIzMWQyNTgxMjIzODdlODQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAHrjCD9aaQ9Izgpbu3Nx7cFG76rKNw8l7sbtPBZIAxebGxuj
gBiT2y462Z59amwzzfvhQ+2epUe+3ueR10v3ZEHTDyXhiKVuHJfOFEJ3gsiNUPJG
ssmTIpq1FQ+7J6R9AM6WWSoF7N53Cd9m/AoU9kvxm8x1TJlfH08JRTcdwbKk7RN8
sM5ZgyLN4QDeS8H2fh6CiAia2mZ1KdK3FRed1cUonfm+pG0uHjDUTtsIjzET0WUI
xE+ekplsVnMtasu9E2pKZfl5NFw6KZrrzHpKF95PP+l+/BIYtaWBLzW+tVdVYFGX
WbDyCM9hJV73IRaoNJkIm7zIefzMOossgQFC01E=
-----END CERTIFICATE-----