Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.mft
File:                     70808e2bd8e0e2304be21a57ebf8077d29fb7363.mft (raw, json)
Hash identifier:          WIZlZ/bI7Y8OEeDDpeGqtdhJNoEhPM51u2XXHP8Hcvo=
Subject key identifier:   09:A7:72:81:4E:2D:5E:CB:CB:F7:A0:1B:4D:9B:30:E5:81:9C:9B:FD
Authority key identifier: D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E
Certificate issuer:       /CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
Certificate serial:       2184AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.mft
Manifest number:          0DE8
Signing time:             Mon 15 Apr 2024 09:20:35 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:59:18 +0000
Files and hashes:         1: 691fa1622b1113d96c1e6424433713c5d932d01d.roa (hash: vgbzajLdmP20wII8zHTDQpNAqiQZEejAOowY0qNvK3c=)
                          2: 6c4fc16cdde8b9e5dab62cf189be4b984e08a97d.roa (hash: xtL42jXRVmoM8uNtjTcD3X/7Y3LGqGddZu0IZwBxjrM=)
                          3: 70808e2bd8e0e2304be21a57ebf8077d29fb7363.crl (hash: gaBkHXfxRQohG7aD+SFfHhMloitJAGWF94CHl46K/NM=)
                          4: 727ae46b034cbeae1c4df2f8b4055b5d245518b5.roa (hash: uHxaOSL8x6wFGPTzgvWc2CTAveOvQlmBaK0lTsVg9+Y=)
                          5: e4a4ed15a4d056dc04af3eaff61e06cc0ec7534a.roa (hash: IPoJ3oR2E1WTvX66WdktS7czBntnH6qVSVvhST4+/uQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196651 (0x2184ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70808e2bd8e0e2304be21a57ebf8077d29fb7363
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:59:18 2024 GMT
        Subject: CN=0a9ef6161b2a39e2dcc610d26c7c62d6c03bc09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:26:42:d8:80:98:4e:49:7f:39:56:31:54:
                    33:13:61:23:e4:77:0e:a7:ce:5b:b1:ad:24:61:11:
                    16:76:4f:8c:0a:61:62:4d:5c:20:25:01:b8:ea:32:
                    c2:63:bc:f5:d0:f0:77:24:2c:13:32:17:f1:b2:5c:
                    6c:21:04:8c:77:14:e4:74:4d:84:cc:85:f7:c3:12:
                    24:15:5c:1a:47:54:de:1a:c4:40:61:ce:05:ae:52:
                    37:88:0d:fd:d4:37:14:b7:ce:20:6d:3a:9c:b2:1b:
                    1c:19:5e:d9:6a:e3:d4:68:4b:3e:ce:01:6f:6f:77:
                    b6:e2:db:0f:1b:ae:d2:32:cb:2f:8f:40:ca:eb:18:
                    8e:f1:0e:06:49:a6:bc:17:df:8d:12:f3:a0:bc:1a:
                    06:38:b1:3e:e5:96:48:30:86:18:2d:f8:48:eb:d3:
                    27:f7:b6:5c:51:8f:ef:c6:71:c5:b1:47:36:3b:e0:
                    d9:80:f1:85:41:73:cf:c6:2e:13:45:48:1e:e7:8e:
                    f2:a4:1a:7e:24:aa:0b:2c:0a:09:92:78:4a:6e:80:
                    76:10:2c:08:3d:df:ff:04:6a:c7:a7:ec:b4:9a:b8:
                    ad:b2:d7:55:59:b8:b6:98:43:67:f5:72:d5:6a:d6:
                    74:1e:a7:05:f9:23:44:3c:65:7a:46:c5:8a:74:b3:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A7:72:81:4E:2D:5E:CB:CB:F7:A0:1B:4D:9B:30:E5:81:9C:9B:FD
            X509v3 Authority Key Identifier:
                keyid:D0:49:58:01:FC:F0:AC:78:F8:5F:A1:B8:B1:7C:FF:4F:3F:A3:A6:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70808e2bd8e0e2304be21a57ebf8077d29fb7363.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9977194-f011-4d41-85fa-e7c187e3f732/70808e2bd8e0e2304be21a57ebf8077d29fb7363.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0d:37:7a:fe:1b:16:24:68:49:9d:ac:d8:a2:84:89:5b:f9:
         51:05:27:24:c7:87:54:33:82:31:29:c2:a2:46:00:13:50:e4:
         02:44:bd:f1:7c:fe:8e:a7:fb:d8:97:af:af:b8:cc:59:1a:7c:
         51:cd:63:19:6d:75:90:ba:0c:64:e0:27:c1:75:1e:1c:05:29:
         9a:39:a6:e1:7a:9c:c2:d5:13:ef:e0:ae:11:29:ad:b5:7e:42:
         1a:9b:92:e1:89:d1:83:a9:75:db:85:b0:1b:69:47:b0:1a:62:
         74:a6:72:79:04:49:c9:6c:94:23:4b:12:cd:8e:a9:09:f3:e5:
         cc:51:06:94:5d:13:f7:d9:b3:c0:03:b6:53:b7:b0:3f:51:53:
         d8:86:68:db:71:a2:0e:56:6e:ac:41:c2:99:1b:9c:d4:7a:16:
         2b:7a:d1:65:c4:e7:f8:32:de:15:ac:fe:20:6e:15:45:28:78:
         35:ae:a2:8d:3b:5c:fb:1a:4a:e8:bb:37:c6:c6:cd:84:71:a6:
         ca:7f:fc:a8:b1:13:11:65:22:b1:eb:2b:6f:b6:30:79:bb:1d:
         8b:1c:51:a5:18:f0:ff:e3:ca:6f:7a:4e:6e:f3:a9:28:33:bd:
         97:13:4d:22:b7:31:a5:7a:7b:3f:ee:fc:5f:5c:74:47:35:47:
         6f:4b:7a:70
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIYSrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
ODA4ZTJiZDhlMGUyMzA0YmUyMWE1N2ViZjgwNzdkMjlmYjczNjMwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTE1OTE4WjAzMTEwLwYDVQQDEygwYTllZjYxNjFiMmEz
OWUyZGNjNjEwZDI2YzdjNjJkNmMwM2JjMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmysmQtiAmE5JfzlWMVQzE2Ej5HcOp85bsa0kYREWdk+MCmFi
TVwgJQG46jLCY7z10PB3JCwTMhfxslxsIQSMdxTkdE2EzIX3wxIkFVwaR1TeGsRA
Yc4FrlI3iA391DcUt84gbTqcshscGV7ZauPUaEs+zgFvb3e24tsPG67SMssvj0DK
6xiO8Q4GSaa8F9+NEvOgvBoGOLE+5ZZIMIYYLfhI69Mn97ZcUY/vxnHFsUc2O+DZ
gPGFQXPPxi4TRUge547ypBp+JKoLLAoJknhKboB2ECwIPd//BGrHp+y0mritstdV
Wbi2mENn9XLVatZ0HqcF+SNEPGV6RsWKdLOnzwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFAmncoFOLV7Ly/egG02bMOWBnJv9MB8GA1UdIwQYMBaAFNBJWAH88Kx4+F+h
uLF8/08/o6YeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzA4MDhl
MmJkOGUwZTIzMDRiZTIxYTU3ZWJmODA3N2QyOWZiNzM2My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTk5NzcxOTQtZjAxMS00ZDQxLTg1ZmEtZTdjMTg3
ZTNmNzMyLzcwODA4ZTJiZDhlMGUyMzA0YmUyMWE1N2ViZjgwNzdkMjlmYjczNjMu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOTk3NzE5NC1mMDExLTRkNDEtODVmYS1lN2Mx
ODdlM2Y3MzIvNzA4MDhlMmJkOGUwZTIzMDRiZTIxYTU3ZWJmODA3N2QyOWZiNzM2
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBALENN3r+GxYkaEmdrNiihIlb+VEFJyTHh1QzgjEpwqJGABNQ
5AJEvfF8/o6n+9iXr6+4zFkafFHNYxltdZC6DGTgJ8F1HhwFKZo5puF6nMLVE+/g
rhEprbV+QhqbkuGJ0YOpdduFsBtpR7AaYnSmcnkESclslCNLEs2OqQnz5cxRBpRd
E/fZs8ADtlO3sD9RU9iGaNtxog5WbqxBwpkbnNR6Fit60WXE5/gy3hWs/iBuFUUo
eDWuoo07XPsaSui7N8bGzYRxpsp//KixExFlIrHrK2+2MHm7HYscUaUY8P/jym96
Tm7zqSgzvZcTTSK3MaV6ez/u/F9cdEc1R29LenA=
-----END CERTIFICATE-----