Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/ae7eed0e816c205684dab13fe261771e26f139b4.mft
File:                     ae7eed0e816c205684dab13fe261771e26f139b4.mft (raw, json)
Hash identifier:          3HMiZvoX492C8gu/SHvh6pOUYKLpy5Y6/ZRjU8xLA2g=
Subject key identifier:   59:86:F0:31:81:F9:12:7F:36:4D:A1:B3:B9:F4:CE:02:59:5A:7A:8C
Authority key identifier: DD:A7:87:F5:53:2D:12:A2:15:6A:EA:61:0C:B1:7E:55:25:33:7C:5F
Certificate issuer:       /CN=ae7eed0e816c205684dab13fe261771e26f139b4
Certificate serial:       0A002D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae7eed0e816c205684dab13fe261771e26f139b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/ae7eed0e816c205684dab13fe261771e26f139b4.mft
Manifest number:          0500
Signing time:             Mon 15 Apr 2024 04:21:15 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:18:26 +0000
Files and hashes:         1: ae7eed0e816c205684dab13fe261771e26f139b4.crl (hash: 6gIZefFUBS28UsAugPO6nQSaL9r+Q4wynFyXMOQNNN0=)
                          2: f2484d3f90accdf85a23ee1503f481e43ad71b50.roa (hash: 2Np5VArBEl02xWFl1IcdrL8f2eGOCjTcIS+RnLgD0iE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655405 (0xa002d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7eed0e816c205684dab13fe261771e26f139b4
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:18:26 2024 GMT
        Subject: CN=ad0f1a166cde00f693b0052e0ff61a1f95c32edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:3c:07:b7:da:d0:c3:d8:2a:b8:49:13:f5:
                    be:f1:ee:c4:54:a8:77:c3:b8:c3:f2:9a:b6:bc:9a:
                    a4:77:9b:cf:81:6f:ac:22:14:27:94:f0:d7:9b:05:
                    fc:3c:1e:fc:61:4c:20:bc:b8:34:e3:eb:03:ee:c2:
                    73:03:1a:e2:32:01:b4:03:db:9a:fe:a2:85:60:d0:
                    19:99:e2:76:5c:39:2f:66:80:81:b3:bf:e9:e0:c6:
                    4b:35:64:27:6d:cc:33:b8:c1:b9:cf:9d:de:11:0a:
                    4d:da:37:cb:e1:c7:f3:4e:5b:ac:da:00:96:70:84:
                    54:62:22:69:0d:3d:cb:fc:ce:02:68:5b:b5:a1:c0:
                    bf:fa:2e:f7:8c:5f:81:74:7e:a3:d5:2e:9f:5e:e6:
                    10:a5:30:92:5f:bc:4d:4e:ed:55:0a:ed:65:75:bc:
                    91:39:30:8e:c1:49:03:6e:65:4e:60:f2:a2:92:d4:
                    3c:27:5f:e2:ca:55:f9:f0:54:a4:21:30:f7:0f:89:
                    f2:3e:da:45:05:3f:27:3e:2c:0f:d3:2c:ee:ac:85:
                    63:43:5c:3b:03:cd:50:e7:fb:8b:16:da:b5:e7:5d:
                    80:ed:b3:02:da:7a:db:ca:16:a9:a9:f3:78:37:ae:
                    50:43:59:16:8c:be:6f:82:49:28:1a:9c:60:d5:22:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:86:F0:31:81:F9:12:7F:36:4D:A1:B3:B9:F4:CE:02:59:5A:7A:8C
            X509v3 Authority Key Identifier:
                keyid:DD:A7:87:F5:53:2D:12:A2:15:6A:EA:61:0C:B1:7E:55:25:33:7C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae7eed0e816c205684dab13fe261771e26f139b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/ae7eed0e816c205684dab13fe261771e26f139b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9f1670e-295e-4028-a39b-2a092949cae5/ae7eed0e816c205684dab13fe261771e26f139b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:34:d0:4c:25:ef:be:50:33:98:29:bf:88:9e:a5:c6:36:a9:
         3f:1b:e8:a5:03:66:23:9b:16:62:9b:e8:1c:cb:82:c2:b7:70:
         4e:dd:43:34:b9:bd:58:33:a7:72:49:9a:3f:1f:ef:70:86:24:
         0b:9f:62:21:46:2f:3f:d5:0c:8e:2d:74:6f:bb:bf:46:77:79:
         77:a4:03:43:7a:22:58:e3:f3:79:c9:81:30:05:c4:fa:48:87:
         5f:d5:cb:85:36:3a:c0:9f:dd:7a:3d:00:81:af:86:7e:d6:44:
         56:b1:ed:a1:ef:30:20:e7:50:db:94:80:09:9a:db:1e:3d:78:
         0d:87:e0:aa:9f:ab:0a:38:5a:22:95:3d:69:df:7c:a0:1a:06:
         28:be:a5:d8:de:13:3a:c0:c6:54:50:f4:24:4b:69:97:80:ee:
         1c:75:e2:44:53:d8:d7:52:7c:a3:97:b1:42:06:0a:49:d0:60:
         86:8a:92:86:f3:f2:4f:35:42:9b:24:81:8e:29:1b:d3:32:a3:
         40:d4:7a:87:e1:ed:ac:8a:f9:c9:7b:2a:3f:08:4e:f9:5b:56:
         a3:ed:b4:40:20:86:85:59:f8:4f:6e:9a:14:78:8d:0f:2c:bd:
         9b:c5:ea:58:82:f7:85:6c:aa:22:d4:f4:c0:03:d4:9e:83:40:
         04:c7:34:13
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCgAtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFl
N2VlZDBlODE2YzIwNTY4NGRhYjEzZmUyNjE3NzFlMjZmMTM5YjQwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDUxODI2WjAzMTEwLwYDVQQDEyhhZDBmMWExNjZjZGUw
MGY2OTNiMDA1MmUwZmY2MWExZjk1YzMyZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuwo8B7fa0MPYKrhJE/W+8e7EVKh3w7jD8pq2vJqkd5vPgW+s
IhQnlPDXmwX8PB78YUwgvLg04+sD7sJzAxriMgG0A9ua/qKFYNAZmeJ2XDkvZoCB
s7/p4MZLNWQnbcwzuMG5z53eEQpN2jfL4cfzTlus2gCWcIRUYiJpDT3L/M4CaFu1
ocC/+i73jF+BdH6j1S6fXuYQpTCSX7xNTu1VCu1ldbyROTCOwUkDbmVOYPKiktQ8
J1/iylX58FSkITD3D4nyPtpFBT8nPiwP0yzurIVjQ1w7A81Q5/uLFtq1512A7bMC
2nrbyhapqfN4N65QQ1kWjL5vgkkoGpxg1SIG8QIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFFmG8DGB+RJ/Nk2hs7n0zgJZWnqMMB8GA1UdIwQYMBaAFN2nh/VTLRKiFWrq
YQyxflUlM3xfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWU3ZWVk
MGU4MTZjMjA1Njg0ZGFiMTNmZTI2MTc3MWUyNmYxMzliNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTlmMTY3MGUtMjk1ZS00MDI4LWEzOWItMmEwOTI5
NDljYWU1L2FlN2VlZDBlODE2YzIwNTY4NGRhYjEzZmUyNjE3NzFlMjZmMTM5YjQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOWYxNjcwZS0yOTVlLTQwMjgtYTM5Yi0yYTA5
Mjk0OWNhZTUvYWU3ZWVkMGU4MTZjMjA1Njg0ZGFiMTNmZTI2MTc3MWUyNmYxMzli
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAMk00Ewl775QM5gpv4iepcY2qT8b6KUDZiObFmKb6BzLgsK3
cE7dQzS5vVgzp3JJmj8f73CGJAufYiFGLz/VDI4tdG+7v0Z3eXekA0N6Iljj83nJ
gTAFxPpIh1/Vy4U2OsCf3Xo9AIGvhn7WRFax7aHvMCDnUNuUgAma2x49eA2H4Kqf
qwo4WiKVPWnffKAaBii+pdjeEzrAxlRQ9CRLaZeA7hx14kRT2NdSfKOXsUIGCknQ
YIaKkobz8k81QpskgY4pG9Myo0DUeofh7ayK+cl7Kj8ITvlbVqPttEAghoVZ+E9u
mhR4jQ8svZvF6liC94VsqiLU9MAD1J6DQATHNBM=
-----END CERTIFICATE-----