Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.mft
File:                     7125c7c115a99947a022aea03850efda56aab912.mft (raw, json)
Hash identifier:          UhwphUbShEp/lyGes7BvmG5hPk7X+34+Gkov0yG+sHo=
Subject key identifier:   6B:2C:AE:88:9C:B0:D0:63:B4:B7:94:A4:97:C4:06:2C:40:FF:16:29
Authority key identifier: C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5
Certificate issuer:       /CN=7125c7c115a99947a022aea03850efda56aab912
Certificate serial:       2893E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.mft
Manifest number:          0DF8
Signing time:             Mon 15 Apr 2024 09:20:32 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:37:18 +0000
Files and hashes:         1: 201ae090d202d46315b14325f581d1572846b1ea.roa (hash: 9GE/fdECEJwA/AI1VhsbcZmAz8AwOUfKb7/xuD0pK5M=)
                          2: 64fb7996ed8d178975390e0775efa25f25de900d.roa (hash: wyJi76pX/4py/HPhRyoxd41JJEdEEVj/yn1dYdRD504=)
                          3: 709d1a011a4fa2738089a4a23d5a4c33bd1ebccf.roa (hash: 5/xFIpCYilt2LvA7vXuMe0BUKpN7AII0STBUvoC7gaQ=)
                          4: 7125c7c115a99947a022aea03850efda56aab912.crl (hash: QWiuFFxPsT8LVcnGlUX9IGJZWUWbqlXqBb8YtSCFwc0=)
                          5: ad116660a0bf2ab534a3d56e494685f0e2d3fc72.roa (hash: scfJPxv3wLReSo7ds9fMWjHbmF77JWsxcqjIKTnOXhk=)
                          6: de4a70219f992c50a19104c81c3034a82722e930.roa (hash: +wUXIa8kY9LzGxFfcW6TUmcy/iOzduXEh6PzAQSAg8o=)
                          7: fcc2ab3eed7fa4b8fb3b6c4cd13722e0703cea7e.roa (hash: QvRQjuDa4+94ZDO93HYh0XktARflJw2wcZWIPFQj06I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659297 (0x2893e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125c7c115a99947a022aea03850efda56aab912
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:37:18 2024 GMT
        Subject: CN=aefd433d49f379d4969c3cb61adf4a65a2d19aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:ea:79:fb:a0:13:49:48:8f:48:98:13:5c:
                    ce:be:ad:d4:a4:46:0d:12:5e:e2:24:3d:53:33:e2:
                    cf:3a:7e:07:07:4c:9d:40:ba:41:90:cb:4f:e3:77:
                    8d:7e:b8:7e:05:e6:15:9e:28:83:4d:52:aa:2b:c6:
                    cb:1e:3c:ba:ef:81:96:16:80:4c:c4:4a:66:d3:a0:
                    41:66:af:41:9d:08:82:b2:71:9b:30:34:cf:ee:66:
                    57:ab:2d:7b:7d:72:9f:fd:75:27:d2:77:80:48:5f:
                    08:ac:43:34:f7:c9:76:b9:98:1f:08:e4:cb:8f:96:
                    02:4e:05:a9:05:a8:37:e6:9c:c9:a7:49:02:6c:a6:
                    7d:04:26:fa:bd:76:0d:ee:2b:e0:83:4c:78:b3:33:
                    7a:8f:f3:1f:f1:50:79:9d:c2:36:27:ce:72:0d:af:
                    c0:cf:24:fb:54:e6:8d:02:f2:76:e3:7e:82:ff:05:
                    9c:85:0b:b3:43:62:39:b0:b3:9f:05:a5:34:56:3b:
                    67:58:ce:c4:b4:56:c0:55:3d:64:4d:b5:36:b9:63:
                    6b:51:19:bc:8d:08:b8:f0:ec:b7:3c:c4:87:ec:c2:
                    14:31:f3:22:f4:6f:6d:d0:69:12:8c:ad:af:77:a5:
                    28:b2:12:fe:57:01:78:97:b7:7f:3d:46:59:66:42:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2C:AE:88:9C:B0:D0:63:B4:B7:94:A4:97:C4:06:2C:40:FF:16:29
            X509v3 Authority Key Identifier:
                keyid:C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:56:bb:25:dc:4b:f4:9e:b8:3e:d6:aa:7f:65:85:59:df:25:
         6f:7b:11:02:ee:19:73:70:86:23:ec:d9:8b:8e:9c:c1:ae:a4:
         4f:93:32:d5:43:77:03:d2:66:83:d7:e2:25:e1:04:fc:5c:39:
         40:cb:2f:21:bd:fa:31:23:b9:95:45:88:15:3f:a3:ec:7c:04:
         4c:40:ee:ba:c2:99:41:7b:5b:6f:43:fe:d7:25:86:c0:8a:85:
         6a:4c:ee:b8:29:41:18:82:2b:dc:3a:7f:73:db:f2:08:e3:9c:
         94:8e:46:d5:5b:3a:a9:60:5c:dd:a9:fe:85:1d:d3:71:2c:13:
         b5:10:9d:1a:10:5e:fc:45:18:74:69:9a:01:c1:50:d9:55:ec:
         d7:29:bc:75:19:54:07:c8:6c:6c:f7:30:27:e3:7f:d8:b8:2d:
         a4:cd:1b:13:0c:cc:e1:4c:c5:22:7d:c6:72:2d:5e:2c:b7:f6:
         b1:67:02:dc:e9:fc:07:96:6d:58:3f:e4:5c:85:f4:d3:23:79:
         bd:d1:08:1e:be:ef:4c:1b:31:f0:f3:9d:b5:ee:43:86:52:45:
         03:81:6e:7c:26:44:51:08:2b:c8:51:5c:78:7d:b4:d2:e6:b5:
         8a:cd:01:97:98:ea:19:11:cb:47:db:6d:f4:2f:03:f6:f7:ab:
         bd:ed:45:91
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKJPhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
MjVjN2MxMTVhOTk5NDdhMDIyYWVhMDM4NTBlZmRhNTZhYWI5MTIwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTEzNzE4WjAzMTEwLwYDVQQDEyhhZWZkNDMzZDQ5ZjM3
OWQ0OTY5YzNjYjYxYWRmNGE2NWEyZDE5YWE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAisDqefugE0lIj0iYE1zOvq3UpEYNEl7iJD1TM+LPOn4HB0yd
QLpBkMtP43eNfrh+BeYVniiDTVKqK8bLHjy674GWFoBMxEpm06BBZq9BnQiCsnGb
MDTP7mZXqy17fXKf/XUn0neASF8IrEM098l2uZgfCOTLj5YCTgWpBag35pzJp0kC
bKZ9BCb6vXYN7ivgg0x4szN6j/Mf8VB5ncI2J85yDa/AzyT7VOaNAvJ2436C/wWc
hQuzQ2I5sLOfBaU0VjtnWM7EtFbAVT1kTbU2uWNrURm8jQi48Oy3PMSH7MIUMfMi
9G9t0GkSjK2vd6UoshL+VwF4l7d/PUZZZkIAewIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFGssroicsNBjtLeUpJfEBixA/xYpMB8GA1UdIwQYMBaAFMCjgRS9MyqsKMh7
4pm6E0KwU8jVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzEyNWM3
YzExNWE5OTk0N2EwMjJhZWEwMzg1MGVmZGE1NmFhYjkxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWIwNDk4ODAtMTlmOS00NzEzLTg5NjQtOTlmOTJj
MjM4OGE3LzcxMjVjN2MxMTVhOTk5NDdhMDIyYWVhMDM4NTBlZmRhNTZhYWI5MTIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYjA0OTg4MC0xOWY5LTQ3MTMtODk2NC05OWY5
MmMyMzg4YTcvNzEyNWM3YzExNWE5OTk0N2EwMjJhZWEwMzg1MGVmZGE1NmFhYjkx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBADVWuyXcS/SeuD7Wqn9lhVnfJW97EQLuGXNwhiPs2YuOnMGu
pE+TMtVDdwPSZoPX4iXhBPxcOUDLLyG9+jEjuZVFiBU/o+x8BExA7rrCmUF7W29D
/tclhsCKhWpM7rgpQRiCK9w6f3Pb8gjjnJSORtVbOqlgXN2p/oUd03EsE7UQnRoQ
XvxFGHRpmgHBUNlV7NcpvHUZVAfIbGz3MCfjf9i4LaTNGxMMzOFMxSJ9xnItXiy3
9rFnAtzp/AeWbVg/5FyF9NMjeb3RCB6+70wbMfDznbXuQ4ZSRQOBbnwmRFEIK8hR
XHh9tNLmtYrNAZeY6hkRy0fbbfQvA/b3q73tRZE=
-----END CERTIFICATE-----