Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/d34949bd125a2b95efcd70635590038fc0030295.mft
File:                     d34949bd125a2b95efcd70635590038fc0030295.mft (raw, json)
Hash identifier:          H1sOSwvznJboXRE3TqLgiMJQkaOOww0SXZRLX+YWB1o=
Subject key identifier:   FC:9C:1C:AF:0B:D1:9C:ED:C2:07:F1:73:A0:DD:36:33:5C:F8:29:0A
Authority key identifier: BC:01:7D:FE:F9:8D:5A:78:7A:01:BF:EA:25:AF:4D:BE:E4:9B:3D:DE
Certificate issuer:       /CN=d34949bd125a2b95efcd70635590038fc0030295
Certificate serial:       1F4948
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d34949bd125a2b95efcd70635590038fc0030295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/d34949bd125a2b95efcd70635590038fc0030295.mft
Manifest number:          0E11
Signing time:             Mon 15 Apr 2024 06:20:47 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:36:39 +0000
Files and hashes:         1: cac6a78ed05642b685326bec31d4eec6530ee46d.roa (hash: xuc4FoY4RtZ1d82hL5w7tT9dVw7zf+ixzNWHOx0+vs0=)
                          2: d34949bd125a2b95efcd70635590038fc0030295.crl (hash: qYk3Nx7Z8ayrMyYYtme+bvj1n7ZojH6o2eBAO0pRf2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050376 (0x1f4948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34949bd125a2b95efcd70635590038fc0030295
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:36:39 2024 GMT
        Subject: CN=0d231861f670455306175fcd76113ed0e9f723cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:fa:fe:41:a3:5f:d4:6e:9b:d0:71:c3:f1:
                    eb:6f:94:c6:eb:fc:1e:28:76:1d:e7:78:a0:38:99:
                    e4:78:4b:39:27:e9:de:a4:36:c6:f8:0d:79:02:e2:
                    97:dc:25:65:95:b0:6d:1f:50:c7:a8:d5:13:8e:a5:
                    9f:e6:72:0f:6c:01:a2:1c:ce:ff:0a:ff:34:94:04:
                    8f:8e:2b:88:5c:cd:a8:c6:84:20:a7:bc:2b:94:3e:
                    93:ce:94:fd:b9:02:e0:9a:c5:f0:63:3a:9b:d9:31:
                    a7:21:f3:54:87:6b:9c:79:7d:fc:b6:6c:c9:3e:cd:
                    aa:40:d1:82:eb:a6:99:ff:34:94:b0:eb:7e:3c:fd:
                    63:06:c5:0e:a1:f8:2e:d6:67:75:62:fd:85:98:ef:
                    29:92:c9:82:87:ea:82:7b:b3:ac:f4:2f:28:ee:95:
                    48:b9:90:b6:3c:9f:0b:e1:4e:fe:98:cf:a8:45:be:
                    e6:e2:d7:7b:09:ca:d7:ba:7f:c6:f1:72:de:ea:82:
                    db:23:71:e7:04:d3:6a:6c:7d:00:b6:ed:3e:20:4d:
                    ad:b0:b3:0f:dc:7e:97:bf:79:4d:8c:ce:b0:14:5b:
                    14:bd:a7:d3:8b:24:78:bb:73:f3:06:40:1b:1a:2a:
                    cc:93:6c:00:c7:4d:d8:87:72:ca:08:6f:03:e8:34:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9C:1C:AF:0B:D1:9C:ED:C2:07:F1:73:A0:DD:36:33:5C:F8:29:0A
            X509v3 Authority Key Identifier:
                keyid:BC:01:7D:FE:F9:8D:5A:78:7A:01:BF:EA:25:AF:4D:BE:E4:9B:3D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d34949bd125a2b95efcd70635590038fc0030295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/d34949bd125a2b95efcd70635590038fc0030295.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/d34949bd125a2b95efcd70635590038fc0030295.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c4:b8:fc:02:6b:68:e2:90:49:32:8e:1e:05:74:74:f0:77:
         9b:2a:01:f1:ff:e2:ff:4c:ff:4d:cf:42:c9:ad:6c:a3:e5:01:
         a1:38:82:af:d0:61:7d:86:0f:4a:b1:cd:5e:09:2e:a2:20:68:
         d1:e7:a9:87:ef:9b:24:ec:53:ca:a5:1b:10:b6:ee:cf:1e:dc:
         d6:14:36:82:16:be:17:f6:65:5a:e3:a5:99:06:7e:3a:5a:cd:
         55:05:b6:98:dd:22:4a:44:d1:89:14:e0:2e:cc:d7:11:51:a7:
         5c:71:0e:aa:9f:06:71:64:c1:d5:16:3d:55:36:79:9e:00:e5:
         e4:74:7c:d1:08:2f:7d:10:60:54:d6:5d:5d:ae:95:f9:1f:3e:
         b8:58:38:3a:d8:ff:b3:06:c0:a5:fe:ff:b9:bb:42:c4:3f:c1:
         89:0f:cc:ce:e9:91:ef:a4:27:ce:0c:a5:df:f0:0e:87:99:bb:
         b9:20:4d:4d:03:3e:48:69:cc:e7:d1:67:fd:01:34:3f:33:33:
         a6:f9:77:98:8f:a7:e1:e8:49:85:24:ee:c9:ee:00:6c:94:be:
         b3:c4:39:f5:08:43:73:28:1e:bd:12:be:0b:ec:1a:63:83:b1:
         c6:08:98:3d:85:35:0f:80:b6:b2:52:c7:f4:7b:ce:de:f0:16:
         61:81:d1:44
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDH0lIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQz
NDk0OWJkMTI1YTJiOTVlZmNkNzA2MzU1OTAwMzhmYzAwMzAyOTUwHhcNMjQwNDE1
MDUyMDM5WhcNMjQwNDE4MDczNjM5WjAzMTEwLwYDVQQDEygwZDIzMTg2MWY2NzA0
NTUzMDYxNzVmY2Q3NjExM2VkMGU5ZjcyM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtcb6/kGjX9Rum9Bxw/Hrb5TG6/weKHYd53igOJnkeEs5J+ne
pDbG+A15AuKX3CVllbBtH1DHqNUTjqWf5nIPbAGiHM7/Cv80lASPjiuIXM2oxoQg
p7wrlD6TzpT9uQLgmsXwYzqb2TGnIfNUh2uceX38tmzJPs2qQNGC66aZ/zSUsOt+
PP1jBsUOofgu1md1Yv2FmO8pksmCh+qCe7Os9C8o7pVIuZC2PJ8L4U7+mM+oRb7m
4td7CcrXun/G8XLe6oLbI3HnBNNqbH0Atu0+IE2tsLMP3H6Xv3lNjM6wFFsUvafT
iyR4u3PzBkAbGirMk2wAx03Yh3LKCG8D6DTTtwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFPycHK8L0Zztwgfxc6DdNjNc+CkKMB8GA1UdIwQYMBaAFLwBff75jVp4egG/
6iWvTb7kmz3eMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDM0OTQ5
YmQxMjVhMmI5NWVmY2Q3MDYzNTU5MDAzOGZjMDAzMDI5NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjVhMzhkNGEtODk4Zi00ZGYyLWIyMjEtMmU1NmM1
NTQ5ZWNkL2QzNDk0OWJkMTI1YTJiOTVlZmNkNzA2MzU1OTAwMzhmYzAwMzAyOTUu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNWEzOGQ0YS04OThmLTRkZjItYjIyMS0yZTU2
YzU1NDllY2QvZDM0OTQ5YmQxMjVhMmI5NWVmY2Q3MDYzNTU5MDAzOGZjMDAzMDI5
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAIvEuPwCa2jikEkyjh4FdHTwd5sqAfH/4v9M/03PQsmtbKPl
AaE4gq/QYX2GD0qxzV4JLqIgaNHnqYfvmyTsU8qlGxC27s8e3NYUNoIWvhf2ZVrj
pZkGfjpazVUFtpjdIkpE0YkU4C7M1xFRp1xxDqqfBnFkwdUWPVU2eZ4A5eR0fNEI
L30QYFTWXV2ulfkfPrhYODrY/7MGwKX+/7m7QsQ/wYkPzM7pke+kJ84Mpd/wDoeZ
u7kgTU0DPkhpzOfRZ/0BND8zM6b5d5iPp+HoSYUk7snuAGyUvrPEOfUIQ3MoHr0S
vgvsGmODscYImD2FNQ+AtrJSx/R7zt7wFmGB0UQ=
-----END CERTIFICATE-----