Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/badc597dac1debf52afd4da6abc08896e46e7502.mft
File:                     badc597dac1debf52afd4da6abc08896e46e7502.mft (raw, json)
Hash identifier:          jo6dmhI7BegpldETz9O4WXQjqJBFrYkSQ1u7bMkGrLA=
Subject key identifier:   5D:6D:1C:B5:1B:01:2B:01:ED:DC:E8:28:21:5F:55:13:AC:62:59:C6
Authority key identifier: 7D:88:53:4C:C6:C1:D1:42:DF:C1:AC:17:ED:6A:CC:A0:55:8D:48:08
Certificate issuer:       /CN=badc597dac1debf52afd4da6abc08896e46e7502
Certificate serial:       135D62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/badc597dac1debf52afd4da6abc08896e46e7502.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/badc597dac1debf52afd4da6abc08896e46e7502.mft
Manifest number:          0A0F
Signing time:             Mon 15 Apr 2024 09:21:44 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:18:18 +0000
Files and hashes:         1: 36d408256e3dad44a2c70295f9d4e6990c311527.roa (hash: X1MIwRDOppPjommowq+AUjD1n6TNrD1HQLdAA5Obfuw=)
                          2: badc597dac1debf52afd4da6abc08896e46e7502.crl (hash: pmBaaznOwPb+gOTmEyZhlbpEVbv4yhSdcsExFf3cu8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269090 (0x135d62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=badc597dac1debf52afd4da6abc08896e46e7502
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:18:18 2024 GMT
        Subject: CN=86faaa1d32785dda438758058ddfa2e6a41c07cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:1e:8e:ad:c0:72:ff:6a:50:08:26:64:91:
                    6e:88:ae:cc:f7:fe:05:55:0a:bb:ce:bc:b8:6c:51:
                    b4:01:58:f3:96:7f:c7:43:6e:dc:a6:22:f1:49:5d:
                    ec:02:de:f6:a3:33:c0:bf:fd:80:71:c9:67:3b:7c:
                    47:33:55:29:74:51:03:5c:5d:58:59:9c:7b:a3:6b:
                    81:6f:7d:29:03:68:e4:8f:c4:2b:5e:b4:50:2a:1c:
                    0f:0d:cd:30:ea:50:78:6f:a1:54:c4:8b:42:a3:42:
                    19:08:17:04:0c:aa:f2:81:a2:81:c5:f8:0b:77:9f:
                    84:be:5a:57:f4:1b:8e:13:05:db:8c:aa:ae:da:77:
                    b1:07:0a:b6:7a:82:bf:5d:45:fd:2d:51:34:73:68:
                    60:50:89:36:98:85:c2:5f:5c:22:fb:3f:b3:01:30:
                    cc:d0:02:42:c4:40:d6:90:8d:ba:b1:86:52:07:2c:
                    ce:0a:b7:ba:d6:ea:f4:f7:56:0e:3f:60:fd:d5:7b:
                    3e:bd:e4:98:55:90:e4:4b:76:d2:80:8f:ee:e2:58:
                    4b:70:14:f2:9b:5c:af:5b:87:da:50:e8:02:87:52:
                    3c:e7:71:c7:a4:e2:49:8d:72:df:23:ba:4d:2d:f1:
                    37:3f:7e:77:a0:3c:a3:61:bc:ba:0e:0c:ec:26:db:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6D:1C:B5:1B:01:2B:01:ED:DC:E8:28:21:5F:55:13:AC:62:59:C6
            X509v3 Authority Key Identifier:
                keyid:7D:88:53:4C:C6:C1:D1:42:DF:C1:AC:17:ED:6A:CC:A0:55:8D:48:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/badc597dac1debf52afd4da6abc08896e46e7502.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/badc597dac1debf52afd4da6abc08896e46e7502.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/badc597dac1debf52afd4da6abc08896e46e7502.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:37:e2:2f:0b:f0:e2:dc:0c:f1:d4:78:eb:d7:35:b8:d8:
         27:f4:79:9b:76:ac:fe:30:6f:9d:17:12:7e:6a:7e:30:92:de:
         cf:38:a0:54:39:b4:97:e4:19:42:54:94:a9:1c:30:10:d5:be:
         e3:0b:e1:be:db:e0:61:72:54:5e:14:1a:9e:c9:e5:b6:82:2d:
         a7:2d:6b:33:11:3e:e1:1e:bd:dc:e1:f1:a9:3b:16:0c:eb:74:
         3f:5d:82:c3:44:39:b5:a4:8e:d0:95:03:44:d9:36:92:7e:1e:
         b9:df:07:09:f5:06:81:ad:62:3a:85:47:b2:64:ee:20:06:89:
         5f:b6:94:7e:46:f6:40:c1:ff:3e:88:8c:20:c1:ad:16:07:4f:
         6f:95:b3:bc:f5:06:3e:15:7c:e2:c8:18:34:ad:8d:ac:e6:d1:
         c1:e8:05:10:05:ab:a1:20:c4:90:d2:89:8a:3f:5c:6c:ff:e6:
         5d:29:5b:55:c7:26:e5:67:bf:9b:a6:c7:b6:02:22:d2:28:1d:
         c5:9f:50:85:84:1b:d8:1d:a0:d8:6d:96:c3:be:b4:00:db:eb:
         0b:1e:16:29:4b:ed:3f:a1:2f:03:d2:5e:a4:29:a6:a2:af:7c:
         96:5f:17:04:36:3d:df:23:a9:b3:69:81:39:85:ea:3f:32:74:
         5b:79:78:14
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDE11iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh
ZGM1OTdkYWMxZGViZjUyYWZkNGRhNmFiYzA4ODk2ZTQ2ZTc1MDIwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTExODE4WjAzMTEwLwYDVQQDEyg4NmZhYWExZDMyNzg1
ZGRhNDM4NzU4MDU4ZGRmYTJlNmE0MWMwN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxTwejq3Acv9qUAgmZJFuiK7M9/4FVQq7zry4bFG0AVjzln/H
Q27cpiLxSV3sAt72ozPAv/2AcclnO3xHM1UpdFEDXF1YWZx7o2uBb30pA2jkj8Qr
XrRQKhwPDc0w6lB4b6FUxItCo0IZCBcEDKrygaKBxfgLd5+EvlpX9BuOEwXbjKqu
2nexBwq2eoK/XUX9LVE0c2hgUIk2mIXCX1wi+z+zATDM0AJCxEDWkI26sYZSByzO
Cre61ur091YOP2D91Xs+veSYVZDkS3bSgI/u4lhLcBTym1yvW4faUOgCh1I853HH
pOJJjXLfI7pNLfE3P353oDyjYby6DgzsJtvpNQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFF1tHLUbASsB7dzoKCFfVROsYlnGMB8GA1UdIwQYMBaAFH2IU0zGwdFC38Gs
F+1qzKBVjUgIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmFkYzU5
N2RhYzFkZWJmNTJhZmQ0ZGE2YWJjMDg4OTZlNDZlNzUwMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmRmN2JhNzMtNWU4Zi00YTJmLThhOTEtYTEzOTRm
NmUzMTY0L2JhZGM1OTdkYWMxZGViZjUyYWZkNGRhNmFiYzA4ODk2ZTQ2ZTc1MDIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZGY3YmE3My01ZThmLTRhMmYtOGE5MS1hMTM5
NGY2ZTMxNjQvYmFkYzU5N2RhYzFkZWJmNTJhZmQ0ZGE2YWJjMDg4OTZlNDZlNzUw
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBABinN+IvC/Di3Azx1Hjr1zW42Cf0eZt2rP4wb50XEn5qfjCS
3s84oFQ5tJfkGUJUlKkcMBDVvuML4b7b4GFyVF4UGp7J5baCLactazMRPuEevdzh
8ak7FgzrdD9dgsNEObWkjtCVA0TZNpJ+HrnfBwn1BoGtYjqFR7Jk7iAGiV+2lH5G
9kDB/z6IjCDBrRYHT2+Vs7z1Bj4VfOLIGDStjazm0cHoBRAFq6EgxJDSiYo/XGz/
5l0pW1XHJuVnv5umx7YCItIoHcWfUIWEG9gdoNhtlsO+tADb6wseFilL7T+hLwPS
XqQppqKvfJZfFwQ2Pd8jqbNpgTmF6j8ydFt5eBQ=
-----END CERTIFICATE-----