Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf6aade0-99d2-47d3-acd2-2a7ee3599f3c/ad90a0daa1379814c2a417f0e73f57b3f07c6702.mft
File:                     ad90a0daa1379814c2a417f0e73f57b3f07c6702.mft (raw, json)
Hash identifier:          shJAPszPbJoFeNVyFrvctaDMxtP6okaL7aqBE9KKa/8=
Subject key identifier:   67:17:C1:1C:F3:45:04:DF:22:15:4B:61:91:9C:A6:02:1C:3C:0C:8F
Authority key identifier: 81:E6:B2:F9:67:FB:9E:5B:5F:F0:49:6F:AA:E3:76:AE:41:2C:80:2C
Certificate issuer:       /CN=ad90a0daa1379814c2a417f0e73f57b3f07c6702
Certificate serial:       04E943
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad90a0daa1379814c2a417f0e73f57b3f07c6702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bf6aade0-99d2-47d3-acd2-2a7ee3599f3c/ad90a0daa1379814c2a417f0e73f57b3f07c6702.mft
Manifest number:          028C
Signing time:             Mon 15 Apr 2024 07:21:23 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 08:00:17 +0000
Files and hashes:         1: ad90a0daa1379814c2a417f0e73f57b3f07c6702.crl (hash: SuLCOPK4LsNI4dBCeLPLI367+OuHuB+9IYDXp1fEO9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321859 (0x4e943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad90a0daa1379814c2a417f0e73f57b3f07c6702
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 08:00:17 2024 GMT
        Subject: CN=7bd7d70c03c005ae241c28592753abe8d6004abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1d:0f:02:61:a7:74:4d:78:b7:23:5a:50:69:
                    ca:7d:18:0e:0c:71:e4:1b:69:7b:14:43:39:bc:d5:
                    3b:c8:20:99:5c:8e:42:f4:94:ab:0a:7e:27:9a:e2:
                    3a:ec:bc:7a:65:0b:b2:96:af:35:03:56:81:d6:53:
                    99:24:4e:7f:fc:e2:88:10:d9:eb:d9:f3:5b:72:f1:
                    58:d2:4b:4a:8a:ac:5d:fc:83:9e:e1:4d:8c:ee:7a:
                    01:70:44:77:23:c0:b6:d6:c0:76:55:15:f5:4b:88:
                    7d:a8:77:1a:d9:5b:24:90:22:5b:76:da:98:83:92:
                    eb:4e:46:fc:f2:28:60:32:e0:b2:e3:0a:84:26:80:
                    64:67:be:60:aa:79:c2:07:2a:07:4e:32:14:c9:67:
                    b7:13:0a:e1:85:b9:fe:1e:3e:cc:5e:08:28:aa:53:
                    ab:36:bf:96:fc:bd:b8:51:f2:8e:21:82:60:1a:41:
                    48:d1:71:11:29:b1:b6:2a:33:11:d9:91:49:fd:5e:
                    0b:b6:93:5d:47:e0:b2:ae:37:c5:8c:16:a9:31:14:
                    9f:ca:3e:9d:2a:d2:d1:c0:b5:bd:38:83:f7:47:27:
                    8e:b1:33:bd:0b:3a:f4:c0:df:bf:ba:26:9f:e0:32:
                    09:75:64:13:9f:67:7f:b1:5a:aa:1f:18:d8:40:b7:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:17:C1:1C:F3:45:04:DF:22:15:4B:61:91:9C:A6:02:1C:3C:0C:8F
            X509v3 Authority Key Identifier:
                keyid:81:E6:B2:F9:67:FB:9E:5B:5F:F0:49:6F:AA:E3:76:AE:41:2C:80:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad90a0daa1379814c2a417f0e73f57b3f07c6702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf6aade0-99d2-47d3-acd2-2a7ee3599f3c/ad90a0daa1379814c2a417f0e73f57b3f07c6702.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bf6aade0-99d2-47d3-acd2-2a7ee3599f3c/ad90a0daa1379814c2a417f0e73f57b3f07c6702.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:fe:45:f0:ba:27:a1:23:c6:2a:46:d7:89:19:03:83:76:
         5c:df:53:c7:01:3c:69:62:a6:b5:5a:11:85:d3:7c:3b:fd:96:
         f7:55:a3:aa:e7:cd:a0:11:38:29:0d:f3:f5:56:d3:37:42:68:
         f1:39:bc:17:b6:bc:15:93:3f:ef:c1:ae:2c:ac:39:1b:3e:01:
         cf:76:5c:92:c0:7f:cd:bb:a7:84:37:69:a6:8b:20:41:f3:04:
         ad:53:58:91:d9:62:10:bf:e6:91:75:42:f8:29:7f:33:54:65:
         3b:6e:90:ac:54:33:35:b1:40:84:80:e4:01:ab:a5:36:84:64:
         b6:bc:60:e5:3a:5f:30:cb:5e:4c:68:1e:d1:2b:0a:ff:1f:4f:
         20:4a:09:11:b0:dd:96:03:ce:b8:da:90:57:c5:ee:17:d1:2a:
         43:8a:03:41:82:82:9f:b7:fa:3e:26:40:e3:5a:8a:94:6b:7b:
         65:62:63:07:94:be:5f:e4:86:3a:18:64:bb:b4:51:c9:04:b4:
         ad:37:68:c8:9d:9c:ca:d9:a2:f5:4b:c4:08:c3:86:61:df:8c:
         db:cf:83:50:1b:53:67:a4:6b:be:40:db:59:a3:3a:cf:78:b1:
         6d:40:96:04:ed:55:a5:68:d9:08:b8:3b:6a:0c:c1:99:d7:19:
         5a:57:c2:cc
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDBOlDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
OTBhMGRhYTEzNzk4MTRjMmE0MTdmMGU3M2Y1N2IzZjA3YzY3MDIwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MDgwMDE3WjAzMTEwLwYDVQQDEyg3YmQ3ZDcwYzAzYzAw
NWFlMjQxYzI4NTkyNzUzYWJlOGQ2MDA0YWJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6x0PAmGndE14tyNaUGnKfRgODHHkG2l7FEM5vNU7yCCZXI5C
9JSrCn4nmuI67Lx6ZQuylq81A1aB1lOZJE5//OKIENnr2fNbcvFY0ktKiqxd/IOe
4U2M7noBcER3I8C21sB2VRX1S4h9qHca2VskkCJbdtqYg5LrTkb88ihgMuCy4wqE
JoBkZ75gqnnCByoHTjIUyWe3Ewrhhbn+Hj7MXggoqlOrNr+W/L24UfKOIYJgGkFI
0XERKbG2KjMR2ZFJ/V4LtpNdR+CyrjfFjBapMRSfyj6dKtLRwLW9OIP3RyeOsTO9
Czr0wN+/uiaf4DIJdWQTn2d/sVqqHxjYQLd7yQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFGcXwRzzRQTfIhVLYZGcpgIcPAyPMB8GA1UdIwQYMBaAFIHmsvln+55bX/BJ
b6rjdq5BLIAsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWQ5MGEw
ZGFhMTM3OTgxNGMyYTQxN2YwZTczZjU3YjNmMDdjNjcwMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmY2YWFkZTAtOTlkMi00N2QzLWFjZDItMmE3ZWUz
NTk5ZjNjL2FkOTBhMGRhYTEzNzk4MTRjMmE0MTdmMGU3M2Y1N2IzZjA3YzY3MDIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZjZhYWRlMC05OWQyLTQ3ZDMtYWNkMi0yYTdl
ZTM1OTlmM2MvYWQ5MGEwZGFhMTM3OTgxNGMyYTQxN2YwZTczZjU3YjNmMDdjNjcw
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBABwH/kXwuiehI8YqRteJGQODdlzfU8cBPGliprVaEYXTfDv9
lvdVo6rnzaAROCkN8/VW0zdCaPE5vBe2vBWTP+/BriysORs+Ac92XJLAf827p4Q3
aaaLIEHzBK1TWJHZYhC/5pF1QvgpfzNUZTtukKxUMzWxQISA5AGrpTaEZLa8YOU6
XzDLXkxoHtErCv8fTyBKCRGw3ZYDzrjakFfF7hfRKkOKA0GCgp+3+j4mQONaipRr
e2ViYweUvl/khjoYZLu0UckEtK03aMidnMrZovVLxAjDhmHfjNvPg1AbU2eka75A
21mjOs94sW1AlgTtVaVo2Qi4O2oMwZnXGVpXwsw=
-----END CERTIFICATE-----