Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.mft
File:                     af916a8098c48f9f0fefd791512ee124a99ce09d.mft (raw, json)
Hash identifier:          gN0i7CtgOaVj4A4bx/5T8xbtrPSy4rKR/NsY3uGYisc=
Subject key identifier:   D0:23:67:5E:B2:37:B5:BC:FD:42:4A:E5:61:D1:F1:68:86:DE:D9:1B
Authority key identifier: 72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
Certificate issuer:       /CN=af916a8098c48f9f0fefd791512ee124a99ce09d
Certificate serial:       181E72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.mft
Manifest number:          0C5F
Signing time:             Mon 15 Apr 2024 11:21:06 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:56:18 +0000
Files and hashes:         1: 925d61452dc6c9b912758447e70f168a3a5500a2.roa (hash: Pgsi73sWxLVUPdv97TMqEddOuj5zv6f0cbjamizv2Fw=)
                          2: af916a8098c48f9f0fefd791512ee124a99ce09d.crl (hash: M852Nwybpe8XX+jTN4AWbiQa9JR2T6ongSrXGfqqqlo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580658 (0x181e72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af916a8098c48f9f0fefd791512ee124a99ce09d
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:56:18 2024 GMT
        Subject: CN=f1b5188fb511b9da0b3a13e30678e65cf420b915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:64:d2:92:da:25:1a:f2:cd:c7:5e:e9:e1:
                    6e:aa:2a:9a:00:74:69:47:b7:ed:e3:a5:c1:51:ea:
                    b3:70:75:8e:2b:bd:5b:ca:d7:da:a0:53:6b:4b:32:
                    43:42:5e:a9:d4:b8:86:b1:d9:f1:85:e4:79:12:bf:
                    81:3a:3e:48:7a:9d:7d:83:10:5b:27:62:fd:85:08:
                    77:0c:bb:55:d6:bd:3e:cc:bc:b1:bb:18:13:57:27:
                    5b:7e:5c:41:cc:6c:d0:7a:e6:f4:8e:93:63:30:ff:
                    94:ad:7d:a5:1d:49:cf:fc:41:a9:15:a4:3d:48:ac:
                    dd:1e:a2:87:0e:8b:93:b2:c0:fd:7e:16:cc:bf:d0:
                    f7:0a:69:d1:34:ac:f8:f2:fe:fc:8b:37:1e:f4:cd:
                    3c:26:02:41:b4:fc:06:f7:aa:32:ae:1d:c5:02:05:
                    e2:26:25:eb:14:6c:c0:f6:06:a5:d0:ac:a4:02:af:
                    20:a4:9d:5d:c6:a3:6f:e3:6b:e0:b6:be:dd:d5:0e:
                    f6:b1:08:d8:48:0c:09:7e:f9:2a:d0:18:f3:5f:50:
                    af:3a:a6:b5:29:d1:40:59:57:2e:b8:64:ef:42:e2:
                    15:e4:0b:69:e0:92:f2:19:8e:2d:e1:91:c6:95:f0:
                    6e:9c:5d:12:c0:ec:dc:ce:eb:53:bb:0d:79:e4:a0:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:23:67:5E:B2:37:B5:BC:FD:42:4A:E5:61:D1:F1:68:86:DE:D9:1B
            X509v3 Authority Key Identifier:
                keyid:72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:53:44:7c:07:94:8e:9b:4a:15:fa:76:ba:07:e1:73:cf:6c:
         30:ae:ef:c0:15:23:52:e9:0f:19:07:e4:8c:8b:47:02:e7:01:
         eb:bb:2e:ad:ed:57:37:43:a3:6d:ed:90:20:83:67:e9:07:de:
         79:7a:cf:d2:b9:e0:d9:6b:7e:78:a8:8d:c4:57:a3:43:3f:11:
         81:05:5f:fd:3e:59:7c:ad:01:f9:b0:4b:13:64:83:2f:ae:8f:
         bc:6b:f8:bb:0a:14:d7:4a:bd:5d:19:c5:b8:25:98:13:f9:79:
         f3:8b:ee:61:9b:b6:b3:50:52:95:92:3a:ea:96:56:e3:ea:d5:
         a1:96:4a:c4:3a:83:62:0e:8f:1e:ca:9a:a7:cf:1f:43:95:6b:
         01:dd:9f:ad:34:7c:99:b9:26:47:49:27:12:11:8e:db:61:b3:
         8a:97:ef:49:c9:cb:50:e6:d4:c4:3b:c3:74:d1:d8:53:ef:ba:
         38:52:0b:21:bf:2e:ee:04:ee:5d:3a:2f:72:db:27:71:70:6a:
         81:3d:f3:88:c3:a4:74:c7:5a:30:78:0a:14:c9:b8:ac:b2:71:
         b6:b9:dd:ee:48:a9:82:2e:78:f3:33:d9:90:d1:94:f5:6e:b0:
         a2:05:33:a9:f9:7f:c4:0d:be:6a:0e:ba:b4:73:1d:b4:7e:50:
         da:26:35:87
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDGB5yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFm
OTE2YTgwOThjNDhmOWYwZmVmZDc5MTUxMmVlMTI0YTk5Y2UwOWQwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTM1NjE4WjAzMTEwLwYDVQQDEyhmMWI1MTg4ZmI1MTFi
OWRhMGIzYTEzZTMwNjc4ZTY1Y2Y0MjBiOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkxNk0pLaJRryzcde6eFuqiqaAHRpR7ft46XBUeqzcHWOK71b
ytfaoFNrSzJDQl6p1LiGsdnxheR5Er+BOj5Iep19gxBbJ2L9hQh3DLtV1r0+zLyx
uxgTVydbflxBzGzQeub0jpNjMP+UrX2lHUnP/EGpFaQ9SKzdHqKHDouTssD9fhbM
v9D3CmnRNKz48v78izce9M08JgJBtPwG96oyrh3FAgXiJiXrFGzA9gal0KykAq8g
pJ1dxqNv42vgtr7d1Q72sQjYSAwJfvkq0BjzX1CvOqa1KdFAWVcuuGTvQuIV5Atp
4JLyGY4t4ZHGlfBunF0SwOzczutTuw155KBLNwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFNAjZ16yN7W8/UJK5WHR8WiG3tkbMB8GA1UdIwQYMBaAFHJR7k63LejrIQUQ
XBNUKNIbZW4gMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWY5MTZh
ODA5OGM0OGY5ZjBmZWZkNzkxNTEyZWUxMjRhOTljZTA5ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzEwMmZhODgtYTBjMy00MzhiLWI2MmYtNmM0YWQz
ZDdhZTVlL2FmOTE2YTgwOThjNDhmOWYwZmVmZDc5MTUxMmVlMTI0YTk5Y2UwOWQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMTAyZmE4OC1hMGMzLTQzOGItYjYyZi02YzRh
ZDNkN2FlNWUvYWY5MTZhODA5OGM0OGY5ZjBmZWZkNzkxNTEyZWUxMjRhOTljZTA5
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBADFTRHwHlI6bShX6droH4XPPbDCu78AVI1LpDxkH5IyLRwLn
Aeu7Lq3tVzdDo23tkCCDZ+kH3nl6z9K54NlrfniojcRXo0M/EYEFX/0+WXytAfmw
SxNkgy+uj7xr+LsKFNdKvV0ZxbglmBP5efOL7mGbtrNQUpWSOuqWVuPq1aGWSsQ6
g2IOjx7KmqfPH0OVawHdn600fJm5JkdJJxIRjtths4qX70nJy1Dm1MQ7w3TR2FPv
ujhSCyG/Lu4E7l06L3LbJ3FwaoE984jDpHTHWjB4ChTJuKyycba53e5IqYIuePMz
2ZDRlPVusKIFM6n5f8QNvmoOurRzHbR+UNomNYc=
-----END CERTIFICATE-----