Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ca8d4bcf-12ed-40ef-99ec-9eb0cd8870ff/577dd936f160916cdd8e8df2829ba092e5c1b8ab.mft
File:                     577dd936f160916cdd8e8df2829ba092e5c1b8ab.mft (raw, json)
Hash identifier:          IuUsjvWC2YyaD8/kI+aCYkp4VyJ12k79n6h/CEt2qT8=
Subject key identifier:   58:0A:DD:B0:AD:A3:7B:74:70:9F:99:4F:C4:A6:06:3F:EB:46:7A:31
Authority key identifier: 2B:6B:91:76:8B:ED:6B:B9:9C:C3:C9:DA:58:74:64:38:2E:AC:97:C1
Certificate issuer:       /CN=577dd936f160916cdd8e8df2829ba092e5c1b8ab
Certificate serial:       279221
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577dd936f160916cdd8e8df2829ba092e5c1b8ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ca8d4bcf-12ed-40ef-99ec-9eb0cd8870ff/577dd936f160916cdd8e8df2829ba092e5c1b8ab.mft
Manifest number:          0DEA
Signing time:             Mon 15 Apr 2024 03:21:02 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:41:17 +0000
Files and hashes:         1: 577dd936f160916cdd8e8df2829ba092e5c1b8ab.crl (hash: fYgT+BLjvWST9aPTfyvHpiirlu20fd/IkK/fcadBIJ8=)
                          2: ca4b8f5c87138c4b1b7b2bf5c6f6a5c78a33cc65.roa (hash: jAe/WpOLivtOdojOh41qoc7yXxv+E7eYxQ5XWrFepf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2593313 (0x279221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577dd936f160916cdd8e8df2829ba092e5c1b8ab
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:41:17 2024 GMT
        Subject: CN=4d621ca0bf6edd0f44f15aa02eddbad10dee0020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:0e:77:f6:4f:2c:46:49:59:da:fd:55:d6:
                    34:cd:1b:3d:d7:b5:ad:81:32:03:2a:67:89:e6:ff:
                    84:13:95:2b:e7:f3:50:c0:d0:2d:2b:f4:bb:74:1b:
                    40:47:fa:15:46:9c:2a:3c:21:24:85:eb:49:e7:18:
                    04:a4:d6:1b:ce:0d:8e:0e:43:c2:e5:dc:02:8f:61:
                    0d:f7:04:c0:48:11:e8:4d:79:58:7a:4d:4f:23:65:
                    13:c9:f1:82:45:b3:1a:fb:20:49:58:77:ef:2e:f2:
                    d8:1b:f7:2c:3e:ba:10:c9:34:82:53:a9:e0:e1:2a:
                    a4:cc:31:ee:c8:d9:55:3e:de:a5:4f:a7:12:9f:98:
                    e3:e3:b7:e0:7e:63:66:83:bb:62:ac:5f:34:64:43:
                    29:fe:c2:c6:0e:8e:2a:13:a5:f4:19:b2:5a:da:64:
                    55:4f:07:ba:fa:63:24:f8:b1:31:85:0d:93:79:4c:
                    18:b5:a8:dd:28:ab:a6:ef:c8:6a:55:0f:a9:bd:a0:
                    30:41:07:7f:e2:38:35:f6:69:e4:28:a4:01:37:f8:
                    99:f5:b1:88:73:9a:ed:14:de:27:e1:3a:d9:0f:9d:
                    16:0a:f9:76:29:42:ff:70:9c:9c:5b:3f:8d:0c:87:
                    48:4c:52:01:4d:c3:4d:13:85:e4:d2:0a:15:ed:53:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0A:DD:B0:AD:A3:7B:74:70:9F:99:4F:C4:A6:06:3F:EB:46:7A:31
            X509v3 Authority Key Identifier:
                keyid:2B:6B:91:76:8B:ED:6B:B9:9C:C3:C9:DA:58:74:64:38:2E:AC:97:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577dd936f160916cdd8e8df2829ba092e5c1b8ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ca8d4bcf-12ed-40ef-99ec-9eb0cd8870ff/577dd936f160916cdd8e8df2829ba092e5c1b8ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ca8d4bcf-12ed-40ef-99ec-9eb0cd8870ff/577dd936f160916cdd8e8df2829ba092e5c1b8ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:20:6e:96:05:8d:17:e4:30:d2:db:6b:af:43:77:6c:93:cc:
         5a:1e:c7:0c:49:47:e3:c0:4c:55:62:84:d6:dd:43:e3:75:1b:
         a1:9a:a0:90:f1:d8:f3:5b:49:40:fd:ef:d6:a4:04:21:ae:0a:
         76:2a:6a:26:6e:68:aa:ef:79:33:d3:11:b9:7d:aa:e2:63:80:
         3d:93:29:77:a0:3f:ca:6e:80:d1:1d:9e:6a:18:d0:04:2f:28:
         ec:e7:0b:a7:da:8f:b4:a7:3b:ba:b4:cc:c6:b7:1c:63:e6:21:
         48:a2:73:90:29:ea:0a:98:08:ef:ee:73:1c:72:29:b3:3f:ae:
         75:96:39:eb:fa:c5:dd:2c:e3:59:79:d2:3a:cb:69:6a:f3:4b:
         dc:eb:55:b4:2a:9f:18:8b:55:5e:df:f3:a5:7a:56:a1:8c:48:
         91:41:38:45:9d:8a:c5:51:0c:00:23:b6:2a:8d:76:ed:72:3d:
         d1:a2:8e:85:90:e7:2a:a1:50:0b:cd:3a:4b:9e:4a:37:35:7b:
         22:a1:a2:ce:99:da:6a:c9:8d:63:cf:1a:92:73:32:7d:f0:25:
         6e:41:41:91:f1:59:17:ce:f7:f0:e5:7d:6c:6a:ba:18:21:d8:
         be:32:36:dd:89:66:59:26:ba:4b:8f:28:59:97:26:bf:d3:b5:
         8f:f4:08:de
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJ5IhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU3
N2RkOTM2ZjE2MDkxNmNkZDhlOGRmMjgyOWJhMDkyZTVjMWI4YWIwHhcNMjQwNDE1
MDIyMDE3WhcNMjQwNDE4MDU0MTE3WjAzMTEwLwYDVQQDEyg0ZDYyMWNhMGJmNmVk
ZDBmNDRmMTVhYTAyZWRkYmFkMTBkZWUwMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvZMOd/ZPLEZJWdr9VdY0zRs917WtgTIDKmeJ5v+EE5Ur5/NQ
wNAtK/S7dBtAR/oVRpwqPCEkhetJ5xgEpNYbzg2ODkPC5dwCj2EN9wTASBHoTXlY
ek1PI2UTyfGCRbMa+yBJWHfvLvLYG/csProQyTSCU6ng4SqkzDHuyNlVPt6lT6cS
n5jj47fgfmNmg7tirF80ZEMp/sLGDo4qE6X0GbJa2mRVTwe6+mMk+LExhQ2TeUwY
tajdKKum78hqVQ+pvaAwQQd/4jg19mnkKKQBN/iZ9bGIc5rtFN4n4TrZD50WCvl2
KUL/cJycWz+NDIdITFIBTcNNE4Xk0goV7VO2jQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFFgK3bCto3t0cJ+ZT8SmBj/rRnoxMB8GA1UdIwQYMBaAFCtrkXaL7Wu5nMPJ
2lh0ZDgurJfBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTc3ZGQ5
MzZmMTYwOTE2Y2RkOGU4ZGYyODI5YmEwOTJlNWMxYjhhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2E4ZDRiY2YtMTJlZC00MGVmLTk5ZWMtOWViMGNk
ODg3MGZmLzU3N2RkOTM2ZjE2MDkxNmNkZDhlOGRmMjgyOWJhMDkyZTVjMWI4YWIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYThkNGJjZi0xMmVkLTQwZWYtOTllYy05ZWIw
Y2Q4ODcwZmYvNTc3ZGQ5MzZmMTYwOTE2Y2RkOGU4ZGYyODI5YmEwOTJlNWMxYjhh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAD4gbpYFjRfkMNLba69Dd2yTzFoexwxJR+PATFVihNbdQ+N1
G6GaoJDx2PNbSUD979akBCGuCnYqaiZuaKrveTPTEbl9quJjgD2TKXegP8pugNEd
nmoY0AQvKOznC6faj7SnO7q0zMa3HGPmIUiic5Ap6gqYCO/ucxxyKbM/rnWWOev6
xd0s41l50jrLaWrzS9zrVbQqnxiLVV7f86V6VqGMSJFBOEWdisVRDAAjtiqNdu1y
PdGijoWQ5yqhUAvNOkueSjc1eyKhos6Z2mrJjWPPGpJzMn3wJW5BQZHxWRfO9/Dl
fWxquhgh2L4yNt2JZlkmukuPKFmXJr/TtY/0CN4=
-----END CERTIFICATE-----