Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/cabb0cf6251beebdb70ee6bb05d5743481029a07.mft
File:                     cabb0cf6251beebdb70ee6bb05d5743481029a07.mft (raw, json)
Hash identifier:          SF3I2+tMm1X+e2PRAJ6ena5mFOL1OnXkdvGOH1o3cuE=
Subject key identifier:   3F:DB:69:F8:EE:E5:16:09:5F:D1:F2:0A:66:C5:DC:BC:BE:12:94:E4
Authority key identifier: D1:5E:AA:17:52:36:CC:A2:7C:F1:BA:D2:14:3C:8A:28:9A:3E:A9:FD
Certificate issuer:       /CN=cabb0cf6251beebdb70ee6bb05d5743481029a07
Certificate serial:       28C9AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cabb0cf6251beebdb70ee6bb05d5743481029a07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/cabb0cf6251beebdb70ee6bb05d5743481029a07.mft
Manifest number:          58
Signing time:             Mon 15 Apr 2024 08:21:11 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:38:16 +0000
Files and hashes:         1: 15aa113fe5cff682362bed7fe60c846f760e0f9b.roa (hash: s9GKtolVRBqZlremj00pRBIotxrH0PrWFjBY2cWEoa0=)
                          2: cabb0cf6251beebdb70ee6bb05d5743481029a07.crl (hash: Bs8jnW8iFTx+sXveHqBeLbvEnpFGao+pvx6qbqmeze0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673071 (0x28c9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabb0cf6251beebdb70ee6bb05d5743481029a07
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:38:16 2024 GMT
        Subject: CN=53adbd36e548adf16e92c32c3ebf3acbc54ace52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:43:ca:98:62:ae:20:f9:96:31:1d:f4:9f:
                    28:d6:d2:b0:51:fe:39:51:1a:ea:2f:0e:29:b6:d4:
                    98:29:e2:78:f2:13:ca:e0:82:53:4e:1d:c4:d4:f6:
                    93:22:3c:27:84:44:dd:e3:01:c2:f5:d4:fb:aa:d8:
                    79:88:fa:71:0c:82:f1:70:42:81:69:0c:00:87:88:
                    7d:d5:a0:91:ea:7b:89:25:f3:69:52:9c:09:d6:00:
                    5e:42:c1:60:c3:69:f6:41:14:8f:6a:0b:43:f5:02:
                    fe:38:bd:85:9c:17:1d:e8:db:d7:a2:a9:32:9d:1f:
                    e8:6c:b3:ba:ca:38:75:f7:a6:df:ba:42:bc:5e:11:
                    ac:74:b8:16:7d:36:ab:0b:5c:4d:fc:fd:74:0c:e4:
                    57:db:d3:68:99:92:e5:22:6b:53:b1:5b:54:dd:d5:
                    3d:60:67:a5:85:02:0e:ab:91:34:e4:2b:70:9d:0f:
                    d2:35:af:92:ca:b7:ba:71:0f:a4:40:bd:56:0b:c5:
                    3b:b6:65:c9:46:d3:92:42:2f:a7:b5:8e:7b:28:da:
                    51:d1:b4:5b:ef:b7:a9:32:99:63:8f:3c:d7:8c:00:
                    5d:9f:34:b4:aa:46:6e:a7:09:30:8e:7e:3c:00:08:
                    3e:fb:64:3e:e1:4e:7d:61:2f:8b:57:a8:a6:0c:3b:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DB:69:F8:EE:E5:16:09:5F:D1:F2:0A:66:C5:DC:BC:BE:12:94:E4
            X509v3 Authority Key Identifier:
                keyid:D1:5E:AA:17:52:36:CC:A2:7C:F1:BA:D2:14:3C:8A:28:9A:3E:A9:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cabb0cf6251beebdb70ee6bb05d5743481029a07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/cabb0cf6251beebdb70ee6bb05d5743481029a07.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da916cf9-c7c0-4469-a191-bc703b25c305/cabb0cf6251beebdb70ee6bb05d5743481029a07.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:a8:20:a4:0f:7d:a0:d4:b1:76:5c:2d:08:c8:ce:e8:04:
         7d:98:c3:34:04:b1:71:50:9b:dd:8f:02:f9:19:f4:48:fe:8d:
         93:b5:bf:fd:da:40:bd:f9:d9:2c:64:f5:3b:f6:49:32:74:78:
         6d:9e:c7:cb:94:fc:e3:97:b6:89:8d:11:9b:a0:24:02:6b:ea:
         e7:fc:71:6c:58:c7:b9:03:96:58:8c:90:3f:01:f1:bb:b0:35:
         25:8c:4b:9d:42:43:fc:6a:b2:2b:5c:42:60:06:cd:da:8a:7c:
         b4:5b:b1:15:95:61:99:4b:14:e8:4a:34:59:9e:b1:10:06:f0:
         1c:89:12:2a:b7:27:ec:89:41:06:3e:3c:73:fc:f5:97:b7:03:
         ab:c4:c8:5e:d9:77:fb:43:d7:f0:6b:82:92:9f:67:88:10:5d:
         22:c1:18:f6:01:92:9c:67:07:55:4f:9f:5e:c7:1f:ce:eb:60:
         e4:4b:35:74:75:e1:5e:b9:67:e4:0a:fc:b5:1c:29:4f:76:9f:
         41:66:38:00:9a:95:cc:0d:20:26:cc:0f:a2:53:c5:9b:89:cb:
         e4:73:df:0a:d1:39:43:ce:cd:01:90:1c:1c:53:41:73:d8:72:
         96:97:35:8c:fc:74:f6:2e:9f:cc:b7:b9:94:ba:df:be:c8:61:
         75:3c:db:fb
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKMmvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
YmIwY2Y2MjUxYmVlYmRiNzBlZTZiYjA1ZDU3NDM0ODEwMjlhMDcwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MDgzODE2WjAzMTEwLwYDVQQDEyg1M2FkYmQzNmU1NDhh
ZGYxNmU5MmMzMmMzZWJmM2FjYmM1NGFjZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvsVDyphiriD5ljEd9J8o1tKwUf45URrqLw4pttSYKeJ48hPK
4IJTTh3E1PaTIjwnhETd4wHC9dT7qth5iPpxDILxcEKBaQwAh4h91aCR6nuJJfNp
UpwJ1gBeQsFgw2n2QRSPagtD9QL+OL2FnBcd6NvXoqkynR/obLO6yjh196bfukK8
XhGsdLgWfTarC1xN/P10DORX29NomZLlImtTsVtU3dU9YGelhQIOq5E05CtwnQ/S
Na+Syre6cQ+kQL1WC8U7tmXJRtOSQi+ntY57KNpR0bRb77epMpljjzzXjABdnzS0
qkZupwkwjn48AAg++2Q+4U59YS+LV6imDDu/hwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFD/bafju5RYJX9HyCmbF3Ly+EpTkMB8GA1UdIwQYMBaAFNFeqhdSNsyifPG6
0hQ8iiiaPqn9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2FiYjBj
ZjYyNTFiZWViZGI3MGVlNmJiMDVkNTc0MzQ4MTAyOWEwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGE5MTZjZjktYzdjMC00NDY5LWExOTEtYmM3MDNi
MjVjMzA1L2NhYmIwY2Y2MjUxYmVlYmRiNzBlZTZiYjA1ZDU3NDM0ODEwMjlhMDcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYTkxNmNmOS1jN2MwLTQ0NjktYTE5MS1iYzcw
M2IyNWMzMDUvY2FiYjBjZjYyNTFiZWViZGI3MGVlNmJiMDVkNTc0MzQ4MTAyOWEw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAIMLqCCkD32g1LF2XC0IyM7oBH2YwzQEsXFQm92PAvkZ9Ej+
jZO1v/3aQL352Sxk9Tv2STJ0eG2ex8uU/OOXtomNEZugJAJr6uf8cWxYx7kDlliM
kD8B8buwNSWMS51CQ/xqsitcQmAGzdqKfLRbsRWVYZlLFOhKNFmesRAG8ByJEiq3
J+yJQQY+PHP89Ze3A6vEyF7Zd/tD1/BrgpKfZ4gQXSLBGPYBkpxnB1VPn17HH87r
YORLNXR14V65Z+QK/LUcKU92n0FmOACalcwNICbMD6JTxZuJy+Rz3wrROUPOzQGQ
HBxTQXPYcpaXNYz8dPYun8y3uZS6377IYXU82/s=
-----END CERTIFICATE-----