Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.mft
File:                     fd27aaa53c78abaf8042781fb063418e78442bcb.mft (raw, json)
Hash identifier:          xDPJaKyAiFCtfV0En33XeX55N1e48KmwSNAgVkmyTJg=
Subject key identifier:   A3:BB:0F:25:6B:99:E8:77:56:B8:B3:03:E1:6A:1E:99:3E:61:E8:DC
Authority key identifier: 1D:56:B7:C7:F8:CD:1C:28:8D:85:4E:C1:89:2B:4A:9E:AF:B9:4F:69
Certificate issuer:       /CN=fd27aaa53c78abaf8042781fb063418e78442bcb
Certificate serial:       27EE1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd27aaa53c78abaf8042781fb063418e78442bcb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.mft
Manifest number:          0DF8
Signing time:             Mon 15 Apr 2024 02:20:58 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 02:37:29 +0000
Files and hashes:         1: c6085d3410319662515183d34c500a206a4aa300.roa (hash: KRAhE8BmGr5W9kXn7ZvRuk2zqz4obbRmzBfcA/JURdI=)
                          2: fd27aaa53c78abaf8042781fb063418e78442bcb.crl (hash: I4fKbHavCq99OWEEDSOz1HpCI5qXUDHp3AW9VjJO6os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2616858 (0x27ee1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd27aaa53c78abaf8042781fb063418e78442bcb
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 02:37:29 2024 GMT
        Subject: CN=5b63d91fd9fa0ca70c66bf5010d97f3697d4a537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:7c:30:9e:90:9b:97:c3:e9:af:8a:79:8d:
                    bd:7c:0d:6f:33:e6:29:0e:66:80:76:36:33:27:47:
                    92:5b:61:7a:c5:45:5a:b5:29:90:15:55:69:36:1e:
                    04:02:68:6b:68:08:07:0e:0a:d5:c3:8a:0f:e7:b1:
                    08:58:16:ab:89:bf:10:62:1f:a9:a4:c3:a8:65:d6:
                    35:35:bc:f1:fd:98:b4:4e:85:cb:fd:ca:3f:f2:51:
                    15:07:75:04:7a:c6:0b:7d:2e:28:15:b0:21:53:6f:
                    ed:35:cb:5d:9f:fe:46:5e:4f:ed:b3:0e:d1:c0:8d:
                    44:27:d7:3e:19:a3:36:00:58:95:9b:d4:a7:a4:c9:
                    56:35:01:48:c6:79:61:eb:db:9f:84:dd:21:36:07:
                    c1:e8:f6:84:f0:4f:ae:32:06:a8:a3:45:10:8e:7f:
                    09:cd:8b:de:ca:0c:95:02:2a:dd:3a:59:6b:d4:b8:
                    da:49:4d:77:1e:f3:d0:1b:35:38:40:5c:cd:fa:d3:
                    84:f7:eb:6f:c9:76:6a:d7:a1:3b:6a:4d:6c:46:f0:
                    9d:24:e8:b2:bb:ed:79:25:77:14:27:ba:4b:f4:e5:
                    a3:cc:6b:5e:01:df:3f:c6:00:5a:c3:ab:8a:80:b2:
                    f0:93:ac:ec:9a:cf:96:93:53:8e:53:7d:a5:41:01:
                    6a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BB:0F:25:6B:99:E8:77:56:B8:B3:03:E1:6A:1E:99:3E:61:E8:DC
            X509v3 Authority Key Identifier:
                keyid:1D:56:B7:C7:F8:CD:1C:28:8D:85:4E:C1:89:2B:4A:9E:AF:B9:4F:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd27aaa53c78abaf8042781fb063418e78442bcb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc58bd5c-d255-4007-80ce-f70d52c4c7d4/fd27aaa53c78abaf8042781fb063418e78442bcb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:52:cc:25:d2:0f:6a:53:c6:c7:91:d5:ee:42:f3:59:7d:7e:
         8e:79:d3:42:64:6b:32:c1:b7:30:6d:d4:37:6a:b3:a3:a7:bf:
         d6:2f:57:32:28:51:7a:19:44:59:c6:bd:36:04:d9:af:e9:fd:
         92:01:9c:37:35:18:22:dc:15:a2:5c:dd:67:e5:6e:5a:92:5e:
         b7:36:c9:e4:46:9d:41:fb:db:d2:1c:9c:2b:d8:80:d7:0c:8b:
         1c:b4:6b:e0:69:cc:8a:c6:7b:35:9a:a2:ea:ad:88:29:f2:66:
         8e:d0:6c:6d:a7:c5:5f:4a:0f:94:fe:89:94:11:60:77:81:76:
         a1:bb:da:0b:e9:e3:c9:bf:e7:45:86:40:fd:30:53:27:6f:08:
         49:8a:2e:d8:90:66:a1:61:dc:18:18:c4:de:35:9a:8d:7a:97:
         0a:10:7f:ec:d2:ee:7f:07:87:4c:58:67:ca:44:49:96:66:a1:
         dc:8b:30:05:05:86:d1:a3:33:aa:74:d0:ae:fb:73:32:bb:58:
         96:2e:5b:6d:04:bb:ec:8e:3c:ed:3a:fb:35:0d:d8:e1:d5:5f:
         98:60:d0:8e:e5:9b:47:01:fd:e6:3a:04:1d:0f:08:7b:55:1c:
         13:76:b5:65:e9:3c:8e:fd:26:44:2f:6c:45:7c:98:cc:4d:98:
         10:82:a7:50
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJ+4aMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
MjdhYWE1M2M3OGFiYWY4MDQyNzgxZmIwNjM0MThlNzg0NDJiY2IwHhcNMjQwNDE1
MDEyMDI5WhcNMjQwNDE4MDIzNzI5WjAzMTEwLwYDVQQDEyg1YjYzZDkxZmQ5ZmEw
Y2E3MGM2NmJmNTAxMGQ5N2YzNjk3ZDRhNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmvR8MJ6Qm5fD6a+KeY29fA1vM+YpDmaAdjYzJ0eSW2F6xUVa
tSmQFVVpNh4EAmhraAgHDgrVw4oP57EIWBarib8QYh+ppMOoZdY1Nbzx/Zi0ToXL
/co/8lEVB3UEesYLfS4oFbAhU2/tNctdn/5GXk/tsw7RwI1EJ9c+GaM2AFiVm9Sn
pMlWNQFIxnlh69ufhN0hNgfB6PaE8E+uMgaoo0UQjn8JzYveygyVAirdOllr1Lja
SU13HvPQGzU4QFzN+tOE9+tvyXZq16E7ak1sRvCdJOiyu+15JXcUJ7pL9OWjzGte
Ad8/xgBaw6uKgLLwk6zsms+Wk1OOU32lQQFq/QIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFKO7DyVrmeh3VrizA+FqHpk+YejcMB8GA1UdIwQYMBaAFB1Wt8f4zRwojYVO
wYkrSp6vuU9pMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQyN2Fh
YTUzYzc4YWJhZjgwNDI3ODFmYjA2MzQxOGU3ODQ0MmJjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGM1OGJkNWMtZDI1NS00MDA3LTgwY2UtZjcwZDUy
YzRjN2Q0L2ZkMjdhYWE1M2M3OGFiYWY4MDQyNzgxZmIwNjM0MThlNzg0NDJiY2Iu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzU4YmQ1Yy1kMjU1LTQwMDctODBjZS1mNzBk
NTJjNGM3ZDQvZmQyN2FhYTUzYzc4YWJhZjgwNDI3ODFmYjA2MzQxOGU3ODQ0MmJj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGRSzCXSD2pTxseR1e5C81l9fo5500JkazLBtzBt1Ddqs6On
v9YvVzIoUXoZRFnGvTYE2a/p/ZIBnDc1GCLcFaJc3WflblqSXrc2yeRGnUH729Ic
nCvYgNcMixy0a+BpzIrGezWaouqtiCnyZo7QbG2nxV9KD5T+iZQRYHeBdqG72gvp
48m/50WGQP0wUydvCEmKLtiQZqFh3BgYxN41mo16lwoQf+zS7n8Hh0xYZ8pESZZm
odyLMAUFhtGjM6p00K77czK7WJYuW20Eu+yOPO06+zUN2OHVX5hg0I7lm0cB/eY6
BB0PCHtVHBN2tWXpPI79JkQvbEV8mMxNmBCCp1A=
-----END CERTIFICATE-----