Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dece9058-5ead-4bdf-b331-d5294fc1121c/b31497db947942b9b98537746e80526f715ef6e4.mft
File:                     b31497db947942b9b98537746e80526f715ef6e4.mft (raw, json)
Hash identifier:          iYJvFO9kxobfR8VdrV7F92ZlCYte4yKyMZ7QO71EeoY=
Subject key identifier:   41:70:38:4C:F9:E6:4A:C5:F4:F0:00:C0:7C:A4:C2:8A:DF:68:1F:1F
Authority key identifier: 66:2B:1F:3E:4C:E8:EA:1F:7D:D8:7A:04:AD:31:EA:9C:23:87:4E:31
Certificate issuer:       /CN=b31497db947942b9b98537746e80526f715ef6e4
Certificate serial:       284393
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b31497db947942b9b98537746e80526f715ef6e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dece9058-5ead-4bdf-b331-d5294fc1121c/b31497db947942b9b98537746e80526f715ef6e4.mft
Manifest number:          0DED
Signing time:             Mon 15 Apr 2024 11:20:27 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:52:18 +0000
Files and hashes:         1: b1b69e26e8b1e2e1d8d4e1ab1491908e1e7ec697.roa (hash: CQGUEiUoTkjMrNP7G2gXJDdqW7+xXdkMl5C2nqsh1+M=)
                          2: b31497db947942b9b98537746e80526f715ef6e4.crl (hash: sh8EWKcID+WahaH4kDIhowgEMK5wcRQbtW6BXS7aFL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2638739 (0x284393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31497db947942b9b98537746e80526f715ef6e4
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:52:18 2024 GMT
        Subject: CN=8526c3517663b83ee10eeab110df8c49deb5123d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:eb:cb:85:c4:2f:04:78:2b:fe:a1:fa:0d:
                    35:7c:f0:b7:d0:fc:dd:1e:fe:27:a2:b4:dc:fe:69:
                    0e:dc:91:63:e9:66:70:b6:57:33:5e:7e:ad:1e:1d:
                    50:0c:9e:61:63:1b:ed:fa:0f:3e:55:16:72:43:89:
                    35:8d:7b:5c:90:f6:73:da:bc:24:73:e9:c8:25:7a:
                    17:83:38:43:9a:b6:ac:d5:71:30:25:55:15:14:8d:
                    d1:ce:d4:f2:42:e6:a7:bb:6d:fa:09:2f:59:23:fe:
                    b4:24:b6:05:cc:7d:a3:70:b9:c5:eb:de:0f:68:4d:
                    ff:d5:c7:27:c0:39:18:5b:8f:a0:57:d1:bd:dc:68:
                    fd:83:68:ad:97:3f:55:24:0e:55:71:76:70:51:42:
                    35:dd:bb:cd:65:4f:19:23:66:66:81:bd:2e:fc:1a:
                    8b:7f:45:d3:40:01:c8:9b:49:b3:81:3a:a1:48:22:
                    54:c8:69:b2:16:98:8d:f7:fc:d5:70:e6:10:f8:ab:
                    20:73:76:da:db:48:35:81:ae:e6:97:d0:8b:b7:13:
                    2a:c8:81:82:7e:ff:75:fa:aa:b9:79:34:b9:16:ba:
                    bd:d8:b4:07:27:1f:11:a5:2c:7c:97:c0:5d:9c:66:
                    83:dd:95:ca:5f:4d:8d:6f:44:86:75:59:a6:ca:49:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:70:38:4C:F9:E6:4A:C5:F4:F0:00:C0:7C:A4:C2:8A:DF:68:1F:1F
            X509v3 Authority Key Identifier:
                keyid:66:2B:1F:3E:4C:E8:EA:1F:7D:D8:7A:04:AD:31:EA:9C:23:87:4E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b31497db947942b9b98537746e80526f715ef6e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dece9058-5ead-4bdf-b331-d5294fc1121c/b31497db947942b9b98537746e80526f715ef6e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dece9058-5ead-4bdf-b331-d5294fc1121c/b31497db947942b9b98537746e80526f715ef6e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4e:61:ab:4a:df:ba:1b:c0:b8:ef:d7:34:88:ae:3a:c6:08:
         7d:37:ee:ed:96:04:71:5a:9c:d8:0b:8e:a3:53:96:5a:77:d4:
         22:80:5c:1c:e2:dd:ce:5c:c0:11:4f:95:f8:2b:02:45:05:c7:
         99:83:8e:a7:19:20:c8:af:62:76:fd:21:02:7b:f4:50:53:c7:
         6b:b4:e5:2a:53:2e:16:23:82:4e:7b:91:e2:29:93:c6:ba:f7:
         96:50:d5:fe:6c:ac:df:77:90:86:a0:7b:1f:be:b7:d2:83:f7:
         e4:06:6e:fe:56:24:62:04:6a:61:73:0f:e4:12:cc:ae:e7:fc:
         15:95:8a:1d:27:6d:eb:9e:6d:48:4d:4d:86:d8:de:3d:9e:26:
         1e:dc:c9:f2:48:e3:76:1e:69:72:be:2e:65:e5:87:65:3e:3d:
         b2:50:82:66:f8:90:62:43:65:9b:18:05:dc:10:fc:6a:2b:fd:
         3c:65:5c:77:da:f1:be:46:43:22:55:f8:b2:58:f5:6c:7e:04:
         c9:ff:08:d1:ca:25:91:75:38:49:5c:3a:e3:06:49:42:b3:b7:
         37:39:77:05:ad:2f:60:1a:da:db:55:63:20:88:f2:86:59:3f:
         01:f4:c4:e7:b4:09:3e:6a:f7:ee:5a:74:b8:38:38:9b:5b:6a:
         b7:b3:e3:96
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKEOTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
MTQ5N2RiOTQ3OTQyYjliOTg1Mzc3NDZlODA1MjZmNzE1ZWY2ZTQwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTI1MjE4WjAzMTEwLwYDVQQDEyg4NTI2YzM1MTc2NjNi
ODNlZTEwZWVhYjExMGRmOGM0OWRlYjUxMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApYDry4XELwR4K/6h+g01fPC30PzdHv4norTc/mkO3JFj6WZw
tlczXn6tHh1QDJ5hYxvt+g8+VRZyQ4k1jXtckPZz2rwkc+nIJXoXgzhDmras1XEw
JVUVFI3RztTyQuanu236CS9ZI/60JLYFzH2jcLnF694PaE3/1ccnwDkYW4+gV9G9
3Gj9g2itlz9VJA5VcXZwUUI13bvNZU8ZI2Zmgb0u/BqLf0XTQAHIm0mzgTqhSCJU
yGmyFpiN9/zVcOYQ+Ksgc3ba20g1ga7ml9CLtxMqyIGCfv91+qq5eTS5Frq92LQH
Jx8RpSx8l8BdnGaD3ZXKX02Nb0SGdVmmykkcrQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFEFwOEz55krF9PAAwHykworfaB8fMB8GA1UdIwQYMBaAFGYrHz5M6Ooffdh6
BK0x6pwjh04xMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjMxNDk3
ZGI5NDc5NDJiOWI5ODUzNzc0NmU4MDUyNmY3MTVlZjZlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGVjZTkwNTgtNWVhZC00YmRmLWIzMzEtZDUyOTRm
YzExMjFjL2IzMTQ5N2RiOTQ3OTQyYjliOTg1Mzc3NDZlODA1MjZmNzE1ZWY2ZTQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZWNlOTA1OC01ZWFkLTRiZGYtYjMzMS1kNTI5
NGZjMTEyMWMvYjMxNDk3ZGI5NDc5NDJiOWI5ODUzNzc0NmU4MDUyNmY3MTVlZjZl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAIJOYatK37obwLjv1zSIrjrGCH037u2WBHFanNgLjqNTllp3
1CKAXBzi3c5cwBFPlfgrAkUFx5mDjqcZIMivYnb9IQJ79FBTx2u05SpTLhYjgk57
keIpk8a695ZQ1f5srN93kIagex++t9KD9+QGbv5WJGIEamFzD+QSzK7n/BWVih0n
beuebUhNTYbY3j2eJh7cyfJI43YeaXK+LmXlh2U+PbJQgmb4kGJDZZsYBdwQ/Gor
/TxlXHfa8b5GQyJV+LJY9Wx+BMn/CNHKJZF1OElcOuMGSUKztzc5dwWtL2Aa2ttV
YyCI8oZZPwH0xOe0CT5q9+5adLg4OJtbarez45Y=
-----END CERTIFICATE-----