Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df3df63e-9c4a-461c-aa60-ae7dbb9882a6/92ca889a4929892f5cd2be7cc3a7292074866d6c.mft
File:                     92ca889a4929892f5cd2be7cc3a7292074866d6c.mft (raw, json)
Hash identifier:          QhJ0Vw3iW4tXD1WO7m87iLxXQ5UmFB6L1Cw5neMAk0g=
Subject key identifier:   DC:20:69:F1:57:3E:C4:1B:23:8E:CE:AB:F9:D3:65:3F:F4:F4:9B:F9
Authority key identifier: DC:42:50:06:AE:D5:7E:74:8A:62:15:16:5E:ED:86:49:8D:FE:36:12
Certificate issuer:       /CN=92ca889a4929892f5cd2be7cc3a7292074866d6c
Certificate serial:       202A9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca889a4929892f5cd2be7cc3a7292074866d6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df3df63e-9c4a-461c-aa60-ae7dbb9882a6/92ca889a4929892f5cd2be7cc3a7292074866d6c.mft
Manifest number:          0DE7
Signing time:             Mon 15 Apr 2024 08:20:30 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 11:12:16 +0000
Files and hashes:         1: 4b03b6707be163328fb1833d12fa7fd233c1e5a9.roa (hash: d3vqozvj2aia/ciR2PSyNjbAZPSJTK0V+esMVL7RVFQ=)
                          2: 92ca889a4929892f5cd2be7cc3a7292074866d6c.crl (hash: +QH4dVHP0BQ55X2tjz3vtwoYjPe9l6k31IVDWTFeE3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108062 (0x202a9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ca889a4929892f5cd2be7cc3a7292074866d6c
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 11:12:16 2024 GMT
        Subject: CN=a3aa9a2d89eca6900bf5d6c3cfc87b05820cf0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:a7:32:d9:e7:e7:01:10:31:cf:90:45:02:
                    57:ba:fe:dc:a2:e5:1c:e3:d8:29:be:1c:ec:4a:af:
                    3a:06:9d:6e:80:b5:97:4f:cd:45:98:a0:2d:3f:0e:
                    66:9e:b0:94:9d:bb:b1:67:37:b8:a7:d5:c6:fc:a4:
                    ad:f3:80:f7:f4:d8:48:5c:cf:7c:05:cd:2d:32:24:
                    af:3b:df:34:92:67:e2:98:44:0d:4d:cf:98:8d:52:
                    72:2e:5e:a5:87:4a:db:60:94:b9:80:6f:de:59:d2:
                    37:d5:5b:d7:be:6c:15:1c:05:a0:04:2f:42:16:32:
                    13:c2:56:be:35:fd:d9:d9:16:4c:b2:51:f5:d0:01:
                    ab:50:25:e8:c3:2e:26:3e:c5:27:06:be:3d:ba:13:
                    56:4e:e7:b8:e2:d9:19:0e:39:88:37:0c:85:54:9a:
                    ef:36:af:26:5e:03:6c:7f:45:1e:a7:59:e5:40:a1:
                    5b:62:b1:22:fa:6b:01:4b:53:f5:e4:4b:fe:48:ad:
                    07:a6:79:45:ab:d4:d3:ef:e3:33:15:a6:30:70:f9:
                    a0:02:c2:3a:28:78:5d:88:e4:32:43:33:ef:8d:b1:
                    56:b4:b2:8c:bd:56:65:d6:5a:b1:5e:8c:aa:d7:14:
                    62:45:ea:4a:47:10:f5:cb:62:c1:fc:9d:ad:e6:96:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:20:69:F1:57:3E:C4:1B:23:8E:CE:AB:F9:D3:65:3F:F4:F4:9B:F9
            X509v3 Authority Key Identifier:
                keyid:DC:42:50:06:AE:D5:7E:74:8A:62:15:16:5E:ED:86:49:8D:FE:36:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca889a4929892f5cd2be7cc3a7292074866d6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df3df63e-9c4a-461c-aa60-ae7dbb9882a6/92ca889a4929892f5cd2be7cc3a7292074866d6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df3df63e-9c4a-461c-aa60-ae7dbb9882a6/92ca889a4929892f5cd2be7cc3a7292074866d6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ea:12:f8:1f:34:8e:a4:3e:6e:d6:a1:12:c2:a0:7d:77:d9:
         4f:bb:5c:2f:6f:26:d8:fb:3e:24:fc:14:d7:7c:0b:fe:0c:0c:
         14:08:6b:cf:a6:a7:41:24:21:7d:c2:b7:72:61:79:be:5c:68:
         ba:73:87:b8:a0:6d:a3:61:a3:d4:db:c8:ca:7b:26:be:c8:80:
         c0:f1:87:18:30:05:fa:1d:f2:6b:ba:2e:bd:59:4a:40:ef:52:
         f1:9d:ee:de:30:95:2f:1c:e5:d5:71:df:cf:0c:ef:d5:66:fc:
         26:5b:80:56:f5:54:b9:46:cb:30:ae:13:0b:10:82:ce:95:d7:
         b8:0e:d2:59:ef:9f:5d:5c:f4:d2:1a:df:bc:5d:54:2f:ff:62:
         93:76:87:c6:3c:ca:27:dd:ab:58:48:69:a8:c5:56:53:ad:b5:
         20:ac:5f:47:f2:bd:61:25:2e:8f:bf:aa:ec:5c:76:84:2e:af:
         e6:31:6f:fd:cd:21:6a:e1:9c:f1:3f:73:f7:ca:18:dc:fd:46:
         67:df:6f:d8:af:d0:cf:d2:7a:a9:07:58:1e:65:17:bb:77:d4:
         1d:c9:b3:15:23:0e:0b:dd:a6:ea:fa:f4:2c:46:08:8a:c3:4d:
         0d:6c:07:31:b9:c7:c3:ed:21:47:e6:d4:80:b5:d3:fc:31:3c:
         3a:a0:4d:d2
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDICqeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
Y2E4ODlhNDkyOTg5MmY1Y2QyYmU3Y2MzYTcyOTIwNzQ4NjZkNmMwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MTExMjE2WjAzMTEwLwYDVQQDEyhhM2FhOWEyZDg5ZWNh
NjkwMGJmNWQ2YzNjZmM4N2IwNTgyMGNmMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtfunMtnn5wEQMc+QRQJXuv7couUc49gpvhzsSq86Bp1ugLWX
T81FmKAtPw5mnrCUnbuxZze4p9XG/KSt84D39NhIXM98Bc0tMiSvO980kmfimEQN
Tc+YjVJyLl6lh0rbYJS5gG/eWdI31VvXvmwVHAWgBC9CFjITwla+Nf3Z2RZMslH1
0AGrUCXowy4mPsUnBr49uhNWTue44tkZDjmINwyFVJrvNq8mXgNsf0Uep1nlQKFb
YrEi+msBS1P15Ev+SK0HpnlFq9TT7+MzFaYwcPmgAsI6KHhdiOQyQzPvjbFWtLKM
vVZl1lqxXoyq1xRiRepKRxD1y2LB/J2t5paA+QIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFNwgafFXPsQbI47Oq/nTZT/09Jv5MB8GA1UdIwQYMBaAFNxCUAau1X50imIV
Fl7thkmN/jYSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTJjYTg4
OWE0OTI5ODkyZjVjZDJiZTdjYzNhNzI5MjA3NDg2NmQ2Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGYzZGY2M2UtOWM0YS00NjFjLWFhNjAtYWU3ZGJi
OTg4MmE2LzkyY2E4ODlhNDkyOTg5MmY1Y2QyYmU3Y2MzYTcyOTIwNzQ4NjZkNmMu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZjNkZjYzZS05YzRhLTQ2MWMtYWE2MC1hZTdk
YmI5ODgyYTYvOTJjYTg4OWE0OTI5ODkyZjVjZDJiZTdjYzNhNzI5MjA3NDg2NmQ2
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAMTqEvgfNI6kPm7WoRLCoH132U+7XC9vJtj7PiT8FNd8C/4M
DBQIa8+mp0EkIX3Ct3Jheb5caLpzh7igbaNho9TbyMp7Jr7IgMDxhxgwBfod8mu6
Lr1ZSkDvUvGd7t4wlS8c5dVx388M79Vm/CZbgFb1VLlGyzCuEwsQgs6V17gO0lnv
n11c9NIa37xdVC//YpN2h8Y8yifdq1hIaajFVlOttSCsX0fyvWElLo+/quxcdoQu
r+Yxb/3NIWrhnPE/c/fKGNz9Rmffb9iv0M/SeqkHWB5lF7t31B3JsxUjDgvdpur6
9CxGCIrDTQ1sBzG5x8PtIUfm1IC10/wxPDqgTdI=
-----END CERTIFICATE-----