Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.mft
File:                     2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.mft (raw, json)
Hash identifier:          qJXH3gYXyhX+bBNipcVxBFCGNlfEQhcPLBI75uWZ0Uo=
Subject key identifier:   FA:B0:17:4A:0B:1A:30:D2:FD:8B:8F:47:AF:11:B3:9B:1F:BE:07:5A
Authority key identifier: 93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1
Certificate issuer:       /CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
Certificate serial:       2A4D72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.mft
Manifest number:          085F
Signing time:             Mon 15 Apr 2024 08:20:51 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 11:19:16 +0000
Files and hashes:         1: 0eb807cba5c839b42a70dfd1e6933ecbdb269d05.roa (hash: bLVcntrVgwqtsRY0hzSGaglZoRWoEVB6lhJpR0qz9mg=)
                          2: 2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.crl (hash: qY5GzhgnnPW364w8yrQqjR4k/GUbKPIrqdStTt4XlUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772338 (0x2a4d72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae468b8299e75fa14ef96ff11d36d88a9ac22a1
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 11:19:16 2024 GMT
        Subject: CN=1cc91637ca1ed516c09071f87cac3e2209617c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:14:a7:91:37:88:45:99:90:65:18:42:4b:
                    e9:71:b6:14:4d:0e:53:28:89:3f:61:9d:72:8e:0e:
                    a2:be:17:fd:68:01:7d:e1:a9:5d:b4:e5:3a:57:bf:
                    d7:2b:d2:5d:24:5d:a2:8e:b2:ec:33:fc:51:1a:bf:
                    ff:ae:01:b3:a6:16:a1:e3:b0:1e:76:7a:85:96:48:
                    f8:50:af:48:71:5d:3a:b8:78:ea:01:0b:07:79:d5:
                    17:f7:9e:a8:f8:a3:39:3e:27:ec:6d:51:3d:a8:cb:
                    7e:c2:fc:1f:82:63:fe:0a:2f:c4:a9:8f:fc:0c:fd:
                    2b:df:73:e8:9c:fb:78:64:1e:d4:80:a8:8c:a6:3f:
                    b8:a1:27:9f:6c:45:62:0c:e9:ef:3d:32:56:a0:27:
                    f1:c0:57:39:b6:49:0b:2f:9c:7b:d1:0a:b9:6b:73:
                    8d:2e:a2:74:c6:af:bf:4d:5d:ce:6e:87:13:db:6e:
                    79:2a:68:cf:1e:63:76:6f:e5:25:7f:04:6c:2e:20:
                    64:3d:6d:1e:7d:7b:be:97:2e:3c:bd:ac:3e:dc:98:
                    3d:c2:d9:08:ae:75:53:b5:e0:1f:70:82:d4:1c:45:
                    3e:8e:bd:51:1a:1d:b2:d8:02:ba:80:7a:e9:81:de:
                    84:0a:24:db:62:b2:54:0e:6c:c7:0e:19:39:61:b0:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:17:4A:0B:1A:30:D2:FD:8B:8F:47:AF:11:B3:9B:1F:BE:07:5A
            X509v3 Authority Key Identifier:
                keyid:93:A1:D3:C1:5F:09:8E:01:D8:F9:B7:9C:0C:87:E7:E9:57:E9:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/2ae468b8299e75fa14ef96ff11d36d88a9ac22a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:18:34:f9:81:c4:65:ed:1f:bd:06:d3:ee:a5:a4:e0:16:
         19:6a:a1:a1:36:fd:f5:c8:6d:16:ee:d0:2e:41:41:2b:76:3b:
         5e:7e:21:b6:53:3d:46:01:e9:93:c4:22:06:1c:f6:26:45:ba:
         a4:09:79:3d:0b:15:89:b3:3f:a5:0f:d0:ba:2e:d2:90:52:ab:
         ca:94:50:aa:d5:0a:e3:12:32:98:13:4f:f8:81:9b:1f:e2:2e:
         46:01:4b:06:1d:30:71:47:7e:07:de:88:e5:30:a6:94:82:2d:
         c2:16:06:4a:60:e0:23:48:f4:36:43:af:d8:9d:4c:18:b6:09:
         31:aa:e9:06:df:96:24:7a:74:63:e7:6a:27:c8:8f:ae:0c:b2:
         bd:2e:d1:b3:49:9d:13:6d:fb:14:22:0c:58:e0:0f:b7:1b:8e:
         f4:44:de:8c:6f:a5:ae:9c:1d:1a:27:b2:c6:7a:ef:4c:e1:39:
         bc:cd:dc:c4:53:ba:7f:0e:e7:b1:62:42:a2:ec:72:81:69:e9:
         53:76:7e:cc:02:15:20:6c:b1:b1:b5:17:d4:b2:71:8d:1d:d0:
         ea:7e:da:fa:a8:57:61:e9:7f:3a:ee:b4:4a:c4:90:57:57:1d:
         5e:90:df:c5:0a:c7:7c:f5:55:0a:8a:ad:c0:75:fd:10:1f:e2:
         85:5e:0e:1f
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKk1yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
ZTQ2OGI4Mjk5ZTc1ZmExNGVmOTZmZjExZDM2ZDg4YTlhYzIyYTEwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MTExOTE2WjAzMTEwLwYDVQQDEygxY2M5MTYzN2NhMWVk
NTE2YzA5MDcxZjg3Y2FjM2UyMjA5NjE3YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyHUUp5E3iEWZkGUYQkvpcbYUTQ5TKIk/YZ1yjg6ivhf9aAF9
4aldtOU6V7/XK9JdJF2ijrLsM/xRGr//rgGzphah47AednqFlkj4UK9IcV06uHjq
AQsHedUX956o+KM5PifsbVE9qMt+wvwfgmP+Ci/EqY/8DP0r33PonPt4ZB7UgKiM
pj+4oSefbEViDOnvPTJWoCfxwFc5tkkLL5x70Qq5a3ONLqJ0xq+/TV3ObocT2255
KmjPHmN2b+UlfwRsLiBkPW0efXu+ly48vaw+3Jg9wtkIrnVTteAfcILUHEU+jr1R
Gh2y2AK6gHrpgd6ECiTbYrJUDmzHDhk5YbDZPQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFPqwF0oLGjDS/YuPR68Rs5sfvgdaMB8GA1UdIwQYMBaAFJOh08FfCY4B2Pm3
nAyH5+lX6YKhMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFlNDY4
YjgyOTllNzVmYTE0ZWY5NmZmMTFkMzZkODhhOWFjMjJhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTYwYTJkMDgtOTdiMS00OTY2LTllNzYtZjgxZDYz
OWNmMGI4LzJhZTQ2OGI4Mjk5ZTc1ZmExNGVmOTZmZjExZDM2ZDg4YTlhYzIyYTEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNjBhMmQwOC05N2IxLTQ5NjYtOWU3Ni1mODFk
NjM5Y2YwYjgvMmFlNDY4YjgyOTllNzVmYTE0ZWY5NmZmMTFkMzZkODhhOWFjMjJh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAI+gGDT5gcRl7R+9BtPupaTgFhlqoaE2/fXIbRbu0C5BQSt2
O15+IbZTPUYB6ZPEIgYc9iZFuqQJeT0LFYmzP6UP0Lou0pBSq8qUUKrVCuMSMpgT
T/iBmx/iLkYBSwYdMHFHfgfeiOUwppSCLcIWBkpg4CNI9DZDr9idTBi2CTGq6Qbf
liR6dGPnaifIj64Msr0u0bNJnRNt+xQiDFjgD7cbjvRE3oxvpa6cHRonssZ670zh
ObzN3MRTun8O57FiQqLscoFp6VN2fswCFSBssbG1F9SycY0d0Op+2vqoV2Hpfzru
tErEkFdXHV6Q38UKx3z1VQqKrcB1/RAf4oVeDh8=
-----END CERTIFICATE-----