Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/c9ba85997812752657dcc794aa26d9b349abd57a.mft
File:                     c9ba85997812752657dcc794aa26d9b349abd57a.mft (raw, json)
Hash identifier:          cGaiTmY+LZx7d5NrTn58X8RrU7a+YC6EYn3NyrNc/xg=
Subject key identifier:   36:EC:7B:28:50:10:72:6F:E4:5C:43:64:BB:A3:6F:92:E9:57:EB:47
Authority key identifier: 12:DA:E3:FE:7E:3F:34:FF:D6:20:82:B1:FE:51:7F:C9:5B:39:39:3E
Certificate issuer:       /CN=c9ba85997812752657dcc794aa26d9b349abd57a
Certificate serial:       15B452
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9ba85997812752657dcc794aa26d9b349abd57a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/c9ba85997812752657dcc794aa26d9b349abd57a.mft
Manifest number:          0B32
Signing time:             Mon 15 Apr 2024 10:21:15 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:41:25 +0000
Files and hashes:         1: 60050059e89f0aab9bb36878073f79d66d343697.roa (hash: sDgWstuNgbcwptdLlxa4tKJG5m14EWNRGRoZI+LhLeM=)
                          2: c9ba85997812752657dcc794aa26d9b349abd57a.crl (hash: c42JdsqI/zEtQnQgPrfZNavtNpy7rGSyadKDcqWqjuw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422418 (0x15b452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ba85997812752657dcc794aa26d9b349abd57a
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:41:25 2024 GMT
        Subject: CN=b5906bb1ad85c2fbd459c29b589bbd8056a2dfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:89:33:e4:1b:1d:a5:8c:22:1d:dd:ea:18:
                    0b:f4:11:35:43:4f:98:e3:4f:32:35:16:bd:8a:c3:
                    c6:93:ff:c8:9d:c0:20:9e:69:8a:d9:c5:0b:d4:01:
                    e9:70:4a:d3:c5:81:6f:0b:cb:71:36:77:aa:b4:b0:
                    7e:78:e9:ae:5c:f0:b3:84:ab:15:7c:a7:a7:05:d9:
                    be:ce:fd:f8:e6:1a:55:86:46:07:04:28:87:d8:cb:
                    8d:58:88:71:00:fe:53:94:98:ef:8f:a9:d4:bc:bb:
                    49:8f:5f:c4:24:38:f9:e0:0b:34:33:64:e9:cd:a9:
                    4e:04:28:17:10:d0:bd:48:37:40:82:21:48:1d:13:
                    16:fb:7e:9e:12:9c:82:1d:e5:28:f8:7f:08:46:5b:
                    ac:da:08:70:6f:bd:40:fb:53:02:d5:e5:e8:53:e4:
                    a0:ad:30:ae:fd:86:ca:fc:58:76:35:67:00:52:13:
                    5e:86:a9:01:7d:d2:01:df:dc:ac:5d:77:05:56:92:
                    b2:d5:a2:48:f7:de:d3:08:c1:c2:a4:06:1e:17:80:
                    05:92:64:e3:bf:c7:f3:a3:16:7f:b9:1b:6b:71:d3:
                    e0:ad:94:b9:5e:3e:f0:58:28:32:b1:cd:5d:bb:e8:
                    12:2b:1a:90:00:5f:0c:69:c7:3a:99:cd:d0:48:01:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EC:7B:28:50:10:72:6F:E4:5C:43:64:BB:A3:6F:92:E9:57:EB:47
            X509v3 Authority Key Identifier:
                keyid:12:DA:E3:FE:7E:3F:34:FF:D6:20:82:B1:FE:51:7F:C9:5B:39:39:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9ba85997812752657dcc794aa26d9b349abd57a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/c9ba85997812752657dcc794aa26d9b349abd57a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/c9ba85997812752657dcc794aa26d9b349abd57a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cf:71:e1:f3:1c:5c:69:f3:71:53:3d:de:0f:11:b2:ed:f8:
         7f:12:f2:df:09:08:84:bc:2d:de:fd:8e:4e:a6:7d:22:cf:08:
         4c:b0:c6:2d:4f:d8:20:3c:8a:2c:2b:23:a5:1f:99:60:6d:1c:
         ba:8f:53:69:aa:90:f5:3d:e2:d7:57:c7:28:6f:ba:57:85:b6:
         f3:c7:b0:ae:af:e8:28:32:15:da:18:3d:ee:75:41:26:51:fe:
         d7:37:34:30:2d:c9:49:d5:83:cb:93:59:e9:99:36:83:35:e2:
         eb:fb:d0:d7:2f:69:8a:1b:66:d3:21:d2:1d:06:bd:7a:bf:4d:
         d0:e3:d0:38:bb:16:20:2a:1a:c7:e9:2a:bd:89:7e:ef:4c:95:
         c7:fb:f5:93:7e:53:df:4c:e3:6a:50:c1:6d:86:48:55:e3:41:
         b1:ba:37:c3:63:8c:0e:42:32:2f:54:2e:57:3c:18:ce:0b:a5:
         b0:5b:bc:82:40:bd:06:e0:88:16:80:5d:87:bb:67:9a:ee:7b:
         0f:dc:3f:95:bd:07:4e:f7:8d:ec:5b:ee:1f:91:74:71:34:fe:
         c1:29:7e:59:33:bd:66:a9:7a:d3:af:77:dc:eb:33:25:60:39:
         4b:2d:63:4d:1a:e5:95:21:6a:e4:53:3a:f7:ac:28:80:96:26:
         b9:8e:47:03
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDFbRSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
YmE4NTk5NzgxMjc1MjY1N2RjYzc5NGFhMjZkOWIzNDlhYmQ1N2EwHhcNMjQwNDE1
MDkyMDI1WhcNMjQwNDE4MTE0MTI1WjAzMTEwLwYDVQQDEyhiNTkwNmJiMWFkODVj
MmZiZDQ1OWMyOWI1ODliYmQ4MDU2YTJkZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4JaJM+QbHaWMIh3d6hgL9BE1Q0+Y408yNRa9isPGk//IncAg
nmmK2cUL1AHpcErTxYFvC8txNneqtLB+eOmuXPCzhKsVfKenBdm+zv345hpVhkYH
BCiH2MuNWIhxAP5TlJjvj6nUvLtJj1/EJDj54As0M2TpzalOBCgXENC9SDdAgiFI
HRMW+36eEpyCHeUo+H8IRlus2ghwb71A+1MC1eXoU+SgrTCu/YbK/Fh2NWcAUhNe
hqkBfdIB39ysXXcFVpKy1aJI997TCMHCpAYeF4AFkmTjv8fzoxZ/uRtrcdPgrZS5
Xj7wWCgysc1du+gSKxqQAF8Macc6mc3QSAFouQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDbseyhQEHJv5FxDZLujb5LpV+tHMB8GA1UdIwQYMBaAFBLa4/5+PzT/1iCC
sf5Rf8lbOTk+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzliYTg1
OTk3ODEyNzUyNjU3ZGNjNzk0YWEyNmQ5YjM0OWFiZDU3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQwNTU5ZjctOTYzMC00MTY1LWFhN2EtOTAzNGM0
NGYwY2FkL2M5YmE4NTk5NzgxMjc1MjY1N2RjYzc5NGFhMjZkOWIzNDlhYmQ1N2Eu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDA1NTlmNy05NjMwLTQxNjUtYWE3YS05MDM0
YzQ0ZjBjYWQvYzliYTg1OTk3ODEyNzUyNjU3ZGNjNzk0YWEyNmQ5YjM0OWFiZDU3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAITPceHzHFxp83FTPd4PEbLt+H8S8t8JCIS8Ld79jk6mfSLP
CEywxi1P2CA8iiwrI6UfmWBtHLqPU2mqkPU94tdXxyhvuleFtvPHsK6v6CgyFdoY
Pe51QSZR/tc3NDAtyUnVg8uTWemZNoM14uv70NcvaYobZtMh0h0GvXq/TdDj0Di7
FiAqGsfpKr2Jfu9Mlcf79ZN+U99M42pQwW2GSFXjQbG6N8NjjA5CMi9ULlc8GM4L
pbBbvIJAvQbgiBaAXYe7Z5ruew/cP5W9B073jexb7h+RdHE0/sEpflkzvWapetOv
d9zrMyVgOUstY00a5ZUhauRTOvesKICWJrmORwM=
-----END CERTIFICATE-----