Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/965400f367a3b50c2a9a6934837510a29a8a229f.mft
File:                     965400f367a3b50c2a9a6934837510a29a8a229f.mft (raw, json)
Hash identifier:          Ht5SCj01foUAWKEc/0dXgB1QY+jogMY1Gz3Km5lQAss=
Subject key identifier:   F0:F5:62:E4:5E:96:A8:3D:31:05:B9:26:62:3F:BF:AD:C7:94:E4:64
Authority key identifier: A5:FD:1E:FC:E0:65:40:BA:F0:28:40:9B:1C:21:2B:70:C6:AE:E6:F2
Certificate issuer:       /CN=965400f367a3b50c2a9a6934837510a29a8a229f
Certificate serial:       15287B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/965400f367a3b50c2a9a6934837510a29a8a229f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/965400f367a3b50c2a9a6934837510a29a8a229f.mft
Manifest number:          0AEA
Signing time:             Mon 15 Apr 2024 09:21:24 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:20:18 +0000
Files and hashes:         1: 1c60a83a86f8ab945f8cebf2c7ba51319ade6ab9.roa (hash: IgJcCNnFHD92hwpeFw27aA+zpeFM4anRK66UItcHeds=)
                          2: 965400f367a3b50c2a9a6934837510a29a8a229f.crl (hash: SQ+6H3irRy5GmNFD3z/UmAozljE7IgeDfFQDSQIl1yM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386619 (0x15287b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965400f367a3b50c2a9a6934837510a29a8a229f
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:20:18 2024 GMT
        Subject: CN=c61104897a2a0a2e614efaf284574a200d09c97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:b7:34:42:19:ef:12:73:14:49:d3:81:66:
                    ba:b9:db:8b:b6:d4:a7:17:05:8b:1c:c8:c4:bc:ec:
                    10:40:05:a0:3d:f5:82:2f:84:1b:63:b7:c9:ed:4d:
                    4d:6e:22:bc:f0:f7:5b:9e:18:dd:f0:fb:f0:b2:65:
                    82:47:be:d9:3a:37:62:80:bc:0b:97:c4:f5:76:47:
                    6c:56:d0:30:21:00:c5:ca:3f:79:2e:21:cd:7d:ff:
                    a3:42:30:7f:b0:3b:19:6b:27:e5:13:7e:e2:a0:d7:
                    34:3c:15:e3:77:2e:c7:f6:75:7c:43:46:51:3d:cc:
                    e5:11:a9:59:f1:d5:ea:59:f9:ee:85:d4:0e:f9:0b:
                    37:7e:7b:44:c6:cd:d3:9c:73:e9:29:a1:2a:24:2a:
                    d4:ba:7b:8f:d2:fe:90:f0:9d:3c:15:30:2c:b8:ff:
                    40:06:ce:22:b2:ca:41:50:c4:d3:8e:a2:b1:b7:45:
                    74:81:e3:f7:8a:97:f8:6d:37:5a:a8:39:11:c7:5c:
                    72:b7:c0:f1:fd:0e:eb:e1:18:ce:e4:a7:56:d3:eb:
                    31:a5:e2:c6:ab:b2:27:5b:e1:9a:5d:5c:57:d9:cd:
                    c0:2a:ec:f4:a0:65:86:55:98:5a:dc:a0:24:9c:f7:
                    02:a2:c1:20:fa:3b:4e:44:5e:c3:f0:30:d9:bd:88:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F5:62:E4:5E:96:A8:3D:31:05:B9:26:62:3F:BF:AD:C7:94:E4:64
            X509v3 Authority Key Identifier:
                keyid:A5:FD:1E:FC:E0:65:40:BA:F0:28:40:9B:1C:21:2B:70:C6:AE:E6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/965400f367a3b50c2a9a6934837510a29a8a229f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/965400f367a3b50c2a9a6934837510a29a8a229f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/965400f367a3b50c2a9a6934837510a29a8a229f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b0:3c:4d:53:62:df:15:2e:ee:47:f3:51:79:51:d5:07:da:
         16:51:90:49:fc:3d:26:f1:d5:9d:c6:5b:41:2c:a1:32:ba:c0:
         b0:4b:c5:bf:ef:ad:07:3a:0b:16:78:10:e8:84:e3:c2:6a:da:
         26:3b:18:8b:c3:3f:90:09:74:07:52:28:a6:65:54:07:1f:0a:
         45:c0:de:86:62:38:d3:54:25:16:95:02:70:cf:56:55:0a:c0:
         96:54:13:4b:21:4f:69:96:f4:04:00:c0:5a:fd:f1:32:62:42:
         f7:59:f1:17:12:ef:a0:ed:8f:87:04:be:ca:57:ca:a2:9f:e0:
         f9:f8:e4:d5:4f:ae:5e:28:6b:fb:82:87:2e:40:32:b8:15:5e:
         0c:b6:ba:d0:0f:36:40:73:34:5a:bf:f9:53:96:0d:35:8c:88:
         3a:f2:f5:9a:6c:39:58:a7:d1:0f:a0:40:c9:7e:93:86:ee:2a:
         b2:fd:ed:63:dd:df:10:70:db:ad:71:62:5b:85:f4:58:91:72:
         5f:e3:2d:e5:94:5f:46:56:fc:60:64:b9:ea:3a:58:b7:56:ca:
         70:8e:71:fd:74:e8:65:e1:84:87:03:82:69:50:60:9b:fe:5d:
         4d:61:80:3b:1e:b8:4a:72:30:f5:4f:7d:e5:8c:62:e3:bb:3e:
         51:0f:39:09
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDFSh7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
NTQwMGYzNjdhM2I1MGMyYTlhNjkzNDgzNzUxMGEyOWE4YTIyOWYwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MDkyMDE4WjAzMTEwLwYDVQQDEyhjNjExMDQ4OTdhMmEw
YTJlNjE0ZWZhZjI4NDU3NGEyMDBkMDljOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4AC3NEIZ7xJzFEnTgWa6uduLttSnFwWLHMjEvOwQQAWgPfWC
L4QbY7fJ7U1NbiK88Pdbnhjd8PvwsmWCR77ZOjdigLwLl8T1dkdsVtAwIQDFyj95
LiHNff+jQjB/sDsZayflE37ioNc0PBXjdy7H9nV8Q0ZRPczlEalZ8dXqWfnuhdQO
+Qs3fntExs3TnHPpKaEqJCrUunuP0v6Q8J08FTAsuP9ABs4isspBUMTTjqKxt0V0
geP3ipf4bTdaqDkRx1xyt8Dx/Q7r4RjO5KdW0+sxpeLGq7InW+GaXVxX2c3AKuz0
oGWGVZha3KAknPcCosEg+jtORF7D8DDZvYjbfQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFPD1YuRelqg9MQW5JmI/v63HlORkMB8GA1UdIwQYMBaAFKX9HvzgZUC68ChA
mxwhK3DGrubyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTY1NDAw
ZjM2N2EzYjUwYzJhOWE2OTM0ODM3NTEwYTI5YThhMjI5Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjA2YjRlZDItMTkxYi00MmNlLWI0OTMtODM2NmYw
NjZlZmUwLzk2NTQwMGYzNjdhM2I1MGMyYTlhNjkzNDgzNzUxMGEyOWE4YTIyOWYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDZiNGVkMi0xOTFiLTQyY2UtYjQ5My04MzY2
ZjA2NmVmZTAvOTY1NDAwZjM2N2EzYjUwYzJhOWE2OTM0ODM3NTEwYTI5YThhMjI5
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBADiwPE1TYt8VLu5H81F5UdUH2hZRkEn8PSbx1Z3GW0EsoTK6
wLBLxb/vrQc6CxZ4EOiE48Jq2iY7GIvDP5AJdAdSKKZlVAcfCkXA3oZiONNUJRaV
AnDPVlUKwJZUE0shT2mW9AQAwFr98TJiQvdZ8RcS76Dtj4cEvspXyqKf4Pn45NVP
rl4oa/uChy5AMrgVXgy2utAPNkBzNFq/+VOWDTWMiDry9ZpsOVin0Q+gQMl+k4bu
KrL97WPd3xBw261xYluF9FiRcl/jLeWUX0ZW/GBkueo6WLdWynCOcf106GXhhIcD
gmlQYJv+XU1hgDseuEpyMPVPfeWMYuO7PlEPOQk=
-----END CERTIFICATE-----