Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa0ed8f4-b668-4ed5-92e2-5781837a0d86/ca6604f4190edf6e41f19c87dc12971ee963efaa.mft
File:                     ca6604f4190edf6e41f19c87dc12971ee963efaa.mft (raw, json)
Hash identifier:          hslsYGerPUcwbZdhBdAYJQykGGSXC1Fuw4evAk2arFM=
Subject key identifier:   33:0E:BB:21:80:33:E4:6F:3E:7B:8F:B9:01:50:6A:39:CE:55:2D:E3
Authority key identifier: B3:BF:44:86:37:97:15:C2:C8:CF:34:ED:0F:41:F0:58:1C:BC:EF:30
Certificate issuer:       /CN=ca6604f4190edf6e41f19c87dc12971ee963efaa
Certificate serial:       07DCE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca6604f4190edf6e41f19c87dc12971ee963efaa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fa0ed8f4-b668-4ed5-92e2-5781837a0d86/ca6604f4190edf6e41f19c87dc12971ee963efaa.mft
Manifest number:          03E8
Signing time:             Mon 15 Apr 2024 04:20:33 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 04:34:26 +0000
Files and hashes:         1: ca6604f4190edf6e41f19c87dc12971ee963efaa.crl (hash: XCEBgifG+zYMe+LtTVcJmGVJxD6Vo2iTWpALFR5aXWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515305 (0x7dce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6604f4190edf6e41f19c87dc12971ee963efaa
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 04:34:26 2024 GMT
        Subject: CN=a3b078a127374e171fe28196ea137ee8e45366a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:bf:5e:cc:fd:b2:34:4f:c2:f7:36:c6:8a:
                    1a:47:1f:07:24:ec:50:6c:c4:f9:e4:e7:87:56:22:
                    6d:4b:96:97:b1:ad:5f:8f:b1:54:d7:53:d1:70:db:
                    95:31:5c:81:97:07:7d:0e:ec:89:9a:ae:48:cf:90:
                    dd:4d:3a:62:c0:07:38:75:35:05:f3:07:09:c9:70:
                    de:ea:56:2a:41:7d:de:bc:c8:b6:69:c9:98:58:9f:
                    8a:25:ff:7b:2c:93:0e:57:c7:04:19:7e:9e:3c:9d:
                    65:6a:fb:bb:a5:53:02:e9:97:d3:e1:f2:90:1f:99:
                    e9:1d:31:ad:8d:95:b6:4a:9a:a5:e7:3d:3d:62:e0:
                    ff:f7:0c:78:3d:85:00:1c:d1:8d:96:05:74:9c:42:
                    db:b0:76:f8:68:ae:61:8f:a9:26:e6:f9:2d:72:f7:
                    65:03:0c:10:ca:1d:31:f1:5d:60:23:e4:0e:f1:b1:
                    be:ed:ae:60:9c:68:ed:44:68:7d:12:0f:37:e2:ea:
                    ba:b7:3f:1d:cf:ac:6a:27:f0:10:9d:fc:ba:f2:33:
                    f0:44:9d:12:97:af:96:1e:36:0d:dc:d1:1a:0c:7a:
                    78:22:e2:88:83:b4:50:04:79:25:91:dc:9e:68:d5:
                    8a:01:bc:3a:f3:76:e0:56:e9:dd:ff:2e:fe:97:60:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:BB:21:80:33:E4:6F:3E:7B:8F:B9:01:50:6A:39:CE:55:2D:E3
            X509v3 Authority Key Identifier:
                keyid:B3:BF:44:86:37:97:15:C2:C8:CF:34:ED:0F:41:F0:58:1C:BC:EF:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca6604f4190edf6e41f19c87dc12971ee963efaa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa0ed8f4-b668-4ed5-92e2-5781837a0d86/ca6604f4190edf6e41f19c87dc12971ee963efaa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fa0ed8f4-b668-4ed5-92e2-5781837a0d86/ca6604f4190edf6e41f19c87dc12971ee963efaa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:df:ea:2c:4a:00:57:ee:4c:08:ea:1f:22:e2:f9:a9:cb:
         7a:d3:e8:26:fb:3b:c7:1e:cd:84:5d:74:65:58:47:44:f1:14:
         35:d9:27:84:0e:a6:0f:f6:a6:40:ad:9e:ec:6c:0f:eb:63:d9:
         5b:b7:74:ff:96:e2:3d:31:fd:17:8a:88:d6:0d:ab:65:96:6b:
         31:f6:f2:4c:e1:37:c9:26:b3:cf:cc:44:5e:4e:3a:d9:b3:ae:
         97:c9:90:37:71:ec:28:46:9d:06:07:72:ce:d7:a2:f3:39:79:
         b0:47:02:db:9e:26:16:95:b9:58:dd:49:07:d9:2f:40:5e:33:
         e1:76:f6:e3:47:00:76:ca:e8:1b:96:99:c1:39:4e:91:7b:e6:
         e9:d6:28:28:02:96:49:ee:db:30:b6:25:46:b8:63:6c:c1:40:
         ba:7c:8b:b5:48:8b:0e:e0:14:2e:66:9c:c8:f3:86:c4:ba:65:
         60:99:92:f9:df:65:62:3e:21:b6:26:4f:39:e4:70:ad:d1:e7:
         57:8a:bf:a9:9e:7c:79:49:7b:19:ba:4a:e3:dc:98:c7:1e:87:
         84:aa:d6:27:83:d6:5f:76:39:eb:45:b0:86:98:6e:25:c4:7b:
         4a:28:0b:27:72:d8:f7:66:0b:84:31:b7:09:25:f2:29:47:b4:
         8a:e4:fd:08
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDB9zpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
NjYwNGY0MTkwZWRmNmU0MWYxOWM4N2RjMTI5NzFlZTk2M2VmYWEwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDQzNDI2WjAzMTEwLwYDVQQDEyhhM2IwNzhhMTI3Mzc0
ZTE3MWZlMjgxOTZlYTEzN2VlOGU0NTM2NmExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtkG/Xsz9sjRPwvc2xooaRx8HJOxQbMT55OeHViJtS5aXsa1f
j7FU11PRcNuVMVyBlwd9DuyJmq5Iz5DdTTpiwAc4dTUF8wcJyXDe6lYqQX3evMi2
acmYWJ+KJf97LJMOV8cEGX6ePJ1lavu7pVMC6ZfT4fKQH5npHTGtjZW2Spql5z09
YuD/9wx4PYUAHNGNlgV0nELbsHb4aK5hj6km5vktcvdlAwwQyh0x8V1gI+QO8bG+
7a5gnGjtRGh9Eg834uq6tz8dz6xqJ/AQnfy68jPwRJ0Sl6+WHjYN3NEaDHp4IuKI
g7RQBHklkdyeaNWKAbw683bgVund/y7+l2BSiwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDMOuyGAM+RvPnuPuQFQajnOVS3jMB8GA1UdIwQYMBaAFLO/RIY3lxXCyM80
7Q9B8FgcvO8wMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2E2NjA0
ZjQxOTBlZGY2ZTQxZjE5Yzg3ZGMxMjk3MWVlOTYzZWZhYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmEwZWQ4ZjQtYjY2OC00ZWQ1LTkyZTItNTc4MTgz
N2EwZDg2L2NhNjYwNGY0MTkwZWRmNmU0MWYxOWM4N2RjMTI5NzFlZTk2M2VmYWEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYTBlZDhmNC1iNjY4LTRlZDUtOTJlMi01Nzgx
ODM3YTBkODYvY2E2NjA0ZjQxOTBlZGY2ZTQxZjE5Yzg3ZGMxMjk3MWVlOTYzZWZh
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGrv3+osSgBX7kwI6h8i4vmpy3rT6Cb7O8cezYRddGVYR0Tx
FDXZJ4QOpg/2pkCtnuxsD+tj2Vu3dP+W4j0x/ReKiNYNq2WWazH28kzhN8kms8/M
RF5OOtmzrpfJkDdx7ChGnQYHcs7XovM5ebBHAtueJhaVuVjdSQfZL0BeM+F29uNH
AHbK6BuWmcE5TpF75unWKCgClknu2zC2JUa4Y2zBQLp8i7VIiw7gFC5mnMjzhsS6
ZWCZkvnfZWI+IbYmTznkcK3R51eKv6mefHlJexm6SuPcmMceh4Sq1ieD1l92OetF
sIaYbiXEe0ooCydy2PdmC4Qxtwkl8ilHtIrk/Qg=
-----END CERTIFICATE-----