Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.mft
File:                     21a3123959d9e97ae7e204e2a4018c03a6d5ab84.mft (raw, json)
Hash identifier:          d8PKvn45NoLFmPUo0QH7Zb4BP0duK6FfInBANRQwFPo=
Subject key identifier:   6D:26:13:88:83:8F:D5:73:52:A0:A1:88:B4:A2:AF:E7:7A:19:6A:1F
Authority key identifier: A9:61:C9:74:C7:C6:A5:CF:0B:06:49:21:C6:47:E9:0F:3C:55:75:69
Certificate issuer:       /CN=21a3123959d9e97ae7e204e2a4018c03a6d5ab84
Certificate serial:       0FEAC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.mft
Manifest number:          082C
Signing time:             Mon 15 Apr 2024 11:20:25 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:36:18 +0000
Files and hashes:         1: 21a3123959d9e97ae7e204e2a4018c03a6d5ab84.crl (hash: TrnFQDh2g7VKp1nEs610iYoZfNbvPvCCxlX3mPtiUD0=)
                          2: cd25aefca2afcbb297203e5bef55232db9e1829d.roa (hash: cGHDdkQsNkRi87f7h0c3/1LPSmIwI+V6ZRI2PULOyiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043137 (0xfeac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a3123959d9e97ae7e204e2a4018c03a6d5ab84
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:36:18 2024 GMT
        Subject: CN=e18230f7b8b8ba367b9acee73210db0a58bb9a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:28:4a:90:95:9b:5b:80:f8:24:7b:7d:98:
                    13:45:57:89:f5:70:0e:d4:0f:c6:d4:d6:d4:01:00:
                    07:b7:ae:f0:de:86:cf:a2:e2:80:04:df:6a:5c:de:
                    b9:93:36:75:86:3b:dd:98:3b:66:c8:37:14:0d:96:
                    5c:ee:f9:04:a3:dd:76:9c:7a:e3:69:47:8e:e5:7d:
                    58:70:74:44:56:3b:50:ea:b4:e8:ae:11:72:c9:cd:
                    a2:7f:15:d2:92:10:26:77:48:e2:59:6b:4f:0f:38:
                    83:29:4b:86:48:ea:ea:ed:44:3e:46:b2:22:10:95:
                    d5:b7:64:51:e4:60:04:4c:7a:4c:68:df:6d:95:a2:
                    0e:0d:77:86:3d:85:34:06:6a:13:3f:f3:ff:e4:3b:
                    cb:0e:52:d3:8a:4c:6b:54:d3:e2:a7:d4:2d:7f:ca:
                    1c:8a:b3:25:12:5b:ff:05:ee:b3:de:89:02:b5:0f:
                    4d:64:f7:fa:66:5b:56:48:90:88:6b:cb:ad:5d:b6:
                    66:93:52:11:7f:a8:b2:63:db:2a:52:e5:f8:3c:58:
                    0e:e3:90:e2:d5:55:db:d9:5b:ee:77:22:f5:ec:15:
                    c6:b5:27:41:bc:07:5f:42:d4:f7:29:5c:0f:86:ad:
                    65:a3:5d:6d:f1:88:b1:43:8a:df:22:49:64:e9:75:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:26:13:88:83:8F:D5:73:52:A0:A1:88:B4:A2:AF:E7:7A:19:6A:1F
            X509v3 Authority Key Identifier:
                keyid:A9:61:C9:74:C7:C6:A5:CF:0B:06:49:21:C6:47:E9:0F:3C:55:75:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fc668cb4-a19e-4866-bbcf-35350f6f0a09/21a3123959d9e97ae7e204e2a4018c03a6d5ab84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:a9:8d:2d:e6:77:94:99:d9:12:a6:ed:01:79:60:e9:ff:
         ca:a9:7f:fe:39:63:fa:04:af:ce:21:4b:f9:59:42:84:16:5a:
         e9:6c:c4:f2:a5:53:41:4e:14:73:21:4a:e1:19:75:56:5e:0c:
         10:bb:0a:14:42:04:c9:d3:03:6b:b9:6e:3f:d4:3d:9e:c0:9d:
         64:1d:97:3e:8e:dc:91:f6:dd:14:56:21:af:db:2d:59:5a:48:
         a1:ca:8e:87:ba:b2:f8:0b:06:f7:0d:fd:26:c3:07:2f:ce:eb:
         ca:5a:51:6c:d8:98:79:5a:0f:36:8c:88:b3:24:39:e6:de:bf:
         6e:a4:a2:5d:c7:8c:fd:62:99:9a:cf:25:1d:f6:8b:66:81:74:
         7c:cc:c7:76:bb:b9:6b:66:a5:e6:ed:27:57:69:e9:b6:0b:89:
         74:dd:cc:b9:7e:ce:a0:8c:1f:e8:ec:a5:35:54:51:80:fe:fd:
         27:90:e9:6f:9b:a6:91:a1:b2:8a:c1:c5:cc:fb:3c:1b:b9:83:
         ea:f1:7c:6a:7b:e0:c4:68:7b:7f:27:d8:d6:6f:a9:0c:3a:51:
         7d:fc:a5:f6:03:52:af:fb:dd:9e:50:58:80:cc:7d:09:2a:26:
         f0:21:d3:be:d5:60:f5:72:44:25:9c:3c:d5:d8:17:d8:dc:44:
         f9:fd:6a:4c
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDD+rBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
YTMxMjM5NTlkOWU5N2FlN2UyMDRlMmE0MDE4YzAzYTZkNWFiODQwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTEzNjE4WjAzMTEwLwYDVQQDEyhlMTgyMzBmN2I4Yjhi
YTM2N2I5YWNlZTczMjEwZGIwYTU4YmI5YTEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4SYoSpCVm1uA+CR7fZgTRVeJ9XAO1A/G1NbUAQAHt67w3obP
ouKABN9qXN65kzZ1hjvdmDtmyDcUDZZc7vkEo912nHrjaUeO5X1YcHREVjtQ6rTo
rhFyyc2ifxXSkhAmd0jiWWtPDziDKUuGSOrq7UQ+RrIiEJXVt2RR5GAETHpMaN9t
laIODXeGPYU0BmoTP/P/5DvLDlLTikxrVNPip9Qtf8ocirMlElv/Be6z3okCtQ9N
ZPf6ZltWSJCIa8utXbZmk1IRf6iyY9sqUuX4PFgO45Di1VXb2VvudyL17BXGtSdB
vAdfQtT3KVwPhq1lo11t8YixQ4rfIklk6XWqPQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFG0mE4iDj9VzUqChiLSir+d6GWofMB8GA1UdIwQYMBaAFKlhyXTHxqXPCwZJ
IcZH6Q88VXVpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjFhMzEy
Mzk1OWQ5ZTk3YWU3ZTIwNGUyYTQwMThjMDNhNmQ1YWI4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmM2NjhjYjQtYTE5ZS00ODY2LWJiY2YtMzUzNTBm
NmYwYTA5LzIxYTMxMjM5NTlkOWU5N2FlN2UyMDRlMmE0MDE4YzAzYTZkNWFiODQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYzY2OGNiNC1hMTllLTQ4NjYtYmJjZi0zNTM1
MGY2ZjBhMDkvMjFhMzEyMzk1OWQ5ZTk3YWU3ZTIwNGUyYTQwMThjMDNhNmQ1YWI4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGH5qY0t5neUmdkSpu0BeWDp/8qpf/45Y/oEr84hS/lZQoQW
WulsxPKlU0FOFHMhSuEZdVZeDBC7ChRCBMnTA2u5bj/UPZ7AnWQdlz6O3JH23RRW
Ia/bLVlaSKHKjoe6svgLBvcN/SbDBy/O68paUWzYmHlaDzaMiLMkOebev26kol3H
jP1imZrPJR32i2aBdHzMx3a7uWtmpebtJ1dp6bYLiXTdzLl+zqCMH+jspTVUUYD+
/SeQ6W+bppGhsorBxcz7PBu5g+rxfGp74MRoe38n2NZvqQw6UX38pfYDUq/73Z5Q
WIDMfQkqJvAh077VYPVyRCWcPNXYF9jcRPn9akw=
-----END CERTIFICATE-----