Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/acf3bb686e32ebc18cd86ea468114ebd153206e5.mft
File:                     acf3bb686e32ebc18cd86ea468114ebd153206e5.mft (raw, json)
Hash identifier:          peNAZ+EVZYWkPMjhE7MNQwUwDFyeAC/3wPu/jWZEgmM=
Subject key identifier:   BD:09:85:38:30:B7:9C:AE:95:44:F9:C9:F8:EF:65:EC:11:99:B7:FB
Authority key identifier: 7B:18:2D:95:C4:1E:BD:D0:20:C0:0F:7E:6A:9F:7A:5B:7D:CB:9D:D2
Certificate issuer:       /CN=acf3bb686e32ebc18cd86ea468114ebd153206e5
Certificate serial:       27EB0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf3bb686e32ebc18cd86ea468114ebd153206e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/acf3bb686e32ebc18cd86ea468114ebd153206e5.mft
Manifest number:          0DFA
Signing time:             Mon 15 Apr 2024 11:21:06 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:19:18 +0000
Files and hashes:         1: acf3bb686e32ebc18cd86ea468114ebd153206e5.crl (hash: 9VljxvHzvqD4/AEtka/GSUt+AaTnqa57oSiyezIpWcI=)
                          2: e88e5238d0fa17c98fe84e21cc1eafac9b5c56ae.roa (hash: dspoF+wznXVVULwiTtHqmV6oppt/ntPc8J7bxVI//AY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2616079 (0x27eb0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf3bb686e32ebc18cd86ea468114ebd153206e5
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:19:18 2024 GMT
        Subject: CN=7a26e5a1df2bb061e5d1afc823478591152a47db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:6b:82:c7:f6:16:45:07:69:7c:e1:2e:51:
                    e2:ae:e8:75:b1:28:46:ed:a7:b5:98:92:a6:76:30:
                    6b:28:a3:89:d8:e0:86:5a:d7:00:4d:5e:d2:09:4e:
                    79:89:13:b2:da:bb:cb:ba:a0:f7:21:79:d4:04:3f:
                    85:85:45:47:21:d8:7c:58:af:47:e8:22:10:5d:ab:
                    d3:e8:81:8a:81:41:78:e1:be:2d:ec:02:04:62:29:
                    1b:c1:12:07:59:07:49:3c:03:35:c1:37:76:ea:16:
                    e9:00:b8:ce:ec:a0:d3:6c:a2:08:a3:35:7b:f4:e5:
                    5b:97:11:40:47:23:f6:ec:40:cb:51:29:45:7f:e4:
                    16:47:4a:a7:5a:1c:fc:65:97:02:2b:04:69:45:42:
                    ec:ef:09:8b:9a:a2:4d:3d:a0:3f:bf:2e:35:8f:98:
                    78:6c:19:e1:6d:ab:9c:ca:84:25:9a:09:82:08:bb:
                    62:ce:f4:55:da:4f:7a:b2:c1:85:76:60:e1:32:d0:
                    cf:1e:4c:1b:64:93:63:13:26:8e:53:6c:3c:db:20:
                    aa:9e:76:86:2d:5d:5a:ff:fc:7b:da:33:f7:29:1d:
                    48:cd:1b:d2:5d:36:83:8f:5b:74:cb:90:f4:ed:5d:
                    f3:26:f6:ad:04:b8:14:a4:eb:03:fc:2a:63:a2:d1:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:09:85:38:30:B7:9C:AE:95:44:F9:C9:F8:EF:65:EC:11:99:B7:FB
            X509v3 Authority Key Identifier:
                keyid:7B:18:2D:95:C4:1E:BD:D0:20:C0:0F:7E:6A:9F:7A:5B:7D:CB:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf3bb686e32ebc18cd86ea468114ebd153206e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/acf3bb686e32ebc18cd86ea468114ebd153206e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/acf3bb686e32ebc18cd86ea468114ebd153206e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:63:6e:be:b6:ac:c5:fe:7b:38:b4:58:d9:80:36:f1:a0:
         ac:99:d4:ed:97:62:bc:34:01:e0:ee:ce:42:2f:66:4d:fa:f5:
         79:b7:8b:67:fc:0e:82:fb:c7:d0:8b:a5:5f:af:19:6a:49:68:
         dc:0f:ec:d1:be:ab:af:37:85:fd:6a:44:06:a0:a4:c8:da:36:
         e4:9c:1d:e3:10:9c:c8:60:7f:69:33:26:3f:5d:d9:56:36:c9:
         d3:68:54:71:05:6a:b1:06:a9:e5:ca:5f:99:29:06:94:7a:55:
         c8:4a:b5:71:78:79:76:47:5c:d8:43:d3:ae:2c:e0:e1:1c:b8:
         ee:86:8d:70:0f:59:b9:3f:f3:93:42:8b:96:82:6d:e1:60:84:
         98:6d:1a:b3:1c:20:d9:b8:ff:5c:1d:bc:3c:b1:07:cf:ed:24:
         67:09:b5:db:29:1a:09:51:4c:19:20:0f:24:2f:f7:aa:a4:62:
         e1:5b:d0:69:7b:85:f0:84:80:7b:01:f6:64:8a:09:e2:0f:7f:
         06:dc:f3:d7:b7:3e:3b:78:b7:41:56:62:12:8f:76:d2:c2:81:
         0b:de:2b:4a:87:24:94:58:cb:19:e6:31:f2:ba:e9:91:40:20:
         03:c8:ac:95:71:4e:7a:2d:45:60:52:c6:b2:59:6e:75:88:03:
         c1:9e:87:32
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJ+sPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
ZjNiYjY4NmUzMmViYzE4Y2Q4NmVhNDY4MTE0ZWJkMTUzMjA2ZTUwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTIxOTE4WjAzMTEwLwYDVQQDEyg3YTI2ZTVhMWRmMmJi
MDYxZTVkMWFmYzgyMzQ3ODU5MTE1MmE0N2RiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwbprgsf2FkUHaXzhLlHiruh1sShG7ae1mJKmdjBrKKOJ2OCG
WtcATV7SCU55iROy2rvLuqD3IXnUBD+FhUVHIdh8WK9H6CIQXavT6IGKgUF44b4t
7AIEYikbwRIHWQdJPAM1wTd26hbpALjO7KDTbKIIozV79OVblxFARyP27EDLUSlF
f+QWR0qnWhz8ZZcCKwRpRULs7wmLmqJNPaA/vy41j5h4bBnhbaucyoQlmgmCCLti
zvRV2k96ssGFdmDhMtDPHkwbZJNjEyaOU2w82yCqnnaGLV1a//x72jP3KR1IzRvS
XTaDj1t0y5D07V3zJvatBLgUpOsD/CpjotHqRQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFL0JhTgwt5yulUT5yfjvZewRmbf7MB8GA1UdIwQYMBaAFHsYLZXEHr3QIMAP
fmqfelt9y53SMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNmM2Ji
Njg2ZTMyZWJjMThjZDg2ZWE0NjgxMTRlYmQxNTMyMDZlNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmVjMDZlMDMtMDY4My00ZTkyLWE3MjEtODRlOWMz
MDdhMDhjL2FjZjNiYjY4NmUzMmViYzE4Y2Q4NmVhNDY4MTE0ZWJkMTUzMjA2ZTUu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZWMwNmUwMy0wNjgzLTRlOTItYTcyMS04NGU5
YzMwN2EwOGMvYWNmM2JiNjg2ZTMyZWJjMThjZDg2ZWE0NjgxMTRlYmQxNTMyMDZl
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEj2Y26+tqzF/ns4tFjZgDbxoKyZ1O2XYrw0AeDuzkIvZk36
9Xm3i2f8DoL7x9CLpV+vGWpJaNwP7NG+q683hf1qRAagpMjaNuScHeMQnMhgf2kz
Jj9d2VY2ydNoVHEFarEGqeXKX5kpBpR6VchKtXF4eXZHXNhD064s4OEcuO6GjXAP
Wbk/85NCi5aCbeFghJhtGrMcINm4/1wdvDyxB8/tJGcJtdspGglRTBkgDyQv96qk
YuFb0Gl7hfCEgHsB9mSKCeIPfwbc89e3Pjt4t0FWYhKPdtLCgQveK0qHJJRYyxnm
MfK66ZFAIAPIrJVxTnotRWBSxrJZbnWIA8GehzI=
-----END CERTIFICATE-----