Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.mft
File:                     d150a188184eb3e194f963dfc48dfa17a2509aa8.mft (raw, json)
Hash identifier:          kjtqbN4+0kUpTqxseBSQ0cxOfpn99OVPmFN8gWIc2i0=
Subject key identifier:   FB:8F:AE:F8:E5:E5:11:72:25:3D:7B:FF:EB:0B:9B:7D:1B:3C:6B:25
Authority key identifier: 21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79
Certificate issuer:       /CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
Certificate serial:       28E3F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.mft
Manifest number:          0DF0
Signing time:             Mon 15 Apr 2024 08:20:52 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:08:16 +0000
Files and hashes:         1: 3da96cd341f80cf2c738580db4f1230484fca6bb.roa (hash: x4mUGLVs7myYz/9Y2ovpDairFE/Em3eA/4kjUDoYX5I=)
                          2: 414466c1bd0294fd88db812aeb877b148ae29df4.roa (hash: OuU7Apd8RLOrhispF0//QXwmfy3uQUU5z+Xsv7wT1kE=)
                          3: a05ad19c364cb76ec18d7ad4670fedfc680503b3.roa (hash: 78SrvjZ6uRPLUGjx6Q1CdnkfQRSueankMxNlmvw8TSw=)
                          4: a0ed0ee56eb6ee9ab941d93e024f28586d80200a.roa (hash: 13LzmesauHYPhIubAccuT9Jo2nFSJQ2UxUZG2vvX0dY=)
                          5: d150a188184eb3e194f963dfc48dfa17a2509aa8.crl (hash: TKxn5KeHNnR3Q+HWy7K3pIkXj5yCCH1brUXWds762CI=)
                          6: ebdaa3605cacb42c6d5f8f7bf9f4ebff932a28ad.roa (hash: 4p0Am21c4ov2d5pAYEE8JwqxHK8gbskjyhZ+7ME9hps=)
                          7: f9f94797a687af4e017380d1e6995ac2d58b755f.roa (hash: 1KRUehi45iwn/H5Mi8GOSyxQzixiOhOHT+5aD1twSng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679796 (0x28e3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:08:16 2024 GMT
        Subject: CN=1a81f4847d586659ef1dda8f5832c63a739da133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9d:48:ba:f7:e8:4f:ba:13:72:8a:bf:79:83:
                    d9:fe:3c:35:e2:e9:10:28:a0:c6:74:3e:05:7c:15:
                    7a:ea:bf:cb:13:a4:cb:43:ca:0d:b8:a5:01:e7:cb:
                    14:79:c1:a5:bf:bc:35:ef:67:77:5b:b0:c0:8e:1f:
                    08:98:47:04:a5:ac:52:4d:91:c9:c3:74:df:01:72:
                    4a:fe:e6:7a:92:0d:5c:54:d1:0d:c5:95:db:ab:f8:
                    ed:1e:42:b4:b9:3f:7a:b9:7d:4e:dc:5b:9d:32:d6:
                    b1:7c:c0:27:8d:5b:c6:ad:c8:6d:83:ff:b3:2a:b1:
                    34:a0:89:72:78:c7:01:29:d5:fa:24:02:aa:a6:85:
                    41:5e:31:a0:3a:76:0d:b7:02:90:06:de:44:48:36:
                    75:c2:63:30:72:0b:d2:c9:ad:3d:f8:64:5c:4b:a2:
                    a5:35:5f:90:f8:f4:cd:69:8b:48:e7:eb:50:a2:f3:
                    0f:6c:dc:0d:98:74:92:1c:d9:e9:65:6a:39:18:51:
                    3f:6c:ce:5d:6a:fa:73:44:d7:28:95:de:c2:d3:ef:
                    1f:ae:93:a6:43:4d:a1:09:6b:56:78:3a:02:ab:cb:
                    fd:3c:b3:74:8f:ee:33:50:a2:16:3d:40:37:1e:1a:
                    18:ba:53:10:9c:57:42:9e:94:20:85:fb:2f:7a:45:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8F:AE:F8:E5:E5:11:72:25:3D:7B:FF:EB:0B:9B:7D:1B:3C:6B:25
            X509v3 Authority Key Identifier:
                keyid:21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:72:8c:9d:00:1b:8b:d2:fb:6b:fe:d3:3b:dc:82:12:bd:ce:
         f4:a5:20:fe:d2:76:ce:61:f3:e9:8b:66:1f:ca:52:53:75:b6:
         57:3e:33:2c:36:1a:00:a1:4b:19:5e:79:66:68:cc:8f:2d:28:
         49:27:9d:1c:2e:44:ae:33:b7:23:a3:6e:7b:4f:74:aa:cd:33:
         fb:95:c8:2d:bc:7d:bc:a2:f1:13:43:f8:46:ae:39:a1:01:a0:
         8e:4b:ed:0b:39:ae:2c:e4:1d:69:87:a4:d8:1c:9a:8d:6a:2f:
         74:bb:0b:a5:40:aa:ec:97:f3:44:ef:94:37:cf:b8:e5:d3:18:
         ec:1f:46:39:32:f6:44:ad:78:8f:f2:cb:a6:26:35:fe:d4:9d:
         2b:61:d4:c0:2c:47:97:e2:3e:d2:82:bf:86:65:13:e1:3d:5b:
         d3:76:ac:a3:96:a3:b1:34:00:f8:6c:ac:5e:e7:19:70:45:fc:
         de:21:0e:ce:db:d1:3e:3c:c5:31:45:e3:bf:34:7a:79:f6:e1:
         c4:47:25:fd:20:e8:e4:ed:e4:5f:82:d5:62:12:fb:53:0a:e6:
         82:56:03:14:16:c3:56:77:50:b2:79:68:9f:d2:f4:3d:f6:c2:
         5f:18:44:9e:b1:0c:fe:8a:98:a0:c0:a7:9e:c7:88:c6:29:ed:
         d4:16:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----