Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.mft
File:                     14aa226f3e8286e21bf2ec937c2c6159eabfda4f.mft (raw, json)
Hash identifier:          r7uhDVqaW2A0pWGooeeb9dbJgtT+rOLS6TmkzVcjsss=
Subject key identifier:   CF:F0:53:1F:8B:8C:37:9B:06:6A:F2:30:75:C9:63:88:E7:2C:AE:22
Authority key identifier: 5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
Certificate issuer:       /CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
Certificate serial:       0144CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.mft
Manifest number:          A0
Signing time:             Fri 12 Apr 2024 13:21:34 +0000
Manifest this update:     Fri 12 Apr 2024 12:20:16 +0000
Manifest next update:     Mon 15 Apr 2024 14:01:16 +0000
Files and hashes:         1: 14aa226f3e8286e21bf2ec937c2c6159eabfda4f.crl (hash: xy7gO2W4eEsend60jaFX1ZmqgP0KGzN625kCNBTpuys=)
                          2: 91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa (hash: o/7tJiVe6ZbRjOoLZ8X5mk0R5pao4EYJnVwYA+SCdNo=)
                          3: b685ebd2cda483184eba92c8c6ded5ab2f97d619.roa (hash: jX9JCMgGU7R8cTaXoVSNUSD5atEYJxjJHmh51rtuZmQ=)
                          4: fd415bc5bbb54e3c160a168eb273ba2cc6b99095.roa (hash: Bn4h7IaoPqxayytEfWmFXsEG694EZoyEOWlkxh4C/9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83151 (0x144cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
        Validity
            Not Before: Apr 12 12:20:16 2024 GMT
            Not After : Apr 15 14:01:16 2024 GMT
        Subject: CN=815735b8a7ed8c207bdd5c967899ea1ac3a93cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:d1:57:c8:79:5e:79:fa:29:ea:89:73:21:
                    db:0f:91:af:96:85:1b:c3:f9:ee:94:59:e9:cb:46:
                    37:46:7f:53:98:89:d8:9e:2c:0d:59:d8:ce:ba:a5:
                    07:66:b3:17:87:f2:cc:28:59:6b:b2:2a:92:b6:94:
                    96:9f:bc:8f:72:ed:20:c6:60:33:6d:00:43:bc:8d:
                    d5:54:24:e8:a1:b3:30:ed:67:f6:19:96:c2:c0:a1:
                    a6:b7:65:9a:68:76:86:8b:92:91:05:2a:06:9b:42:
                    f0:89:33:09:70:40:6f:ce:4d:17:1b:0f:95:46:a7:
                    0a:06:d9:bc:72:c4:e8:98:bc:4b:59:7e:c9:cf:61:
                    b3:7d:29:3b:6e:dd:d1:67:7c:87:93:3a:73:14:25:
                    73:0e:dc:bc:68:d2:fa:d7:cf:e4:8c:95:1b:45:fc:
                    ec:52:70:a1:3a:a7:1c:e0:4f:c1:91:e7:bd:37:01:
                    b1:95:be:ff:a4:75:5c:f5:28:21:82:c8:39:ed:b6:
                    cd:9b:21:8c:fa:1e:93:ce:b0:98:e1:b7:cd:e5:0c:
                    d6:75:3b:36:fd:ee:e1:d9:d3:17:6a:5a:16:bb:a6:
                    d9:1b:3a:3e:cc:88:c1:52:6c:04:a0:39:37:aa:dd:
                    dd:01:54:33:9a:b7:9a:9d:c6:b2:4b:73:56:79:1f:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F0:53:1F:8B:8C:37:9B:06:6A:F2:30:75:C9:63:88:E7:2C:AE:22
            X509v3 Authority Key Identifier:
                keyid:5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:57:34:bc:5a:0c:28:1f:14:37:b0:17:d7:92:02:58:27:12:
         f8:9c:f1:89:a7:f7:fa:41:86:dd:87:0e:1b:88:0f:5f:5d:43:
         d1:ec:da:65:93:0f:94:d3:a9:34:4f:7e:26:8c:cf:2e:cc:8e:
         9f:e6:5d:f4:57:e0:ce:fa:67:3d:4b:b8:cb:50:a0:f7:81:92:
         9a:3e:55:78:8d:a9:bd:59:9b:79:fd:df:85:25:78:9e:0d:e0:
         76:8f:39:9d:64:2e:f1:ea:cb:04:c4:07:93:e5:c4:8e:d2:bf:
         59:b5:09:10:56:98:1c:7f:3b:73:2f:0b:2f:5f:f9:fc:08:93:
         dd:f6:df:01:a3:e6:c1:5b:22:cc:0d:77:79:0b:4d:84:6b:26:
         48:18:54:f7:1f:3b:d1:bc:55:ae:d1:9b:98:02:ae:ab:66:ef:
         ee:e2:b3:e0:b5:78:c3:60:20:cc:d4:78:2e:95:17:da:06:55:
         a5:34:f4:89:32:7b:a4:a2:fc:8a:cc:b8:58:c6:80:d0:8c:76:
         0b:dd:d5:eb:e8:05:ef:f5:b4:0d:b2:74:05:6c:3b:d7:99:4a:
         4c:ac:cc:30:42:9d:50:28:87:18:31:28:36:ff:26:63:fd:43:
         a7:ff:68:63:18:ff:bd:77:bd:b2:2c:b3:74:59:8f:ec:20:85:
         dc:c1:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----