Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a99eb-0a99-431b-941c-afe3d93e85cd/2b0604e3eec7948020d73c1a1f64cd84cad803b0.mft
File:                     2b0604e3eec7948020d73c1a1f64cd84cad803b0.mft (raw, json)
Hash identifier:          kOT5IXazGC4gUyzrXtAPxvLHh31y0MzTAi6B6pOh6d4=
Subject key identifier:   CF:61:DF:FE:EA:87:8C:59:C8:18:A2:D4:1F:A1:66:6E:D2:26:16:4B
Authority key identifier: 57:F4:4C:F2:3E:E5:FF:F2:91:08:9B:16:66:CC:7B:99:7B:1C:B5:0D
Certificate issuer:       /CN=2b0604e3eec7948020d73c1a1f64cd84cad803b0
Certificate serial:       07461F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b0604e3eec7948020d73c1a1f64cd84cad803b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a99eb-0a99-431b-941c-afe3d93e85cd/2b0604e3eec7948020d73c1a1f64cd84cad803b0.mft
Manifest number:          03C6
Signing time:             Mon 15 Apr 2024 03:20:48 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:10:17 +0000
Files and hashes:         1: 2b0604e3eec7948020d73c1a1f64cd84cad803b0.crl (hash: eFfeHpTIovfvPH1Zc6ZUAg3zpGaHk1B20JELI/GfBfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476703 (0x7461f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0604e3eec7948020d73c1a1f64cd84cad803b0
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:10:17 2024 GMT
        Subject: CN=db6b1ab2a29a75ed241fcd88c3d06fd7e0279e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:d8:35:94:1f:6a:b4:ff:61:c7:25:4e:46:
                    70:59:46:55:8b:2a:ff:01:eb:ff:2a:f1:93:46:b0:
                    6e:ef:68:09:ee:1b:19:96:02:80:c9:29:c8:8d:25:
                    2f:33:ca:0e:66:31:7d:dc:e4:aa:77:1d:bd:cb:2b:
                    87:09:a9:72:11:29:04:68:d4:ad:49:50:70:f9:59:
                    d7:c1:9c:f9:01:a1:98:f9:a0:7c:7e:f3:e9:a5:e9:
                    e5:32:c5:96:2e:f7:c0:39:54:5e:95:b2:3a:55:af:
                    23:06:ff:c0:05:f9:78:68:47:b1:33:51:69:58:fb:
                    ba:ee:8e:a8:d9:0d:68:06:cb:e5:27:81:5d:07:22:
                    f9:85:cc:c2:4e:38:3b:b0:16:8d:d7:07:3d:2e:8e:
                    8f:aa:48:61:ec:2f:90:8d:25:bd:d0:1d:ed:79:7c:
                    26:85:d1:6a:f7:11:eb:20:18:e9:c9:76:10:4f:18:
                    7d:94:89:8a:cc:3c:98:d0:9c:29:94:49:5e:73:67:
                    ea:d5:5e:48:4d:45:4d:74:98:3b:22:87:fd:cd:a2:
                    df:da:91:d8:eb:71:95:f4:fa:0b:4b:cb:a7:73:af:
                    22:88:f0:bb:24:9b:d3:e9:fc:b6:df:c1:1a:e9:d4:
                    c7:20:28:d9:c9:39:36:c2:e1:8c:a6:47:87:e1:35:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:DF:FE:EA:87:8C:59:C8:18:A2:D4:1F:A1:66:6E:D2:26:16:4B
            X509v3 Authority Key Identifier:
                keyid:57:F4:4C:F2:3E:E5:FF:F2:91:08:9B:16:66:CC:7B:99:7B:1C:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b0604e3eec7948020d73c1a1f64cd84cad803b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a99eb-0a99-431b-941c-afe3d93e85cd/2b0604e3eec7948020d73c1a1f64cd84cad803b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a99eb-0a99-431b-941c-afe3d93e85cd/2b0604e3eec7948020d73c1a1f64cd84cad803b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:ab:b6:eb:ec:91:29:52:b4:f6:8d:4f:05:88:8c:b0:9b:
         c5:5b:0f:99:d2:a4:b9:4f:e4:81:01:e5:f2:fb:c0:23:20:e7:
         c8:77:3e:a2:61:54:0e:21:2b:ab:58:92:17:ce:1c:6b:ad:8f:
         cf:84:ec:be:2a:cf:2f:42:40:b1:3f:ab:04:9c:ed:db:2b:3e:
         84:c5:ca:69:d3:a3:d2:cc:23:38:82:e4:05:d5:a5:c9:7f:15:
         81:55:23:0b:ec:46:78:93:4d:00:4b:d6:4e:db:65:20:ff:e3:
         90:e9:b8:fe:51:13:36:e2:e0:01:9f:57:85:0f:73:fb:76:56:
         3b:86:2f:21:49:a0:9a:54:b0:9c:5d:91:ed:8e:ec:b1:2d:dd:
         37:e5:f0:58:88:8b:00:0e:f7:17:f3:f2:d8:13:03:28:14:f0:
         53:a2:c3:1b:1c:ba:43:97:ad:7b:d1:38:31:04:fe:b5:a4:28:
         f1:31:d2:af:51:56:6c:a2:6d:f3:99:78:1b:94:80:bb:81:81:
         c5:24:4f:a9:37:7c:43:3b:21:59:d3:73:29:96:51:6d:62:7d:
         3c:d1:65:83:b4:ab:2e:9f:73:18:69:ad:96:a4:67:f7:4e:3e:
         68:3a:ec:49:e3:1a:7f:89:e2:7a:3d:e0:6f:6e:95:ea:bd:35:
         2f:de:c9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----