Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/af4e172d4f103eb44af4320052788d1ee84bc8ff.mft
File:                     af4e172d4f103eb44af4320052788d1ee84bc8ff.mft (raw, json)
Hash identifier:          L8GRE6o7ry7T7QEm1s29oxMttotxrEEz+Ff2qMLSvg8=
Subject key identifier:   F9:EF:1C:5C:43:AC:89:BF:79:B0:E4:69:60:24:BE:10:52:EA:4C:F7
Authority key identifier: 27:20:93:1A:79:7E:EA:1B:9C:78:87:E7:FC:63:C4:F6:FB:DF:20:D3
Certificate issuer:       /CN=af4e172d4f103eb44af4320052788d1ee84bc8ff
Certificate serial:       28C938
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af4e172d4f103eb44af4320052788d1ee84bc8ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/af4e172d4f103eb44af4320052788d1ee84bc8ff.mft
Manifest number:          0DFA
Signing time:             Mon 15 Apr 2024 10:21:17 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:27:25 +0000
Files and hashes:         1: 43d332cc232b0141ea05254718ea831d4df5de7e.roa (hash: S4lWymsd3ql3LvC/IvXG7sIju5PZ+MvJ8VNcpKfjL74=)
                          2: af4e172d4f103eb44af4320052788d1ee84bc8ff.crl (hash: wsF35U+5ZRXgCjmxm1Oo99h3FH5Bxmy4ghoID1XD3OY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2672952 (0x28c938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4e172d4f103eb44af4320052788d1ee84bc8ff
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:27:25 2024 GMT
        Subject: CN=ccb4d7994a1fdec55c69aeab6395eb112b2dc40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:8c:45:4f:15:76:b5:ed:56:b0:09:a9:8f:
                    4c:85:90:00:2f:44:f5:27:ac:b9:eb:7f:45:53:7e:
                    d4:6f:4e:77:4d:0f:a1:8e:ac:b2:5c:e6:e4:37:08:
                    41:41:da:35:a9:71:8a:fd:28:cb:f5:22:06:ef:36:
                    86:2c:1a:fb:cc:a8:f8:0e:dc:55:e5:f7:4a:c6:d5:
                    86:17:a5:c9:9d:9d:3c:dd:a9:05:44:ee:99:0a:84:
                    54:ab:8b:44:e0:94:37:66:a2:ae:46:5f:65:c7:22:
                    80:7b:75:68:28:24:ee:9a:5d:04:16:c9:28:e7:3f:
                    53:55:80:8f:7c:38:5c:bf:ef:b6:22:49:b9:86:fc:
                    f0:6e:0c:a0:6d:45:bf:b2:41:c6:5a:ae:fe:15:77:
                    1f:66:cc:d5:9a:fd:2f:7a:99:e6:66:2c:0b:4b:97:
                    88:c9:aa:c3:43:80:82:49:08:cc:08:72:01:f1:aa:
                    29:eb:37:9c:e7:b0:d3:87:fa:a8:7b:e9:b7:4e:d1:
                    c2:7b:1e:b9:a0:bd:e4:26:b9:26:83:74:b5:a7:d8:
                    d5:9d:68:c7:a8:0c:5e:65:ba:9b:0b:cb:fa:c3:0b:
                    03:34:2c:1e:2f:2d:da:b9:16:30:cc:7c:f4:04:de:
                    07:af:45:16:f3:0c:d1:94:7b:c6:82:f3:c0:a8:f3:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EF:1C:5C:43:AC:89:BF:79:B0:E4:69:60:24:BE:10:52:EA:4C:F7
            X509v3 Authority Key Identifier:
                keyid:27:20:93:1A:79:7E:EA:1B:9C:78:87:E7:FC:63:C4:F6:FB:DF:20:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af4e172d4f103eb44af4320052788d1ee84bc8ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/af4e172d4f103eb44af4320052788d1ee84bc8ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ecbaeea-cc43-44e0-9521-eb38799adca1/af4e172d4f103eb44af4320052788d1ee84bc8ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:f6:3a:a6:d1:5c:96:75:97:19:6c:b2:22:c3:15:65:ce:
         6d:5c:d1:48:5e:9b:83:99:cb:45:81:b7:02:8b:fc:64:9d:2d:
         eb:e8:f9:cb:06:ba:bb:96:00:e3:63:2b:3e:b1:e4:f5:e8:c7:
         58:54:74:b1:9c:c7:00:92:77:06:0f:bf:f7:65:1c:02:b0:2a:
         b0:ac:12:f6:7a:a1:30:87:5a:e0:f1:f8:c7:fa:4b:61:d5:cd:
         94:c0:b7:a1:48:43:1b:6b:dc:f8:24:b1:f6:59:0b:ea:d3:c6:
         ab:33:0f:ef:a2:c5:94:b8:15:c0:71:11:88:5e:af:4b:18:85:
         36:a6:a7:72:f6:64:7a:81:db:e4:eb:6f:33:98:6e:a1:25:78:
         89:b2:71:73:55:dd:cc:e0:18:32:39:6f:8c:80:8e:d4:5d:de:
         e9:aa:ab:5f:0a:75:cf:b7:61:20:6d:21:48:63:11:cc:f9:ac:
         a2:64:12:df:ed:17:6f:48:37:c0:d6:97:49:56:21:83:09:ac:
         67:36:5f:0f:06:ed:0b:09:3b:cc:e4:4c:62:43:1a:85:9c:c1:
         75:2d:5c:88:a3:f7:3e:99:d8:1f:c3:cc:14:73:76:14:f7:3d:
         1c:fd:bd:3a:b6:0e:49:a8:ca:eb:ba:36:84:37:58:0e:e6:db:
         57:d2:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----