Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft
File:                     cb00b3d70dd9cb79681cd490843163b3a4674f12.mft (raw, json)
Hash identifier:          DSiiNp4SzHUaF/916O54TNUFwDXfElEDznNDGQKd45c=
Subject key identifier:   4B:08:80:95:62:3B:2E:9B:1E:2E:BF:0A:8C:50:60:36:6D:88:8E:5A
Authority key identifier: 9D:D0:C8:1A:A4:CD:00:87:45:BE:B0:07:4C:E0:52:7D:F3:8B:DA:02
Certificate issuer:       /CN=cb00b3d70dd9cb79681cd490843163b3a4674f12
Certificate serial:       2823F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb00b3d70dd9cb79681cd490843163b3a4674f12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft
Manifest number:          0E0F
Signing time:             Mon 15 Apr 2024 05:20:57 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:51:17 +0000
Files and hashes:         1: 8e04c4893cfed6e3ac68eb84caf9468664d28c8a.roa (hash: ratTU25vdhomyW1L7kxNHk7qBRU/N78fgNH5YjjN0hQ=)
                          2: cb00b3d70dd9cb79681cd490843163b3a4674f12.crl (hash: rUqkF7w1ntvG/uEY9/jy5ejeFBZQ/OhQlDP4bqdqJJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630642 (0x2823f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb00b3d70dd9cb79681cd490843163b3a4674f12
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:51:17 2024 GMT
        Subject: CN=5912eeaaa7964002fc74cb3f47a88945f89385bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:89:35:c1:b3:c1:87:07:e6:d7:22:fe:f7:
                    a7:74:eb:12:0e:b9:19:80:6e:78:58:d4:58:ff:2a:
                    d8:b9:14:f5:63:a2:e9:42:2c:92:aa:97:88:cc:54:
                    88:0b:d7:4d:0c:b9:70:38:f8:74:ce:84:a4:4b:62:
                    84:25:b5:de:8a:f8:19:b3:38:93:e1:7c:16:67:bd:
                    63:9f:21:63:25:44:a1:11:f4:80:23:80:e4:20:74:
                    f6:75:67:1c:18:d3:50:f2:d6:4c:14:f6:d9:23:1b:
                    33:a3:e9:ae:81:cd:82:a7:6f:e1:bb:f3:96:29:3c:
                    9b:56:ac:72:ac:1d:fd:18:4c:d1:fd:f9:4d:a2:cc:
                    21:e6:69:ce:79:6c:1e:67:19:54:5d:12:26:f7:55:
                    5c:39:03:6d:ef:f9:f4:25:1a:19:fa:38:d4:a1:3d:
                    8e:15:c0:69:cf:29:bb:a8:5d:1d:9c:5d:e7:6a:89:
                    06:6a:82:c2:28:9b:a4:48:03:05:8c:76:16:58:15:
                    50:1e:33:96:57:71:1b:6a:51:7e:fb:1f:66:77:1c:
                    36:23:83:1a:63:ea:57:f1:f3:54:b7:03:fe:f2:52:
                    46:45:0a:ed:20:8e:0a:07:24:ca:fb:f6:50:dc:ad:
                    9a:88:20:fe:14:ff:d8:fa:38:e8:a5:56:43:cd:02:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:08:80:95:62:3B:2E:9B:1E:2E:BF:0A:8C:50:60:36:6D:88:8E:5A
            X509v3 Authority Key Identifier:
                keyid:9D:D0:C8:1A:A4:CD:00:87:45:BE:B0:07:4C:E0:52:7D:F3:8B:DA:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb00b3d70dd9cb79681cd490843163b3a4674f12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:d0:57:d2:a2:5c:d7:5b:6f:cf:d0:9a:e3:67:ad:81:ce:
         8b:ec:16:49:26:8d:d1:34:8c:b9:a3:b3:7b:0a:04:b2:33:16:
         63:29:73:62:7d:37:97:6d:b9:24:d9:a3:48:b8:b8:9d:41:ae:
         0a:16:7d:ec:1b:03:0c:65:bc:c2:60:74:ed:2d:85:89:9b:73:
         b2:e0:42:25:ad:d4:d2:fa:d0:75:b3:87:78:27:34:ca:47:9c:
         17:df:38:4d:c5:bf:5b:69:ee:0c:70:96:67:34:3a:de:cc:71:
         fb:12:40:02:99:a5:90:df:9b:62:9b:8a:67:88:05:13:50:3e:
         d8:57:ff:35:94:19:0f:88:a8:59:6f:61:74:25:19:67:3c:bc:
         a2:29:a2:56:a3:97:0a:99:3e:23:69:8b:29:2c:d0:88:03:f2:
         42:f7:6d:26:8a:74:12:4c:09:03:37:fa:af:5a:cc:88:c7:fe:
         37:bd:54:99:65:41:74:22:11:ed:20:65:e3:49:aa:71:14:ac:
         0b:8b:f4:5d:d6:7c:a5:b1:96:d4:9d:f6:36:e9:bb:e1:23:6f:
         e7:ef:a0:ae:44:79:42:6e:7a:36:62:bf:59:dc:92:f7:8b:d5:
         44:e8:d3:85:f4:8f:f7:bf:73:04:9a:55:a1:4d:e9:93:bd:7b:
         3d:1c:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----