Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2b25076e-8f6a-4224-be34-73bf7bf5dae1/1a321fe31e5ca42ba1c4d32245675e6c515670f0.mft
File:                     1a321fe31e5ca42ba1c4d32245675e6c515670f0.mft (raw, json)
Hash identifier:          Ov02WU5f2KSBAn+Xs4YlcqcM/7BeYwwnv1fZ1F48rwQ=
Subject key identifier:   3C:24:06:87:A9:F6:26:25:B1:1B:0D:81:BF:BE:F5:D5:D8:EC:3D:FB
Authority key identifier: 6E:E5:A7:D3:88:09:0D:A5:4E:8E:01:22:3B:58:AF:46:D3:EB:C3:03
Certificate issuer:       /CN=1a321fe31e5ca42ba1c4d32245675e6c515670f0
Certificate serial:       0EF519
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a321fe31e5ca42ba1c4d32245675e6c515670f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2b25076e-8f6a-4224-be34-73bf7bf5dae1/1a321fe31e5ca42ba1c4d32245675e6c515670f0.mft
Manifest number:          07CD
Signing time:             Mon 15 Apr 2024 10:21:43 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 10:43:25 +0000
Files and hashes:         1: 1a321fe31e5ca42ba1c4d32245675e6c515670f0.crl (hash: OyJt84Lo1vTutQWYpyoDu0bnhf/aRlK1L302jLRGSSk=)
                          2: dce170f1a5ef079a1d86ef1b7049baaa297651c8.roa (hash: ZcATO7iU/Kc2qFJHt8NGdU8PK+ylXLAhS3zYIzc2UoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980249 (0xef519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a321fe31e5ca42ba1c4d32245675e6c515670f0
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 10:43:25 2024 GMT
        Subject: CN=0685ba80193474d96199eeaabf396c4efa54555e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:bb:96:72:ab:c4:c6:dd:fc:c1:62:f3:3f:
                    8e:b5:3d:9b:7d:17:39:67:be:a4:fe:3b:67:a0:e0:
                    31:8d:1f:0f:cc:27:5a:f0:de:fe:85:3c:57:fa:56:
                    de:a8:dc:1f:d9:1e:dc:76:d6:49:dc:6d:96:62:53:
                    86:f8:59:3f:12:a0:bf:9c:42:e2:7a:a6:ce:2f:17:
                    2f:d6:a2:16:b0:97:02:6e:8d:3a:3e:b3:bf:bc:d4:
                    9e:82:2e:0d:28:90:f1:27:57:2f:42:1b:2a:ae:68:
                    6b:7d:8e:21:ad:e7:16:55:36:aa:95:9b:73:07:f4:
                    6d:18:be:f1:9f:d7:85:5d:c1:a1:dc:e7:59:b5:4d:
                    1b:9e:a4:80:4d:f8:b4:25:6e:ee:09:07:79:40:1a:
                    93:ae:9e:84:c3:96:1e:ed:90:74:04:f3:f2:f8:10:
                    39:2a:2f:bc:c7:29:5a:3b:08:82:d1:68:61:6c:d4:
                    6a:bb:70:fb:d4:bf:87:0f:62:3a:9b:24:d6:14:47:
                    61:df:a4:bb:d8:07:be:a9:85:5e:95:58:14:e9:58:
                    e1:c6:e9:b1:90:6f:dc:b3:93:3b:e6:45:c7:c0:31:
                    e5:c8:65:54:d8:17:8d:19:7e:92:0b:93:bc:67:b6:
                    70:70:40:6e:d2:41:63:de:b2:c9:85:e3:fc:ce:e8:
                    24:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:06:87:A9:F6:26:25:B1:1B:0D:81:BF:BE:F5:D5:D8:EC:3D:FB
            X509v3 Authority Key Identifier:
                keyid:6E:E5:A7:D3:88:09:0D:A5:4E:8E:01:22:3B:58:AF:46:D3:EB:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a321fe31e5ca42ba1c4d32245675e6c515670f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2b25076e-8f6a-4224-be34-73bf7bf5dae1/1a321fe31e5ca42ba1c4d32245675e6c515670f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2b25076e-8f6a-4224-be34-73bf7bf5dae1/1a321fe31e5ca42ba1c4d32245675e6c515670f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fc:72:56:4c:2c:80:bd:3e:1a:3a:2e:f4:37:7d:7a:d7:b0:
         c2:86:f8:fc:7f:1a:18:5f:4a:ff:92:ee:b0:bf:7b:1d:26:fe:
         9f:1f:f9:f4:6d:69:32:b0:61:ba:27:8f:f7:ea:0e:6f:a1:92:
         2f:4d:7e:f2:ff:31:d9:a7:86:ea:86:ab:3c:8e:b6:97:15:8d:
         7c:32:8f:ec:45:95:9e:6f:37:83:4e:a0:f5:e9:d5:e0:d2:7e:
         25:71:1e:34:f8:30:af:02:13:a6:64:f2:2c:ff:e8:d1:1b:87:
         6a:9a:67:0d:ba:0d:0b:88:0c:96:fb:32:ef:a5:c3:b6:63:15:
         64:26:5a:f5:c2:51:11:f2:63:ed:59:26:4e:20:88:31:4c:9a:
         99:38:b2:ec:0c:cd:69:e6:87:93:dd:09:78:2e:14:65:08:dd:
         ca:49:06:ee:68:11:df:34:59:0a:fe:59:06:97:5a:38:65:c8:
         54:e6:cb:15:2a:d4:4f:f8:2e:37:30:ba:b1:8f:19:20:97:37:
         2e:10:34:eb:1d:05:6a:df:ae:c1:5f:35:5a:8b:f1:17:18:34:
         b3:60:56:e9:82:46:21:fd:49:a7:f1:25:e1:39:3a:b7:dc:86:
         ec:0c:b4:f0:a3:bf:dd:ab:12:93:8b:01:1a:e9:bb:32:95:42:
         8d:30:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----