Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/61bb73ceb58daba7846b78a087961dedc7d99577.mft
File:                     61bb73ceb58daba7846b78a087961dedc7d99577.mft (raw, json)
Hash identifier:          U0kG7FivAoblwPm9iVoCJjSXlxrrXJIGC66axqbO1J8=
Subject key identifier:   0C:CF:1E:44:30:EC:EF:3E:CE:2C:3E:0D:D0:B6:BA:08:3E:93:10:2A
Authority key identifier: 0F:3A:E1:B9:B3:98:12:53:AA:22:AB:C5:04:94:87:2C:A0:28:7A:D6
Certificate issuer:       /CN=61bb73ceb58daba7846b78a087961dedc7d99577
Certificate serial:       08308B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61bb73ceb58daba7846b78a087961dedc7d99577.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/61bb73ceb58daba7846b78a087961dedc7d99577.mft
Manifest number:          0428
Signing time:             Mon 15 Apr 2024 08:21:04 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:20:16 +0000
Files and hashes:         1: 0b2951fa0ba2138b2dfa290be864e1511d3f9e2c.roa (hash: nv8RgzgINDetNdh2o2fQAIeo0U+Ry1XE9JTCBYJRtj0=)
                          2: 61bb73ceb58daba7846b78a087961dedc7d99577.crl (hash: qKD2NO1LfiEfXWAZvamNxDMMK1L7GzYYWPur/EgDxx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536715 (0x8308b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61bb73ceb58daba7846b78a087961dedc7d99577
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:20:16 2024 GMT
        Subject: CN=d8d4940ce6d9cde91dd9b3980441daccfe5f24cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0e:4c:a1:ba:68:60:dc:f2:75:0e:88:fa:d4:
                    d9:f6:0a:a6:b1:a5:6b:9a:bc:ea:79:c9:d6:8d:f5:
                    7e:69:c8:fd:a2:50:05:28:b2:16:d0:db:09:dd:1e:
                    2a:a9:a6:d9:79:18:a0:a1:ce:23:4f:e6:d5:eb:59:
                    1e:10:06:ae:76:20:3e:6a:8e:87:3f:15:15:33:e9:
                    81:2c:f3:58:62:69:c7:a2:23:23:29:5c:54:55:b9:
                    bf:44:df:01:bb:e2:43:e4:c3:e9:59:c3:bd:c8:62:
                    71:bb:13:17:ec:f9:36:f4:fe:c4:70:58:69:fa:25:
                    86:a0:17:a5:91:72:f3:e8:54:86:6f:d1:cd:a4:2a:
                    5c:51:99:61:18:06:f2:a1:63:ef:2a:e4:f2:c1:2d:
                    16:fe:91:15:ab:21:38:d9:18:47:cb:fa:d6:47:7d:
                    18:74:55:25:1f:0f:e9:17:a7:79:fe:12:6f:e7:99:
                    08:82:bc:28:b0:36:d0:36:d7:fe:9f:52:ca:86:3d:
                    33:b5:fb:42:3a:d7:e5:19:55:cf:63:3c:d8:c6:ec:
                    f3:55:ba:74:a1:3b:2d:ea:1d:7e:91:1a:ed:71:e7:
                    5b:51:18:58:88:4c:f4:21:33:6e:6e:5b:b8:82:14:
                    87:25:0e:1b:a0:ef:6f:91:2e:93:4d:8b:db:f6:3f:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CF:1E:44:30:EC:EF:3E:CE:2C:3E:0D:D0:B6:BA:08:3E:93:10:2A
            X509v3 Authority Key Identifier:
                keyid:0F:3A:E1:B9:B3:98:12:53:AA:22:AB:C5:04:94:87:2C:A0:28:7A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61bb73ceb58daba7846b78a087961dedc7d99577.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/61bb73ceb58daba7846b78a087961dedc7d99577.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/61bb73ceb58daba7846b78a087961dedc7d99577.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:30:48:85:0c:02:27:1a:b6:4d:8d:92:da:c1:1e:be:a4:
         48:07:4d:a7:a2:6c:fc:cd:f2:84:c3:a3:7b:e1:b7:02:ac:03:
         e0:09:59:e8:e8:a3:12:0d:45:6b:3d:51:8e:df:a5:01:df:68:
         2d:ab:f1:23:f8:5b:0c:e5:1e:d1:9a:42:bb:9e:32:a8:d5:72:
         be:0d:0a:9a:ca:dc:fd:f1:80:8c:7c:b3:dd:44:e1:3b:53:a1:
         f2:2b:14:4f:99:b6:bd:9c:07:5a:e2:05:e5:50:e7:73:13:f0:
         31:a7:13:2d:0e:c9:0d:cc:4d:06:a1:9b:9e:f8:74:3f:b3:bd:
         fe:27:c5:85:d4:90:68:a1:c2:93:7a:11:69:60:c4:b9:30:af:
         60:68:19:99:84:f6:b8:ae:fa:a5:a9:17:2c:87:03:e7:89:6f:
         0e:08:f2:31:78:28:29:1b:f3:ed:12:29:e6:44:7f:c0:9f:67:
         cf:5c:e3:71:e9:1c:b2:c0:2d:3a:15:f9:e7:4a:2a:a0:b8:22:
         47:23:f7:ea:43:60:5f:ab:63:98:b2:cc:98:c6:2f:7f:3e:9d:
         5f:be:9b:b3:3d:f8:7b:e5:88:eb:2c:db:05:b2:06:12:4e:17:
         bb:e5:18:3b:c0:72:09:1b:67:82:f2:09:70:65:bf:f4:b1:9c:
         f8:ea:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----