Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.mft
File:                     9fdb9dbec373220e99eb9a2a0c20a654f2f187af.mft (raw, json)
Hash identifier:          JjQ1NgISxE0JvLURF3FSnwOjRNOkUPZ6wviJceIL7/w=
Subject key identifier:   10:0F:87:01:DA:66:C7:35:D4:8D:7B:CC:11:42:D1:27:25:45:D0:6C
Authority key identifier: 9A:56:79:3E:27:33:DA:68:32:3A:54:E1:64:D8:E9:BE:96:FA:3E:7D
Certificate issuer:       /CN=9fdb9dbec373220e99eb9a2a0c20a654f2f187af
Certificate serial:       0984DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.mft
Manifest number:          04C9
Signing time:             Mon 15 Apr 2024 06:21:41 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:16:39 +0000
Files and hashes:         1: 5acd739cdb0506d7f7641aef884d4c4836910eb1.roa (hash: zwDYgrDEkefMglGHwH5uDpY7c3VzVBI0DMd6xlleL4E=)
                          2: 9fdb9dbec373220e99eb9a2a0c20a654f2f187af.crl (hash: s5WeOXOIsGJiH5sLs+N77LVm+t8rhlzgz4nAgrdwYVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623839 (0x984df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fdb9dbec373220e99eb9a2a0c20a654f2f187af
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:16:39 2024 GMT
        Subject: CN=91d711e2d3c0bd2171764d4ac9296439190381d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:bf:f7:5b:ec:fd:35:da:ed:b5:7f:78:e6:
                    62:c6:df:c5:50:6e:ac:2c:b3:02:54:77:e6:f6:70:
                    60:6e:3b:06:5a:f4:8e:c3:bc:b5:5d:a3:0a:2c:59:
                    ef:5d:8c:ad:8a:df:54:e2:4f:e7:62:97:9b:69:95:
                    5c:f5:5d:6a:0a:91:b5:25:78:44:41:ca:5c:2a:51:
                    bc:a4:f0:87:76:19:b9:29:fd:b9:b1:95:bc:25:cc:
                    4b:ec:d0:6a:4a:04:14:d0:b2:6f:46:98:8b:9e:52:
                    12:81:ac:55:8a:86:d9:87:64:58:e6:11:21:06:32:
                    f3:3a:ef:ba:21:6e:f3:d5:9d:be:12:88:4f:e6:e9:
                    a1:fe:66:01:ce:0b:99:db:8a:e9:ef:c4:54:41:2e:
                    f7:ad:7d:53:4e:81:c7:48:ed:61:94:6d:48:bf:0f:
                    3f:42:7a:1f:b6:6c:53:40:1e:d2:0a:cf:7d:3f:2b:
                    35:36:33:eb:67:49:33:88:bd:dc:cf:26:36:f1:e1:
                    2c:a8:19:99:a4:61:42:22:f8:2a:e5:ad:08:9c:29:
                    0d:b8:b1:a1:09:09:86:ea:c4:50:cc:de:15:33:09:
                    07:8c:a7:ad:44:fd:0b:94:0c:95:cc:d4:f4:4d:9d:
                    6d:2b:08:3c:42:d2:9e:30:58:db:e6:86:bb:ed:43:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0F:87:01:DA:66:C7:35:D4:8D:7B:CC:11:42:D1:27:25:45:D0:6C
            X509v3 Authority Key Identifier:
                keyid:9A:56:79:3E:27:33:DA:68:32:3A:54:E1:64:D8:E9:BE:96:FA:3E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ebe09c6-6947-4ea4-815b-c3fd031e4d6c/9fdb9dbec373220e99eb9a2a0c20a654f2f187af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:d9:24:06:99:9e:d9:76:ca:53:e7:b7:c8:c4:0e:3d:54:
         b1:68:f1:29:69:49:de:15:f0:c0:ea:6a:2a:e8:ac:d3:87:ce:
         9d:db:80:2c:7f:97:a8:f7:d3:b9:47:1d:1a:36:9a:03:dc:70:
         c2:fe:57:60:5e:5d:1f:27:fe:a2:0d:77:39:16:27:61:1d:74:
         58:0a:a0:fa:33:11:31:43:42:cd:7b:7b:ce:46:68:1d:d3:33:
         8f:cd:73:6e:74:51:ef:04:4e:88:ea:ab:31:f5:6a:40:71:41:
         70:43:e2:94:cd:9d:19:45:33:95:9a:02:67:07:6d:14:ac:2c:
         9c:5f:43:46:92:18:f0:a2:fa:08:06:38:5a:dc:b2:23:1a:5b:
         9c:58:cc:f1:25:da:5a:6c:ad:5d:c2:77:4c:d1:41:76:71:da:
         13:3f:89:b4:87:e1:69:e4:38:fc:07:10:dd:ab:1d:01:8e:17:
         f6:77:41:90:f9:e9:3a:3c:54:25:47:42:30:b4:9e:2f:0f:7e:
         59:dd:48:e1:6b:ef:91:d7:40:79:e5:53:07:07:8e:58:49:73:
         18:5a:f1:cc:db:0d:ed:25:f0:7f:5a:2a:3e:30:f4:5c:7c:b2:
         c4:9c:ee:40:23:c4:04:f4:e5:ea:8f:b9:3d:96:70:90:16:b0:
         42:db:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----