Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.mft
File:                     ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.mft (raw, json)
Hash identifier:          eIER+M3qF9fzYPQA2j/lfcQBpqWfVSkVPSx1jqk0ZFg=
Subject key identifier:   2C:08:3A:31:4D:9B:11:EB:58:2A:ED:79:F7:80:6F:D9:BB:11:65:23
Authority key identifier: 4D:C4:BE:E7:70:29:F1:7F:3B:E4:82:4E:CE:46:ED:A4:FC:8A:A5:4F
Certificate issuer:       /CN=ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2
Certificate serial:       086155
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.mft
Manifest number:          0455
Signing time:             Mon 15 Apr 2024 09:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:00:18 +0000
Files and hashes:         1: f07e30f01de322b849bbb4e8249408ba94b0e9f8.roa (hash: f3tcrKW+lRuQDzun0wMiyIxK/OXNFA/3f7k5zhaPX6c=)
                          2: ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.crl (hash: cQz9aSLGFNzHkjqM7GCsWdkhbemxoDzX1ZHmBWcZJ6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549205 (0x86155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:00:18 2024 GMT
        Subject: CN=60e9e8ca9b8aea83583240a1091a22a58bc60a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:df:20:13:3b:af:72:5d:f5:61:f1:d5:bf:
                    5b:bb:38:93:41:c9:e2:9c:10:24:14:8e:39:4f:22:
                    5c:e1:6b:01:19:21:80:fb:16:fa:01:4c:fa:21:8c:
                    ee:ba:68:fa:fe:d9:fc:2e:ff:82:92:dc:24:59:26:
                    c9:0d:70:bd:a8:6b:dd:32:61:ad:21:ca:15:5c:8e:
                    af:40:40:10:67:fd:42:f1:48:fc:9e:b3:8d:f1:6d:
                    91:78:72:47:02:f6:b0:1b:9d:fb:69:00:76:41:9a:
                    13:f4:aa:ea:d4:0a:50:11:c9:69:23:96:17:10:3c:
                    74:e4:4d:bd:fa:8b:fa:16:7e:80:5b:91:1f:8b:cb:
                    13:fe:29:60:ee:c1:b4:55:75:b4:5a:e8:9a:10:7c:
                    85:8a:bd:b7:7b:17:7d:8d:fc:e6:60:e5:6e:48:0a:
                    72:14:e7:a9:f0:f6:72:68:44:8d:2a:2b:30:c2:d8:
                    e9:b3:74:7e:b3:11:16:ad:bc:b2:79:a9:d4:5e:6c:
                    28:b6:b9:86:eb:f2:58:47:f7:47:c8:99:f8:9f:e3:
                    1d:e5:ed:b8:c2:c7:33:32:a0:15:81:9a:78:0c:5f:
                    14:e8:22:97:69:ac:9c:90:dd:44:2c:2f:ab:40:d5:
                    26:eb:bd:d8:8d:87:64:ca:c2:fc:be:83:ef:52:5e:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:08:3A:31:4D:9B:11:EB:58:2A:ED:79:F7:80:6F:D9:BB:11:65:23
            X509v3 Authority Key Identifier:
                keyid:4D:C4:BE:E7:70:29:F1:7F:3B:E4:82:4E:CE:46:ED:A4:FC:8A:A5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:f4:f8:a3:a9:41:ef:5e:e2:96:9a:fc:ea:28:5e:cf:b7:
         b5:9b:28:85:db:ab:a2:76:d9:96:aa:4d:f0:0a:8b:58:10:6f:
         f2:97:b7:2d:98:04:aa:43:76:15:b5:f1:55:bd:71:4c:a0:6d:
         18:fd:25:24:bf:08:d2:ef:dd:f8:15:3e:2a:94:03:01:0d:4a:
         a7:47:bd:42:18:7d:f8:51:2e:f8:e6:5b:08:07:a5:41:ed:13:
         0b:26:33:f2:a4:d5:b6:35:80:6b:ba:a4:4e:b8:ae:27:06:70:
         c4:3c:3a:85:d4:74:c7:a5:76:4f:ac:bf:7b:4e:e1:78:86:63:
         71:eb:fa:32:92:a9:6d:e6:9a:02:a3:ec:d8:9b:62:8d:b5:fc:
         68:72:d0:4a:15:1c:1e:24:ae:65:f0:9d:1e:c7:9e:f2:cb:46:
         42:b0:b3:51:2c:2c:8b:a2:53:9a:9a:3e:55:bd:2b:6f:4f:d2:
         8a:35:d0:50:80:fd:c9:79:17:bb:1f:30:57:7f:64:22:76:c6:
         60:99:fc:60:3a:95:9b:21:c9:e0:1e:02:9c:83:cb:0e:30:36:
         97:85:e3:65:29:f6:b2:b9:9c:e5:c6:34:12:9a:96:94:b0:18:
         37:77:78:ba:b8:7b:79:60:fd:fd:26:7a:e3:23:ab:47:cc:f2:
         fb:d9:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----