Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.mft
File:                     2ea76d220c43c9256b8900dc081d53de8fab038b.mft (raw, json)
Hash identifier:          PJQOL9cRt47rtz4NULyu/CiQm6xQfX3IeSuVe/1+T5E=
Subject key identifier:   1F:46:96:59:14:12:06:5E:F1:C1:8E:F5:01:EB:9D:47:B1:63:F2:79
Authority key identifier: FE:9D:1C:3F:87:08:E3:6B:A6:B5:55:5B:4C:F0:7B:17:78:EC:CD:9A
Certificate issuer:       /CN=2ea76d220c43c9256b8900dc081d53de8fab038b
Certificate serial:       0FA373
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea76d220c43c9256b8900dc081d53de8fab038b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.mft
Manifest number:          07E1
Signing time:             Mon 15 Apr 2024 07:21:28 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 09:33:17 +0000
Files and hashes:         1: 2ea76d220c43c9256b8900dc081d53de8fab038b.crl (hash: wgdh12tarN4dzpponhFgcOQDlqHhTYGgFXhCBWcpnMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024883 (0xfa373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea76d220c43c9256b8900dc081d53de8fab038b
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 09:33:17 2024 GMT
        Subject: CN=f1caa6ba7d00ef7aff00d7e37e2ead02287e2a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:c3:cc:9d:69:a2:70:92:4d:7d:79:e3:f9:
                    ba:5d:f9:72:b2:be:5b:c3:38:8b:79:1f:0f:44:18:
                    3b:e6:78:0c:8e:74:12:bc:2f:f2:60:1f:53:fb:c4:
                    a5:f1:ae:d7:4e:3e:32:40:ee:89:49:aa:d1:73:eb:
                    4a:af:78:e8:43:6a:24:54:ac:0c:57:92:1f:27:e0:
                    68:1f:c3:8c:e8:06:56:86:ea:9f:b0:ac:da:16:80:
                    75:c6:fe:8e:78:52:ba:00:02:cc:d5:57:0a:4a:52:
                    48:a3:3d:98:c6:a7:47:57:cd:d7:a7:a5:b2:cf:e3:
                    40:dd:b3:aa:51:27:49:b8:68:a6:9b:7b:c7:91:51:
                    33:0a:f9:9d:05:55:ff:ba:f1:b1:0a:f0:d4:a7:fc:
                    a6:ab:2f:63:e8:92:7e:8b:b4:d8:e8:2e:0f:0e:ab:
                    b2:96:cc:9f:9d:b8:d0:36:9e:3c:d0:11:0f:a7:8d:
                    fe:98:51:44:85:09:ea:7b:63:35:b7:ec:2b:9e:1a:
                    eb:7d:2d:fc:55:c2:08:c4:21:cf:ba:da:94:9b:6e:
                    57:90:66:20:27:4c:11:d9:3d:57:63:d0:1d:54:e1:
                    a1:39:6d:6a:b2:d4:fa:04:b8:a5:a7:40:86:88:2b:
                    2c:e0:61:7b:5f:32:ee:1f:15:89:fd:13:0d:c0:96:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:96:59:14:12:06:5E:F1:C1:8E:F5:01:EB:9D:47:B1:63:F2:79
            X509v3 Authority Key Identifier:
                keyid:FE:9D:1C:3F:87:08:E3:6B:A6:B5:55:5B:4C:F0:7B:17:78:EC:CD:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea76d220c43c9256b8900dc081d53de8fab038b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:b8:22:5d:ef:9b:f2:cb:0f:64:4a:f9:ed:6c:78:b1:62:
         a0:e7:39:d2:f1:41:67:76:86:ee:72:0f:e0:9f:52:ed:28:4d:
         67:76:02:48:15:1c:ea:4d:c5:b3:84:99:fa:d8:c6:e3:fe:9d:
         ce:5e:0a:00:9f:9f:e5:86:77:1e:4b:77:1f:50:23:f0:35:b2:
         8c:0b:7e:e1:e2:1d:a4:5a:6a:c6:5c:13:1c:c3:53:5a:45:96:
         c0:b8:7c:9d:e2:36:71:2a:7a:85:a6:db:e4:25:82:17:5d:74:
         b3:f8:e9:a8:49:d6:da:43:a1:89:89:26:47:ef:3a:06:0b:ae:
         60:80:7c:1b:23:19:8f:5a:08:7d:6d:93:89:99:9d:3e:cf:2f:
         4f:e5:10:37:c5:5b:5f:ca:6f:86:f0:87:d2:0f:98:fd:09:6e:
         20:f9:46:68:65:c2:b7:47:2f:14:2e:a4:15:be:4b:3e:05:5a:
         7a:e0:e5:f7:b6:29:df:d0:b5:81:9e:91:17:6d:3e:25:dd:c5:
         49:cb:4d:df:97:52:1a:c9:e8:80:51:13:8a:94:50:78:09:06:
         e1:c6:cd:13:d2:cb:61:0b:04:4e:78:94:90:94:38:e0:5a:75:
         00:7b:e8:87:98:a4:ff:90:4a:47:fc:a3:6e:4b:56:77:fa:69:
         07:39:78:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----