Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8d135b-f5cd-4dec-be38-7b5e3c57558e/ba15cd105e76f4ef4d48f052479936348096c515.mft
File:                     ba15cd105e76f4ef4d48f052479936348096c515.mft (raw, json)
Hash identifier:          af0esLaPKRfNYBl3osW0NAuXdw6PvfnBpmo+VL3/dAA=
Subject key identifier:   28:1A:F1:AB:BA:06:71:6B:D2:1D:D6:22:BD:9C:A9:5A:1E:38:A5:FA
Authority key identifier: 39:58:90:E7:99:84:37:CA:81:AF:85:8B:85:35:CF:3F:E2:47:B9:B4
Certificate issuer:       /CN=ba15cd105e76f4ef4d48f052479936348096c515
Certificate serial:       1E5742
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba15cd105e76f4ef4d48f052479936348096c515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8d135b-f5cd-4dec-be38-7b5e3c57558e/ba15cd105e76f4ef4d48f052479936348096c515.mft
Manifest number:          0E24
Signing time:             Mon 15 Apr 2024 04:21:09 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 07:01:26 +0000
Files and hashes:         1: 16e7c22de2b1e2f40baf0dbbc4f6f672e4eeefe0.roa (hash: h9oG0fwP/t+0fvQ+AGiBbyTUNrSgFsgijrDP9CikUhc=)
                          2: ba15cd105e76f4ef4d48f052479936348096c515.crl (hash: /zMAd1gCSslhlUzzo2vjvTo2LbN3ySRnWdbZaqgYBYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988418 (0x1e5742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba15cd105e76f4ef4d48f052479936348096c515
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 07:01:26 2024 GMT
        Subject: CN=b51386c1dcb01ccae4451736150e7daaea6f0f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:5d:5b:70:c7:f6:e8:cd:e3:33:9b:ee:95:
                    94:d8:fe:e4:6f:42:ee:7e:3d:93:a0:98:56:93:ba:
                    2a:4d:18:6a:be:e2:91:a8:5c:46:91:b6:e9:02:32:
                    7f:62:ea:fa:d6:0b:48:1a:35:6a:c6:b3:78:8f:ea:
                    f1:06:7b:23:f1:e4:1b:82:e2:0d:9c:56:17:e7:db:
                    aa:9a:a0:a5:7e:2b:3d:2f:34:dc:7a:d6:ae:63:2a:
                    ee:f6:8f:66:2c:f3:39:ea:0e:52:3d:be:d8:3b:1a:
                    1f:d2:91:94:a7:a4:96:2b:0d:ce:2e:52:93:f6:b7:
                    54:08:c1:98:46:6d:12:c1:dc:72:13:5e:93:d1:13:
                    59:58:60:e9:3b:87:2e:f8:08:22:fd:19:91:36:f7:
                    13:5b:da:ba:4f:51:5c:88:44:46:82:0c:2a:e3:88:
                    b5:d8:84:36:ad:b2:5e:76:e9:b9:71:b9:cd:39:3e:
                    2b:d5:f0:23:2b:7d:0e:da:cd:18:6f:78:bf:8b:3c:
                    21:05:0d:68:8b:75:ef:e5:a7:68:c9:cf:93:ff:41:
                    65:32:c2:ef:a3:d4:c3:49:41:7b:07:bf:ef:47:bc:
                    60:85:cc:cb:67:d5:37:ed:56:36:ac:d8:80:79:c6:
                    c7:f8:2f:f0:b7:4d:31:88:e2:b1:b0:a9:bf:a5:77:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1A:F1:AB:BA:06:71:6B:D2:1D:D6:22:BD:9C:A9:5A:1E:38:A5:FA
            X509v3 Authority Key Identifier:
                keyid:39:58:90:E7:99:84:37:CA:81:AF:85:8B:85:35:CF:3F:E2:47:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba15cd105e76f4ef4d48f052479936348096c515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8d135b-f5cd-4dec-be38-7b5e3c57558e/ba15cd105e76f4ef4d48f052479936348096c515.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8d135b-f5cd-4dec-be38-7b5e3c57558e/ba15cd105e76f4ef4d48f052479936348096c515.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:76:38:65:be:0e:fa:5e:d7:8d:16:9e:8f:cd:4f:53:9e:fc:
         cb:8b:19:54:58:87:1f:36:90:3b:a3:f7:cc:05:bd:d9:e3:df:
         0f:87:56:b6:e4:8b:e1:85:cc:10:aa:d6:40:49:b0:e7:a1:25:
         66:63:14:9c:cc:c7:cc:53:a3:5a:c5:89:22:43:6b:cb:9f:92:
         2f:d9:d7:88:97:68:5e:3d:89:9e:a8:96:03:6f:fc:50:eb:4f:
         bc:af:c8:43:91:f9:6e:6d:b4:a2:69:45:c8:8a:df:9a:92:06:
         a9:08:e3:a1:b8:dc:4f:6c:5d:e6:56:11:1f:44:1f:46:32:57:
         16:be:17:d9:40:5d:71:87:be:89:38:7a:2e:d0:bc:02:33:6a:
         6d:a3:e3:6e:13:2c:9b:3d:c1:4d:5c:30:69:f0:87:73:a4:a4:
         0e:85:25:53:c5:04:bd:0f:ac:c2:9e:95:3d:65:d9:c8:da:0f:
         cd:21:12:94:c3:5f:78:df:5c:4d:d7:67:87:0b:40:bc:56:5c:
         19:8e:0e:f4:71:84:c4:bf:8c:cb:57:e3:40:58:45:1d:18:d1:
         ff:11:ea:00:6d:3e:51:84:20:0e:a0:80:32:61:28:77:94:f4:
         0f:04:ca:34:b9:f7:a5:af:82:03:0d:97:c1:f1:9d:75:9f:42:
         d0:c0:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----