Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/2ef571adb012b3671bada59a339d19495e1bafe3.mft
File:                     2ef571adb012b3671bada59a339d19495e1bafe3.mft (raw, json)
Hash identifier:          kHSYjeVp2SL/45yyq5gB0u6AMBnIgYV9etoQwQQo7kw=
Subject key identifier:   B6:71:5A:E7:DB:56:EC:A5:0A:AE:20:B8:0F:FE:1E:A6:F4:FB:8A:8F
Authority key identifier: 0F:66:0E:39:86:10:B3:91:A1:CC:B8:3C:4F:0E:3E:7B:A2:D8:E9:F7
Certificate issuer:       /CN=2ef571adb012b3671bada59a339d19495e1bafe3
Certificate serial:       28299B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ef571adb012b3671bada59a339d19495e1bafe3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/2ef571adb012b3671bada59a339d19495e1bafe3.mft
Manifest number:          0DEB
Signing time:             Mon 15 Apr 2024 05:20:54 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:58:17 +0000
Files and hashes:         1: 2ef571adb012b3671bada59a339d19495e1bafe3.crl (hash: 4tL4Xysq+H0eQ5msAM88g/uBmIA4AK6fxWmx+VSGJek=)
                          2: 756064d60d97a5503252de9a9080e0b15ea6720c.roa (hash: 2X68kddYBOwsOENj51ZDsQS7GktzUZsZp1nzjN+H6sk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632091 (0x28299b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef571adb012b3671bada59a339d19495e1bafe3
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:58:17 2024 GMT
        Subject: CN=555c263e5dab6a6e9c36791f70e831c313dd1899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:87:e6:21:fd:29:bf:62:cd:57:6d:39:dc:
                    17:8f:88:22:c5:f8:3e:cd:55:ef:58:34:24:8c:09:
                    03:57:44:3d:80:8d:61:f7:c1:89:c0:48:20:6c:6c:
                    cc:1a:a4:32:ba:c5:74:f3:c0:83:a6:4d:eb:fc:8b:
                    5b:df:00:d9:99:ee:13:5a:01:27:a9:90:b2:5b:af:
                    23:25:04:b0:22:56:58:45:47:be:16:9b:fd:59:8d:
                    29:81:cb:5e:e7:e4:ed:1a:8c:6c:e0:19:b6:e3:38:
                    49:f0:22:e8:1d:9e:77:58:22:b6:1c:60:b6:1c:91:
                    21:d4:b6:8a:3b:e9:5c:d2:53:75:0f:f8:93:c8:4f:
                    a7:ed:cd:b4:2c:50:33:d1:9d:bc:c4:55:99:ac:30:
                    69:51:95:25:9f:71:6e:9f:7e:b6:b0:33:02:2e:6f:
                    60:d7:43:97:f8:2d:d1:83:ec:4e:40:de:43:c9:29:
                    ae:4d:32:39:68:f4:ed:80:75:3b:42:cf:7e:31:48:
                    fd:cb:7d:b1:e6:57:76:7a:c6:74:bb:69:d4:9f:0e:
                    0a:5d:9f:d6:17:e8:63:de:3f:4d:c2:b8:c9:e7:02:
                    d3:54:28:5d:d2:88:f8:dc:58:2c:eb:5a:be:47:26:
                    f8:ae:a8:4c:e5:57:8b:b1:06:ea:a1:6a:27:ab:24:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:71:5A:E7:DB:56:EC:A5:0A:AE:20:B8:0F:FE:1E:A6:F4:FB:8A:8F
            X509v3 Authority Key Identifier:
                keyid:0F:66:0E:39:86:10:B3:91:A1:CC:B8:3C:4F:0E:3E:7B:A2:D8:E9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ef571adb012b3671bada59a339d19495e1bafe3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/2ef571adb012b3671bada59a339d19495e1bafe3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/2ef571adb012b3671bada59a339d19495e1bafe3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c0:9b:e3:cb:46:8f:de:d5:df:7c:09:23:d9:05:0e:0e:7e:
         1e:72:7e:2f:d7:a2:00:36:0e:93:a8:70:23:58:52:93:5d:1e:
         32:4d:57:61:11:5f:a6:52:f3:8d:dc:4a:20:a1:ce:92:fb:df:
         9e:17:75:9f:70:81:1f:e0:5c:b4:e4:87:0b:ad:6f:b0:c0:90:
         8b:f3:e5:48:83:40:45:5c:c7:8f:80:a0:d5:20:d1:1e:d3:09:
         d8:33:09:15:49:c2:f3:7f:24:cb:19:6a:4f:1a:ff:e0:dd:95:
         c7:e1:f0:86:e0:22:f6:80:cb:ec:93:ae:25:a4:cc:6f:80:ba:
         89:19:da:55:6a:bd:38:7f:79:77:31:4f:25:52:eb:c0:a6:9d:
         5c:8f:6e:3d:e9:28:2f:f8:d5:57:7d:52:3e:1c:a8:67:07:a7:
         de:a0:20:be:ff:1b:37:65:00:29:b9:d8:a1:b9:ff:fc:09:fd:
         ba:b6:c4:ef:a8:18:21:6a:69:c4:d5:c6:79:ab:47:18:66:06:
         05:c5:9f:6b:59:11:b5:d7:f3:3f:88:d5:b8:7b:2b:6e:e4:b8:
         16:7c:eb:44:46:a3:92:7b:86:5f:53:a8:d3:36:87:99:8d:70:
         ea:db:9c:08:90:ef:11:06:db:21:dc:65:0c:c4:ee:26:60:79:
         9e:c1:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----