Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/514e1b74-b78e-4425-be27-a3cc2e13660b/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.mft
File:                     2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.mft (raw, json)
Hash identifier:          wWASKgLxmxVTGsyr0HsSrFZzDbX8IyYhzKDAP8HH1E8=
Subject key identifier:   1C:B1:B5:45:04:95:3B:11:BF:A1:0C:F1:3D:E1:D0:4C:1C:36:48:8E
Authority key identifier: A9:12:A8:EF:9D:3C:43:D0:99:9E:23:97:75:38:E5:8E:F9:61:BC:8D
Certificate issuer:       /CN=2a2f398f08732dba8b24bf45f6d48d5cac0c8f99
Certificate serial:       12F22D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/514e1b74-b78e-4425-be27-a3cc2e13660b/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.mft
Manifest number:          09D1
Signing time:             Mon 15 Apr 2024 03:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 03:37:17 +0000
Files and hashes:         1: 09ddc5fc0e868957199dac61b6cdd9ceed64a205.roa (hash: bi1HzXQNurQCvubfTj8gWLk2MBeYblWH9gLV7DDUuzU=)
                          2: 2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.crl (hash: H7+k1ZU//TVw9zjlebLNRUkSChjnj4uEBCJT7xnx8cg=)
                          3: 71b8dff529c83eb10ac13f94a7cd9c33c41257c4.roa (hash: jk5Noqg5sp0csOGwEw8CQ2GS2wGWSR+QQvcm1YuDzLw=)
                          4: 859d13020d5244d5845c43cc4bd0a20ab909720d.roa (hash: DvkpugeMhEfWoqFmBYyCdqEstrtPvHzay2hWmW7qiEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241645 (0x12f22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a2f398f08732dba8b24bf45f6d48d5cac0c8f99
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 03:37:17 2024 GMT
        Subject: CN=bf728ccff14d0ed5e92977363ddd407f7a994a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:98:a7:c5:78:d3:18:2e:1e:19:a4:24:55:
                    ee:8f:f0:41:20:bc:d2:73:ea:2e:4e:99:39:ca:28:
                    3c:c2:88:47:bd:1c:3d:6b:51:55:d5:1b:3f:23:5c:
                    7d:10:6f:5d:0a:15:53:d0:26:ac:53:df:ac:5e:30:
                    4c:6d:b5:f1:8f:2c:10:f9:3e:12:58:d4:74:e2:0b:
                    5d:b8:2a:78:29:be:64:e7:99:b2:26:1b:bd:76:95:
                    d6:98:6f:d5:aa:a4:e2:3d:ef:1c:e9:33:67:88:a3:
                    37:91:c8:d1:da:29:9d:dc:15:ac:f0:80:c3:60:27:
                    bb:f2:de:af:62:98:a7:80:c0:5a:17:b7:38:cd:26:
                    c9:fe:b3:c0:fd:29:a9:2f:3a:8e:aa:b4:b7:b1:d9:
                    db:4e:1a:77:71:fd:b0:e4:8b:a7:3c:f6:cb:83:21:
                    d8:7b:68:86:b2:f2:ea:4c:e4:4e:c7:a3:62:54:3a:
                    be:63:79:1b:80:d9:95:ad:e5:4b:bc:59:a8:2a:ef:
                    d4:01:c3:3d:8d:7d:e0:19:03:5b:13:e5:26:6b:04:
                    bc:9d:39:57:cf:1b:0a:f1:98:5c:f3:58:2b:43:13:
                    2a:41:83:52:02:e2:49:f6:b1:7c:a7:cf:b1:58:60:
                    e5:0d:55:e9:8f:cf:33:9f:53:c7:92:ad:d3:2f:4d:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B1:B5:45:04:95:3B:11:BF:A1:0C:F1:3D:E1:D0:4C:1C:36:48:8E
            X509v3 Authority Key Identifier:
                keyid:A9:12:A8:EF:9D:3C:43:D0:99:9E:23:97:75:38:E5:8E:F9:61:BC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/514e1b74-b78e-4425-be27-a3cc2e13660b/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/514e1b74-b78e-4425-be27-a3cc2e13660b/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:72:28:3c:a4:3f:ce:7c:b0:f7:8a:76:b0:84:5f:32:8c:8a:
         15:a5:55:31:1c:41:fb:82:cc:fb:05:c3:2c:3f:fb:e7:ef:1e:
         d7:34:5a:69:0d:aa:0a:71:5a:43:99:2e:42:3f:ac:29:ba:bd:
         0a:db:2e:a2:85:17:ee:70:b6:8a:59:58:18:93:af:ba:ff:12:
         99:b5:e2:13:d8:2e:0b:b5:16:dc:73:2c:f9:70:ff:e6:0b:9b:
         cb:a8:be:b4:44:3b:fb:c1:ee:66:73:a5:23:79:d8:ef:0b:ef:
         cb:b8:55:c7:d3:9b:8c:70:23:78:ea:4f:3b:14:f6:0c:c6:5e:
         d6:32:f7:89:14:66:02:29:41:77:39:20:2e:91:37:59:b6:0c:
         cd:ef:c6:c2:c1:d7:fe:d6:9f:0d:5d:fe:6b:87:62:92:89:54:
         08:ee:30:c1:fb:93:4a:90:c9:fb:91:25:5d:af:57:40:81:df:
         d7:07:e0:16:c0:90:ba:e3:91:d8:62:d6:9a:e4:c6:49:20:b4:
         bd:6a:a4:59:4b:a9:7f:ef:37:06:a0:38:fe:7e:40:b1:68:1e:
         39:40:75:19:f0:ab:3e:3c:2b:21:86:92:b0:cf:d5:2c:38:e5:
         eb:59:16:fb:a9:75:c3:22:18:be:6a:9d:3a:a9:c7:2c:96:03:
         e6:e2:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----