Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.mft
File:                     2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.mft (raw, json)
Hash identifier:          Yye9oj/bhHDsD6p2+YVyreF/r/LSCLQyKN0+KeMuM70=
Subject key identifier:   DF:55:BA:5C:E5:DC:B9:E6:6D:0C:1A:CA:08:62:CB:B8:E0:84:4B:C8
Authority key identifier: 0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58
Certificate issuer:       /CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
Certificate serial:       092345
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.mft
Manifest number:          04B5
Signing time:             Mon 15 Apr 2024 04:20:51 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 04:40:26 +0000
Files and hashes:         1: 2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.crl (hash: vPzFzy4tkbxYZ9eWai8688PL9eEolelt1vIBoOL9fHY=)
                          2: 313b7994fe396310bf55ab18a0f45a61df8b61d9.roa (hash: c0KOKWmcQ5pW6hiIovjVJbTV6R3Nae/gqLUXebtvUtA=)
                          3: 3f9c72409eac0d0facee6c29291c619b185420b9.roa (hash: ljGGDKc1sXb0UcAJIgPed6Y865Loe9L/KGX6EiT56MA=)
                          4: 6d0f9af8abd194feb5cad5f54456cad9aa30d502.roa (hash: HvuLq/nuWniE0hkGKDCilWGR0OehrzTW/kl0z5MRK8k=)
                          5: 91c55665a63a8aa0576b4959f2a182e4e56a1687.roa (hash: NTsilkhi8k5UIBKAf7FS3z9k+IIcnW3drmpmhdoBzJs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598853 (0x92345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 04:40:26 2024 GMT
        Subject: CN=584638bf6c474b2d834384793e93b97ad28328b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:52:d8:0c:df:c4:fa:e2:e3:fd:7d:9c:e3:45:
                    ec:16:cd:fc:22:4e:9a:8b:20:d0:96:9e:6c:b7:19:
                    2d:44:3a:51:97:e5:be:cd:1b:46:10:87:71:9a:c2:
                    bf:83:21:b4:36:9e:6c:2d:64:0a:0d:ca:57:2b:7a:
                    2f:43:f2:4d:76:5c:b7:66:37:1c:de:18:bc:b2:b3:
                    b5:63:10:04:db:20:37:c7:99:7a:a0:d0:ea:6c:b9:
                    84:de:43:1e:e4:1a:38:05:14:ed:ac:d4:c4:8d:95:
                    06:84:7c:61:46:7e:a0:8b:d5:cb:69:84:d5:07:39:
                    f1:70:12:91:fb:01:96:c2:89:5f:b2:c1:21:01:a1:
                    eb:dd:6c:dd:01:e6:ed:63:10:2d:95:2a:e5:99:4d:
                    bc:ed:5c:97:fd:68:83:06:5a:72:8c:4b:e8:de:6b:
                    15:92:8c:22:98:49:f1:e3:6c:96:f9:6e:22:e1:4e:
                    5d:68:2b:78:c5:3b:72:11:9b:26:21:83:3f:5d:d6:
                    42:f8:7c:1e:8a:94:be:0f:65:3c:65:26:0e:c2:e9:
                    03:70:36:e0:65:d0:cb:77:a6:18:b2:af:47:13:0c:
                    87:e4:01:b8:ce:80:22:00:cd:e0:c3:b3:f0:94:54:
                    6c:26:ec:0c:d8:c1:36:3f:1c:16:0a:5a:76:4c:53:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:55:BA:5C:E5:DC:B9:E6:6D:0C:1A:CA:08:62:CB:B8:E0:84:4B:C8
            X509v3 Authority Key Identifier:
                keyid:0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:22:70:19:93:46:74:3c:18:99:ed:4b:3b:2c:42:28:01:
         97:76:ac:e4:1c:59:98:ec:6b:22:18:46:7a:3c:00:82:96:8f:
         84:16:e9:b5:f7:54:24:71:a5:17:5e:01:9c:da:e2:31:9a:9e:
         a5:5d:45:da:ee:37:6f:5a:41:ed:10:24:86:b7:71:d1:ff:48:
         21:51:5d:96:f0:9e:7b:e0:11:a6:d9:e9:97:63:7e:fe:fa:b9:
         c4:ec:08:26:37:05:dc:db:99:81:d5:25:1c:3b:e5:04:ce:b0:
         6d:38:1e:a6:78:68:59:a1:ae:fe:f3:3f:28:ea:4d:82:9c:3e:
         e4:9c:74:b8:00:83:fd:3a:20:1c:f4:e4:bc:21:6b:39:a1:4a:
         ee:fb:66:0e:6c:88:7d:ef:22:bc:0c:76:e0:87:28:59:20:3d:
         c8:3c:8b:50:e2:76:19:6e:c6:ad:62:af:67:a5:1a:8b:79:79:
         00:4c:01:43:9b:69:fa:4e:ef:5c:a2:82:b9:5d:5a:4d:4a:e6:
         a6:dd:bd:36:8f:5c:02:3d:22:8c:30:42:51:97:f8:13:31:21:
         05:33:8a:b4:0a:de:c8:94:3f:97:30:e0:a6:a8:e3:36:9b:2d:
         bc:4c:a0:0b:23:de:fe:a4:78:a6:73:14:20:0b:5b:ff:e6:31:
         cf:8b:c4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----