Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/2ba6696fb31d1cc69120e7388063ab6feeda983b.mft
File:                     2ba6696fb31d1cc69120e7388063ab6feeda983b.mft (raw, json)
Hash identifier:          XhxO8wKitiH7YhHg4Y1lQgoVgUaLOubPCbm77xLKj3Q=
Subject key identifier:   66:39:13:12:60:10:8C:13:EB:69:19:62:3A:A5:AA:37:A8:BD:35:E4
Authority key identifier: B0:84:1F:46:D3:F0:05:65:CE:4C:D9:C5:6F:9F:2E:4B:2C:62:77:61
Certificate issuer:       /CN=2ba6696fb31d1cc69120e7388063ab6feeda983b
Certificate serial:       1FDDB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ba6696fb31d1cc69120e7388063ab6feeda983b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/2ba6696fb31d1cc69120e7388063ab6feeda983b.mft
Manifest number:          0E21
Signing time:             Mon 15 Apr 2024 04:21:21 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:59:26 +0000
Files and hashes:         1: 2ba6696fb31d1cc69120e7388063ab6feeda983b.crl (hash: p3pVcTFus5AyiOXvKrUTBC2qdGBoYh4G6QY9QGi0OjI=)
                          2: e170ffb4a95e1dce684735ba480c174a106bf031.roa (hash: 4bXnValm+3OCrBkF3bekLeiRTvdkJwuqpFuGA++Y2Qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088375 (0x1fddb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba6696fb31d1cc69120e7388063ab6feeda983b
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:59:26 2024 GMT
        Subject: CN=9e486f7b33aec0d00627d9c4130003ddb7459f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:e7:c3:3f:cd:48:aa:13:50:78:b2:65:f3:
                    d9:64:b2:f0:74:a7:8c:dc:23:23:4b:31:e0:5f:6c:
                    21:0b:f4:56:cc:f6:f6:cf:41:61:77:6f:3b:5b:b1:
                    d2:3e:44:06:0b:79:57:fa:e8:5a:f7:c2:10:0a:2e:
                    7e:5b:94:96:e4:85:b0:95:9e:13:33:c2:55:1d:a9:
                    3e:25:09:e7:a8:84:52:03:f2:82:3c:2f:70:fc:1c:
                    ee:cf:5c:2e:56:e6:cb:7a:93:f9:d3:ad:16:d2:49:
                    8c:fa:79:81:ad:d2:14:9c:41:cf:59:7a:fd:8b:bc:
                    51:67:47:0e:be:5e:03:e6:1c:b7:63:2a:ca:8c:a9:
                    2f:0e:ca:34:3a:20:cc:12:f7:da:bf:1a:69:9a:1a:
                    30:cf:60:7f:c3:d3:26:76:78:f6:bf:82:90:f8:4c:
                    4f:a9:03:16:35:da:a8:6f:8a:31:92:88:5f:9d:d6:
                    ef:40:ea:2a:d9:b3:78:66:5c:17:ed:03:c4:e3:2e:
                    d0:5f:86:2e:2c:ca:e6:f4:33:d7:da:50:fe:14:55:
                    7b:06:e0:f5:1b:12:24:f4:db:c2:d8:2f:6f:47:4b:
                    53:eb:1d:be:12:8f:61:31:c7:b2:20:ee:40:5f:68:
                    83:44:d9:63:f1:63:fa:aa:3f:be:66:44:33:50:18:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:39:13:12:60:10:8C:13:EB:69:19:62:3A:A5:AA:37:A8:BD:35:E4
            X509v3 Authority Key Identifier:
                keyid:B0:84:1F:46:D3:F0:05:65:CE:4C:D9:C5:6F:9F:2E:4B:2C:62:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ba6696fb31d1cc69120e7388063ab6feeda983b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/2ba6696fb31d1cc69120e7388063ab6feeda983b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/2ba6696fb31d1cc69120e7388063ab6feeda983b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:ac:ff:7e:1f:0b:97:a9:04:14:9b:8c:41:70:4b:33:0d:
         e6:df:8b:8d:18:3c:be:64:7e:70:a6:87:1a:39:a4:a8:58:50:
         c8:cd:df:9e:e0:ae:9c:63:91:de:c8:7d:d7:ce:bf:fa:9d:b7:
         df:7e:0e:bb:a9:6c:8d:0e:40:29:d3:bc:32:08:4e:62:55:f3:
         8a:36:50:8c:1e:bd:58:28:bc:2e:7a:12:5e:47:67:26:75:03:
         ed:2c:11:6e:d0:a0:07:44:b0:02:da:58:5a:e5:61:b5:6a:ea:
         bf:bc:3e:0c:02:0e:61:83:f0:30:b7:45:cf:3d:6f:ad:3e:6c:
         41:a0:7e:54:d7:a8:41:f2:90:eb:19:52:91:72:3b:04:10:f3:
         c1:6d:28:50:83:d5:1a:97:0e:4c:7c:ee:c9:38:a3:d7:87:fb:
         7e:ac:5d:13:a8:8d:7d:c2:95:b6:46:cd:25:5e:70:0a:8a:63:
         70:0c:cf:da:e9:85:0f:f6:b1:ad:71:f2:5f:d2:ae:1d:3c:d6:
         e4:80:ec:78:46:c7:71:fa:24:a4:74:3d:9b:df:df:56:e2:a8:
         d7:b9:d6:e7:80:ef:ab:ae:73:32:33:e0:ca:2f:aa:27:0b:4b:
         86:ed:51:e8:62:11:07:2e:87:df:9b:68:28:6b:94:14:c3:31:
         02:fa:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----