Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66dc7837-2e74-4915-9fc6-51e02c992608/2a088b7596a53e352343b4d6a453d313ba76ec6a.mft
File:                     2a088b7596a53e352343b4d6a453d313ba76ec6a.mft (raw, json)
Hash identifier:          IvSkttoFbptKA6zw070U6VNrTAXc6SkIc4ncmMxx7SM=
Subject key identifier:   BD:FE:82:C0:07:99:C9:92:A9:A7:4D:E2:91:65:F0:AF:4C:0D:92:FD
Authority key identifier: D3:A3:5E:AA:1B:68:B2:82:FC:F1:FD:CD:E2:CC:B2:D9:1B:27:2E:83
Certificate issuer:       /CN=2a088b7596a53e352343b4d6a453d313ba76ec6a
Certificate serial:       290335
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a088b7596a53e352343b4d6a453d313ba76ec6a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66dc7837-2e74-4915-9fc6-51e02c992608/2a088b7596a53e352343b4d6a453d313ba76ec6a.mft
Manifest number:          0DF7
Signing time:             Mon 15 Apr 2024 06:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:36:39 +0000
Files and hashes:         1: 2a088b7596a53e352343b4d6a453d313ba76ec6a.crl (hash: WvtX3kBff7vJq6uShA6+tgJyRnGXy/4uJ50aswHGloo=)
                          2: dddfa83f375995dc33b7534701f0d3ac9d6212a5.roa (hash: yuql6XiC/dLMhxMHyiGZNaUowMcd6VDpZlCEu4ddujM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2687797 (0x290335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a088b7596a53e352343b4d6a453d313ba76ec6a
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:36:39 2024 GMT
        Subject: CN=bcacfe86c54e5d51861064f1a48272fb5feb8081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:8f:fe:df:23:52:ef:27:5a:da:d0:60:74:
                    9d:a7:98:3a:09:51:d4:f3:b2:be:8d:60:aa:c4:b4:
                    b1:a9:cd:41:a7:7b:27:61:c6:e2:4f:ea:b6:0c:44:
                    87:41:e4:83:a5:2a:3d:3f:de:1b:84:c6:1e:4b:ac:
                    76:29:df:bb:7f:79:2c:21:d5:4c:4a:a0:8a:89:20:
                    64:58:94:37:71:63:c3:75:3d:18:f3:4c:25:4c:b0:
                    42:9a:0b:32:29:ee:7b:04:eb:dd:50:95:4a:7d:b9:
                    15:0d:c0:1d:30:0b:26:c7:bc:eb:d8:61:cc:f6:b2:
                    20:e2:d7:a5:93:06:3a:e4:17:77:54:a9:63:c7:4e:
                    d8:92:88:6d:ef:5c:99:66:63:08:58:11:36:3a:ca:
                    14:5a:d4:98:ba:b7:cd:2f:d8:90:ec:f3:57:7a:de:
                    ce:3b:59:5c:15:52:77:1f:ce:93:72:fa:7b:c1:d5:
                    ea:41:be:10:b6:80:19:78:15:2d:bd:10:73:4b:6a:
                    3a:43:6c:c8:ab:0d:b2:b4:b0:77:d5:a7:f7:38:0d:
                    d0:60:13:25:68:2c:33:79:24:33:fb:09:d2:f7:b7:
                    c2:a8:66:e7:34:6d:dd:3f:50:fe:69:75:b6:fa:97:
                    09:76:86:d5:46:ff:fd:92:65:6f:1c:db:3d:f5:be:
                    e4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FE:82:C0:07:99:C9:92:A9:A7:4D:E2:91:65:F0:AF:4C:0D:92:FD
            X509v3 Authority Key Identifier:
                keyid:D3:A3:5E:AA:1B:68:B2:82:FC:F1:FD:CD:E2:CC:B2:D9:1B:27:2E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a088b7596a53e352343b4d6a453d313ba76ec6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66dc7837-2e74-4915-9fc6-51e02c992608/2a088b7596a53e352343b4d6a453d313ba76ec6a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66dc7837-2e74-4915-9fc6-51e02c992608/2a088b7596a53e352343b4d6a453d313ba76ec6a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:c2:0f:da:5f:85:7d:33:7e:60:58:fa:87:74:20:8c:c3:
         74:03:4c:ab:95:f1:7f:4f:d8:1c:34:33:37:04:9f:3a:d8:4a:
         e2:2e:63:bc:3f:c4:04:05:1a:13:e0:7b:9d:82:82:03:f6:b8:
         ed:65:47:50:f6:96:ce:86:2f:ab:3d:92:0b:78:b8:07:90:2c:
         e0:ea:cd:12:3b:1d:77:df:ee:ed:90:e0:96:09:71:ec:77:db:
         e4:da:d1:a0:a2:7c:52:90:df:1a:e9:eb:ce:b7:3e:97:f6:12:
         9f:35:f8:59:f5:b2:10:21:6e:1d:1a:3a:bc:c0:ae:f8:16:ef:
         ea:a6:28:83:68:1c:39:06:0d:00:00:c8:f1:37:7b:ab:b6:6c:
         0a:60:ca:5f:44:6e:a6:e8:bb:a1:2a:c4:20:86:b5:47:2e:2d:
         6c:45:9b:5b:1c:38:56:4b:af:de:98:84:f2:ff:7f:07:81:13:
         3d:dd:94:e0:58:f5:f0:64:a8:59:c5:ae:c0:20:8e:02:5b:d8:
         fe:6a:00:b3:23:21:32:52:8b:e0:45:3a:73:cb:6c:ce:11:23:
         42:79:c0:5d:41:09:8c:e8:2a:16:b9:98:10:b9:bb:0f:ef:fb:
         77:00:f4:a5:b1:de:86:8d:cc:ea:36:96:ee:7c:8f:56:89:98:
         78:59:4b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----