Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/860533da-4441-4d4d-8f60-fc81efd04a19/9a2c661fed44aca27b04cd7286b07d9802f1c227.mft
File:                     9a2c661fed44aca27b04cd7286b07d9802f1c227.mft (raw, json)
Hash identifier:          H4okcd9BRDd9VuscMP8ZAU6T3u5GEpXIp9wH+Qka9cs=
Subject key identifier:   CD:A1:73:A8:F2:41:64:FF:7A:26:84:30:84:6B:97:44:DA:E8:7C:F9
Authority key identifier: 9D:01:0E:EC:94:19:BF:7C:B8:3D:CF:6E:AB:D8:99:87:A0:C2:4A:D0
Certificate issuer:       /CN=9a2c661fed44aca27b04cd7286b07d9802f1c227
Certificate serial:       1672FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a2c661fed44aca27b04cd7286b07d9802f1c227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/860533da-4441-4d4d-8f60-fc81efd04a19/9a2c661fed44aca27b04cd7286b07d9802f1c227.mft
Manifest number:          0BB6
Signing time:             Mon 15 Apr 2024 11:21:44 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:29:18 +0000
Files and hashes:         1: 565815939fe91f363daa29421fcaff3e21f289ec.roa (hash: Fa6ns2249J5orjnIliDsl/udwR8ecEM5Et7ouwlBdOg=)
                          2: 9a2c661fed44aca27b04cd7286b07d9802f1c227.crl (hash: t+IMM0LylAaL8F8tV9VcIKAD5X7OAFB4gbCLFUyh0yw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471227 (0x1672fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2c661fed44aca27b04cd7286b07d9802f1c227
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:29:18 2024 GMT
        Subject: CN=cb4046657c9e4fdd54b1d85c734dff230b3edf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:ad:84:f9:3e:16:fe:15:88:90:2f:be:39:
                    05:7f:b3:0e:85:34:f5:c1:c9:31:51:d1:3d:7e:af:
                    3a:58:90:62:65:94:d2:59:37:c3:4d:2f:9e:e2:0c:
                    72:26:06:bc:69:df:8d:e6:16:77:87:97:c2:e5:28:
                    45:1e:19:6c:ac:74:60:ce:14:05:92:4a:e7:c5:8f:
                    f4:ac:19:ca:d2:c8:3c:48:f2:d0:55:7f:f5:6e:36:
                    cc:f3:16:84:42:6f:97:10:dd:72:b3:a3:ad:48:6f:
                    96:6b:60:77:3f:ec:38:b6:88:a8:7f:12:29:61:2f:
                    49:3f:cf:cd:b1:71:b7:aa:a6:0f:3c:95:bf:5a:79:
                    d0:da:c6:77:61:ec:ba:b6:fb:60:a2:44:e4:4e:64:
                    6c:91:de:38:56:37:cb:ee:5d:91:50:b8:5a:8e:c6:
                    4f:93:65:02:18:b1:f3:18:ee:0d:c2:70:7d:af:33:
                    34:e5:e8:9c:81:25:f9:4a:c3:75:5f:d7:39:7c:87:
                    54:e5:17:15:bf:e0:84:fe:75:ae:a9:d1:55:0c:9f:
                    c8:26:76:36:a2:ea:2e:40:62:8b:fc:8f:40:7f:b2:
                    4b:ab:cf:02:20:2e:09:a3:32:89:5b:1d:71:fd:44:
                    7a:70:02:03:59:c7:56:19:0c:81:0e:de:d0:32:35:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A1:73:A8:F2:41:64:FF:7A:26:84:30:84:6B:97:44:DA:E8:7C:F9
            X509v3 Authority Key Identifier:
                keyid:9D:01:0E:EC:94:19:BF:7C:B8:3D:CF:6E:AB:D8:99:87:A0:C2:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a2c661fed44aca27b04cd7286b07d9802f1c227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/860533da-4441-4d4d-8f60-fc81efd04a19/9a2c661fed44aca27b04cd7286b07d9802f1c227.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/860533da-4441-4d4d-8f60-fc81efd04a19/9a2c661fed44aca27b04cd7286b07d9802f1c227.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f1:0b:ed:dc:7c:32:1f:cd:bb:d6:4a:5c:3b:8f:cc:a5:c1:
         64:0e:75:e1:dd:ad:e3:05:2f:c2:84:db:aa:1c:e5:5e:96:e4:
         77:3e:11:83:7f:62:17:ff:22:b9:17:25:c9:82:80:bf:a1:99:
         61:e9:d0:b2:dd:51:01:4a:75:02:33:73:9d:8f:20:74:36:d9:
         b7:54:2a:47:ec:fa:32:44:35:a0:06:3f:17:6b:32:43:97:00:
         a0:94:99:3a:0e:6a:95:c8:ff:cb:d3:2b:70:fe:f8:ca:43:5f:
         6e:3c:be:03:fc:bd:fa:42:83:1e:8b:56:2d:d5:68:7d:b0:9f:
         e4:89:44:2a:29:59:d2:ef:8f:30:49:93:62:ec:4c:f7:b4:e0:
         2c:eb:fd:a2:19:9a:57:ac:d1:21:5a:e3:39:58:c3:ba:49:1d:
         c7:06:dd:75:a5:b8:ed:1f:63:dd:8b:36:f7:52:f2:58:0b:a8:
         48:16:05:6e:c7:d0:da:19:df:28:f1:38:7c:49:b2:64:e6:72:
         8b:96:1d:01:21:37:fd:ab:a1:47:7a:0c:01:e7:92:38:b2:b9:
         87:d0:93:e7:f7:68:0c:cb:5c:79:22:f0:3a:3c:39:20:73:1e:
         bb:03:a0:b8:c1:07:da:12:54:8e:bc:47:e7:36:85:0c:8f:d1:
         c5:16:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----