Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft
File:                     1ffa70be0f2939adf371127478487e627e9dcfa1.mft (raw, json)
Hash identifier:          rkqZzwbucKHo+VgtVG5Dl+YDqMwtlgoRMHf6RvgMfgY=
Subject key identifier:   14:EF:93:F1:79:E2:7A:89:B3:D7:54:56:E3:F9:1F:E2:33:6C:71:BB
Authority key identifier: 22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB
Certificate issuer:       /CN=1ffa70be0f2939adf371127478487e627e9dcfa1
Certificate serial:       289574
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft
Manifest number:          0DF9
Signing time:             Mon 15 Apr 2024 05:20:37 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:40:17 +0000
Files and hashes:         1: 1ffa70be0f2939adf371127478487e627e9dcfa1.crl (hash: PP2znIkgRtl5wWu6fL6Zshmx7VhznCz3DxCd1hj173U=)
                          2: 238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa (hash: cNIQMr1T9tDdHV6u+YH+IRJgV+vC8R/5cx0VZgc66UE=)
                          3: 67b68a9aeddd1419bb042e6acb1cd8c2bed34281.roa (hash: F+FJdmujyMsL8M800xvuAOxeAK6ONfgNPSNsjmP0qUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659700 (0x289574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffa70be0f2939adf371127478487e627e9dcfa1
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:40:17 2024 GMT
        Subject: CN=501dc2d0ac5897373cd0a269c5a8df125cac86d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:7f:8e:72:a1:08:41:8d:35:a2:5f:f6:c2:
                    e6:99:64:2a:bc:9d:ac:ba:a4:6d:45:cc:5f:e0:4d:
                    13:01:05:b9:e5:02:08:11:36:c0:9a:b9:8f:64:0b:
                    ca:a7:63:df:0f:81:b9:65:9f:be:80:fe:ac:52:40:
                    3a:35:72:30:c5:0e:eb:cc:0f:a5:56:0a:06:9b:45:
                    2b:c8:6d:0d:0e:99:5a:fa:36:c8:32:96:1c:88:2c:
                    eb:f1:66:47:31:50:85:4c:48:62:a8:31:b8:ec:9b:
                    43:e5:ab:24:9b:f6:f3:46:5b:b5:18:f2:99:ab:96:
                    9f:ac:da:3a:11:00:b7:67:da:ae:e9:54:90:05:6d:
                    24:5e:31:fa:34:59:d2:c5:6d:d7:82:1a:43:ba:4b:
                    a6:d8:9a:a0:42:e1:cc:7b:08:4c:d5:4b:a8:3c:81:
                    3e:77:3a:0e:de:c2:5c:af:05:d0:14:68:f9:0a:93:
                    49:52:e7:61:a2:d6:9c:ec:4f:6a:67:66:ea:d0:dd:
                    e9:32:b2:b4:74:4d:fa:6c:46:ec:28:62:90:c1:a2:
                    23:68:37:54:c2:bc:c5:fc:75:3f:ea:52:89:9f:d2:
                    69:08:af:72:d9:c7:83:cd:18:47:f3:31:aa:16:60:
                    5b:a8:d2:61:31:22:af:5f:01:4d:ad:26:42:0f:78:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:93:F1:79:E2:7A:89:B3:D7:54:56:E3:F9:1F:E2:33:6C:71:BB
            X509v3 Authority Key Identifier:
                keyid:22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1c:28:df:d2:b6:5a:47:be:e6:fa:51:5a:c4:35:e7:e1:8a:
         d5:14:9a:ae:01:5d:dc:b7:95:ab:73:4f:15:1b:df:cf:e6:4a:
         82:9d:b9:3d:8a:c3:3d:3b:4d:41:50:4b:72:42:50:da:db:16:
         6e:4e:2e:4b:5b:9a:86:32:ce:3c:8b:c9:54:79:10:f9:f2:57:
         3d:ed:af:eb:af:14:00:48:98:d8:e6:8c:d1:ee:d6:63:44:94:
         ee:1c:1d:9f:6c:53:fc:5a:ef:77:b4:31:38:13:ec:49:d6:b8:
         b9:90:a7:ce:e6:06:6b:ae:d6:51:0a:fd:20:ae:b2:fa:00:f8:
         26:73:82:6f:56:94:44:f7:18:1d:8d:b7:f7:71:25:90:ef:9a:
         50:2e:bc:57:d1:7c:20:ec:29:64:9a:04:cd:b2:e6:30:7d:11:
         b9:f8:45:c7:e1:2a:a9:97:39:7a:db:0a:22:65:96:7a:4d:d0:
         44:9e:d1:73:0b:af:f8:11:4b:64:40:d1:15:92:cb:71:f7:40:
         3b:02:4a:28:64:74:bc:6d:f4:15:45:50:e6:17:76:d8:41:c1:
         f9:6e:41:0c:fd:e7:8b:de:0a:49:11:72:1f:bb:30:b4:54:38:
         13:4d:24:0e:54:5f:78:2b:ac:e3:04:30:bd:ec:b6:e5:cc:15:
         cc:9a:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----