Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.mft
File:                     4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.mft (raw, json)
Hash identifier:          veua3rXbEfOqnchFs2EMKyD/XbMtRMjUwBTN2q/XxJ0=
Subject key identifier:   22:D6:4C:EF:88:24:99:0F:6F:39:75:44:9C:3F:6E:68:8D:60:7D:CE
Authority key identifier: B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35
Certificate issuer:       /CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6
Certificate serial:       289929
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.mft
Manifest number:          0DCE
Signing time:             Mon 15 Apr 2024 11:20:37 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:54:18 +0000
Files and hashes:         1: 4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.crl (hash: XL0cqahCBLm0JBrpipi7FzqnYrVYQA7TxW+iCqCRWTo=)
                          2: 9eff89c395023f7805ff6efeaecc1c3c9c287bff.roa (hash: GUg1+Hb4rAX6fXHyYIXrMGcuKXxZ+VP+JsyjAvCYxZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2660649 (0x289929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:54:18 2024 GMT
        Subject: CN=38d0d581d387f1acef094bbb84f9eb05221f740c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:96:80:9b:b6:a2:11:89:74:f4:09:73:a7:
                    34:07:23:af:fe:f3:dc:53:bf:e4:82:4f:be:18:67:
                    65:31:c4:74:38:ae:50:fd:bb:96:b2:da:63:0d:4b:
                    41:47:21:cb:04:e8:af:57:a2:88:68:d3:dd:db:14:
                    76:fe:d6:b2:d7:6f:29:2f:04:2d:cc:51:3a:47:c7:
                    a5:5f:7f:8b:0b:88:79:51:ef:65:ed:67:67:7c:76:
                    35:3d:01:83:a6:e8:57:8d:ee:9e:3e:94:3a:e1:f6:
                    42:88:be:25:a2:01:99:82:b6:24:71:8c:6b:76:e8:
                    8d:75:57:8f:f9:5d:e5:11:2a:0d:c9:a6:7e:dc:56:
                    5e:ee:51:63:4c:ac:3c:b4:e1:1d:63:8d:06:f3:9c:
                    aa:f5:11:22:95:82:e7:64:14:cf:8d:25:fb:2c:04:
                    ba:4a:76:69:08:a2:2a:c0:d4:2b:26:dd:55:ab:38:
                    7a:c5:77:35:b5:59:34:49:fb:14:32:70:87:1d:44:
                    9c:05:24:04:68:39:ab:3b:b4:e2:66:7e:5a:ac:fe:
                    c9:b8:93:f9:93:e6:7e:6e:6c:cf:35:ae:e7:47:8b:
                    9d:7f:25:8e:92:3a:0d:eb:48:d2:0c:86:33:f5:99:
                    af:4c:6a:c9:e9:4e:de:96:62:bb:ff:c2:07:11:3d:
                    fa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D6:4C:EF:88:24:99:0F:6F:39:75:44:9C:3F:6E:68:8D:60:7D:CE
            X509v3 Authority Key Identifier:
                keyid:B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:aa:85:35:c2:00:d5:dc:ce:8f:7c:4c:3b:c0:19:9f:cf:20:
         f5:6a:02:17:9d:1e:4c:96:f8:81:ba:7e:b3:a4:ae:63:c5:70:
         fd:05:39:12:1d:51:41:18:bf:93:f1:54:e0:83:0a:ba:88:2d:
         ef:c2:db:54:7f:54:f6:c5:8c:83:f9:86:8d:3a:83:84:13:8e:
         f7:1f:12:02:5b:49:9b:74:45:bc:5d:d4:b6:13:30:ec:d0:34:
         9d:e6:96:94:6f:6e:57:a2:eb:83:40:18:74:85:14:da:17:8f:
         fd:67:d1:76:cd:df:16:63:28:ab:c5:fb:2e:c8:2e:31:b7:14:
         30:a8:6b:21:2c:89:71:27:8a:2e:42:98:14:08:31:52:89:96:
         40:ee:b7:ab:ba:91:ff:0a:7e:53:4d:d9:26:d6:a6:12:01:b2:
         52:65:3c:71:c6:08:78:df:b4:fe:96:96:91:5d:a8:db:96:18:
         93:bc:a6:fb:2d:af:c6:ce:9e:3f:4e:bd:fa:a1:a3:f4:76:03:
         f2:e8:b5:aa:55:c7:c6:6d:32:f7:d0:24:25:7c:f9:45:95:a8:
         22:19:b9:b4:3e:28:5f:c0:99:83:f9:ad:41:47:2c:1e:81:eb:
         63:58:5f:10:fd:a6:7d:8c:c1:3e:8c:85:89:fa:dc:2a:04:83:
         b3:05:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----