Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/bfa311fa695991c4b5507c099d6fea84b510979a.mft
File:                     bfa311fa695991c4b5507c099d6fea84b510979a.mft (raw, json)
Hash identifier:          MCi1XAxrhy5AG259IQ0lNLHdRKgQH7e44x/J/90ZaDg=
Subject key identifier:   29:91:6D:52:E9:51:EB:4F:40:AD:4E:17:CC:62:E0:2C:08:D0:90:BC
Authority key identifier: B0:CF:F0:34:30:A9:65:96:A9:33:18:FF:D7:FE:EE:CD:8F:4A:ED:39
Certificate issuer:       /CN=bfa311fa695991c4b5507c099d6fea84b510979a
Certificate serial:       08AC61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa311fa695991c4b5507c099d6fea84b510979a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/bfa311fa695991c4b5507c099d6fea84b510979a.mft
Manifest number:          0481
Signing time:             Mon 15 Apr 2024 04:20:54 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 07:18:26 +0000
Files and hashes:         1: bfa311fa695991c4b5507c099d6fea84b510979a.crl (hash: dUOs66CgrE3I2D1PoMvEkKI2lZO/5AVUsi8AO+3zTjw=)
                          2: efd254ad5fcfdd9b302b1ee9a8a0387231344d26.roa (hash: tObVUHTLeL0f1sWnaR9T8V6yI90a82F+3/x0G/oW01k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568417 (0x8ac61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa311fa695991c4b5507c099d6fea84b510979a
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 07:18:26 2024 GMT
        Subject: CN=8ce42bbcd7af69b167a933a0000547470d5eabfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:97:cd:68:a1:99:44:17:fd:a2:1c:dc:14:
                    0a:34:5d:4d:b6:1f:dd:a9:6b:6f:7a:f9:cc:35:88:
                    ea:4b:11:ab:c3:53:3f:63:85:f0:5c:6d:c8:78:1a:
                    67:76:43:c1:e1:46:66:4d:fd:91:5b:56:e4:62:df:
                    f5:69:44:51:81:7a:8c:54:d4:16:ff:59:6b:72:97:
                    35:3d:bb:bc:d6:5b:b0:90:a1:c3:3e:51:ad:13:bb:
                    b7:db:9b:ec:8d:93:52:95:d0:53:4c:51:f1:b3:1b:
                    c7:ea:ab:a7:7c:d9:af:5d:ba:04:0c:2c:36:37:81:
                    4c:9e:9c:fc:51:99:02:df:65:16:7b:83:fb:d3:08:
                    28:24:c6:e9:98:e3:e7:04:f7:a8:ee:72:6e:f2:96:
                    33:ee:6b:d1:13:e9:b3:c6:19:cf:df:e8:9b:22:21:
                    18:73:3c:f0:ff:a7:fd:f8:cf:ac:c5:11:03:eb:30:
                    65:2d:95:6a:44:33:43:ef:89:5d:ea:90:5e:3f:c8:
                    e6:3e:fc:26:64:88:1e:1f:f5:aa:d1:6b:25:0c:09:
                    ea:99:05:54:6a:aa:40:1c:47:eb:b4:a5:09:1e:d0:
                    ee:6c:22:a2:3f:95:23:1a:db:56:98:8b:45:38:22:
                    4f:97:39:f7:c0:7c:40:6e:e1:bd:44:3b:fa:1f:2b:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:91:6D:52:E9:51:EB:4F:40:AD:4E:17:CC:62:E0:2C:08:D0:90:BC
            X509v3 Authority Key Identifier:
                keyid:B0:CF:F0:34:30:A9:65:96:A9:33:18:FF:D7:FE:EE:CD:8F:4A:ED:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa311fa695991c4b5507c099d6fea84b510979a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/bfa311fa695991c4b5507c099d6fea84b510979a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/bfa311fa695991c4b5507c099d6fea84b510979a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:4f:0a:1f:8a:83:5e:65:3d:74:11:5f:88:bd:83:31:13:
         ad:ac:3c:32:e7:65:37:20:97:0a:fd:dc:47:cf:23:8e:32:1b:
         d2:17:fc:66:7b:bb:ce:68:fb:8e:b9:8b:83:33:e0:37:35:8d:
         2e:6c:a8:f8:4d:e0:e9:7f:9e:a9:97:c6:52:76:bc:d0:94:ee:
         ea:31:99:29:3b:be:ce:2c:dd:17:62:47:ce:ac:65:ed:b7:5a:
         2f:12:19:be:9c:e0:4b:8a:cb:94:e1:d4:b7:b8:4a:99:08:1d:
         78:dc:42:45:fd:d6:5b:af:f1:be:30:d2:07:99:9c:32:15:84:
         31:7a:c4:99:55:a0:e6:1c:be:18:23:a9:ef:df:1d:8a:5a:2c:
         9f:4c:1b:3c:48:2b:a4:71:85:57:06:54:10:cf:f9:99:3a:c5:
         e6:b0:17:7d:ed:84:60:30:9c:f4:eb:12:f6:f0:35:64:06:8b:
         d5:64:28:fa:c5:fc:e9:b4:83:70:5b:6b:2b:94:eb:b9:52:29:
         e6:62:b2:ab:a2:04:90:9b:02:e3:51:7a:bf:9d:a3:ff:c1:21:
         0c:c5:e2:3e:56:04:ba:25:da:71:19:26:73:c5:81:f0:38:5a:
         e8:0d:b9:3a:cc:c8:8a:25:e8:e6:ee:16:5a:4e:a5:e8:f7:69:
         20:ae:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----