Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.mft
File:                     bfbdd559af6aac3348d7a10caf850960a448f10d.mft (raw, json)
Hash identifier:          T7/eawDZ6DXUxyeBTdIuXy1WFKJhB7bRA2jAtQmQ8jA=
Subject key identifier:   26:10:EF:E8:9F:FD:20:B9:E6:61:F7:53:11:1C:7E:9F:19:57:4E:8A
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Certificate issuer:       /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial:       28B771
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.mft
Manifest number:          0E0C
Signing time:             Mon 15 Apr 2024 05:20:44 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:48:17 +0000
Files and hashes:         1: 66df5c84e872bcbc5c4f8e4eca3f4fbf932093d4.roa (hash: YrpWTkenmf4gNrpLKglaYSHgNo4EDiAEU4lT23BiM1s=)
                          2: 88460c104efe8d67e22e3cced42dbfd4ec085ab3.roa (hash: W8DJUeeGUiUiWyycun3n6p92Ut34k4rdC8IF7PFtdnA=)
                          3: bfbdd559af6aac3348d7a10caf850960a448f10d.crl (hash: YMzuKAfUEQE+LCJNGsVCOmIPPK9bnjGGKwXYVGcf6VQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668401 (0x28b771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:48:17 2024 GMT
        Subject: CN=e45570e6898041d3bfb5a195066c928bd9dffca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:56:f4:d8:21:de:bf:b6:70:84:8d:7b:1d:
                    e6:ee:09:b7:1b:16:bd:ad:8b:b3:db:c0:5c:b1:b3:
                    a6:f1:10:00:50:f1:4d:65:89:98:84:5b:1e:9f:cf:
                    f3:b2:6b:80:bc:4f:7f:1b:f6:65:6e:65:6d:d6:b6:
                    5f:11:77:96:9a:fc:f8:24:68:bf:3b:6b:d1:13:42:
                    2a:6a:71:87:1c:2e:0d:60:06:d6:5b:95:ae:0f:7f:
                    09:a6:74:71:68:c6:2b:17:01:06:58:f1:da:9a:29:
                    13:0e:11:08:43:99:23:6c:58:d7:a8:56:5c:d5:16:
                    c1:15:bb:1e:91:7b:e7:e7:95:5c:d8:c1:ce:cf:02:
                    82:9c:7a:0c:10:93:ec:10:c9:f0:38:e3:d0:1d:38:
                    6e:24:42:2e:ec:2c:c9:5d:33:b0:83:16:33:1d:17:
                    72:e5:9e:5b:c0:74:08:6c:70:11:0a:4a:92:7f:5c:
                    7f:74:62:39:c7:1a:ef:01:0b:19:da:c0:0a:dc:73:
                    98:c1:b1:46:57:e0:16:15:f8:6d:da:dc:d3:0a:3e:
                    3a:86:a1:15:6c:db:d3:60:34:e4:80:7d:22:e0:09:
                    e6:bf:46:70:4f:f8:ea:8e:ab:bd:72:a7:57:1d:db:
                    d3:38:27:19:48:8a:df:27:24:a4:85:4d:f6:0d:78:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:10:EF:E8:9F:FD:20:B9:E6:61:F7:53:11:1C:7E:9F:19:57:4E:8A
            X509v3 Authority Key Identifier:
                keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:c7:4d:7a:f8:92:46:50:1e:ff:55:72:8e:18:d6:52:3a:
         6a:82:12:82:53:f2:89:79:5a:c7:18:a2:0f:ad:40:c2:97:92:
         e0:3a:13:58:70:23:16:ad:04:0d:52:ba:10:a1:bf:82:35:1a:
         55:89:61:0c:fa:68:cf:73:71:ea:e9:ae:b3:f9:6c:0e:57:6e:
         d3:c9:b0:83:84:16:33:f1:73:fa:63:1d:d7:d1:6c:ed:61:f2:
         af:b5:b1:b9:ff:c0:b3:6f:55:15:14:b0:8c:97:62:89:83:04:
         94:0c:11:2b:21:da:19:57:1f:23:da:36:fd:29:7f:0d:8a:79:
         07:1e:b9:05:da:7c:71:97:4a:ef:21:a4:60:e2:c3:2a:ff:72:
         07:45:55:66:38:89:85:6c:2e:ad:18:a5:68:fb:d9:f2:71:2b:
         1c:eb:59:dc:4a:ee:d0:57:84:81:e1:0b:25:f4:6e:89:03:08:
         05:a3:14:ae:b4:90:3b:2d:1d:24:86:f0:ed:20:a0:68:f5:c9:
         64:98:28:db:ca:fa:67:29:29:55:75:69:75:c4:aa:41:3e:27:
         b8:cc:36:06:9a:84:fb:67:8e:9c:ac:82:46:17:03:70:a2:60:
         8c:c7:0d:01:8e:cc:e0:fd:b7:46:f3:7d:f0:49:45:03:a6:0a:
         a6:b1:2c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----