Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.mft
File:                     ef2d0ae672567bf0e707903589365faae1ff0bbc.mft (raw, json)
Hash identifier:          dt6x58i7r4iRMJEgadKYJZEB/8BXgM+nd8xmuC8A8fs=
Subject key identifier:   54:E3:51:10:BC:5B:B2:43:09:5A:E5:AC:53:8C:31:23:A7:A6:95:B9
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Certificate issuer:       /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial:       285C82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.mft
Manifest number:          0DFF
Signing time:             Mon 15 Apr 2024 09:20:31 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:41:18 +0000
Files and hashes:         1: ef2d0ae672567bf0e707903589365faae1ff0bbc.crl (hash: lFugB5OgEEt3RLOgbOdElUF7SJ25RUbPw73WBJnh8BY=)
                          2: f2202ea6a45a02aaa794a9a41055b957206f251a.roa (hash: Qw+54k1E4ZFF0zc+L8BxVl93saz1xqOxPYYJ9WBHUcc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645122 (0x285c82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:41:18 2024 GMT
        Subject: CN=5546ba356269dd8ee9a03489c95cbcb951d6dda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:78:7f:17:02:96:6b:fa:b2:56:69:be:5c:
                    ce:09:85:02:61:46:7b:0a:ed:61:a5:b2:96:19:d6:
                    1b:56:77:38:8a:35:cd:e4:93:84:84:2a:e1:2b:9a:
                    4c:bc:3c:16:10:ee:ef:89:b9:5d:15:0f:77:4c:63:
                    fe:49:72:d4:ec:54:c7:00:4a:1c:41:be:b0:b8:b3:
                    47:6f:b9:6b:65:a8:b3:34:70:4f:7b:bb:53:b0:ad:
                    d3:57:8f:39:1a:dc:e5:5d:e1:bf:f9:d8:92:d1:70:
                    dc:96:73:e5:e4:4f:bd:c4:64:47:a5:eb:64:b3:9a:
                    43:51:35:80:71:2b:52:8a:81:b6:26:16:a9:8c:09:
                    63:92:2c:1c:ac:06:96:04:a4:0f:0f:93:9d:86:6a:
                    e1:d0:6b:fb:ab:84:c2:6d:f5:64:b5:fe:8b:d0:89:
                    25:4d:1e:0c:47:dd:67:d8:80:a9:83:bc:e4:dd:78:
                    f9:30:b7:40:c5:6c:ab:f8:9e:75:fb:1f:a8:91:e7:
                    75:d7:10:2b:26:89:d5:b0:c2:4f:d6:6a:34:18:81:
                    c5:0a:3b:4e:cf:3e:d2:01:aa:17:73:35:eb:42:cb:
                    3d:50:96:e0:6a:c9:50:b4:a6:76:31:f7:9d:4e:2e:
                    d3:79:5d:21:f7:2a:29:27:df:2b:17:4c:f3:8c:83:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E3:51:10:BC:5B:B2:43:09:5A:E5:AC:53:8C:31:23:A7:A6:95:B9
            X509v3 Authority Key Identifier:
                keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:64:f1:fc:35:0f:00:53:73:6f:39:12:db:61:69:96:43:f3:
         e3:56:c8:06:90:b7:b4:87:b6:f8:3c:05:77:76:c9:5c:75:4a:
         f0:1f:9c:62:2d:ee:47:27:08:a5:9e:c9:27:53:94:55:0a:29:
         87:07:26:15:2e:3a:92:74:fe:6a:91:96:63:dd:bf:e2:3b:00:
         bc:ce:96:55:53:5c:8b:ef:c8:59:17:af:23:04:3b:4a:c2:ce:
         22:c2:40:86:bc:6b:d7:56:40:01:c1:52:41:13:b4:9d:bf:a8:
         5c:11:2d:c5:25:93:10:f2:ee:97:14:df:40:6f:71:1e:84:7e:
         b9:4c:12:b8:26:95:cf:13:0c:c8:cb:e9:fb:f5:aa:36:c1:68:
         c5:61:56:e1:1c:61:88:9c:30:ab:a0:84:06:b2:76:1e:f7:fb:
         b8:87:01:03:d9:d1:da:1a:3a:d6:3d:fc:34:49:63:1d:51:c0:
         40:d2:e7:87:7f:c0:ad:d4:d2:cb:1f:4f:d8:7a:48:de:a2:2c:
         89:ac:08:27:66:6c:e1:2b:37:89:3f:2f:f9:66:3c:e9:5e:9c:
         da:d8:2e:47:61:54:be:51:83:b6:82:6a:e5:be:18:1c:5f:b9:
         c4:e0:9a:b1:5b:db:2d:ab:d6:b0:d9:1a:e3:11:ac:97:77:f3:
         d2:06:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----