Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.mft
File:                     ba813dbb0a3aeaa7f650c31656aa4e97e4295496.mft (raw, json)
Hash identifier:          SR4FiTdRNjWaHG8FvcqkwzilDwgghYIOloAoGIPnnw4=
Subject key identifier:   17:EC:7E:4F:18:06:7C:04:FB:11:A0:0A:96:4A:C8:2D:1E:85:9A:F2
Authority key identifier: 38:B9:B7:EB:0E:96:FC:96:21:A8:9C:71:29:F1:D6:95:5B:67:3B:77
Certificate issuer:       /CN=ba813dbb0a3aeaa7f650c31656aa4e97e4295496
Certificate serial:       1FE6DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.mft
Manifest number:          0DF4
Signing time:             Mon 15 Apr 2024 10:20:57 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 10:58:25 +0000
Files and hashes:         1: 628564c3825ef70511ad70a7040da39542b33586.roa (hash: OFGw4dhhOeFz11oZJpvnlm+34wDL6Yx5PZC/e9mb1qk=)
                          2: 88e265738ac751e15affae6d43ba1009b2957d0a.roa (hash: 6i97eZmX0JhyN1cKCUqLcCJpy1VySL4cBx6m+oecnhY=)
                          3: ba813dbb0a3aeaa7f650c31656aa4e97e4295496.crl (hash: 3QFZ8aKcv9d5YwRcSBMBAgMzjx6nRDj0Z8wyLkEYBwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090719 (0x1fe6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba813dbb0a3aeaa7f650c31656aa4e97e4295496
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 10:58:25 2024 GMT
        Subject: CN=1c5cb6d84d00141deb84194906a56f9834ab955c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:e4:6e:20:31:b2:d2:9a:46:12:c8:d1:54:
                    72:2f:70:e6:be:ab:53:5e:e2:d3:0f:0f:22:c7:e2:
                    e4:1c:5e:90:a1:34:04:18:cd:66:d5:89:ea:14:b0:
                    73:a2:5b:cd:90:dd:ff:bb:88:bf:d7:1d:c6:3f:03:
                    9e:3b:a7:ca:8e:e0:00:17:71:eb:81:54:c0:a0:04:
                    12:bc:ca:88:03:d2:9e:2a:a7:0e:de:60:24:ea:53:
                    44:73:9d:b9:c7:d3:29:28:7a:51:6d:1c:dc:c5:b3:
                    71:27:e0:4f:6f:31:bb:82:5a:ae:61:bb:a3:0b:e9:
                    24:bc:ca:c0:7a:59:8e:55:2b:55:54:2f:68:9d:0b:
                    6c:18:9f:ca:df:71:bd:b2:40:14:d8:25:93:19:e6:
                    ae:61:ce:2a:db:9d:70:76:13:ab:87:26:b9:be:c1:
                    29:a6:73:b4:c1:f8:ef:34:48:20:de:4d:6e:c6:92:
                    79:f5:c2:f2:81:3e:9b:59:b6:40:f2:48:3b:a2:c0:
                    32:61:68:b1:97:4e:b1:74:29:d6:43:f4:0d:4b:4f:
                    46:75:93:81:7c:70:3a:1b:68:59:06:f7:12:ec:27:
                    fb:84:08:f1:6f:52:be:7a:04:74:46:c5:e2:18:41:
                    9c:fa:0d:f3:5d:7d:a2:3b:87:90:51:e4:33:82:d5:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:7E:4F:18:06:7C:04:FB:11:A0:0A:96:4A:C8:2D:1E:85:9A:F2
            X509v3 Authority Key Identifier:
                keyid:38:B9:B7:EB:0E:96:FC:96:21:A8:9C:71:29:F1:D6:95:5B:67:3B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b3:f9:1e:99:ea:06:1d:b8:b1:fb:ec:3e:62:fe:2a:c0:4a:
         4b:f1:9f:c3:f0:16:70:18:74:02:bc:d4:6a:c4:3c:67:37:36:
         c4:b9:4f:f4:eb:00:5a:f2:96:03:18:6b:a0:85:c8:69:13:01:
         c2:fb:b6:3f:29:97:c8:69:40:76:e6:fa:ac:fd:d9:3b:49:06:
         4a:9f:db:ba:81:42:1d:04:3a:30:26:0f:d3:c9:f2:0a:18:c6:
         f9:12:04:f8:8e:6b:49:fd:12:d3:df:d6:64:9a:c2:22:25:9d:
         b2:25:c4:d8:df:94:45:58:b8:0e:d5:ad:8d:8d:b4:e3:cd:ae:
         c8:8a:83:85:57:85:8a:e0:e9:f1:c3:6b:42:48:94:1c:9f:41:
         a4:c5:9d:03:70:35:12:a6:8d:84:5d:e9:04:a7:2e:f7:52:3c:
         50:31:9c:69:f3:51:62:fc:c5:1e:53:e4:a0:0a:81:99:a1:43:
         7f:12:14:9f:95:b1:59:a0:4f:7a:6e:7b:4d:e5:4e:23:fd:0e:
         98:4a:83:f3:45:a0:51:53:e6:a1:13:d4:df:be:fb:63:d3:ab:
         a3:58:e0:22:b7:cc:45:84:27:3c:6e:97:aa:26:97:26:10:d7:
         d5:c1:d8:8f:03:51:41:1b:b6:ca:dc:98:3f:e1:20:2d:84:5a:
         70:04:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----