Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.mft
File:                     ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.mft (raw, json)
Hash identifier:          A+sZGbZVc9I/WeREemsBS3kAhUX3ynKDhuzn3MI1dj0=
Subject key identifier:   17:F1:13:4F:22:53:D6:0D:E2:EA:CD:67:DC:4F:3C:90:68:C1:CF:A4
Authority key identifier: 58:69:D0:57:05:08:32:46:08:EE:2C:6F:83:08:52:C3:1B:4A:08:ED
Certificate issuer:       /CN=ecc9a7cf8cd28da7666e8648a4847d34d878fdcd
Certificate serial:       296BDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.mft
Manifest number:          0DFD
Signing time:             Mon 15 Apr 2024 08:21:07 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:26:16 +0000
Files and hashes:         1: c882212adc35de25283a5072f0336eb865e8c63e.roa (hash: 2N3gxjrwztBDtUk3IaOo9TKhuurlhwVKghXOJPYp6Xs=)
                          2: ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.crl (hash: 7A4ejTKc/NQ0Oa8Ty8zJLwi1Bh3wpHBqtFhkcCor1Rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2714587 (0x296bdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc9a7cf8cd28da7666e8648a4847d34d878fdcd
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:26:16 2024 GMT
        Subject: CN=2cdb2eb8690948b77ade90130f8f408df4a75c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:d7:ea:8c:1d:10:e2:34:03:ce:0e:a0:4c:
                    0c:c3:7b:17:de:49:b4:d7:7a:5d:71:67:c8:24:ad:
                    b1:cd:31:b0:58:7a:01:31:e6:7d:18:e9:6d:b5:eb:
                    78:d3:25:1a:97:b9:2d:41:cc:6b:95:57:de:d9:5b:
                    5a:63:90:ba:9a:e0:da:d5:81:3f:d3:f1:34:e2:a9:
                    b5:f6:f1:19:4e:3c:cf:48:9c:df:8b:51:21:81:45:
                    aa:bf:46:a0:49:93:d7:53:ae:a6:ec:57:56:2c:bc:
                    e9:69:af:9a:7c:43:75:05:72:85:6e:47:62:46:8e:
                    8b:70:f1:d8:e5:ed:7d:b6:a1:d9:b5:19:ea:94:dc:
                    36:ba:80:b6:ad:a4:d0:df:df:56:fe:04:37:44:a7:
                    e3:60:ad:ba:28:ea:fa:05:a9:e9:83:f8:33:c3:09:
                    6f:ce:74:18:1b:54:da:67:83:01:20:75:b1:5c:2d:
                    2d:8a:db:15:7b:9c:11:02:6c:d3:25:ca:50:f3:cd:
                    9a:05:a3:2a:ab:59:e2:7d:fe:b0:27:1e:89:a3:9e:
                    1c:b2:72:19:0d:33:08:43:eb:51:f9:b5:ae:ec:a6:
                    bf:97:35:96:7e:b2:ac:c5:72:43:c9:9f:1d:b9:61:
                    1c:fd:15:dd:17:74:b5:b7:08:5c:12:14:64:fe:27:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:13:4F:22:53:D6:0D:E2:EA:CD:67:DC:4F:3C:90:68:C1:CF:A4
            X509v3 Authority Key Identifier:
                keyid:58:69:D0:57:05:08:32:46:08:EE:2C:6F:83:08:52:C3:1B:4A:08:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:c1:1d:6a:fd:6f:01:1a:5d:8b:b4:ad:6a:85:f6:c6:2e:
         73:38:47:5b:19:8e:00:34:71:fa:be:71:a5:28:6a:4c:06:f4:
         30:5d:9c:50:bc:91:f9:a4:ea:35:33:13:67:db:c5:3a:bb:68:
         55:d5:68:02:65:d3:16:3c:c8:cd:78:9f:64:1c:f6:67:1e:56:
         0f:5e:09:ae:53:a6:5f:48:21:c2:42:6a:1f:16:e6:26:31:4a:
         b8:9f:25:43:5f:09:92:7e:6a:51:c0:62:bf:c5:c0:64:c6:14:
         29:df:68:d2:b2:18:17:71:db:e5:9d:3d:cb:e5:6b:96:bf:98:
         82:a6:9c:19:44:ae:59:a7:e8:e7:8b:ab:7b:4d:47:d0:31:cf:
         cd:5b:4c:24:8a:6d:7b:a6:cc:2e:36:31:8e:16:ba:99:9e:f6:
         c4:4c:a7:fa:c5:51:ad:59:44:22:e2:e8:92:75:72:87:df:8b:
         c4:30:d2:67:36:59:bb:61:6b:62:74:a7:2e:a2:af:66:23:fc:
         4a:ea:86:c7:12:d3:32:b6:8e:39:45:a4:46:20:e2:32:6c:e7:
         05:61:71:80:b8:0c:12:36:ba:21:dc:d9:3b:74:64:38:b2:ad:
         0b:c8:b8:64:cd:43:2a:b1:2f:bd:b5:b0:94:b3:46:41:3e:a8:
         6a:8a:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----