Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.mft
File:                     a23199cb189fb1502d1df2754deb1df76afcb5ba.mft (raw, json)
Hash identifier:          dG3jx9+wIlEhr/e/JQKSm9tscP9rBN8gs3FpGisFiJg=
Subject key identifier:   0A:E5:50:96:B9:09:B6:F2:19:27:43:E9:78:40:BA:B8:06:A6:E1:A6
Authority key identifier: 44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA
Certificate issuer:       /CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
Certificate serial:       291BD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.mft
Manifest number:          0DFF
Signing time:             Mon 15 Apr 2024 10:20:43 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 13:05:25 +0000
Files and hashes:         1: a23199cb189fb1502d1df2754deb1df76afcb5ba.crl (hash: gVjso4uA1GB0P0M06gh3oUYaANRK4V3b+UuDCLEnUWM=)
                          2: fefccafb227c16dc1712df3f125a3f89ab526317.roa (hash: hOt/A+cxqbcVrmKvs72Ii5LGse7EJe3uv+ousPbxBgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2694098 (0x291bd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 13:05:25 2024 GMT
        Subject: CN=2e402945346357f8299495783e8cd3b076ea99b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:df:df:3a:0a:8b:8b:26:31:0a:1a:0d:b3:f0:
                    df:6a:bb:3a:88:80:ad:0d:5c:48:ca:e4:49:c5:0a:
                    39:e2:44:a0:a6:48:d5:13:0f:50:57:89:22:a0:c7:
                    be:2a:a6:ae:2a:38:f8:cd:a4:1a:58:64:4a:6b:56:
                    4b:d1:2c:07:f9:03:38:a6:e0:2b:d2:87:7d:00:70:
                    9a:09:01:85:b2:40:96:57:03:b1:3a:7c:87:19:41:
                    cf:f2:26:67:5d:f0:0b:23:e4:11:02:24:65:26:13:
                    cf:ca:dc:55:f8:a3:29:cf:7e:ee:d8:6a:0d:85:c8:
                    8c:cf:c2:ab:2c:52:94:f7:63:4a:3a:12:6a:a8:80:
                    a0:fe:16:3a:68:b1:a0:d7:5f:24:c6:38:7b:b4:0d:
                    85:ab:7f:45:30:26:80:82:c9:a5:a7:a5:b3:8d:1e:
                    19:45:fd:ed:48:49:53:9c:2c:6a:b9:b3:a6:4b:f5:
                    ed:dc:39:31:fd:d9:31:15:bc:b1:04:9e:c7:86:d6:
                    10:ad:0e:9d:9f:ee:27:44:b0:c7:da:d4:90:2e:31:
                    a9:d9:64:d2:ed:42:4e:65:25:10:11:91:56:4b:30:
                    0a:fd:d4:d4:08:29:58:bd:ef:01:43:d2:be:9d:6c:
                    45:6a:f7:9d:1b:cf:28:4f:4a:9d:2c:8c:7f:28:d5:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E5:50:96:B9:09:B6:F2:19:27:43:E9:78:40:BA:B8:06:A6:E1:A6
            X509v3 Authority Key Identifier:
                keyid:44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:59:6e:f3:97:9f:16:18:06:05:5f:19:5c:7d:79:fc:c1:ee:
         8b:4a:df:0e:e2:40:b2:f0:39:2e:03:e7:1f:cd:b7:92:5c:18:
         24:bb:70:d3:48:a9:64:8a:30:ac:dc:e3:b7:68:96:df:d3:b0:
         f3:78:64:ac:8d:e7:fd:0a:46:6c:16:96:a4:a6:a9:eb:00:b9:
         93:e5:4d:9f:28:e1:67:6d:a5:8f:a5:2a:c6:81:fe:c7:5a:85:
         fe:09:ba:0e:b7:81:73:cc:26:d4:eb:5a:ea:42:d6:1a:be:46:
         0e:38:42:4e:de:e6:c6:29:e5:53:6a:76:45:0d:ba:68:23:ab:
         6f:8a:47:3d:89:9b:4b:58:75:56:95:50:75:e8:73:c9:a4:26:
         a8:95:cc:5f:ca:7b:e9:8d:1f:4c:c8:12:1d:8b:91:1e:94:83:
         fc:70:3a:18:16:88:9e:a3:44:aa:58:8e:0c:b9:31:2f:51:ae:
         ee:2c:1f:4f:c5:ce:60:96:48:af:d0:29:00:77:bb:28:f6:81:
         bc:f9:c8:e4:d2:1d:a3:f5:1a:29:a8:8c:43:fc:d1:69:a1:79:
         08:b2:cb:af:e4:03:b4:b8:53:1d:ce:51:24:86:04:03:53:bf:
         3f:32:c3:79:25:23:75:32:05:cc:b9:5d:e4:b9:3b:45:45:17:
         d0:47:2b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----