Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.mft
File:                     aba642079eab1077bf601b1f363bfe1e8764e8d3.mft (raw, json)
Hash identifier:          fTSARao+Ho9LK0419Kx4gSN+i3CAHDB/Wv+u2m0cEGg=
Subject key identifier:   08:37:73:DD:2A:67:F8:D9:27:12:B7:A8:DB:87:DA:2A:5D:03:7C:0D
Authority key identifier: 67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2
Certificate issuer:       /CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
Certificate serial:       2709DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.mft
Manifest number:          0DFD
Signing time:             Mon 15 Apr 2024 04:20:37 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 07:00:26 +0000
Files and hashes:         1: 83312ab6c8ddf79c47e9beadb2e6fd6fd3570e9c.roa (hash: ElsKLEumWwfLxQRernR5Hgn0gBK184cvS53YBDAqx+c=)
                          2: aba642079eab1077bf601b1f363bfe1e8764e8d3.crl (hash: cVBt1ibPLeFx7rmfQQ5MwJxKxbrdSpCkS11IiMut0AA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558429 (0x2709dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 07:00:26 2024 GMT
        Subject: CN=bc10be43b56d42ca7769f77cbd9c063e1e447d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:52:7b:ef:73:fc:70:5c:a1:f7:ae:0d:c3:
                    08:1f:2e:36:0a:a6:5a:6f:cb:d2:50:cc:3b:89:e3:
                    2a:ca:2f:37:ca:18:17:f1:af:e4:7d:c6:e8:51:6a:
                    f4:5b:39:0e:f5:17:a7:6d:fc:f4:93:26:e0:83:e8:
                    91:53:49:8b:82:43:e9:dc:b9:c6:55:c7:46:f2:1e:
                    dd:fe:44:a2:80:6a:80:cd:c2:43:41:2b:2b:c1:41:
                    80:b4:70:75:87:31:08:8e:34:04:72:0c:d8:43:ad:
                    71:45:15:a6:43:67:fd:ca:cb:6d:53:19:fc:e0:f7:
                    8f:04:86:50:63:90:a6:b0:dc:70:b7:87:d4:be:22:
                    40:93:09:c3:6f:4a:06:91:db:a6:69:df:a1:7c:f3:
                    ff:ef:5b:d9:21:44:e1:bf:5b:52:82:84:9b:4a:ae:
                    ad:d7:31:af:72:0a:66:06:47:05:4f:9c:b1:fc:56:
                    bb:a3:e7:19:73:bf:b7:99:51:84:09:29:ff:8e:6b:
                    55:da:9f:f2:6e:05:03:b8:67:e5:53:01:bc:67:3e:
                    9c:5f:a3:5a:2d:d0:d4:41:25:2c:74:61:aa:7a:06:
                    7b:27:66:e0:49:33:94:dd:7f:ef:63:e7:40:c2:53:
                    04:54:72:03:d6:95:fb:e7:b3:44:87:e2:34:ad:34:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:73:DD:2A:67:F8:D9:27:12:B7:A8:DB:87:DA:2A:5D:03:7C:0D
            X509v3 Authority Key Identifier:
                keyid:67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0c:da:7d:b4:aa:35:c6:3e:61:d3:2c:52:5b:e2:0d:c9:9d:
         bb:8a:00:6c:6d:5d:09:39:1d:1a:1e:98:66:8b:8c:9d:80:9f:
         4a:6c:9c:66:e3:59:e7:d1:a6:c8:6e:10:72:68:b9:02:b7:0f:
         88:a4:be:c4:04:3d:05:ff:17:0e:a3:7b:11:14:55:98:9f:5b:
         01:74:00:89:9f:78:10:a6:00:23:29:d8:50:3f:a0:5f:71:a2:
         30:3a:22:c7:ff:1a:ac:ba:7b:b6:fd:f0:db:6b:c6:f4:9e:25:
         ab:0f:41:55:e9:3f:ed:fa:c8:12:cf:e6:61:71:ac:b7:bd:ec:
         23:b3:00:dc:17:eb:d2:c2:a4:c3:31:a0:4b:40:15:c1:e7:d9:
         5d:16:8e:5f:e6:f4:07:c7:23:a6:27:82:e4:8d:a8:7f:bd:7e:
         97:b4:15:8b:6e:9a:91:28:9f:bc:18:e6:39:e9:76:10:6d:10:
         72:01:43:33:04:6e:e9:66:68:84:32:31:02:60:6d:33:c9:bd:
         fe:58:fc:b5:c4:eb:0c:4b:63:b7:b5:bc:8d:a8:59:16:12:31:
         08:63:cb:5d:4e:38:65:2f:cf:a1:51:a4:e1:ae:cd:d9:86:d5:
         df:6d:f7:02:2c:e4:0b:a8:88:95:1b:1e:d9:28:ff:a6:34:66:
         c3:95:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----