Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.mft
File:                     6906eabd95def3829dbd18ad3f94145f4f04a9b7.mft (raw, json)
Hash identifier:          Ixsa0KwiDnPni86H8hXw55UQowOHuBgILebvE371rgo=
Subject key identifier:   2A:9C:68:95:A8:6B:CA:EB:F1:14:1C:2F:C4:19:6B:61:A5:42:B3:84
Authority key identifier: 5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36
Certificate issuer:       /CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
Certificate serial:       2803C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.mft
Manifest number:          0DF0
Signing time:             Mon 15 Apr 2024 02:21:17 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:46:29 +0000
Files and hashes:         1: 11f3a2315805edae4b2c7af365e20c5a10fcd4ef.roa (hash: YWdnHGHdhGDffVyjyWXpDCX753vXumpS0MVTsuGWm2k=)
                          2: 33e5cf9934d8b709380c5bc03422c0eefb29ef7d.roa (hash: 6urDWtCTTn02tSD5KJS4hloED4Jk8XeMoMUbWpPSzbo=)
                          3: 363942175914c2efe95252f73f78ca98082f680f.roa (hash: +AcRantmOfJd5ErI+XRupkOuMOfJmshoJlmKRKjyFYg=)
                          4: 6906eabd95def3829dbd18ad3f94145f4f04a9b7.crl (hash: HOkxEGdIZus+WpNZoCgr7+827lNM32uW6dwvSn6di2o=)
                          5: 7ca93900bb5b88e0095bfc4b41ecf6b89e8815c4.roa (hash: 5lGbBJK/t+iCXgGq3bsNvJ6YbAyYrZE5PpVSRBvEcGw=)
                          6: 8508610bb4afbd0c9dce58bd5c76fa0cf2eb59ba.roa (hash: lGccXBKnEK6aQmLTAbu0HseTCSleN6+qWfTUiiG60fs=)
                          7: dd4f4aab44f7d2af20621b62946b43359b8ef39c.roa (hash: W37S3vIUCQ4qSv53VHDQx4sE1SyMLeIx+X2eZkO8P9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622407 (0x2803c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:46:29 2024 GMT
        Subject: CN=25db498ddb219767286877309e9e9142cbf4f345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:6e:3d:0b:62:3d:13:fb:28:ef:63:45:60:
                    5b:e4:b7:e0:a4:c7:ba:a3:ef:da:9b:08:9e:36:77:
                    6f:d8:8e:0a:d7:b7:64:02:71:5e:2e:5b:c4:18:2d:
                    fb:17:e4:63:0e:f9:34:b0:c6:25:45:90:2a:e0:ef:
                    b3:1b:c0:ac:69:a1:a6:20:c5:95:ad:00:0a:6b:6e:
                    02:17:5b:33:7b:1f:27:06:db:b3:84:02:f7:03:2d:
                    99:6b:74:ad:f7:cc:14:e6:6f:b8:43:0f:ee:87:c1:
                    d8:c7:78:25:e6:84:dc:3a:8d:13:cb:d7:3e:d5:67:
                    5b:c9:cd:3e:4a:80:00:7c:b4:0c:ce:a9:b6:57:e4:
                    d1:3e:b5:8f:f3:fd:26:91:72:7f:d9:68:09:29:97:
                    3b:65:f8:e2:6b:6c:f3:82:e6:21:54:5b:24:82:54:
                    a6:15:40:74:c9:0f:ec:b6:23:ba:3a:d8:f8:94:e9:
                    20:f4:00:2d:dd:79:a3:f1:6b:34:2b:b6:ad:45:54:
                    22:1a:50:7b:93:c3:54:f1:4e:0c:c6:2e:84:53:89:
                    43:ea:ca:22:31:77:0b:0e:ca:a8:2e:b1:f6:06:d9:
                    34:0b:34:d4:c7:34:fe:d3:4a:7c:99:8a:b7:46:39:
                    94:64:ee:ad:67:3e:ae:04:c3:df:84:9d:23:de:42:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:68:95:A8:6B:CA:EB:F1:14:1C:2F:C4:19:6B:61:A5:42:B3:84
            X509v3 Authority Key Identifier:
                keyid:5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:38:9b:c6:05:ff:7b:b5:b1:24:11:61:e1:e8:37:9f:6c:b0:
         b8:fb:7b:21:25:c1:ae:0c:4d:77:ec:21:ac:f5:b7:1d:f4:c3:
         66:99:92:c9:0a:84:a4:97:5b:d2:da:b1:d6:dc:62:4b:a7:b0:
         12:b8:b1:24:4c:43:0a:6f:d8:ab:82:0e:44:0b:fa:f6:87:ce:
         ad:06:52:f5:1d:48:b3:16:4e:ae:d8:aa:64:67:94:04:3f:bb:
         f8:07:db:c3:97:e8:07:0c:7d:c9:5f:b0:bc:5b:1d:ae:b7:2e:
         36:bd:96:a4:60:da:2a:63:a5:57:12:d8:80:ba:61:fe:29:ce:
         2f:35:96:cc:b4:05:64:e1:ff:9e:14:49:76:d1:cb:89:f9:e3:
         6b:6b:db:0e:cd:be:44:b9:b9:c0:94:cc:d7:0a:d7:4e:a9:a7:
         18:71:5d:cc:ab:65:f7:de:56:67:23:ee:a2:2f:44:e5:cb:78:
         94:39:dc:99:4c:85:0a:60:ab:52:00:34:25:d7:4f:e5:7c:38:
         ea:6b:31:ff:9e:fa:6a:1c:3b:72:6a:7a:e6:71:b5:5e:84:84:
         1d:d8:46:b8:39:ff:29:3f:52:26:26:52:c7:fe:af:66:27:49:
         2a:56:62:8d:6d:c8:5f:55:8d:82:ad:ca:16:53:25:4a:04:7c:
         99:bc:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----