Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aeb924ad-5aa3-421d-a0e4-82ad7f11eebf/a09df5d43f71e6cb12a3afb5d5b034307f575de7.mft
File:                     a09df5d43f71e6cb12a3afb5d5b034307f575de7.mft (raw, json)
Hash identifier:          g2ZtSAJW/OdvyPKRrr7e7VpnX+RjfFJmBn/esj+9784=
Subject key identifier:   9F:EE:B1:3A:C7:C2:80:A3:45:CD:12:61:C8:D5:A3:27:17:58:9C:87
Authority key identifier: A2:0C:87:C7:9F:FC:9C:DC:C4:33:7C:BE:C0:E3:5D:D9:AF:8D:11:2F
Certificate issuer:       /CN=a09df5d43f71e6cb12a3afb5d5b034307f575de7
Certificate serial:       278F76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a09df5d43f71e6cb12a3afb5d5b034307f575de7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aeb924ad-5aa3-421d-a0e4-82ad7f11eebf/a09df5d43f71e6cb12a3afb5d5b034307f575de7.mft
Manifest number:          0E18
Signing time:             Mon 15 Apr 2024 05:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:54:17 +0000
Files and hashes:         1: 2b0173010d4c258142183b0b589e1e4757cb5f28.roa (hash: Q7Jy0xRhLIZkHyDpcmH2IeJs4GsogwQZQ+PaRqiAbgA=)
                          2: a09df5d43f71e6cb12a3afb5d5b034307f575de7.crl (hash: U7hNlY1tBmyrs/5tUcr3DsJJslgcUW92gJ2Zjm/lhuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2592630 (0x278f76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09df5d43f71e6cb12a3afb5d5b034307f575de7
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:54:17 2024 GMT
        Subject: CN=fe8ed19da9777f084ec97e670689d893aa02404a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:c0:f8:ce:b7:ad:ca:3a:e1:06:6f:44:54:
                    02:ab:91:0f:41:e5:03:c2:8c:23:df:60:87:ab:19:
                    82:66:ee:84:ec:fe:95:d1:c3:26:f4:dd:f1:b7:15:
                    3b:21:7e:65:85:7b:b3:d6:5e:d9:e5:83:01:ad:fe:
                    97:99:c2:ad:14:a8:93:6b:7c:c8:f0:ea:7d:7c:85:
                    79:46:d2:73:f2:ea:94:c6:d6:f5:df:d1:3f:a9:4d:
                    5f:62:62:75:c5:91:67:fc:bd:f4:d7:53:52:c0:d1:
                    5d:e1:a0:9d:ef:b3:8c:56:e6:fd:88:f9:12:75:9b:
                    20:ad:55:ad:4b:82:88:0f:0a:5b:4f:e6:21:06:7d:
                    d0:7b:9f:77:fa:7d:be:44:64:28:16:3f:95:40:53:
                    c6:d2:1c:c9:c1:11:6d:c6:1e:2b:82:68:0d:4f:8d:
                    b1:3d:32:42:d7:3b:f4:80:17:ef:83:6a:6c:32:4a:
                    51:76:52:80:99:fc:1b:5a:80:06:67:f3:54:a3:08:
                    11:10:fa:98:53:be:06:f0:5e:bd:bd:9f:e7:00:c4:
                    20:92:d6:c7:2e:ea:fa:f2:3b:69:19:98:e3:d6:14:
                    82:27:13:13:ca:fd:d5:d7:82:f0:7c:73:20:7d:ff:
                    15:14:98:a1:01:47:da:60:de:9f:03:cc:0e:e1:6c:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EE:B1:3A:C7:C2:80:A3:45:CD:12:61:C8:D5:A3:27:17:58:9C:87
            X509v3 Authority Key Identifier:
                keyid:A2:0C:87:C7:9F:FC:9C:DC:C4:33:7C:BE:C0:E3:5D:D9:AF:8D:11:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a09df5d43f71e6cb12a3afb5d5b034307f575de7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aeb924ad-5aa3-421d-a0e4-82ad7f11eebf/a09df5d43f71e6cb12a3afb5d5b034307f575de7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aeb924ad-5aa3-421d-a0e4-82ad7f11eebf/a09df5d43f71e6cb12a3afb5d5b034307f575de7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:51:f3:b3:47:7c:68:9f:d4:87:5c:ae:7a:44:53:30:0b:06:
         c5:ec:cf:29:f1:a8:11:7b:e2:5f:49:81:50:3a:26:71:8e:4e:
         38:d2:25:73:19:7c:0f:74:93:c6:a7:12:b9:41:7e:8b:04:d8:
         c7:7b:25:a9:20:e7:75:b8:06:d1:fd:c3:89:7e:d3:41:b1:89:
         31:74:61:73:18:1f:80:d3:63:7c:02:36:6b:46:5b:5f:0d:24:
         aa:d4:30:cc:6a:55:f2:89:33:0e:db:b7:59:6b:ec:cd:f4:b9:
         77:e3:82:a7:44:62:34:05:69:5f:53:94:36:18:9d:18:d9:3a:
         c6:2f:5a:4a:b0:96:0c:b2:ab:da:07:74:d2:03:02:9c:17:9b:
         1d:76:aa:f6:b5:e9:32:9c:92:07:3a:f6:ad:0d:c7:d6:76:aa:
         71:bc:28:92:1f:6d:09:ab:65:7c:a6:97:d8:86:25:3f:5b:e5:
         15:b0:94:df:1c:35:60:06:f1:f9:3b:a3:a7:50:af:de:ab:d4:
         66:76:0b:20:21:84:a9:5d:07:6a:56:2a:f8:5e:35:91:11:9b:
         ac:a6:77:ef:1f:af:e0:2b:50:81:8b:5e:6e:c2:43:d7:ba:55:
         3b:98:d0:50:b0:16:f0:6d:f8:68:28:94:b5:06:38:3c:25:29:
         0c:9c:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----