Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.mft
File:                     2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.mft (raw, json)
Hash identifier:          oj4xAy4UmrK3ATssO9tM2I6+YQO+Gm/tBEddih6Jxpk=
Subject key identifier:   B6:D3:90:18:FE:63:22:6F:F8:A7:0C:27:94:A7:FA:6B:D8:06:FB:37
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Certificate issuer:       /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial:       2731C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.mft
Manifest number:          0DFA
Signing time:             Mon 15 Apr 2024 01:21:24 +0000
Manifest this update:     Mon 15 Apr 2024 00:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 03:20:17 +0000
Files and hashes:         1: 09cd226c8eece830715f778a696e9c2dfc111878.roa (hash: r7kST3heDreghSbKVzgSSrTBZOiV/CVpvnv//8F+8Vs=)
                          2: 2ba5c4b3770dca3d43a0db812bf768c667bf6a7b.roa (hash: XM8Dcs6EImEZVUJB5rMdb7czHTLpRE2YHFtHpy6fuGY=)
                          3: 2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl (hash: geCQPDNsBxxz5UX+ahMkbLY+tAFIrjOv/Pk4CcpgNp8=)
                          4: 5a0f008ffdd9009ef065a621c1fa4550193edd52.roa (hash: p2rddfTGtr8yYsKb+IVU27NuD2ndE/I27ovaLEr/dPg=)
                          5: ad8e4b751d9d6eeed206e7733db68dd20ee3c6ce.roa (hash: FtsTx8iJhKyAJ6TBRgvAYOVEetoJO2xhMS0tTc+3/iE=)
                          6: ca6ef0d67696b48e17dcfeb980472783aef10124.roa (hash: z1yWgr2+0+dgkmNi07GKi000gjqFUhhGqPfGM6I8cHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568642 (0x2731c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
        Validity
            Not Before: Apr 15 00:20:17 2024 GMT
            Not After : Apr 18 03:20:17 2024 GMT
        Subject: CN=b859b4fb7572aea308ab290eade6aff25502dcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:41:2c:21:64:9b:c9:22:d5:fa:05:78:b5:
                    f8:08:22:a4:28:18:78:a7:e3:3f:b0:94:09:75:d0:
                    c5:5a:3b:c9:1c:34:8d:a3:5f:34:d5:f4:06:17:35:
                    12:d6:eb:f8:f6:8b:e5:58:86:20:05:47:c5:ff:72:
                    93:fa:aa:bd:6b:17:d8:3b:84:e8:36:80:78:11:ad:
                    ad:bb:74:5a:9e:7b:e3:b7:0b:b0:68:59:89:46:a3:
                    a9:b7:89:f8:d7:68:e8:60:3e:91:22:5c:9b:3c:69:
                    90:0a:42:66:e7:1e:a5:5b:24:87:61:8c:b5:8a:46:
                    0e:9c:92:57:47:10:e6:a7:cb:62:f3:de:69:08:3a:
                    35:bf:15:3c:5a:42:09:1b:2c:ac:4e:36:c6:88:57:
                    14:c8:16:c1:bd:99:f2:b5:93:16:b6:70:c5:f8:ab:
                    dc:89:7e:c9:64:9b:65:cd:a6:2e:cf:83:30:a9:ca:
                    f4:f2:d1:15:1e:c8:ae:ff:b7:2e:98:b5:81:fd:9d:
                    8e:cd:9c:67:80:6d:7f:76:05:d6:6f:3a:0f:01:e5:
                    d2:56:1e:00:66:53:d8:f7:bc:ab:3c:a8:01:2c:3e:
                    24:61:b7:a0:62:b5:38:ff:7c:07:f3:d7:fa:d6:96:
                    0c:da:83:2e:20:a3:5d:d3:f8:5a:34:92:1d:5c:52:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D3:90:18:FE:63:22:6F:F8:A7:0C:27:94:A7:FA:6B:D8:06:FB:37
            X509v3 Authority Key Identifier:
                keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0e:8b:5a:8b:df:b9:0e:6e:a0:72:fc:f1:29:74:e2:45:3c:
         df:7e:70:76:7d:cd:b7:2a:ee:1b:e1:e0:5b:8e:58:b3:07:45:
         26:b7:8c:17:0e:51:6b:3e:c5:ee:d2:8a:30:73:5c:99:5d:3e:
         b8:3e:5e:e0:01:40:b9:0e:b6:3c:44:21:79:fe:ba:57:4d:88:
         79:7b:0e:6e:31:bf:51:4b:55:8d:8c:2c:21:4e:81:ab:ea:dc:
         94:5a:b3:f7:83:42:0c:9e:6c:47:50:ba:48:ea:14:20:94:0b:
         4c:e4:82:e6:72:52:fe:a0:5c:ad:be:81:5b:cd:51:76:31:33:
         b4:6d:34:3e:8c:b0:48:51:d5:ee:6d:3c:ac:b3:ed:f7:bc:b7:
         5d:99:a9:11:74:36:4c:67:2e:60:8a:d9:09:25:ea:26:7e:d4:
         c3:bd:d9:dc:34:98:88:c6:6f:44:0f:8c:d0:1d:bf:81:06:62:
         62:b8:a4:03:09:0c:ee:e9:6c:df:6d:7f:02:57:f6:b8:bb:43:
         9e:27:16:ee:80:73:49:86:23:80:63:83:1a:57:66:29:79:0b:
         72:e5:15:8e:03:e1:e1:46:a4:44:b7:7d:47:63:45:9d:a2:3a:
         65:53:07:23:5e:7e:a3:0d:30:2e:68:70:bd:0e:67:7a:3a:66:
         74:19:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----