Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba8b1829-2400-4831-8f7a-2852f5ee0403/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.mft
File:                     df62f212d9864f0fbcb2d200ea003b0bf1fc632f.mft (raw, json)
Hash identifier:          48uASy/3+xZ6HU3YA9E2MMbxKlpP5dTjvSlPGyvzHeM=
Subject key identifier:   2C:49:48:4C:5D:91:DA:97:09:CD:B3:04:9A:E5:60:00:F6:FC:29:66
Authority key identifier: AA:74:FB:80:CB:EB:D9:4E:0E:38:A1:6E:77:14:71:04:D1:59:80:27
Certificate issuer:       /CN=df62f212d9864f0fbcb2d200ea003b0bf1fc632f
Certificate serial:       1F26F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba8b1829-2400-4831-8f7a-2852f5ee0403/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.mft
Manifest number:          0DF9
Signing time:             Mon 15 Apr 2024 11:21:00 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:07:18 +0000
Files and hashes:         1: b501df27279d161643696563df27f2978b4663d7.roa (hash: zG/S/OiGf4JC6rZYgje7aNULY/Yz16LDRPxxI2jDo1Y=)
                          2: df62f212d9864f0fbcb2d200ea003b0bf1fc632f.crl (hash: p7ztI0yWE2LniGZoe58hJlhXVlnUQF6qYc1iSEnPHjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041586 (0x1f26f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df62f212d9864f0fbcb2d200ea003b0bf1fc632f
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:07:18 2024 GMT
        Subject: CN=89f468bf803a4e2004d6a5c4d0c0bcc5e7b9e1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:23:0f:fb:8a:f3:a8:17:4c:b5:16:d2:2a:
                    0a:40:19:bc:5a:d3:91:07:04:1f:e5:89:0e:66:e7:
                    9e:28:5e:19:75:0c:30:0a:c9:b2:c3:0a:9a:b2:4e:
                    e5:5c:b5:41:ae:e7:04:79:b6:9d:90:24:73:87:71:
                    cb:41:63:27:85:43:96:3a:35:fe:99:aa:06:c0:a8:
                    65:1d:36:fb:21:d1:6a:ef:1e:62:0d:2f:6a:ed:fd:
                    04:f0:b0:5f:06:80:58:b4:4a:8c:0e:95:8f:8b:d4:
                    4b:c8:25:8c:f0:7c:1a:40:cf:d0:f9:6f:1c:d9:24:
                    c1:52:5c:42:fa:44:cc:72:31:24:f5:90:61:c0:f6:
                    47:02:c3:be:e2:63:e7:e1:98:6a:83:26:c9:c9:be:
                    9c:fe:38:15:b9:98:4d:6f:fd:8c:3f:38:25:1f:e8:
                    7b:10:ae:90:29:2e:a5:f3:3d:93:46:7d:af:1f:4a:
                    a3:3f:03:48:2c:78:1c:ff:7a:a9:a6:b7:44:70:60:
                    2b:1a:11:be:89:a5:eb:fc:be:ab:3d:39:b2:df:d0:
                    fd:69:c1:a9:5e:59:a2:27:f7:7e:79:ec:9d:35:00:
                    97:5d:48:4f:10:0b:ec:db:ce:39:69:c2:5d:27:3a:
                    71:71:ae:c1:b2:76:47:3d:02:25:7a:80:44:6b:70:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:49:48:4C:5D:91:DA:97:09:CD:B3:04:9A:E5:60:00:F6:FC:29:66
            X509v3 Authority Key Identifier:
                keyid:AA:74:FB:80:CB:EB:D9:4E:0E:38:A1:6E:77:14:71:04:D1:59:80:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba8b1829-2400-4831-8f7a-2852f5ee0403/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba8b1829-2400-4831-8f7a-2852f5ee0403/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:32:0a:97:4e:2b:6b:4c:5c:6b:b5:93:f8:f3:2c:cd:59:3c:
         b9:a8:a4:6a:f5:ac:db:da:d9:4a:1c:52:98:58:29:47:a1:8a:
         40:23:25:f6:02:3e:8d:f1:f7:b7:ff:a7:8d:d5:33:59:57:42:
         e6:ee:e3:c9:13:11:9c:04:f5:42:ab:f9:4e:10:fa:4d:d3:79:
         ca:d2:87:bf:3c:9b:fc:b6:c5:75:80:d0:cc:e1:0f:c7:97:76:
         fa:9c:aa:4c:e2:aa:9c:58:bc:62:a0:f0:95:fc:fb:c2:10:0a:
         ce:22:85:f2:bb:77:71:1d:b8:2e:e4:d0:a5:dc:0b:bb:3d:c6:
         96:20:dc:66:24:fa:49:8c:fd:e4:8e:f9:2c:a2:0e:a6:a1:1e:
         b2:1b:7b:3d:e4:db:fc:09:e5:44:6d:fd:6e:dc:9e:b0:5a:9e:
         62:65:7b:55:d6:37:7e:4b:9c:39:65:fe:38:ec:0f:cd:6a:15:
         68:cd:52:52:d6:ae:41:e1:95:0c:47:ac:7a:84:98:1e:90:b2:
         37:fe:f8:07:1f:19:b3:8c:c2:80:c6:7c:d7:70:2d:92:d2:af:
         a0:05:44:ea:ef:fc:05:79:05:e0:7e:96:a8:e0:f6:9f:ad:b4:
         ae:bc:56:b8:c3:7a:21:73:8e:17:96:77:8f:a6:54:00:1e:6d:
         fe:b3:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----