Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.mft
File:                     a1d28f003bf3d4549fc8d703d5766ee22681fdb4.mft (raw, json)
Hash identifier:          JgBgi/BtSAv48JrC/g4iabF6jQPp2NFqirpGNIcU05U=
Subject key identifier:   46:FA:D6:10:94:A7:91:BF:2A:54:A5:59:2E:AF:52:71:01:72:70:81
Authority key identifier: 09:BD:30:26:1F:B0:3B:3C:61:C5:20:F5:9C:F3:1B:A3:57:D4:5D:83
Certificate issuer:       /CN=a1d28f003bf3d4549fc8d703d5766ee22681fdb4
Certificate serial:       28F550
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.mft
Manifest number:          0E01
Signing time:             Mon 15 Apr 2024 11:21:47 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:52:18 +0000
Files and hashes:         1: 5be81d6671eddbbfae9b88f93397dd0853872404.roa (hash: U+6v4hDStd8QfdCUP6veH1E6TKj6GRIqHdxeMkHeysk=)
                          2: a1d28f003bf3d4549fc8d703d5766ee22681fdb4.crl (hash: VvTfiBprHYpSzqbtAYjykxF4gf46i67ZoQjm6t+y9sA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2684240 (0x28f550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d28f003bf3d4549fc8d703d5766ee22681fdb4
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:52:18 2024 GMT
        Subject: CN=ef6f87a6113aec05910b5929dc14fa9de0990ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:bd:7b:78:4d:6e:b5:c9:e4:de:cd:c7:c1:
                    2e:69:c2:be:2b:63:d3:55:aa:eb:10:48:4b:00:b9:
                    fb:23:94:7d:08:57:67:88:5c:b2:48:75:fb:33:3a:
                    87:bc:72:c6:53:84:65:96:f2:bc:11:8b:f0:ba:97:
                    75:63:aa:7b:77:f3:2c:41:9c:e1:19:c2:a5:3f:5d:
                    0e:71:6b:d6:d1:e7:b2:e4:e5:aa:9b:6c:cb:76:bd:
                    1d:6d:22:fd:bd:0b:b5:4c:4b:65:42:26:8b:67:83:
                    56:c5:c3:e9:8a:96:eb:ec:e9:6c:a4:bc:55:36:ea:
                    3d:2b:b8:36:d3:a7:4b:c8:50:40:28:ac:78:ac:bb:
                    bb:9c:e0:60:1d:3c:30:7c:0e:cc:f5:9d:e6:f2:f1:
                    86:cc:27:c1:f7:0b:a2:6c:fd:de:d7:88:4d:ed:f5:
                    29:8c:a9:a7:1d:81:21:e4:dc:97:75:23:a1:2f:9c:
                    fd:28:79:a3:c3:c8:2d:e5:c2:65:33:7d:c0:12:65:
                    3f:b5:49:a6:71:ba:46:c3:f3:d7:dc:23:cf:b2:79:
                    e2:78:11:5a:13:2a:fd:0d:d6:1e:de:b7:87:2a:b6:
                    d5:db:75:1f:a4:ba:37:f9:ea:94:77:7c:74:cc:af:
                    94:b9:e0:47:3a:8b:35:7a:49:77:b9:5f:2b:41:ae:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:D6:10:94:A7:91:BF:2A:54:A5:59:2E:AF:52:71:01:72:70:81
            X509v3 Authority Key Identifier:
                keyid:09:BD:30:26:1F:B0:3B:3C:61:C5:20:F5:9C:F3:1B:A3:57:D4:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0a:b2:34:09:34:c9:8a:02:b5:74:b8:c2:87:29:e5:38:04:
         af:b8:3e:4c:c9:57:a0:11:cb:c3:98:81:24:2a:bf:67:ec:45:
         e2:89:a6:60:b9:3a:1f:fc:07:1d:dd:a4:47:2c:e9:dd:22:63:
         d1:9c:a7:94:94:2d:a2:26:f3:84:5f:ff:03:16:8e:06:6b:d3:
         e6:0d:3f:67:96:ab:b7:b7:2c:ae:77:bb:78:ea:91:e6:89:db:
         a5:f5:b7:ef:24:ad:5f:7a:39:71:99:65:ab:6b:ae:48:5a:93:
         a3:27:c6:c5:22:2d:a4:c8:4f:1d:08:e1:f9:78:9a:61:07:bc:
         ae:6f:b5:fe:d8:3e:e9:d7:d7:90:be:34:69:43:d7:5e:3c:5c:
         e0:c3:f3:70:16:ed:43:62:24:33:a3:f2:71:35:67:20:3e:4d:
         54:ae:dd:8c:e9:ec:85:85:77:74:df:e2:f6:f0:1c:5c:b5:fa:
         dd:ad:e0:15:7e:06:57:f7:fc:bc:9a:c5:a2:f1:d2:0f:7c:1d:
         b8:19:f5:20:d9:99:d9:54:00:83:a8:72:f8:1a:49:6d:a6:83:
         de:56:27:e5:ae:a8:43:32:a7:9a:65:f3:0c:62:f3:b3:c6:ec:
         16:53:6d:21:27:9e:54:23:55:6b:19:6b:8e:cf:d1:75:ef:b9:
         48:2d:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----