Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.mft
File:                     b14932b827e5b166c58065cb1f4068a039d95258.mft (raw, json)
Hash identifier:          9/RFvQ3EzQLoZYqKv8pq/ZaWJwb/WXMx2XLyjeRmsZM=
Subject key identifier:   10:29:07:11:92:F4:1D:09:AB:5A:9C:89:CD:FE:BF:D7:BD:C4:06:AE
Authority key identifier: D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
Certificate issuer:       /CN=b14932b827e5b166c58065cb1f4068a039d95258
Certificate serial:       293B8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.mft
Manifest number:          0DDB
Signing time:             Mon 15 Apr 2024 04:21:07 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 04:21:26 +0000
Files and hashes:         1: 48567b542da20eb12b6c7277010246f0c427ae3a.roa (hash: 4izQs+Nb3apyvZ/mfUy8z3TrpxXnICAv59XK1Gv6/UM=)
                          2: 4d950754480d3b97e797f2c0a7d4ad742c7f3f87.roa (hash: D2ezt1QuVG2iRZh8MetLLJurSeLLyK9mZ07bpS5qftc=)
                          3: 56c5e0510a14e9681863c8ab46bf16c2cecc0275.roa (hash: U8VM6zrNEDZmyIZp5oDvUFTmI1zU4UJKn9fJy09RRlw=)
                          4: 677c39959be330812b2cc5468a107b481de8d1da.roa (hash: 5nzY/xCGmnENHM3sLn1VowkpvEAtDgYKOYJ/Yj8+1m4=)
                          5: 9218e3f585fd08a82c2883a0a1e4ce426f3dd2ef.roa (hash: Yg61DqiHOrtD1X47duojm3bbi7QsqDKW67T3Iupm69s=)
                          6: b14932b827e5b166c58065cb1f4068a039d95258.crl (hash: QJQGAa0aKXGXln12noVbtPQ9Hyq7vYrzBpxxjhPt3Ew=)
                          7: c0561fdfb7ff7900508ecf73fbd5d76614ffefda.roa (hash: IlZ7h99ZXT+wkdwkGWqEomqkXxCmrd2kRMXcaVaI44s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2702222 (0x293b8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14932b827e5b166c58065cb1f4068a039d95258
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 04:21:26 2024 GMT
        Subject: CN=b11c30215f5ae34f07594dce359553f63c56a984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:d3:f5:5c:ad:b6:b9:34:c3:16:b8:bc:36:
                    3d:42:6d:17:e7:22:3b:61:30:db:77:bd:17:7a:3e:
                    bb:4b:c2:58:b8:9f:6f:04:42:e0:46:ae:98:2c:71:
                    90:96:94:6a:35:b6:f2:48:5a:fe:de:bc:e8:b1:b8:
                    b6:71:27:30:eb:eb:9f:35:70:f2:2f:f8:62:99:60:
                    fc:61:c1:20:36:a2:04:58:71:f9:fe:06:2d:cf:47:
                    00:42:87:35:9b:88:81:08:72:95:28:d9:cc:2e:fc:
                    f5:6d:9a:9d:70:fa:0e:c3:08:03:ca:de:35:5d:58:
                    d4:04:6a:eb:a9:62:57:9c:6c:9a:bb:ee:6b:82:ed:
                    11:2e:02:67:91:38:8f:30:cc:e8:17:58:71:7c:a8:
                    ff:cc:95:4a:45:5a:bb:59:86:ad:be:f6:27:05:b9:
                    d7:60:ff:69:8c:27:96:c9:ac:e9:54:8f:a7:e0:20:
                    d4:ef:31:bd:62:f4:9d:be:c6:a7:c4:ad:ea:46:ad:
                    61:f3:ac:0a:f5:04:f8:44:e9:ce:2a:bd:89:fa:50:
                    fa:38:9f:4c:50:bc:25:63:91:23:b2:1b:a7:cd:64:
                    c8:e7:a9:6e:5a:f8:63:49:58:c6:4b:ac:0f:ba:f7:
                    b9:ac:2d:10:42:68:6a:20:1b:bd:0f:5b:ba:6e:c6:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:29:07:11:92:F4:1D:09:AB:5A:9C:89:CD:FE:BF:D7:BD:C4:06:AE
            X509v3 Authority Key Identifier:
                keyid:D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:7d:ef:78:e6:71:6e:a3:82:5f:e4:74:1b:16:ef:d6:0f:
         24:ab:74:58:1f:c9:d1:4d:67:0f:74:a1:75:8e:82:32:8c:94:
         cb:6c:b9:14:7b:ac:43:35:42:68:95:68:fc:70:f0:00:0a:d8:
         2d:5a:6f:d5:c8:51:1b:94:0c:1e:2f:00:85:29:19:08:be:e6:
         04:ef:1d:77:d9:e5:ca:0d:b3:c5:c1:6e:64:44:f7:88:02:ad:
         40:86:74:ee:81:46:fa:45:d5:58:35:80:a3:c6:f7:a0:b5:50:
         80:e8:df:10:8a:74:32:bf:04:30:e2:ae:a7:ed:e3:e5:49:48:
         9d:c5:b6:cb:39:5f:cb:0d:15:5f:50:c5:07:a4:6c:07:e0:8b:
         3f:6c:30:30:6d:16:0e:d7:4c:22:d0:14:b7:57:7d:59:d4:ce:
         f7:a3:f6:4b:a0:d1:14:45:05:b9:6d:9e:c0:72:dd:db:4f:62:
         18:ed:a9:e9:be:1e:2e:1c:e8:fa:5e:f3:c9:9a:4a:e9:c9:33:
         7a:55:c2:fd:b1:f5:c3:0f:00:71:e6:1f:6d:f4:f9:11:38:8a:
         57:a6:f2:04:1e:ce:84:53:78:f6:d9:57:e8:5c:00:ce:05:90:
         83:19:56:5f:e7:7a:0e:7e:a1:c0:df:4e:87:9e:a9:b6:d8:3a:
         3c:b0:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----