Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/da8b9d0a8b3007b4981a95a764326193703dd137.mft
File:                     da8b9d0a8b3007b4981a95a764326193703dd137.mft (raw, json)
Hash identifier:          zDYKp5LqHizkxXwqBisctVZf8FUMkKtfV8a4B1RM0tM=
Subject key identifier:   0E:6C:52:D6:EC:91:E5:60:E2:3C:6F:D8:0A:7C:F2:D5:04:18:76:9C
Authority key identifier: 57:2B:27:8A:BE:28:DA:2D:48:76:71:F0:24:E5:95:9D:96:97:9D:84
Certificate issuer:       /CN=da8b9d0a8b3007b4981a95a764326193703dd137
Certificate serial:       253163
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da8b9d0a8b3007b4981a95a764326193703dd137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/da8b9d0a8b3007b4981a95a764326193703dd137.mft
Manifest number:          0E2C
Signing time:             Mon 15 Apr 2024 02:21:42 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 03:42:29 +0000
Files and hashes:         1: 2f4ae9574f1ce6530334c7e95da818febc6eca16.roa (hash: 4+QxKd6BmMN1DgYgRM9L0dM2BWrbBKaM/SIdkqvUHHY=)
                          2: da8b9d0a8b3007b4981a95a764326193703dd137.crl (hash: bLfyiqIgJ349NA062WCCkEMWmzMGZQYKno5nY1qmn0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2437475 (0x253163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8b9d0a8b3007b4981a95a764326193703dd137
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 03:42:29 2024 GMT
        Subject: CN=f64478226ce31fe97f26136c83e72e6cf780a410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:66:5f:19:7a:a0:99:1a:1a:0b:b5:04:ca:
                    63:f1:4e:c3:02:ac:ab:cf:66:a5:5e:c6:bf:5a:d6:
                    25:05:af:59:c0:bd:6a:e4:0d:4f:8f:2d:9a:fb:d2:
                    2f:57:ed:0c:99:e2:24:15:07:5d:32:83:34:ef:50:
                    6f:90:36:49:67:f5:62:04:8b:dd:8e:f5:ae:f0:5c:
                    22:9f:4d:22:ee:29:19:7e:c8:17:27:1f:f2:55:05:
                    a5:dc:69:79:48:fb:ab:c6:b8:99:1f:03:df:55:d0:
                    eb:16:fd:1b:de:1e:32:dc:19:65:78:97:b4:c9:62:
                    08:1a:86:dd:cb:85:96:7b:7b:67:ad:72:5d:c5:de:
                    b7:63:4a:26:25:a9:02:c4:16:d2:c5:34:4f:5e:c5:
                    d9:d0:78:be:76:86:3b:1a:b2:6d:ad:45:42:1a:88:
                    5b:13:23:58:48:7b:ff:b6:d9:23:c0:7f:0a:57:95:
                    21:cb:56:43:72:b9:6f:98:bd:b8:00:8c:5a:cc:58:
                    6a:24:43:0a:41:b6:89:9e:79:9a:3e:1a:45:88:0a:
                    73:c4:a5:d9:3b:f3:24:c8:17:a8:b6:cc:e4:c3:a9:
                    e6:9d:d2:da:15:44:51:24:30:47:08:1c:fc:c5:b6:
                    ff:bf:81:9b:2f:23:99:81:1e:53:da:8e:cd:0a:2f:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6C:52:D6:EC:91:E5:60:E2:3C:6F:D8:0A:7C:F2:D5:04:18:76:9C
            X509v3 Authority Key Identifier:
                keyid:57:2B:27:8A:BE:28:DA:2D:48:76:71:F0:24:E5:95:9D:96:97:9D:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da8b9d0a8b3007b4981a95a764326193703dd137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/da8b9d0a8b3007b4981a95a764326193703dd137.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1924e84-a65e-4c83-8d93-111b3bd4f606/da8b9d0a8b3007b4981a95a764326193703dd137.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:97:cf:fa:fb:0b:8f:72:e1:3a:e1:87:6d:ce:24:fd:a5:
         b3:bf:03:7e:d8:54:36:7d:98:28:98:4a:85:73:67:84:9f:e3:
         64:d9:ec:16:18:a5:61:e6:08:e1:57:12:97:a4:6c:14:f4:7c:
         21:62:c0:cc:1b:f6:77:92:b6:af:29:b9:e9:a6:92:ec:40:e1:
         15:5b:97:e1:a6:fe:eb:6c:8b:a6:70:8d:8f:d3:4c:4a:4d:77:
         82:bb:66:d4:60:df:6c:1e:b3:df:5f:6e:43:de:18:fa:b7:fa:
         a5:8f:7f:06:f3:8e:80:74:4b:db:56:e7:20:57:f6:ae:bc:1f:
         6b:a4:22:6c:4e:87:fe:a5:2c:fc:cb:c5:89:64:00:31:0f:af:
         ab:ab:c2:9c:86:25:b3:0f:8e:f5:7b:45:ea:6a:17:ba:6b:99:
         81:d4:22:c2:cc:eb:93:0e:b5:f5:38:9f:7c:b3:02:cb:d9:d8:
         52:0c:82:76:bb:0c:8e:f5:1f:29:f0:4b:cf:b8:4b:0b:78:ec:
         51:e7:bb:98:bd:a6:0e:1e:ea:e9:b7:c3:80:08:30:17:d5:01:
         2d:d8:b4:a0:d1:ca:ff:bd:ec:92:5c:71:9f:f7:3d:15:51:dc:
         91:21:0f:16:a2:20:a2:c6:72:31:78:ee:16:2f:cb:da:4f:04:
         8a:05:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----