Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft
File:                     71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft (raw, json)
Hash identifier:          7jpkg3T+ieFKDJ0+TTWjyFycU9P1d82UfLOH2W2dlR4=
Subject key identifier:   04:91:94:C3:D8:62:C8:66:C3:38:2C:2B:22:12:64:C8:80:C8:4E:BE
Authority key identifier: CE:14:46:CA:A7:8D:4D:B5:E2:1E:18:91:41:4C:A1:C6:C1:77:14:08
Certificate issuer:       /CN=71e4bab784aeb677606a6aabe1d8ca53de9167ac
Certificate serial:       1A19A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71e4bab784aeb677606a6aabe1d8ca53de9167ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft
Manifest number:          0D88
Signing time:             Mon 15 Apr 2024 10:20:54 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:20:25 +0000
Files and hashes:         1: 085653a18713073e7ad6bfec84364c80d6b67500.roa (hash: hRu5IHqsJLp4kHzEYLAHwNuwq7lHoorh+epcqOHG15g=)
                          2: 71e4bab784aeb677606a6aabe1d8ca53de9167ac.crl (hash: CN6CjEiM3QVf8zceaM+NEzg42qA8uJ0Lcf5a3qnSO7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710503 (0x1a19a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e4bab784aeb677606a6aabe1d8ca53de9167ac
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:20:25 2024 GMT
        Subject: CN=ff2b126f3c694d3477d9ee647a3546cafc2d4441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:d2:e2:e8:d5:a7:de:32:68:c4:d4:e9:f4:
                    73:22:ec:9d:73:a3:d9:04:49:49:06:a9:da:53:d2:
                    53:2c:63:32:c2:16:e0:51:6b:00:5b:ae:50:96:9a:
                    20:07:e0:a0:e2:53:75:0e:d3:cd:5f:65:76:0e:9c:
                    94:df:07:16:92:ba:48:81:85:e2:4b:4d:53:44:22:
                    2b:33:99:25:09:ac:c0:e7:84:6b:56:86:b3:50:28:
                    72:34:47:13:db:47:8a:b4:4b:d1:a6:1c:b3:3a:be:
                    b5:63:9c:2e:2c:f2:3c:91:68:db:87:c1:a2:b1:0b:
                    d1:26:8a:71:a8:14:c7:58:b9:6d:f3:b7:22:85:fb:
                    1e:52:23:1d:de:5d:27:ee:af:96:94:86:77:41:72:
                    c7:46:a9:9f:16:83:9a:11:31:29:87:6f:6b:ad:d0:
                    43:d0:7d:aa:fc:b5:f3:f4:13:58:b7:14:2c:41:cc:
                    43:a5:73:00:56:37:b4:ae:22:26:61:84:00:6b:cf:
                    32:b2:81:1f:c4:e5:7c:1a:80:7a:03:16:cb:25:ca:
                    c2:7e:dc:f5:4b:08:96:8e:94:cf:12:12:1a:0c:35:
                    9c:56:6e:a6:7d:5b:b3:52:1a:00:45:43:29:69:e6:
                    b9:a9:b7:90:42:36:1f:8b:0c:d0:fc:12:ab:b7:7d:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:91:94:C3:D8:62:C8:66:C3:38:2C:2B:22:12:64:C8:80:C8:4E:BE
            X509v3 Authority Key Identifier:
                keyid:CE:14:46:CA:A7:8D:4D:B5:E2:1E:18:91:41:4C:A1:C6:C1:77:14:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71e4bab784aeb677606a6aabe1d8ca53de9167ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc1a19fe-8915-4fc3-b651-261930363035/71e4bab784aeb677606a6aabe1d8ca53de9167ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4f:5b:f1:bd:a3:df:fa:3b:db:a1:5a:8e:d2:31:e0:34:20:
         d0:be:ca:cf:59:7c:9f:a9:24:e9:98:a8:47:41:a9:f2:4a:19:
         f7:e7:9f:01:5a:52:15:02:c5:17:9b:f0:fa:75:e0:fb:a7:e8:
         2e:7f:84:ae:ec:b1:69:6b:62:2d:cf:b1:0e:e7:33:d5:72:99:
         d2:67:51:cd:de:cb:e0:37:19:47:8e:be:6f:d3:fc:f7:93:66:
         10:20:14:20:5f:63:24:16:05:25:c8:89:5c:b9:f6:0b:2f:89:
         0f:73:c9:61:80:23:53:f1:0b:dc:30:29:f3:ba:f2:21:a3:a2:
         53:ba:90:ec:c3:02:31:ca:b3:6a:7d:af:4a:18:6c:70:b6:4d:
         bd:47:65:34:eb:be:fb:98:0d:cf:63:27:bd:3c:c4:1c:49:8c:
         8c:5f:a9:74:bf:a7:fd:80:38:95:d3:8d:68:9e:48:1d:0e:a1:
         51:84:a3:31:6d:6a:da:b4:a1:2e:71:42:22:61:0e:5a:40:13:
         09:de:aa:64:eb:6d:c3:66:b9:63:c8:8d:1c:2c:4e:f3:19:ee:
         e7:ec:e8:7c:4f:eb:c2:98:6d:77:87:77:89:60:ef:a2:7f:f2:
         be:6b:5c:eb:80:69:74:e8:9d:3c:f6:ca:a6:59:7d:1b:bc:4b:
         fe:96:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----