Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.mft
File:                     bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.mft (raw, json)
Hash identifier:          nuAL/L79BKkfFyuWMN/qjEcKrZNgL//kP/W/aE+agKI=
Subject key identifier:   03:8C:C9:53:8E:CE:9B:03:A6:8C:C7:A1:F9:1F:71:D8:62:6E:A8:42
Authority key identifier: 3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
Certificate issuer:       /CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
Certificate serial:       0665E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.mft
Manifest number:          0329
Signing time:             Mon 04 Dec 2023 07:36:23 +0000
Manifest this update:     Mon 04 Dec 2023 06:36:23 +0000
Manifest next update:     Thu 07 Dec 2023 10:05:23 +0000
Files and hashes:         1: 43a2605009e1bf5299e80f7251455560f996f9f4.roa (hash: upy2wztUj18fUCnXObOic+srDvjtPy89r+WYDBr3Uww=)
                          2: bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.crl (hash: GMQixLl6jGJlekEHoMRJSubAT4i3v8u8ksazaADcd6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419299 (0x665e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
        Validity
            Not Before: Dec  4 06:36:23 2023 GMT
            Not After : Dec  7 10:05:23 2023 GMT
        Subject: CN=b8890a65942069216f9f6252b0500bb6ac73d92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:d7:34:7b:24:ef:3a:5d:74:07:35:53:71:
                    7c:2e:cc:51:0c:92:bd:bc:ca:a0:4e:81:21:26:8d:
                    8e:67:e4:08:70:75:c8:1d:74:13:ac:62:78:03:27:
                    c3:5f:e2:f8:92:ae:44:07:5a:a6:f0:fe:eb:27:0a:
                    4d:5a:13:38:53:2a:0e:fa:84:b0:a0:9e:14:7a:2b:
                    bf:2a:53:7d:75:66:3d:91:9d:8e:72:10:1c:7b:a7:
                    14:df:b7:9e:f5:11:b3:49:ae:5e:2e:eb:3e:eb:3b:
                    c4:5c:ee:e8:90:34:19:ee:c0:5c:98:04:82:d6:6d:
                    55:82:e1:c1:f5:94:70:10:b8:35:a9:0c:58:40:76:
                    f8:fa:90:62:d1:06:2b:68:c4:a0:7c:05:52:02:c2:
                    9c:8e:51:c7:be:7f:27:04:42:28:d2:3e:21:57:b6:
                    98:52:4f:85:26:68:55:fc:03:0b:9e:9a:72:b7:f3:
                    37:01:a3:e4:2c:5b:3d:80:25:1f:f3:52:cd:3f:9d:
                    82:19:0f:e7:af:6e:fe:fe:6a:68:99:56:20:c4:3a:
                    5c:36:13:87:88:33:a4:3f:e2:f5:01:cc:81:5c:8a:
                    00:4f:27:91:5c:db:58:02:e1:5f:78:38:65:ed:b9:
                    dd:56:97:a3:b2:18:02:25:19:73:0e:1d:df:67:ac:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:C9:53:8E:CE:9B:03:A6:8C:C7:A1:F9:1F:71:D8:62:6E:A8:42
            X509v3 Authority Key Identifier:
                keyid:3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d3:14:15:e4:1a:36:a3:31:e7:e6:4b:be:67:e6:c5:37:f0:
         d7:a7:74:62:d8:29:80:52:1b:2a:9c:7f:76:95:63:7e:d3:17:
         b3:f4:02:e2:d6:00:93:9e:11:4c:7d:88:c1:46:37:66:11:62:
         b3:91:ae:6a:49:f8:5f:5a:ad:57:29:9a:e8:d2:f9:bb:b1:a2:
         4f:6b:37:2b:cd:d6:e2:fc:a3:0e:86:1f:58:e8:5d:47:2d:c2:
         03:58:17:55:96:5a:fd:5e:a5:a2:89:54:66:cc:cc:39:bf:74:
         41:eb:e9:f5:d5:f2:ef:a2:f4:f3:42:e8:dc:5e:9c:b0:24:57:
         ca:bd:a3:dd:2f:02:4d:7a:6d:84:84:d8:20:61:67:a0:b2:7f:
         df:e4:0e:c4:d4:45:bb:19:cb:84:d3:08:5c:e9:20:23:9a:6e:
         b5:df:8b:0c:0c:45:14:b5:17:53:6a:20:e5:09:59:c4:a8:0b:
         b8:b4:c1:05:73:8e:17:6c:b3:d7:cf:31:a2:91:9a:1f:bc:35:
         a1:b0:fd:c6:21:68:e4:f1:4f:02:72:30:ae:20:c8:d1:0a:0f:
         93:04:05:94:4c:78:a2:25:06:53:1b:e8:c2:e5:01:ce:0a:d6:
         8e:e3:28:fe:e6:cb:9e:d8:f0:3a:83:56:68:23:a8:90:bb:ea:
         f3:02:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----