Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e807cb5a-2bbe-4aac-8f34-402025d8d6f0/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.mft
File:                     d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.mft (raw, json)
Hash identifier:          aVKL3vsglXd1Z120Qzd2KnkwHbeyra6U+DxlqAsJIak=
Subject key identifier:   12:AF:CF:9A:BE:93:AA:60:13:2B:D9:9F:AC:BB:EE:37:DE:EE:EE:C6
Authority key identifier: 72:5C:F8:2C:49:D5:7B:D0:20:FF:A8:E8:5B:E6:42:D7:15:1C:21:0D
Certificate issuer:       /CN=d9bb9bbf7ecac2aff96b75b299c640aca9ffe830
Certificate serial:       091FC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e807cb5a-2bbe-4aac-8f34-402025d8d6f0/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.mft
Manifest number:          04A7
Signing time:             Mon 15 Apr 2024 10:20:42 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:37:25 +0000
Files and hashes:         1: 910a81effc8ef1ccdb46bc67b46c3e07a4cde2d4.roa (hash: dv4YlsNLnwGJYfdoh6zXiMAXOtOXZ9v9K5dr02pr0+A=)
                          2: d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.crl (hash: oM6lOSEjRQDf233lksizuD7GZyOfODzN9f+pLzbgJOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597958 (0x91fc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9bb9bbf7ecac2aff96b75b299c640aca9ffe830
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:37:25 2024 GMT
        Subject: CN=7528195c175970ff954d40d3952e49510917476c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1d:58:d7:ea:cb:71:2e:27:d4:43:88:62:84:
                    3b:29:98:8c:7c:9c:fd:6a:ff:d9:be:52:50:88:45:
                    8f:2a:ba:68:0e:3a:91:11:b4:fa:c9:ee:d7:89:db:
                    bf:3e:93:19:6e:42:3f:3c:95:14:bd:f9:bf:09:60:
                    6e:2f:5e:34:24:c5:b7:be:a7:16:f2:13:b6:57:f2:
                    c1:bf:ad:b5:0f:81:7b:b9:d7:db:1e:21:a5:97:18:
                    34:45:4d:f3:9d:63:7c:83:5b:c0:39:55:ca:99:f5:
                    b3:1b:63:06:83:ad:54:43:0a:91:df:7b:31:bd:3c:
                    cb:c8:e0:96:41:c5:da:7d:2a:7b:a4:c4:a4:a8:c5:
                    9b:c9:4f:9e:f4:2c:89:82:a0:e5:d6:50:a3:09:62:
                    9a:9a:c0:86:f4:f0:44:7c:8a:75:37:cb:ee:71:ed:
                    7d:62:76:11:03:82:15:b7:78:b8:17:e3:44:85:76:
                    8c:68:0c:3c:a4:a4:8d:51:18:95:3b:46:a7:2e:57:
                    92:23:4e:23:17:e5:91:05:fc:7a:d2:1c:da:51:22:
                    e5:0b:70:08:73:b9:0c:20:a2:ba:14:b9:0d:d0:61:
                    a8:7f:de:ad:a1:94:af:1f:9f:83:27:62:e1:e1:b6:
                    66:15:26:ab:da:28:df:0d:78:a5:db:5d:23:2c:eb:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:CF:9A:BE:93:AA:60:13:2B:D9:9F:AC:BB:EE:37:DE:EE:EE:C6
            X509v3 Authority Key Identifier:
                keyid:72:5C:F8:2C:49:D5:7B:D0:20:FF:A8:E8:5B:E6:42:D7:15:1C:21:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e807cb5a-2bbe-4aac-8f34-402025d8d6f0/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e807cb5a-2bbe-4aac-8f34-402025d8d6f0/d9bb9bbf7ecac2aff96b75b299c640aca9ffe830.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:f9:99:41:2f:0f:14:05:fb:55:9a:01:bb:36:48:7f:ed:
         7b:aa:b1:60:d5:bd:ee:18:bd:c1:d2:7d:94:96:e2:ea:24:1f:
         b8:39:73:93:ed:b1:15:20:23:46:0e:a4:aa:96:81:63:8a:c1:
         d8:94:b2:7d:4e:c7:47:d5:8b:16:93:3f:00:49:33:56:46:cc:
         66:13:07:21:f2:7c:36:67:97:82:bc:d5:19:76:92:24:c2:ac:
         29:8b:3a:97:19:22:63:75:a1:70:19:e9:95:0a:e8:8e:7d:9b:
         94:59:5b:aa:86:cf:b0:05:c1:ad:47:5e:70:89:aa:14:fd:09:
         47:87:9e:e0:de:bd:69:bf:6f:0b:7f:d0:b4:38:86:c3:d4:6b:
         81:5b:55:cd:fa:97:29:84:87:f4:f8:72:1d:ef:ee:bb:2a:df:
         7c:a2:e0:e0:cc:eb:73:b8:a3:60:37:e6:78:81:09:f7:96:d6:
         d4:a5:7d:ce:1c:7f:98:13:c9:70:64:c8:1c:b1:2d:ba:79:e4:
         1a:ee:05:89:c6:54:a4:21:7f:77:19:aa:58:d8:2f:79:e4:2f:
         8b:42:12:da:78:25:36:fb:73:cd:5a:19:16:8a:14:e6:07:1f:
         9f:69:37:ef:84:33:74:b4:66:55:70:cf:e3:a1:3c:e2:0f:94:
         0f:17:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----