Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9a0bab2-ceec-4d73-bf51-cda5196aa9ce/7fba37307c4a12e522f65e5e452a58b5727413f3.mft
File:                     7fba37307c4a12e522f65e5e452a58b5727413f3.mft (raw, json)
Hash identifier:          RibZXKlJCFTID79J2vV2VrB/BE2iGrfowC87mAGrjuI=
Subject key identifier:   12:D9:3C:90:6D:3B:2D:8A:87:D2:8A:0B:18:C8:11:48:42:BC:16:71
Authority key identifier: 7B:CD:71:6E:07:AC:1D:D5:34:EB:5E:4F:A1:0A:E3:B4:2C:57:53:CA
Certificate issuer:       /CN=7fba37307c4a12e522f65e5e452a58b5727413f3
Certificate serial:       2848B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fba37307c4a12e522f65e5e452a58b5727413f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9a0bab2-ceec-4d73-bf51-cda5196aa9ce/7fba37307c4a12e522f65e5e452a58b5727413f3.mft
Manifest number:          0DF6
Signing time:             Mon 15 Apr 2024 11:20:30 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:33:18 +0000
Files and hashes:         1: 55391e8de09d0c8e0584423a5c1ebbd310da9dc3.roa (hash: e3j23wnPB8lK62PqbKDkS3+E3PgR1DAAN+RArA7JdjM=)
                          2: 7fba37307c4a12e522f65e5e452a58b5727413f3.crl (hash: pEBL6/VkEMJCYD4gwQoEYm3587smObMNi95EZ9GSc+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640052 (0x2848b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fba37307c4a12e522f65e5e452a58b5727413f3
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:33:18 2024 GMT
        Subject: CN=9c805da8f13c6cdf0c6c4bfeba36325cc75aabe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:58:ea:ba:c2:47:1d:88:fe:53:a7:ab:78:f0:
                    40:5c:35:76:2e:25:73:dc:e1:e9:3b:16:e3:74:53:
                    09:2e:b3:e6:81:d6:08:3c:79:fa:65:6d:9e:d6:b0:
                    e3:83:55:97:37:f2:90:21:32:c9:a0:1b:9a:cf:e1:
                    9d:e7:5b:c0:b9:b8:9f:b8:cb:70:1c:a3:ad:8b:a2:
                    12:e3:1e:f9:62:45:6b:cf:03:98:d8:31:0e:1e:8b:
                    81:2c:3b:de:7a:66:d3:2c:01:e3:da:92:a2:8f:54:
                    54:e9:13:05:2c:75:be:68:15:76:2e:69:40:25:a8:
                    c9:53:31:58:6d:a8:af:b0:d4:d1:de:fb:f2:89:01:
                    cb:5c:50:7f:9d:d1:4b:33:41:dd:6c:50:a6:aa:ff:
                    09:a3:13:40:cb:29:1b:ab:37:5f:e3:d6:69:65:e1:
                    c4:4b:ee:08:8a:f7:cd:ac:2f:a9:01:90:cd:32:bf:
                    ab:9e:52:61:bb:c3:0e:eb:bf:5a:8a:bf:84:6b:fd:
                    7d:74:3b:fd:31:68:56:0a:8f:bc:80:0e:c4:f4:2a:
                    73:fb:b9:8e:26:9d:f0:69:ba:af:31:67:da:3e:fc:
                    6c:3c:36:fb:62:2e:28:b0:9e:e7:40:02:3c:86:45:
                    54:78:08:0c:2a:a2:df:0e:17:b5:82:d8:a8:5f:0b:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:3C:90:6D:3B:2D:8A:87:D2:8A:0B:18:C8:11:48:42:BC:16:71
            X509v3 Authority Key Identifier:
                keyid:7B:CD:71:6E:07:AC:1D:D5:34:EB:5E:4F:A1:0A:E3:B4:2C:57:53:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fba37307c4a12e522f65e5e452a58b5727413f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9a0bab2-ceec-4d73-bf51-cda5196aa9ce/7fba37307c4a12e522f65e5e452a58b5727413f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9a0bab2-ceec-4d73-bf51-cda5196aa9ce/7fba37307c4a12e522f65e5e452a58b5727413f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:ff:18:bf:20:c9:4d:aa:95:45:81:c8:0d:b0:5b:60:41:
         85:83:56:9d:6c:a6:5b:2c:79:04:9d:17:5c:6a:c8:41:43:ce:
         eb:f6:ab:b7:03:89:ad:cc:f3:f9:c8:a6:87:88:c5:55:3b:c2:
         4d:0f:e5:ec:4c:1a:67:03:a3:e6:8e:54:79:cc:b4:6a:d5:8d:
         f1:47:56:f5:fa:b6:aa:98:70:49:88:89:d7:07:4b:b8:33:3d:
         f7:d9:37:7e:72:46:6c:b6:dd:f7:01:d8:a8:1f:79:df:0c:d8:
         ff:26:b0:8f:75:b8:9d:d0:e7:df:c4:b7:33:98:09:fe:b5:d6:
         26:22:af:84:28:cd:c6:ed:7f:79:e9:96:9e:42:57:9c:5e:62:
         31:b3:58:ba:8e:2a:8a:e7:f9:81:ad:48:5d:0d:97:97:b6:40:
         a5:fc:c3:94:11:84:bc:97:e4:39:8c:47:1c:d5:11:9d:53:5b:
         59:e8:ba:17:28:40:8f:fa:8e:97:6e:2e:5a:fe:2c:a4:aa:0c:
         0c:2b:6f:9f:80:59:a2:34:9a:4d:c2:96:87:17:2c:2a:7f:3e:
         dc:e3:c4:c0:fd:9c:3c:d8:db:02:e1:7f:e3:ba:1c:85:26:bf:
         4e:72:da:c6:24:f4:95:99:b0:84:e1:07:a7:f3:38:ae:7e:3f:
         99:e9:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----