Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.mft
File:                     2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.mft (raw, json)
Hash identifier:          JjAHKaINgzm7TWZX92TmN9/HNc5+hwRHO3AejaTeoBQ=
Subject key identifier:   F7:28:71:96:B4:69:F3:3D:35:04:97:55:82:68:01:39:29:A9:E8:A7
Authority key identifier: 0E:16:D9:27:D2:72:B6:16:3D:F9:54:E1:01:E2:39:3D:8A:B3:68:12
Certificate issuer:       /CN=2d58158bda6f6fd6f2d2ecdd11220a4132b054c8
Certificate serial:       207FF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.mft
Manifest number:          0DE9
Signing time:             Mon 15 Apr 2024 11:20:51 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:03:18 +0000
Files and hashes:         1: 27cedf6dd0628efd21c261af64bee605698600c4.roa (hash: 1lmLHkJZF3rQ3zffacr2zg8H1N4ATK44NQC2PYnkK/g=)
                          2: 2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.crl (hash: hMg4lhj889RV/Z4Edc6UNUS/84uoryrzOL24zekRrlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129912 (0x207ff8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d58158bda6f6fd6f2d2ecdd11220a4132b054c8
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:03:18 2024 GMT
        Subject: CN=33a549918a779433afb8448e06783b7cad9d80b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:76:53:8b:44:8a:6f:63:06:4a:60:8e:e4:
                    d1:e7:fb:ba:d5:e4:89:0d:fc:88:88:c6:26:41:b4:
                    53:9f:bb:f2:0e:8b:01:b2:d6:43:ca:b9:af:24:61:
                    b7:60:70:f2:98:05:e7:e1:f4:1c:02:0c:3b:2a:8b:
                    ad:48:16:cd:88:86:3f:fc:25:ef:ea:9d:65:81:b3:
                    15:8e:38:b7:62:83:7e:88:df:fb:03:39:84:45:a1:
                    10:4e:e8:bf:e1:01:4e:4a:9e:6c:ae:85:61:50:67:
                    3c:e2:48:2c:f8:00:3d:1f:30:85:22:77:c6:22:27:
                    23:35:2f:24:51:41:a9:15:7b:ab:c9:e5:2e:14:93:
                    42:5e:be:1d:a2:af:9d:53:2f:0d:7c:28:8c:4a:0b:
                    34:dc:4b:f6:96:8c:68:7a:7f:5b:d3:df:91:6b:5a:
                    f4:89:8a:b5:a0:2a:88:4a:0c:dd:9e:b1:b9:25:dd:
                    66:4b:ac:f7:b2:4a:21:f4:83:2f:25:ae:55:6e:b3:
                    56:c7:36:61:b8:55:86:a0:88:de:f0:ac:5e:72:81:
                    6d:01:10:0f:69:99:3c:c2:27:ad:0a:92:22:f2:8a:
                    8b:3b:a3:a1:03:ec:93:fd:fd:0a:d7:6c:96:83:fa:
                    0b:1f:c1:1c:63:e8:d6:04:9e:6f:cb:d4:45:dc:dc:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:71:96:B4:69:F3:3D:35:04:97:55:82:68:01:39:29:A9:E8:A7
            X509v3 Authority Key Identifier:
                keyid:0E:16:D9:27:D2:72:B6:16:3D:F9:54:E1:01:E2:39:3D:8A:B3:68:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9b83fb5-93f0-46d0-9ca7-684d49d68e68/2d58158bda6f6fd6f2d2ecdd11220a4132b054c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:36:0a:9b:6e:c1:ad:d2:44:ef:51:de:bd:bb:63:24:4c:
         24:ad:56:5c:d2:6c:b1:9c:2b:02:c9:cf:9c:b5:fb:24:20:22:
         a8:ff:a2:fa:98:5b:5f:3f:12:09:83:19:c5:65:69:3c:1d:70:
         de:cc:16:45:43:a5:e7:b8:f5:ea:99:6a:97:24:d8:12:b5:2c:
         06:80:e5:20:ec:0f:71:00:5a:27:ae:89:49:51:4b:38:0f:eb:
         65:4e:88:65:6d:4c:2b:ca:eb:30:e8:f9:ae:c5:22:eb:3a:98:
         66:ba:4b:d6:e3:ad:db:4a:ee:1e:82:e9:4b:cd:21:21:08:31:
         dd:6e:7c:46:a6:fd:c1:0b:91:19:cd:2b:01:f4:f0:b0:96:4a:
         64:cf:49:90:bb:03:e1:ab:a5:fd:18:48:5d:3a:79:ec:4f:88:
         0f:d5:e1:0b:87:ae:bf:7b:f6:16:10:ed:a0:02:fe:dc:ee:9c:
         87:6e:e6:b1:55:e3:e7:9e:01:d9:c1:05:bb:13:90:17:9d:60:
         8b:33:24:a5:d5:4d:e0:f2:3e:99:0e:24:35:36:c7:df:8f:05:
         c0:45:10:26:42:ab:dd:d7:67:08:fd:be:70:73:07:35:42:e4:
         cf:e8:d7:33:b3:81:d5:3c:e2:7f:c6:41:57:29:09:36:a0:f0:
         35:f3:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----