Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.mft
File:                     da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.mft (raw, json)
Hash identifier:          pBBrl/srV0MLDK/DxxHUOUtkVsfTmZ7c5ebjFU+sHC4=
Subject key identifier:   D9:CD:70:5D:E0:8B:AF:6F:30:BF:F0:BB:D7:C4:16:34:C8:9A:FA:1E
Authority key identifier: B9:3C:51:9E:BE:50:D8:3A:53:21:AE:58:11:A0:34:6B:3A:AB:09:67
Certificate issuer:       /CN=da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd
Certificate serial:       28E6BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.mft
Manifest number:          0DDB
Signing time:             Sun 14 Apr 2024 22:21:11 +0000
Manifest this update:     Sun 14 Apr 2024 21:20:16 +0000
Manifest next update:     Wed 17 Apr 2024 23:46:16 +0000
Files and hashes:         1: c1d89fba17e04390b9016e11564b0242a93f8701.roa (hash: R0eUu/MyklaKQMExOvZTgzs1Q66t0wmp/TGod2GsP4s=)
                          2: da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.crl (hash: /RQtkpe+TkOg/Auc0uBNrE/dKL36lcwLA1PbXzOqyB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680510 (0x28e6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd
        Validity
            Not Before: Apr 14 21:20:16 2024 GMT
            Not After : Apr 17 23:46:16 2024 GMT
        Subject: CN=0b9b71ebb88452c2215c369874dc5a34ac491df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:74:ae:dd:c2:59:a9:54:6a:88:59:56:df:
                    5e:18:2d:76:82:e8:d6:73:ce:cb:60:24:09:e3:28:
                    ec:a1:10:77:f7:61:da:7c:17:6d:03:8e:75:fc:9d:
                    8b:80:6d:24:c6:46:7e:ea:35:c3:66:74:46:7e:9b:
                    fd:1a:bf:18:a3:16:30:82:4d:44:3f:e7:c3:c9:15:
                    26:66:93:22:ef:24:f5:37:78:61:fc:36:bd:8e:de:
                    17:16:44:82:17:3a:31:a9:79:dd:09:48:c6:e4:13:
                    b3:c5:d1:38:e9:4a:09:93:6a:40:9a:c6:97:29:ba:
                    e0:cc:5c:b5:8e:5a:d8:8e:97:fe:c0:a1:d3:15:70:
                    12:c5:dd:cf:08:11:be:26:35:20:3a:e5:af:40:02:
                    e7:55:94:db:22:9b:42:cf:6e:41:7a:40:0f:4f:a4:
                    40:ce:23:2a:10:8b:61:89:c1:84:02:e0:ec:4e:52:
                    9c:77:b6:2b:80:79:35:2e:e3:77:41:e4:dc:fb:b8:
                    8f:3f:6d:7a:8a:35:85:e3:df:35:aa:ab:4d:94:8b:
                    ec:b3:48:8e:d4:7b:79:e2:63:10:c8:b5:40:46:07:
                    76:1e:9d:32:fd:d2:30:c7:28:08:e5:b2:4c:80:00:
                    43:ea:4a:8f:ee:48:7f:4c:6e:b1:b8:2a:3c:ad:3b:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CD:70:5D:E0:8B:AF:6F:30:BF:F0:BB:D7:C4:16:34:C8:9A:FA:1E
            X509v3 Authority Key Identifier:
                keyid:B9:3C:51:9E:BE:50:D8:3A:53:21:AE:58:11:A0:34:6B:3A:AB:09:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fa12e120-5ae1-42a0-8247-1d8b3ee06000/da5d32aa61f9d4dfac8e2ed8acb4515a46ac4ccd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:48:1b:b8:b0:c1:27:89:c9:1b:a6:fb:29:4a:0d:5f:8a:f2:
         21:8c:ec:15:4a:44:fa:b7:10:7f:e5:8d:43:27:61:b3:df:5e:
         d8:16:20:6a:76:66:1e:04:5d:a4:34:a6:e7:58:97:85:99:17:
         8f:40:5b:42:b7:ce:9d:cf:af:3d:5f:35:07:6b:c4:a4:b2:36:
         2d:98:40:f0:76:14:b0:81:26:63:7a:54:0c:20:01:50:b7:5f:
         88:30:48:6d:b7:74:6f:eb:a3:42:e0:c7:5c:ca:17:be:49:a8:
         b5:dc:1d:1c:87:e5:a2:11:20:4f:17:d7:90:4d:8c:84:f8:44:
         49:9a:5d:ac:f8:0b:44:85:ca:e7:2f:84:6d:11:d3:52:3a:b7:
         98:05:46:5c:2d:f7:d3:5f:e5:38:36:3a:63:7e:08:01:21:20:
         ec:71:69:30:81:f6:bf:45:81:04:09:84:43:03:25:c8:c4:00:
         dd:36:25:a4:61:16:e1:2a:14:06:87:57:88:d2:68:68:a6:a8:
         f4:d5:8f:96:4e:ca:e8:08:2c:f6:9e:50:71:63:16:f6:6d:f8:
         11:a1:5a:da:7b:48:4d:06:aa:2a:84:32:5e:10:97:87:62:8d:
         23:15:8f:2b:eb:c6:19:64:e2:92:f5:56:5f:23:84:c2:26:5f:
         8f:9e:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----