Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff0d2e65-2860-4174-b734-dab7e7f3755c/bacf52c1293202cc6558f9e73ce478971f328262.mft
File:                     bacf52c1293202cc6558f9e73ce478971f328262.mft (raw, json)
Hash identifier:          bfnIlgInes/jzjKqx+Fs7MEWVXmmpjAPW/vSL5Eszsc=
Subject key identifier:   E1:92:57:A4:98:63:73:A4:8D:7B:7A:4D:9E:93:90:E5:FA:28:B1:28
Authority key identifier: C1:A2:54:24:68:D3:0E:51:05:9E:0B:F7:DB:C6:B7:50:5F:90:E6:DF
Certificate issuer:       /CN=bacf52c1293202cc6558f9e73ce478971f328262
Certificate serial:       293F86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bacf52c1293202cc6558f9e73ce478971f328262.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ff0d2e65-2860-4174-b734-dab7e7f3755c/bacf52c1293202cc6558f9e73ce478971f328262.mft
Manifest number:          0E0D
Signing time:             Mon 15 Apr 2024 05:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:59:17 +0000
Files and hashes:         1: bacf52c1293202cc6558f9e73ce478971f328262.crl (hash: LGigEVKw71w0LdmtF4cF721wD+/Af00G/ZaEo9MBlB0=)
                          2: c1c96b9552eeb4298b009f57056c25dc260ecc2c.roa (hash: jhM22iREwCmKfIWHAm0O7fN8RTJi/Fwv8Y2HZDd4m44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703238 (0x293f86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bacf52c1293202cc6558f9e73ce478971f328262
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 05:59:17 2024 GMT
        Subject: CN=9a5129bcbc8387fb1b8369296e5b804c740de904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:b0:35:42:3d:b3:d5:8e:84:c6:cb:a8:91:
                    f0:b9:53:04:13:ab:01:8a:53:e3:b6:1b:97:72:32:
                    de:2a:4c:2f:c5:4d:46:60:e9:a9:2e:54:52:29:f5:
                    2a:70:c4:2e:8f:28:d5:98:20:38:aa:bb:34:49:67:
                    4d:20:61:aa:eb:e1:b6:54:70:4f:4d:d9:a4:71:fd:
                    46:7b:b2:d9:78:e2:8a:ac:e7:a9:e8:66:86:f5:08:
                    ec:7b:90:78:6d:f0:ce:8e:3c:5a:4a:f6:22:df:fc:
                    0e:7c:17:05:35:92:fe:01:0b:78:f1:5b:cb:90:81:
                    ea:51:5a:af:c3:c0:a5:ba:be:e6:fc:f6:84:7a:3b:
                    24:71:88:3d:de:be:10:d4:7a:5a:04:92:46:7d:45:
                    ea:1d:a2:d1:91:95:a8:28:ec:da:c2:a4:b6:6d:86:
                    cb:58:0f:5a:c4:4e:dc:46:43:c7:7a:c5:71:e9:9d:
                    bc:51:71:77:f9:79:6f:4b:68:4c:7a:50:6b:03:80:
                    be:7b:3a:91:d2:fb:f0:15:95:28:12:18:8b:c2:bc:
                    ff:9b:b0:82:e0:ec:3d:df:b0:15:7a:7c:d3:b2:ab:
                    b2:6d:78:dd:73:8d:8f:e6:7d:19:95:02:6d:e4:41:
                    0f:e3:5b:f7:fb:d1:88:b2:4e:0e:cc:87:8e:69:60:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:92:57:A4:98:63:73:A4:8D:7B:7A:4D:9E:93:90:E5:FA:28:B1:28
            X509v3 Authority Key Identifier:
                keyid:C1:A2:54:24:68:D3:0E:51:05:9E:0B:F7:DB:C6:B7:50:5F:90:E6:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bacf52c1293202cc6558f9e73ce478971f328262.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff0d2e65-2860-4174-b734-dab7e7f3755c/bacf52c1293202cc6558f9e73ce478971f328262.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ff0d2e65-2860-4174-b734-dab7e7f3755c/bacf52c1293202cc6558f9e73ce478971f328262.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:75:bf:f4:0f:bb:9a:c5:4f:b2:8d:c5:b4:65:e2:81:72:d1:
         5d:42:ec:71:56:e8:7b:83:9a:db:38:9f:7a:5f:1a:15:61:52:
         13:fd:2b:64:da:43:a3:70:d9:c4:33:03:d5:b6:05:4d:d7:b1:
         3e:8d:bc:83:03:1b:75:ff:17:39:c1:7b:b6:fe:f3:8b:87:98:
         7e:b5:06:42:08:c6:61:2b:9e:4e:76:44:d8:0e:d9:4a:98:f9:
         45:86:af:42:81:2e:40:07:4e:22:b5:f2:a1:56:50:e4:b1:00:
         8a:e5:19:37:1c:d1:b6:40:4a:07:6d:d9:c4:d4:66:e0:7d:fa:
         eb:c1:24:88:97:2b:e1:a5:cd:f1:39:2b:25:37:31:aa:18:ed:
         4f:76:28:f6:23:58:18:6a:bc:f3:fa:78:58:95:53:9b:5b:ed:
         e0:6c:3f:91:9f:55:72:1d:7d:09:fa:83:af:69:9b:5e:ea:a6:
         71:84:c9:74:ac:ff:86:0a:f3:1e:1d:e2:e9:36:f3:75:02:8c:
         11:ca:ba:9c:15:0a:91:48:07:7a:ce:c6:5a:0e:11:6b:48:19:
         16:f6:42:8c:61:90:e2:d7:e0:74:43:68:24:7d:c4:c4:70:ed:
         d0:a1:85:14:35:3c:b0:2c:16:2b:90:90:89:ae:c2:fc:a8:8c:
         26:f2:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----