Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.mft
File:                     bcdf4d97f35391de289dae3eec82d9065b4520f4.mft (raw, json)
Hash identifier:          oRD5TXNtbQDN8/Q9WSeLWo6pd75V3i49wVA9S4xFyqY=
Subject key identifier:   DC:06:7A:9D:3E:99:59:7A:9C:1F:7D:25:AA:F2:0A:B5:61:B4:96:4D
Authority key identifier: 12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7
Certificate issuer:       /CN=bcdf4d97f35391de289dae3eec82d9065b4520f4
Certificate serial:       249998
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcdf4d97f35391de289dae3eec82d9065b4520f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.mft
Manifest number:          0DE4
Signing time:             Mon 15 Apr 2024 04:20:42 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 04:44:26 +0000
Files and hashes:         1: 0f48be501ee407cbbfcb1e7519351c0e925ad435.roa (hash: e2Jc2BGIaiTm+NqY+PNyRR9J9QVNjyT8lHlBlLn89U0=)
                          2: bcdf4d97f35391de289dae3eec82d9065b4520f4.crl (hash: WbOpHyUhbIQ/ne8BNfaEXQ0HVzfVfrsaC3jOGpv01ZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398616 (0x249998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcdf4d97f35391de289dae3eec82d9065b4520f4
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 04:44:26 2024 GMT
        Subject: CN=b7117b158d5fc4a8d268949f5e836ac3b1b68e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:5d:86:d4:65:41:56:f3:5b:28:d4:1f:5e:
                    bd:2a:b5:12:ae:07:e5:39:5a:d4:96:ac:f1:f7:e7:
                    d6:de:78:f2:a7:33:5e:8d:65:a0:6b:df:41:99:3c:
                    84:42:b7:97:7c:97:77:94:a0:2f:c4:92:3e:ca:b2:
                    7c:78:3d:5e:66:f7:fa:dc:47:d0:93:cf:fd:d4:1d:
                    3d:bd:d8:17:44:d4:f7:d0:1a:ec:0b:59:4c:e7:b3:
                    14:48:38:38:4b:f2:5c:bd:9a:94:83:f6:14:40:77:
                    ef:b9:76:f7:db:c5:11:f1:7e:04:02:4b:3a:24:b2:
                    cb:0a:f8:40:98:ef:ab:fc:7f:d2:ed:28:5c:c7:76:
                    5a:a9:7f:dd:5b:e1:69:f8:36:c0:65:ca:fa:79:a5:
                    ff:69:76:2e:ac:16:d1:5c:5d:29:1a:97:19:97:75:
                    c9:2a:8f:51:e9:99:62:8e:1d:cc:5c:c1:ad:24:5e:
                    57:71:91:77:7a:ec:0d:43:62:23:a1:e8:27:2d:90:
                    65:2c:92:46:12:a7:f4:50:43:5a:92:de:69:de:cf:
                    9b:29:41:89:bc:7c:8c:ae:b1:91:57:c0:d1:32:60:
                    73:90:1c:c0:6b:13:1f:20:2e:26:8a:a3:6b:e9:68:
                    a5:3d:56:1f:2d:e9:bd:e5:fd:16:ad:00:d7:b7:65:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:06:7A:9D:3E:99:59:7A:9C:1F:7D:25:AA:F2:0A:B5:61:B4:96:4D
            X509v3 Authority Key Identifier:
                keyid:12:8A:39:D6:E9:8A:9B:B3:03:91:4B:A7:D4:E9:FB:1F:1D:70:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcdf4d97f35391de289dae3eec82d9065b4520f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fffe4959-e9f8-4472-80f3-1df439352e50/bcdf4d97f35391de289dae3eec82d9065b4520f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2f:d3:8d:ac:a5:29:c6:52:a3:e0:a4:f8:c9:f6:e2:27:1b:
         fc:2b:88:25:a4:14:55:f1:30:b1:97:ef:e8:85:1f:95:81:06:
         e3:03:2a:b0:76:5d:a8:4d:ed:ef:85:ed:9d:47:bb:68:f7:58:
         79:2d:a3:20:01:c3:cb:46:c9:2d:d1:c3:7f:8e:bd:93:c4:b6:
         0e:0e:19:5d:0b:97:33:e2:53:78:23:c2:e7:01:30:24:52:9c:
         8a:ea:28:00:b3:65:cd:9e:4a:e6:bb:b5:b3:5e:30:d8:ea:1e:
         1b:2e:21:fb:88:e8:60:7b:3e:f7:f6:81:c7:2d:5b:a4:60:89:
         03:8b:83:83:18:3e:4d:5d:1b:58:ff:4d:3a:dc:9f:e8:cc:23:
         88:36:db:10:3a:28:11:6f:bd:c4:0a:50:32:d7:9e:72:97:22:
         0a:73:8a:bc:73:b6:a7:58:d3:c7:9c:67:e0:de:c5:d8:f3:83:
         a5:ce:c1:ca:72:2c:a5:68:8b:95:4a:21:af:46:87:4e:60:60:
         ab:45:ee:98:ce:1f:3e:41:6e:4b:31:c6:62:66:d0:d0:7b:50:
         54:e3:dc:54:f2:a9:ca:38:be:15:9f:7d:1b:34:ee:a4:5f:bf:
         2c:d4:62:71:be:f7:12:b8:f0:23:fc:3f:6b:3b:55:96:c4:57:
         ef:34:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----