Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.mft
File:                     3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.mft (raw, json)
Hash identifier:          stgsa+n0TqqTQAwjVaG5D3dIUV+cOC3rFCtPoitNTxM=
Subject key identifier:   07:14:50:03:64:25:39:47:37:7C:45:DE:51:42:21:D3:4F:01:3C:2D
Authority key identifier: A4:40:0F:1D:D4:ED:14:FA:C4:D0:D1:82:0F:AC:7B:A5:46:E7:6F:88
Certificate issuer:       /CN=3c9fc8516d4ddabd8103dc15a8a6b6df482e6319
Certificate serial:       D27A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.mft
Manifest number:          01
Signing time:             Mon 09 Oct 2023 16:28:57 +0000
Manifest this update:     Mon 09 Oct 2023 15:28:57 +0000
Manifest next update:     Thu 12 Oct 2023 17:18:57 +0000
Files and hashes:         1: 3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.crl (hash: UXZplUXHLrSasBe414q/hEyGBeYpo1nEDaDx553ixc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53882 (0xd27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9fc8516d4ddabd8103dc15a8a6b6df482e6319
        Validity
            Not Before: Oct  9 15:28:57 2023 GMT
            Not After : Oct 12 17:18:57 2023 GMT
        Subject: CN=48c8a8a000edcc7f0b8fdd539b2946a6acd5f84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:3a:20:85:af:11:04:90:ee:4c:4a:3e:f6:
                    25:5b:b4:2d:64:f4:fe:b7:05:bf:c6:e2:b4:bd:fe:
                    7b:5c:86:39:6c:71:8d:cf:1a:80:0e:c6:db:58:56:
                    00:b9:96:dd:b1:3e:f9:d7:28:d4:84:ad:80:fc:9b:
                    75:d2:50:04:bf:b7:1d:4c:85:a2:44:74:6d:16:ac:
                    84:3a:30:67:9b:81:4a:34:67:2e:9e:e7:b2:df:e2:
                    5d:94:f7:f4:1a:30:47:5d:07:00:c9:81:02:e3:7d:
                    a3:f4:33:f2:32:a5:f2:fb:5a:4d:24:d8:fd:84:35:
                    6d:27:4d:20:77:df:82:45:62:90:4e:1b:55:a3:38:
                    d9:50:57:e7:94:af:7b:b5:61:b7:0e:62:b2:ec:ea:
                    ce:40:b4:7c:84:23:a0:38:81:4f:51:16:49:f9:6f:
                    09:d0:31:14:5d:2c:19:c4:6d:b3:d4:cf:19:ef:ef:
                    c7:ed:af:7d:a7:53:f1:3a:21:e5:5f:52:56:18:37:
                    79:06:a8:c9:ec:93:e9:f6:c0:2c:b9:01:c2:6c:6a:
                    9f:17:3e:58:c2:b7:28:c9:08:b4:5a:21:b3:ce:0f:
                    f0:7c:35:f8:e2:93:cf:e8:c9:d1:3a:c0:7d:29:21:
                    1c:6c:b6:75:c9:db:94:07:12:90:a6:2e:da:74:b2:
                    54:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:14:50:03:64:25:39:47:37:7C:45:DE:51:42:21:D3:4F:01:3C:2D
            X509v3 Authority Key Identifier:
                keyid:A4:40:0F:1D:D4:ED:14:FA:C4:D0:D1:82:0F:AC:7B:A5:46:E7:6F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ca:cf:34:6c:62:2c:13:c3:fc:b1:85:d0:ff:fe:78:3c:60:
         b3:af:1a:f9:e7:9a:d6:1b:95:c3:78:d8:eb:80:af:0c:72:4c:
         2c:f5:17:a2:5e:93:b7:7e:7c:f3:db:54:00:40:55:e8:5a:41:
         9d:4f:bd:a0:5e:7d:02:d2:ae:7f:50:e0:fa:1c:72:0d:0c:09:
         ec:51:28:b5:68:94:93:fe:6f:29:cb:d0:1c:b9:7f:00:46:ed:
         6e:94:e5:2b:df:57:1a:99:58:3d:18:6c:24:08:0c:b7:41:50:
         70:44:bd:20:8d:60:8a:c5:34:92:1f:e7:21:21:03:45:2b:d3:
         28:0b:5b:b7:82:76:77:52:d1:ab:2a:66:b5:5d:04:b6:fe:0b:
         b7:65:85:76:e3:a8:f4:8c:ba:ed:51:d0:89:9f:6b:8b:85:d4:
         0f:d0:4e:75:24:1a:84:a8:c2:2a:e7:7e:32:51:b8:21:b5:02:
         05:b7:1a:47:12:ed:eb:cb:94:44:5d:47:66:22:8a:0b:d2:7d:
         59:41:38:b1:95:66:9b:e8:fd:bb:4a:72:01:11:44:15:4e:f7:
         65:8b:a4:3c:be:b7:85:f8:12:26:c5:ee:e1:f4:75:61:9a:9b:
         9e:10:34:ee:36:21:2f:b0:d2:f3:24:50:05:77:a3:22:d5:f6:
         bb:e2:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----