Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft
File:                     43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft (raw, json)
Hash identifier:          AA0JjstJFcNVwZiecfOCRcRHRoMcn0c6H5DTc1lSa4w=
Subject key identifier:   1E:94:EB:7F:C6:6C:38:E8:2B:5A:28:6A:86:50:AF:2D:08:9B:2F:44
Authority key identifier: C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6
Certificate issuer:       /CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
Certificate serial:       28579D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft
Manifest number:          0E03
Signing time:             Mon 15 Apr 2024 10:20:55 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:49:25 +0000
Files and hashes:         1: 02bf76588b89498894d771066fbae3374f338e4c.roa (hash: kSO1KAXPAGtKnhbTwOsnX30b+LHPyr9SyvNd+4XMcNg=)
                          2: 43dce57cdffb676b89eeb458cc86d9a67fbdd104.crl (hash: 8m8bRHOyhUfnBBbSamZMIC8ZDiMRyMEzFDLK7PX38Rs=)
                          3: 893ce56a3fe713ec973eaa106de41a216e4e724a.roa (hash: jjmXHiEs56kozhPoYSmrE11gJ9vPrtCrnSTpJjCvwjg=)
                          4: c842ac7a26d011112006429ef4e52c374b025c16.roa (hash: ba8HpbLHJZW/7n7905aFBRxtGKdXNSFRLxQxcNuv84E=)
                          5: ddf5c35cd88dba8599e5f0077217cc5c1a02e089.roa (hash: +blyHrnMzQq3Q2rRdeyiC6Tp2FgDN3T16f9Slvya87w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2643869 (0x28579d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:49:25 2024 GMT
        Subject: CN=c339aa1be1d09eebef8461144ddd6e9032f7eb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:f0:78:8a:97:9d:37:32:8d:26:56:9a:91:
                    e4:08:a8:34:1e:5b:0a:57:87:df:bf:01:1c:5d:90:
                    a7:af:a1:5c:13:63:42:f1:c7:bc:e4:c8:17:cf:11:
                    5d:94:9c:0e:ee:8e:df:24:e2:1f:d0:27:3e:a4:a9:
                    c4:13:d0:a9:c5:72:72:f7:97:0e:df:4d:e0:b4:ff:
                    7d:cf:41:19:84:3c:c8:1b:69:a0:de:98:3b:a0:4e:
                    17:84:fd:7b:d3:87:36:a8:ec:0d:37:89:63:85:61:
                    f2:3f:fb:13:c4:29:c1:f5:d9:c2:a5:5f:57:58:cd:
                    20:39:10:e0:bb:0a:03:50:9f:1f:2c:3d:c1:fb:79:
                    72:c8:3d:62:e3:64:ef:89:70:0a:d2:24:84:8e:88:
                    8f:57:9c:f9:35:cd:8c:f5:0d:0c:65:32:5d:02:dc:
                    ee:ff:42:42:08:5e:97:d0:3b:6e:a3:18:af:b4:21:
                    b2:4e:98:85:c4:3c:d7:47:ff:a0:33:50:31:89:32:
                    a1:97:df:15:b5:2d:d9:02:84:dd:14:66:82:24:dc:
                    14:5a:18:d9:06:28:e0:54:f8:73:23:00:75:5e:3f:
                    f3:af:22:70:06:25:a8:cd:21:5c:06:89:dc:b3:9f:
                    ff:be:e7:49:0c:d2:25:76:8b:95:ab:8a:9f:eb:ce:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:94:EB:7F:C6:6C:38:E8:2B:5A:28:6A:86:50:AF:2D:08:9B:2F:44
            X509v3 Authority Key Identifier:
                keyid:C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a2:10:9d:8b:29:ed:a6:99:2b:c5:57:ed:62:c6:c4:f1:41:
         83:dc:24:a3:93:52:ed:c3:5f:cf:95:4c:44:2f:99:fb:9c:da:
         9c:21:a2:f2:6a:09:c4:89:3c:e5:31:db:3f:2b:5a:f9:0c:c5:
         0d:f0:8a:2b:5a:55:1e:34:c2:47:45:d1:4e:86:39:fd:8e:44:
         f1:ae:d4:89:67:14:4f:a6:05:f8:c4:74:b0:45:64:d5:2d:39:
         8a:ee:4d:88:e5:64:0e:45:76:c0:8b:e4:25:f5:73:8e:28:1b:
         db:a1:74:55:ba:6f:67:1e:11:8f:42:78:fa:23:ab:18:a6:9f:
         72:d9:cb:25:d0:56:87:f4:9d:2d:f4:eb:7e:9e:36:4b:bd:b4:
         3e:6e:e6:70:23:49:7b:c9:45:f6:5f:cf:4b:f4:11:31:fe:c0:
         19:e6:a5:11:17:46:42:83:72:f8:a9:75:29:21:ea:5a:08:38:
         33:f7:38:3d:0a:c2:0a:bc:1e:02:e2:73:68:db:d5:f5:51:dc:
         0b:4b:8d:f2:08:3a:59:6b:74:74:34:4e:21:58:3c:af:88:20:
         74:bc:07:2e:d0:fc:f2:40:a2:9f:32:5b:67:48:11:76:af:aa:
         57:6c:a2:32:4e:06:9a:96:b9:4e:89:24:84:01:03:69:3a:ee:
         04:93:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----