Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b42d0195-ba9e-48f5-b178-a075bc2c7810/33d6a52b9a8c8465f470041ba9300da336448a74.mft
File:                     33d6a52b9a8c8465f470041ba9300da336448a74.mft (raw, json)
Hash identifier:          MjrZOMiJ79nJI6X/yhqhQlzzNq7PyFnfvVIafJ+xoZE=
Subject key identifier:   3D:E4:4E:EC:BD:7C:4E:6D:4A:24:ED:04:5B:A2:12:86:7C:4F:21:7E
Authority key identifier: CF:3A:5E:16:1D:35:25:A8:34:E2:27:D6:E6:A5:5B:A4:CF:1B:1F:55
Certificate issuer:       /CN=33d6a52b9a8c8465f470041ba9300da336448a74
Certificate serial:       20C9BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d6a52b9a8c8465f470041ba9300da336448a74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b42d0195-ba9e-48f5-b178-a075bc2c7810/33d6a52b9a8c8465f470041ba9300da336448a74.mft
Manifest number:          0E08
Signing time:             Mon 15 Apr 2024 03:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:41:17 +0000
Files and hashes:         1: 33d6a52b9a8c8465f470041ba9300da336448a74.crl (hash: 4DyHr8IfxakbBbG0Sb4N1fRC5AsKlBrTWgRFOXTVOx8=)
                          2: e98a73fe8920f5f73da363d7d856750f3755fbf7.roa (hash: VMMn2PZVpNxS6Rk+574uik4qllIwucO6ww4WUh3SdAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148794 (0x20c9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d6a52b9a8c8465f470041ba9300da336448a74
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:41:17 2024 GMT
        Subject: CN=121ebc974ca8ed4a6f07a5661e6cc89b39f8ebbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:14:54:15:4e:f8:b2:70:05:3a:26:31:e8:
                    cb:89:8c:e4:3b:e5:b6:39:d7:98:46:b3:7c:19:72:
                    0f:3d:1e:0e:3b:0a:79:8c:0b:2b:3b:5e:eb:7a:6c:
                    bf:75:10:46:56:cb:47:f5:c4:e8:15:14:d8:b9:0c:
                    e7:72:a0:5b:2f:a4:2a:c5:ee:f5:b5:53:ac:4c:10:
                    d9:79:22:7f:e8:59:cf:a2:0f:f8:90:de:b3:ae:b2:
                    57:58:f4:0b:40:0b:ba:1c:df:9f:8f:7f:1d:59:10:
                    a5:6c:ab:53:2c:1f:3f:b4:4f:d7:4d:fc:9d:ec:07:
                    36:d4:35:f0:8c:58:69:83:84:ae:db:03:29:a1:b4:
                    ad:75:2b:14:08:90:6b:bb:53:15:72:f6:e2:fe:ec:
                    55:30:c5:b5:f2:43:c7:51:dc:a5:af:e8:2b:2f:54:
                    84:22:2b:2a:90:39:a5:e1:96:d0:03:21:ec:0b:ff:
                    ca:86:29:0a:88:a8:22:a8:25:90:9d:be:dd:3b:04:
                    59:a9:65:3b:8e:90:0a:4c:79:3e:ee:93:22:3f:65:
                    d0:46:60:2d:66:ba:0a:89:3d:9c:2e:bf:39:4d:68:
                    4f:c4:71:52:62:df:a9:e6:d8:60:96:18:a8:d6:33:
                    bb:38:b1:90:84:b2:39:7a:1a:97:af:bc:d2:62:46:
                    96:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E4:4E:EC:BD:7C:4E:6D:4A:24:ED:04:5B:A2:12:86:7C:4F:21:7E
            X509v3 Authority Key Identifier:
                keyid:CF:3A:5E:16:1D:35:25:A8:34:E2:27:D6:E6:A5:5B:A4:CF:1B:1F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d6a52b9a8c8465f470041ba9300da336448a74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b42d0195-ba9e-48f5-b178-a075bc2c7810/33d6a52b9a8c8465f470041ba9300da336448a74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b42d0195-ba9e-48f5-b178-a075bc2c7810/33d6a52b9a8c8465f470041ba9300da336448a74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:92:b3:e3:6f:50:2d:c0:80:73:ed:51:94:6e:3f:f0:f8:a1:
         c5:80:02:dd:d1:25:71:bc:58:04:38:ba:f1:b4:32:7b:50:2e:
         5f:d7:32:7b:e6:6c:ab:78:6f:10:57:34:b9:53:35:0f:c5:8f:
         fd:74:3d:d5:2e:b3:ea:18:d5:61:ee:06:05:56:d0:3a:8b:1c:
         8c:e5:86:08:9b:60:bf:c4:bd:26:ee:40:e2:94:f8:d8:2b:59:
         ab:00:87:87:25:62:3c:f3:ac:e4:81:d9:08:f4:8a:b5:b2:2b:
         e6:63:2a:7e:38:c1:5f:6f:9e:3d:f8:44:d6:8b:99:4c:f5:9d:
         3e:24:e1:27:c5:65:f6:1c:78:f8:98:ef:ae:7c:4b:9b:3f:c5:
         0c:48:f5:b6:0c:4f:78:7f:02:08:8f:35:3d:66:f3:b7:7c:3e:
         35:94:e3:04:ca:6d:99:3d:5c:fe:34:0b:a3:12:fd:5d:74:58:
         3b:2d:cb:4f:92:bd:33:a0:44:fd:e6:be:84:0f:f9:8e:d5:6f:
         4d:86:ec:46:a1:02:8e:41:d1:ca:c2:5e:19:46:fc:d1:c8:7a:
         25:d8:4d:6d:41:7b:9a:26:4d:08:a5:6a:94:4d:50:c4:f1:d8:
         18:72:00:95:c4:73:a6:6a:17:77:e4:b5:a7:9a:a8:59:91:11:
         88:1f:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----