Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbcc3a19-17de-4d2c-a3ec-5d8baafc4ec8/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.mft
File:                     d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.mft (raw, json)
Hash identifier:          8yCypOY+FxNQPgmIeOY3+LK1as7RHpdnAus53SBOizg=
Subject key identifier:   3B:58:7F:2D:A4:D5:73:EA:13:98:01:6F:10:40:2C:C4:44:2A:B1:92
Authority key identifier: 5A:F2:B6:3B:96:23:1C:D0:22:F9:38:2E:7F:DD:9E:96:FB:7E:ED:77
Certificate issuer:       /CN=d521c7fba0352daaa6e8bb49e91cdca1b7a477ae
Certificate serial:       28846B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbcc3a19-17de-4d2c-a3ec-5d8baafc4ec8/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.mft
Manifest number:          0DE3
Signing time:             Mon 15 Apr 2024 11:21:15 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:48:18 +0000
Files and hashes:         1: 512e2280749a4e996cc105bb56896902e2dbdcd1.roa (hash: Arz4oOEQtgfVrJ5yC+hnJzVPcTjNQavU/wn9TQ9uzpE=)
                          2: d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.crl (hash: lqwzm2GJ1lFKpJTAtSam9zV3kkiw6kQTY4zIZrQ/SlM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2655339 (0x28846b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d521c7fba0352daaa6e8bb49e91cdca1b7a477ae
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:48:18 2024 GMT
        Subject: CN=682ac1d55ff1dbcae5128e9988cc540a4336bfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:c1:84:c3:c9:8a:a3:71:26:96:45:3f:ab:
                    2a:56:36:e7:4a:f8:d8:51:b5:f8:f7:fd:12:77:75:
                    96:f1:f6:c6:84:af:73:58:3d:76:e6:59:4c:d8:09:
                    ab:a3:23:75:71:66:a6:a6:eb:3c:d0:06:98:dd:91:
                    95:ab:83:01:76:8d:35:33:47:4c:b7:62:42:93:ed:
                    5f:13:8b:15:36:6b:86:c7:76:76:3e:46:dd:9a:13:
                    ea:97:4f:38:f4:88:18:d4:a8:e8:31:8b:c9:72:ba:
                    70:3f:01:44:e9:33:8e:ea:f7:06:b7:02:70:c0:fc:
                    df:d0:fc:87:d5:be:94:76:98:d0:be:60:f7:78:fe:
                    c3:57:52:cc:92:e7:dc:96:2b:45:3a:5e:ac:a6:01:
                    0b:0a:cd:47:d6:20:55:2a:b3:13:0a:8f:96:af:28:
                    59:b9:f5:9b:89:43:76:a9:5f:e2:44:d4:fe:1b:8c:
                    fc:f3:5e:c1:3a:62:1d:2c:21:81:63:4d:02:35:23:
                    94:61:fc:f8:82:e0:d1:de:93:3a:82:3f:d0:a1:8b:
                    9f:34:48:9c:41:9a:39:1a:1a:d7:b9:ab:a0:75:fc:
                    4a:6d:84:61:c9:f9:57:90:35:73:ea:82:9f:87:ee:
                    13:fe:0b:fb:e7:b1:21:07:ae:0a:55:6d:2f:f1:96:
                    c3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:58:7F:2D:A4:D5:73:EA:13:98:01:6F:10:40:2C:C4:44:2A:B1:92
            X509v3 Authority Key Identifier:
                keyid:5A:F2:B6:3B:96:23:1C:D0:22:F9:38:2E:7F:DD:9E:96:FB:7E:ED:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbcc3a19-17de-4d2c-a3ec-5d8baafc4ec8/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbcc3a19-17de-4d2c-a3ec-5d8baafc4ec8/d521c7fba0352daaa6e8bb49e91cdca1b7a477ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f1:46:32:16:e8:90:0f:5a:18:13:ff:05:65:cb:69:87:48:
         4d:f8:b4:a3:58:0b:10:a7:16:ee:ff:4b:fe:05:1d:e8:fa:2b:
         56:1f:df:42:87:d5:1f:1a:4b:ee:b2:e1:82:d6:41:7f:e3:de:
         ce:64:4a:26:69:25:eb:b1:45:7b:28:6c:e2:31:17:f5:e6:35:
         26:1e:06:37:a7:25:66:12:af:03:69:51:7b:46:51:05:de:8e:
         d1:f7:41:95:a8:6c:d4:33:31:2b:5b:2e:08:d4:a9:29:a0:7b:
         3a:6e:93:2a:88:8f:11:f8:07:1f:86:99:8f:78:35:59:3f:f7:
         d9:6a:3b:52:b4:a8:c0:18:a3:7a:59:d6:4c:d9:f4:9e:82:e5:
         08:df:69:e2:25:95:9b:a4:25:b8:38:a0:5e:8f:74:99:c8:97:
         be:17:35:7e:cc:56:33:93:fd:2b:1f:9e:df:10:27:bc:5e:d3:
         5b:47:bc:a6:19:04:32:49:32:2f:ee:72:64:8c:08:f8:d9:6d:
         18:f3:24:71:e7:94:8e:89:c3:e5:b9:74:04:11:cd:a4:c6:1d:
         29:a5:48:db:22:eb:71:eb:31:5e:79:c1:08:07:82:39:2f:f3:
         e9:82:f9:1b:af:79:27:8a:86:cb:d3:fd:d8:a1:f1:b2:64:95:
         b2:92:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----