Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.mft
File:                     29598424cc9e5513086a121e39d9b7e3d625ecb7.mft (raw, json)
Hash identifier:          xdy143hqPbGAidM0upbdKZx2X68CgxF0Q3cXXa5B++w=
Subject key identifier:   59:40:8A:A9:41:7E:14:BA:ED:89:E1:98:0E:1C:82:F8:D6:74:CA:11
Authority key identifier: E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88
Certificate issuer:       /CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
Certificate serial:       19FFCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.mft
Manifest number:          0D3E
Signing time:             Mon 15 Apr 2024 02:21:23 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 02:37:29 +0000
Files and hashes:         1: 29598424cc9e5513086a121e39d9b7e3d625ecb7.crl (hash: NXE9C6WPDHPqmL+3hSB08EiznJ+Qe5Ul+lMTntXb5+w=)
                          2: 36b7d9c46ee394ff580f6d625d994478d1c72fcd.roa (hash: /YlZsi7VdCZGo5vuLB349K3CWENiB7eY5zqTPrKRAAA=)
                          3: 5ba69aaf132a24936119a721d6ca452a003c65c7.roa (hash: 5G8Nomj9hMpXTHcevJ0cihWx4HtIPlv6mcgv5+lT2P0=)
                          4: 65f7997deccde40d7ffa2fcea4a6cdceb5d08479.roa (hash: 6YwL78tpqcdVBbYp0Fy4DWTMkP/ivgu8WMGseERfLDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703887 (0x19ffcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 02:37:29 2024 GMT
        Subject: CN=06cb53d838f64566521e01da3d1bc03ce4cd9e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:77:08:8f:4d:6a:b7:0b:5c:f3:4d:ac:41:f1:
                    22:20:65:5f:7f:f2:8b:19:0a:a4:21:7f:8f:8d:31:
                    c5:bf:17:23:94:58:02:a0:87:fe:1a:48:df:e4:0f:
                    74:65:20:6f:9a:c6:ac:ca:57:c3:fd:66:bc:ad:a2:
                    85:54:a7:b2:da:7f:52:cd:e7:15:66:f3:35:50:7c:
                    0a:a1:9d:cb:80:6b:a7:77:58:d9:e3:ea:e1:30:19:
                    d8:ef:a2:82:cd:ad:1a:97:a4:e0:61:53:62:43:ee:
                    e8:b9:f7:4f:b9:77:44:81:46:49:c0:8f:be:a7:0a:
                    6c:8c:7d:92:d8:5a:6d:48:42:14:76:db:fa:09:b9:
                    6b:21:01:e5:a1:ed:8f:e8:3b:d3:61:6d:95:46:c7:
                    57:df:66:c8:f9:d1:aa:83:0b:76:43:89:fb:db:4f:
                    90:13:e1:4b:80:f8:3b:91:1f:da:d8:7a:f8:ca:2d:
                    73:24:53:d6:84:97:f1:4b:e1:e2:3f:a8:02:3a:ff:
                    24:60:50:9b:7f:4e:56:00:01:da:3b:cf:97:5b:48:
                    02:96:89:c9:de:96:37:e5:f6:11:3e:50:ce:d7:26:
                    19:c1:4e:37:8a:93:ce:ba:bd:86:69:2f:6e:23:17:
                    b1:74:20:8d:3d:9a:7a:16:77:74:cb:01:bf:58:a7:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:8A:A9:41:7E:14:BA:ED:89:E1:98:0E:1C:82:F8:D6:74:CA:11
            X509v3 Authority Key Identifier:
                keyid:E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:3c:73:e3:ca:4b:a1:49:91:6e:8d:83:3b:c8:79:9c:c6:
         5b:f6:c1:02:4a:ea:61:3e:e5:af:eb:5c:19:b7:2f:3b:50:12:
         d8:9a:71:47:5b:15:90:e3:b4:8b:16:b2:cd:87:ef:68:e9:ce:
         cc:1e:69:8d:65:a1:80:a7:ba:aa:3e:b8:47:cf:66:fa:58:75:
         aa:29:32:92:06:49:e3:0f:44:0f:36:e6:0c:8f:e7:36:e5:51:
         53:2a:9e:7c:1a:76:5e:f4:9a:6e:8e:45:47:8d:0b:b3:e0:39:
         5e:6b:1a:6c:57:8e:58:f2:3c:6e:4c:bb:2a:e7:47:ef:01:04:
         f0:5a:70:ec:35:c6:a0:9d:30:3a:80:e5:b8:6e:51:02:80:4d:
         e0:f3:f4:d6:da:c4:cc:e6:79:21:99:26:25:71:ca:56:b8:8e:
         26:69:ec:8d:11:0c:8c:6e:21:54:6e:b7:cf:72:0a:42:92:d5:
         38:53:de:15:3a:20:6e:b0:53:ff:16:70:09:b9:48:c4:b4:6d:
         59:49:8d:77:3e:39:37:13:22:cf:c4:4f:78:41:29:f5:b8:6d:
         70:aa:fe:1e:c3:00:b8:3a:cc:b4:de:f5:49:90:f3:1b:e2:2c:
         f9:5a:d8:14:f8:95:d4:f3:09:fa:90:d5:12:c0:c6:c2:e8:d3:
         88:91:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----