Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03538c50-0187-4aa4-b5c2-04e202f6ed01/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.mft
File:                     db50cae8c7b8d849e6d97a29ff403e7d5753afc5.mft (raw, json)
Hash identifier:          UKfAE1euJvKvrYBHFwgCyFR9CpuU/DBIkK+Zd32Fp1o=
Subject key identifier:   CC:EE:3E:8A:AE:78:25:73:23:08:EA:BE:70:1A:75:49:4B:36:EE:A7
Authority key identifier: 91:01:B3:CB:73:60:8D:DD:10:2A:0F:A6:85:B1:BA:E4:6C:9E:FE:F7
Certificate issuer:       /CN=db50cae8c7b8d849e6d97a29ff403e7d5753afc5
Certificate serial:       021133
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03538c50-0187-4aa4-b5c2-04e202f6ed01/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.mft
Manifest number:          0114
Signing time:             Mon 15 Apr 2024 04:20:40 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 04:28:26 +0000
Files and hashes:         1: db50cae8c7b8d849e6d97a29ff403e7d5753afc5.crl (hash: ZLjR8lY/3QKe90XXyYhFqfLm0ggnQKO0a6mpmTZOV+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135475 (0x21133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db50cae8c7b8d849e6d97a29ff403e7d5753afc5
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 04:28:26 2024 GMT
        Subject: CN=53ee085aa9b96fe8473902274b1200c0e757c37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:16:79:c3:99:c5:d9:84:be:11:ba:25:f5:
                    b2:83:5d:7d:02:e8:58:ac:33:d9:aa:6d:3c:26:d9:
                    a7:e4:8d:26:98:3d:c9:fa:08:43:26:a6:e6:24:ee:
                    ef:0b:21:fd:f0:f8:ab:b3:90:7a:35:49:b7:08:c0:
                    88:de:77:4f:4b:9d:4b:a5:69:28:96:d2:5d:03:8d:
                    e0:96:de:87:ca:ac:d6:61:b9:3d:e6:12:71:53:3e:
                    8d:4b:6c:48:91:5f:10:e9:d5:a5:8e:6a:bd:56:94:
                    1e:97:66:36:23:50:bc:cc:59:0b:81:31:b0:68:90:
                    b4:4e:25:07:23:2d:ee:61:39:63:46:13:2c:3b:cf:
                    90:31:ad:b2:f7:bb:99:4b:a0:7f:09:e2:b8:fd:57:
                    80:7c:ce:58:35:35:c2:f0:6d:0d:6e:94:d8:bc:cc:
                    9e:13:6e:20:31:f5:b4:fd:ca:aa:ba:ca:3c:e4:ed:
                    19:bd:45:f6:9e:9b:96:b0:ad:77:08:a1:37:06:1f:
                    75:d4:f8:c4:72:03:24:98:fa:81:6d:41:74:3b:13:
                    3a:ec:61:fb:af:1c:5e:46:95:6f:6e:e0:aa:52:4b:
                    84:f2:48:c5:d0:1f:43:1e:36:07:41:ac:d9:f0:b7:
                    d7:75:a1:2b:11:ea:b5:70:c5:8a:15:e5:de:88:23:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:3E:8A:AE:78:25:73:23:08:EA:BE:70:1A:75:49:4B:36:EE:A7
            X509v3 Authority Key Identifier:
                keyid:91:01:B3:CB:73:60:8D:DD:10:2A:0F:A6:85:B1:BA:E4:6C:9E:FE:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03538c50-0187-4aa4-b5c2-04e202f6ed01/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03538c50-0187-4aa4-b5c2-04e202f6ed01/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:3b:d5:cf:ea:05:88:e2:f1:cf:3b:b6:15:ae:84:ff:49:
         9f:18:f3:49:08:b1:f6:a9:ec:bc:18:b2:fb:6c:fc:73:dd:18:
         06:4f:fd:12:ac:4a:30:2d:8d:66:7e:d0:2d:02:09:80:8a:27:
         fe:8b:be:2f:ef:da:e4:d9:47:a2:49:e3:fd:85:dd:88:93:61:
         ad:c3:6d:ce:59:11:93:fd:05:05:6a:f6:95:06:20:4c:2c:82:
         ee:31:bc:d8:70:83:e5:3e:33:e2:39:50:07:e4:6a:a3:3f:5e:
         2e:3f:87:37:16:39:b0:b9:17:16:85:1f:89:b3:10:c1:e1:27:
         56:14:8d:2e:16:6e:9c:8c:31:e9:d4:eb:ce:4d:da:f3:e2:89:
         96:ba:29:52:1a:e7:02:0b:e6:d9:35:9e:3b:4c:0b:d1:a2:d4:
         e2:0b:c8:08:96:eb:e1:9d:e4:bf:fa:95:31:12:2a:7c:8a:21:
         c5:e6:1d:a4:3e:f2:13:36:36:29:d8:49:65:db:0c:3e:aa:ef:
         4b:b9:85:dc:e9:a7:b4:21:ad:0f:d3:fa:b1:51:68:02:ff:5a:
         20:94:5d:5e:05:12:cf:c8:23:1e:59:35:e1:00:80:d1:a1:9a:
         74:57:3e:4f:2f:8b:57:76:8c:74:88:94:f6:03:c1:47:fb:6d:
         99:36:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----