Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.mft
File:                     f89de4a778f6d0c50cb7dd384cd10f772e6b17de.mft (raw, json)
Hash identifier:          1oVeBgJxQrmP9arOAZC4ZLn51P7g+2cRo5efCyszVVA=
Subject key identifier:   85:69:C3:13:C3:AC:74:1B:DD:AE:9D:89:E0:D9:0B:46:78:86:D7:B7
Authority key identifier: F5:7E:66:2F:69:0E:3A:DE:99:E5:40:1E:82:86:91:84:3C:46:3F:43
Certificate issuer:       /CN=f89de4a778f6d0c50cb7dd384cd10f772e6b17de
Certificate serial:       1E66C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.mft
Manifest number:          0E2E
Signing time:             Mon 15 Apr 2024 09:21:27 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:59:18 +0000
Files and hashes:         1: 3144ec39968e7ce7b58aafdb4c143d5908e5f467.roa (hash: YfsXBeNr4BZnAW+6KcFl4crdaD8zpG5FajM9cMD6sfY=)
                          2: 33a08d09db5d79dee9d956764c9e938ed8d930cb.roa (hash: aytoqtXLBpcBFDLV8cDgjnD5iWB3q+KlOYvIvjIm1B4=)
                          3: 3e23c56a1323091b4db4347754156780dd52c7fe.roa (hash: yreUu+59TDtU1/LT3KXNW+nJYR2uoYCk94jadWF0wys=)
                          4: f89de4a778f6d0c50cb7dd384cd10f772e6b17de.crl (hash: hwFDZiQ9lsrXe43g+GW6oV7ZVnd/1aHiaueK3LQRFxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992392 (0x1e66c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89de4a778f6d0c50cb7dd384cd10f772e6b17de
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:59:18 2024 GMT
        Subject: CN=7ebe7c01cb0ed4cb2ab7eac4f4b5c0d146d410d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4e:be:44:47:36:bd:4e:ad:e7:13:96:4c:07:
                    8c:33:15:60:9c:8c:0a:2e:70:ab:c7:04:b2:68:65:
                    ab:b0:b7:6c:65:f8:d2:ab:7c:31:8a:5f:3a:08:80:
                    7e:d0:f3:94:cd:e0:22:42:d6:6f:df:02:0b:33:95:
                    75:c9:ba:f1:2a:87:70:4e:1f:55:c5:05:63:05:5e:
                    e7:19:90:49:46:ed:f5:5e:ff:23:64:04:5e:fb:c7:
                    86:ef:df:b0:cc:20:e4:f1:b4:17:a9:8e:94:c2:ae:
                    9c:09:81:e4:81:98:64:29:59:2e:31:3c:18:65:d9:
                    cf:b5:ba:7e:44:e9:95:2c:18:20:c7:aa:45:5a:45:
                    c8:42:e4:b0:7d:7a:5e:80:c5:ae:bb:c7:eb:4e:ca:
                    d2:5d:72:8f:ff:72:8e:c8:de:41:ec:0b:45:eb:e7:
                    dc:0c:b6:e5:8b:be:e3:87:06:fc:85:48:5c:63:a9:
                    5e:ac:bb:1b:ca:47:02:bb:d1:3f:6e:89:cf:0d:a0:
                    62:c8:2b:a6:9f:4c:9c:63:a4:28:9f:fe:65:4b:a3:
                    81:43:a1:bf:d7:c0:2d:f2:37:b8:a1:58:a5:37:d1:
                    21:85:18:37:dd:27:5b:8b:d3:ca:20:38:5a:79:04:
                    2c:c1:cf:c2:e0:72:53:6a:a7:31:e6:a9:4c:7d:fc:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:69:C3:13:C3:AC:74:1B:DD:AE:9D:89:E0:D9:0B:46:78:86:D7:B7
            X509v3 Authority Key Identifier:
                keyid:F5:7E:66:2F:69:0E:3A:DE:99:E5:40:1E:82:86:91:84:3C:46:3F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06aa33a2-af52-457c-a226-46b1c72693d3/f89de4a778f6d0c50cb7dd384cd10f772e6b17de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:21:c3:30:00:f3:79:5e:ba:2f:22:1f:b5:1b:68:be:9b:
         80:8e:a7:d9:90:f9:9b:5d:ea:59:ea:cf:a2:3f:9a:5a:ef:51:
         0e:08:5d:cf:66:8e:d0:2c:67:d6:32:28:c9:2a:88:e1:ac:3d:
         28:ee:68:69:b3:a8:89:62:19:3f:8c:80:19:6c:33:36:91:6a:
         90:2f:09:61:41:8c:15:55:6b:f1:9e:47:17:b7:13:26:d2:23:
         7f:26:91:89:3a:2b:00:0c:2f:1c:a7:32:00:94:e9:67:3d:5e:
         c6:33:d1:f8:74:22:0d:39:d9:83:30:51:2d:9d:55:ba:46:22:
         dc:6c:2f:73:b5:7f:02:7b:71:1b:6b:17:26:77:ef:85:a3:fe:
         4f:50:73:b2:a9:23:e3:95:78:28:69:c4:94:20:a2:4f:b5:97:
         9a:77:e6:01:16:2b:fe:0d:11:6f:4c:66:78:f7:20:f4:de:b7:
         b4:87:18:2b:64:42:98:ed:5d:2f:30:ca:3e:ce:58:23:c5:69:
         38:0d:be:5c:3c:d0:80:1a:fa:e5:ea:a5:2d:bc:4f:96:71:05:
         79:e4:a0:82:5b:43:51:2a:e4:52:96:d6:1d:16:3e:ad:a1:ef:
         c6:61:ee:6d:2b:e8:b7:0b:ef:54:45:d5:5e:ad:2e:0d:8e:a7:
         c5:3c:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----