Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/093a125e-7e47-466f-8b38-5d7dc4c25f35/ecd5ae639c8c795aa6afa77cc9524eebc9084251.mft
File:                     ecd5ae639c8c795aa6afa77cc9524eebc9084251.mft (raw, json)
Hash identifier:          TODz6c1r+Zcq3H2YQTSmwXTWMpgp+C5OIM++KFtqvxU=
Subject key identifier:   C2:1C:9C:C3:D3:64:B4:C4:3D:90:C0:D6:B2:80:3B:B4:BE:DE:B9:89
Authority key identifier: D3:2A:A7:6C:B0:04:EE:DD:10:48:00:1A:31:08:70:30:15:74:20:74
Certificate issuer:       /CN=ecd5ae639c8c795aa6afa77cc9524eebc9084251
Certificate serial:       28DB5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecd5ae639c8c795aa6afa77cc9524eebc9084251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/093a125e-7e47-466f-8b38-5d7dc4c25f35/ecd5ae639c8c795aa6afa77cc9524eebc9084251.mft
Manifest number:          0DFB
Signing time:             Mon 15 Apr 2024 02:21:28 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 03:27:29 +0000
Files and hashes:         1: 99bf72d76daed084fd8d932da95cee7b4f79ecba.roa (hash: 0+FrE4IqvzJefaXJclLAMQUUbkLIHaBlFAhJlRoM7Sk=)
                          2: ecd5ae639c8c795aa6afa77cc9524eebc9084251.crl (hash: 5os6WfccVrBA+dgdwsjSQKFu+ZlNjFql9BUP5/XP9BM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2677595 (0x28db5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd5ae639c8c795aa6afa77cc9524eebc9084251
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 03:27:29 2024 GMT
        Subject: CN=a3f65f3bff3b77f3588f162e00f0b765796381fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:7f:61:cf:3b:ae:7b:d9:ee:f8:17:35:20:
                    c3:d7:59:98:24:b6:88:e5:47:b2:54:f4:21:7a:63:
                    85:60:d3:79:ef:a0:5b:e2:9e:df:c3:77:a4:6a:4e:
                    a0:8a:b4:fa:b1:24:be:9f:f2:0f:73:a8:9b:78:0d:
                    6e:07:9d:e1:df:10:7a:af:e0:4d:c5:2d:0d:cb:e8:
                    db:00:3a:a2:cd:57:7e:c9:35:4a:3f:54:90:81:07:
                    2a:71:82:de:a2:bf:59:bc:4a:be:ea:d5:49:83:33:
                    51:74:6b:1e:cd:d7:b3:1c:5d:64:e4:57:7b:e2:f5:
                    d6:16:bf:ed:87:0c:cc:79:66:63:b1:47:a4:de:de:
                    86:bb:cd:ac:2f:9f:3f:6f:25:d9:2c:1d:d5:ae:00:
                    54:18:34:f2:03:fe:6c:fe:fe:5a:77:7d:fe:b0:d5:
                    cf:99:2c:22:1b:4c:dd:e8:58:10:24:77:38:af:c2:
                    9d:71:b2:da:bc:9e:4f:a6:da:9f:fc:45:49:e9:bb:
                    0b:45:8e:07:bd:16:af:1c:13:1b:14:86:3e:3e:94:
                    91:ae:71:71:8a:9e:61:45:4c:2b:4c:0a:93:6d:60:
                    a6:bd:58:b9:f3:d5:c9:e2:54:6d:21:81:4d:51:46:
                    92:6d:c4:dc:50:b8:51:f9:2f:34:98:4d:d0:46:f8:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1C:9C:C3:D3:64:B4:C4:3D:90:C0:D6:B2:80:3B:B4:BE:DE:B9:89
            X509v3 Authority Key Identifier:
                keyid:D3:2A:A7:6C:B0:04:EE:DD:10:48:00:1A:31:08:70:30:15:74:20:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecd5ae639c8c795aa6afa77cc9524eebc9084251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/093a125e-7e47-466f-8b38-5d7dc4c25f35/ecd5ae639c8c795aa6afa77cc9524eebc9084251.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/093a125e-7e47-466f-8b38-5d7dc4c25f35/ecd5ae639c8c795aa6afa77cc9524eebc9084251.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:49:76:70:a5:6c:fc:3c:b1:a3:b5:e2:50:d1:6a:48:40:5a:
         3f:87:a4:9f:eb:f9:52:a4:74:a6:d1:a5:70:f1:7e:e4:f4:21:
         e3:93:86:50:36:c0:11:9d:26:48:61:88:9f:ad:38:0e:9f:d7:
         61:0a:bf:f8:bb:d4:67:ee:8c:c1:71:1b:40:36:83:56:c4:02:
         48:5a:d2:76:75:03:aa:23:de:bb:cc:a9:85:ac:38:55:82:78:
         f2:7c:ce:c9:c6:ab:27:87:2c:e0:1e:78:58:68:6d:56:07:52:
         a3:89:bd:6e:87:62:05:70:9e:a7:63:93:0a:88:f1:9c:62:7c:
         94:8d:3d:de:fd:19:ef:fb:47:0f:fc:8c:68:12:70:68:16:04:
         2c:3d:07:07:4e:3e:be:fa:eb:ab:79:32:37:f6:a9:e2:79:5b:
         0f:3e:a7:bf:bd:b8:be:1d:25:18:0d:41:dc:00:d4:ba:36:0b:
         c5:43:8f:13:ee:08:3d:eb:90:c0:f6:ae:02:36:68:fe:2a:7b:
         d9:00:db:8b:2c:4d:e0:15:b9:dc:53:8a:af:91:9b:da:d3:6a:
         c7:24:be:0c:b7:9d:e9:33:cc:63:5b:9a:83:8f:c2:fb:3a:ae:
         7e:0e:2d:a5:95:a1:39:62:10:d8:40:1a:a5:fa:5c:98:fc:d4:
         16:e6:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----