Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/a336e26974c3cfc7b7b20511c84d25414d7bfc61.mft
File:                     a336e26974c3cfc7b7b20511c84d25414d7bfc61.mft (raw, json)
Hash identifier:          BdRaUrSahfNejhepV27pMtkgBZd2s1DwCSfM/Ui1+tM=
Subject key identifier:   57:02:35:F9:FF:5F:DC:56:71:7D:30:D5:E0:68:82:B6:30:79:3E:11
Authority key identifier: 8E:A8:72:0C:76:FA:89:D2:25:D2:CD:69:69:9C:EF:EB:47:6F:03:CA
Certificate issuer:       /CN=a336e26974c3cfc7b7b20511c84d25414d7bfc61
Certificate serial:       13A74A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a336e26974c3cfc7b7b20511c84d25414d7bfc61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/a336e26974c3cfc7b7b20511c84d25414d7bfc61.mft
Manifest number:          0A0F
Signing time:             Mon 15 Apr 2024 08:21:37 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:53:16 +0000
Files and hashes:         1: 4c425783ed91eb1b071da4924f5ad66f8b14e155.roa (hash: NzFT8gMCXGGBuLy3+Z6GUQ+S/jMnT3dwExt+LjD4yd8=)
                          2: a336e26974c3cfc7b7b20511c84d25414d7bfc61.crl (hash: iFQs+YSCLoIrCbZd2mnoUwAiHlK2+5kw6cp8wRu0dEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288010 (0x13a74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a336e26974c3cfc7b7b20511c84d25414d7bfc61
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:53:16 2024 GMT
        Subject: CN=3aae809810e40d7e0faa4a7f820e16db00109b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:7c:67:41:3e:c2:65:84:34:bf:fc:21:c6:
                    49:1d:03:28:0c:89:d7:fe:39:d7:bc:28:e8:d6:f6:
                    ce:e1:44:98:74:a1:5c:b3:5c:7d:53:2a:e3:86:00:
                    e6:04:51:b2:f4:17:3b:8b:a5:e6:e3:b1:1c:5f:df:
                    3c:a5:e4:cf:4b:78:c0:3d:f4:68:55:bb:a2:d3:7a:
                    da:3b:99:c2:c8:11:26:1d:e1:5f:38:6c:91:69:ca:
                    da:4a:dc:70:04:77:87:45:e5:a8:f7:f4:72:fc:41:
                    1e:7e:31:94:84:84:e5:6e:29:cd:6d:c7:6f:b0:0c:
                    94:85:e5:3f:be:5f:9c:d6:e7:51:1d:56:f1:f8:86:
                    72:b1:1c:94:bf:21:d7:37:54:03:4e:83:0e:43:8e:
                    3d:48:6c:f2:63:1c:c2:05:73:25:c6:de:f5:aa:0a:
                    0e:5b:8e:f3:d9:28:c9:5e:83:45:05:93:ff:6b:16:
                    08:21:ec:d7:1f:da:5d:f8:ac:7b:2a:f7:71:d4:23:
                    00:f5:1c:55:a2:37:37:1e:03:9d:94:52:eb:6e:85:
                    4d:7a:87:d9:44:a7:09:2f:92:36:b3:fc:c8:52:61:
                    61:a1:18:bc:84:98:80:c0:29:6d:40:a4:84:fc:c5:
                    df:6c:83:12:0a:4d:7a:aa:4a:e3:66:b6:49:a0:4c:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:02:35:F9:FF:5F:DC:56:71:7D:30:D5:E0:68:82:B6:30:79:3E:11
            X509v3 Authority Key Identifier:
                keyid:8E:A8:72:0C:76:FA:89:D2:25:D2:CD:69:69:9C:EF:EB:47:6F:03:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a336e26974c3cfc7b7b20511c84d25414d7bfc61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/a336e26974c3cfc7b7b20511c84d25414d7bfc61.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/a336e26974c3cfc7b7b20511c84d25414d7bfc61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:c9:88:12:53:5a:bd:9c:96:fe:df:84:2e:cf:da:4e:0c:
         77:e4:af:92:cd:39:93:2a:7c:89:f7:ca:0c:65:fd:cd:7f:9f:
         bb:e6:11:b9:10:52:ea:48:66:35:18:a5:2f:ce:6e:a8:f7:62:
         14:2d:04:1c:9f:22:d9:ea:ce:15:ab:6f:eb:e1:de:2d:43:a7:
         f3:b5:e3:be:04:ca:d5:5b:42:c2:97:05:90:e0:77:9f:de:2c:
         4f:f8:2d:93:9e:ff:51:d1:f0:56:1d:0f:19:28:bd:17:91:75:
         e3:ee:fd:5a:93:11:63:cb:2f:1b:cb:98:4f:2b:08:29:dd:b4:
         9b:b5:ba:a1:21:af:02:4e:d0:bc:9f:3f:08:16:4a:f2:ec:51:
         12:10:12:c8:4b:55:ce:ab:17:1c:4d:6e:ac:a3:87:bc:f2:6f:
         f6:08:da:9c:1d:99:a1:4d:2e:e1:e6:23:51:1b:00:74:1f:8a:
         92:31:f6:5b:10:47:f6:a7:be:13:38:35:bd:12:20:2c:7e:ad:
         54:dc:d6:b8:f7:57:ab:0f:a9:8c:c4:f9:45:a2:0b:04:70:2b:
         cf:5a:c4:ac:0d:a2:a4:37:a3:c6:cc:a7:4c:51:71:9f:1f:76:
         57:8b:4c:27:84:fb:04:77:ad:a2:0f:de:ec:19:79:9c:5a:f9:
         36:c2:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----