Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/fdd526d7e7abffb4e5ca5b33105025838990e9a7.mft
File:                     fdd526d7e7abffb4e5ca5b33105025838990e9a7.mft (raw, json)
Hash identifier:          gT0bACg9NrtuBUzfYXbEZ7ozUjhdLoV5P016t6uIPBY=
Subject key identifier:   BA:54:5C:93:20:BA:6B:17:4F:9B:BE:16:9C:12:C6:E2:7E:A1:AC:15
Authority key identifier: E6:07:43:CA:87:2A:92:14:91:9E:4A:9E:2E:7D:77:B7:0D:3B:B1:7B
Certificate issuer:       /CN=fdd526d7e7abffb4e5ca5b33105025838990e9a7
Certificate serial:       2882E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdd526d7e7abffb4e5ca5b33105025838990e9a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/fdd526d7e7abffb4e5ca5b33105025838990e9a7.mft
Manifest number:          0E0D
Signing time:             Mon 15 Apr 2024 10:21:39 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:27:25 +0000
Files and hashes:         1: 14fc8a8612f1bd4663ac05996bd1348da06edcc1.roa (hash: tvhctux5enN33fhoHgj/FfbxUcoa/+ATiJFQvLNXn64=)
                          2: c0198477057deabb9113afdbb06d305261d3aab3.roa (hash: dZc7qUuKJP41W8H5+x4mdIro9HIJzz1KcfI8TzlQ2Kc=)
                          3: fdd526d7e7abffb4e5ca5b33105025838990e9a7.crl (hash: g0OT0xyUJCNe2P31w6UxuP1c91abez6ympywYuiahKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2654952 (0x2882e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd526d7e7abffb4e5ca5b33105025838990e9a7
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:27:25 2024 GMT
        Subject: CN=5a2b1cfc73c9a0cbbcda0bfd2431ad75403a9b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:e1:dc:c4:ef:57:d1:71:a7:b4:6c:63:cb:
                    79:bb:0c:14:c1:1b:49:cf:4c:92:9d:18:67:b5:a3:
                    67:05:0c:3f:ce:03:49:0f:76:62:bf:f8:8d:a2:c3:
                    86:30:dc:ab:16:ef:43:fc:40:7c:ad:9f:5b:f2:ed:
                    e3:d3:c4:d2:72:dc:75:ba:0b:4c:c9:38:5d:a4:18:
                    ec:03:23:05:29:9f:3c:a3:ff:9a:24:24:97:f8:1b:
                    bd:40:e1:bc:c8:89:6b:1f:02:b0:7a:ba:a1:6c:e1:
                    57:86:ae:18:13:07:6b:49:34:29:9c:98:35:8d:d6:
                    0b:c5:49:3f:db:84:59:4b:3f:fb:ee:9f:66:ad:6c:
                    ef:b7:92:a5:8c:6c:76:80:85:c2:b3:d1:35:b3:ef:
                    ab:37:65:f0:18:10:b2:82:99:17:77:b1:96:95:87:
                    f8:79:e0:c0:81:9e:a4:14:09:3b:76:5b:ab:e2:7f:
                    b8:c4:e3:f7:3f:a9:a5:e4:af:13:52:66:3e:0f:40:
                    10:7c:a8:fa:15:bb:df:2c:dc:28:b9:99:8c:d9:ec:
                    2d:0a:4d:15:99:be:69:97:89:1f:8a:31:61:24:e6:
                    8c:23:1c:06:f1:f7:ee:9e:0e:35:35:02:9c:0c:ee:
                    78:f1:78:81:09:47:b0:d5:da:14:1e:9b:5f:ad:a0:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:54:5C:93:20:BA:6B:17:4F:9B:BE:16:9C:12:C6:E2:7E:A1:AC:15
            X509v3 Authority Key Identifier:
                keyid:E6:07:43:CA:87:2A:92:14:91:9E:4A:9E:2E:7D:77:B7:0D:3B:B1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdd526d7e7abffb4e5ca5b33105025838990e9a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/fdd526d7e7abffb4e5ca5b33105025838990e9a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f5bfd79-a781-421b-bc69-1288d41a35d4/fdd526d7e7abffb4e5ca5b33105025838990e9a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:53:86:bf:aa:c4:9d:f4:f3:ac:cd:ef:d4:ff:a2:b5:a6:fd:
         e6:11:3d:88:4c:bb:2c:55:36:64:8a:16:5e:6c:83:60:81:90:
         8f:e8:00:31:0b:18:6e:72:41:32:09:7f:3f:4d:35:88:69:71:
         9b:f6:0c:a3:43:ad:7e:a4:f3:3d:30:a3:33:81:56:65:ec:cb:
         f7:af:f3:e6:83:c6:02:b0:56:7c:24:64:b7:8b:0e:62:10:1a:
         f8:bd:6f:18:9a:ab:47:fd:aa:11:a0:4d:2a:50:ae:27:d5:2b:
         32:52:45:1a:9c:cc:e9:5b:30:78:42:ee:cf:72:67:be:55:27:
         09:5b:e3:7e:e5:1a:b0:6b:e4:ba:99:be:99:48:3b:98:5b:ff:
         a4:ab:67:55:80:61:5b:b6:d8:8a:12:63:23:83:9b:6c:36:79:
         a8:d7:8a:ed:8e:f7:27:ea:5f:89:ed:cc:96:a0:04:b5:3e:bf:
         01:1a:81:c6:1d:dd:7a:bb:ae:24:16:85:0a:b6:18:dc:f2:d7:
         e7:bb:91:8b:b6:b8:07:e3:19:3c:34:f9:b0:58:e5:24:08:f8:
         0c:51:6b:bc:33:91:de:3f:94:5b:30:07:61:b2:d0:64:6c:6d:
         93:ea:8f:d4:82:d1:2b:65:b3:a7:21:59:1e:3e:29:5f:82:77:
         c2:5a:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----