Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.mft
File:                     904a59874ab57a97e46cd1d939a2312a85fe9c71.mft (raw, json)
Hash identifier:          6cEdLe9By9ade6ORjhkTp20lfIIJLEyvFPxnEK+CE3A=
Subject key identifier:   D4:4F:1A:7B:75:51:5B:E8:B1:EB:18:B9:64:59:EF:E8:19:20:C3:49
Authority key identifier: 4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
Certificate issuer:       /CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Certificate serial:       2943AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.mft
Manifest number:          0E19
Signing time:             Mon 15 Apr 2024 03:21:45 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 03:52:17 +0000
Files and hashes:         1: 3fd0e846c7fd55a15e4f8b8fe7d0081cf0d82c51.roa (hash: 7YraGpV2znDlkxbKZi/XK6KpVDy4Kh7hjNQZCb4Dfdo=)
                          2: 904a59874ab57a97e46cd1d939a2312a85fe9c71.crl (hash: BWcwY9Ka0NZUcW9Hx/2T0TIm8g3YZLGvvg0OsLMpLww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2704302 (0x2943ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 03:52:17 2024 GMT
        Subject: CN=ee4da5fafe9feadb44f691a8aa8a1e5b37df1a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:e6:09:4b:30:8f:72:b7:74:a7:0b:6a:03:
                    a0:52:fe:cf:50:ba:de:18:90:17:ab:38:88:f0:4b:
                    90:af:73:a9:3e:df:80:46:bd:e9:fc:f2:34:5f:0e:
                    1e:76:79:a2:60:ed:33:3d:f2:34:b6:3c:ab:48:bf:
                    45:07:75:ab:bf:bc:f9:51:22:16:b1:b8:97:85:d0:
                    e3:73:bd:0d:30:f5:56:ef:0f:c5:20:05:8e:67:2c:
                    d0:d4:fd:c6:66:5d:a8:04:5e:1d:f2:6a:fc:98:1a:
                    a1:13:c7:60:aa:03:c3:54:db:0b:67:51:bd:3d:7f:
                    ca:fe:9e:34:27:72:d1:0b:80:6d:da:61:c1:e9:22:
                    09:0c:ce:49:3c:6d:44:e3:94:16:14:6f:e9:69:d9:
                    01:14:39:78:10:00:6a:2c:a7:55:e3:9d:65:ee:6f:
                    46:d1:e1:8b:37:15:7d:bc:f0:37:84:e1:0e:23:61:
                    22:75:c7:d2:f0:70:58:d0:e6:02:0f:e0:96:bb:54:
                    6b:0b:91:72:0c:b1:fa:75:34:a2:e9:46:4d:5f:a3:
                    a1:e1:ba:57:b0:cb:21:9f:05:c3:3a:28:76:2d:de:
                    33:c6:93:41:3d:29:4c:0e:da:92:17:74:4d:cf:21:
                    a9:61:79:11:42:f5:d3:01:eb:52:32:b1:ee:7d:94:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4F:1A:7B:75:51:5B:E8:B1:EB:18:B9:64:59:EF:E8:19:20:C3:49
            X509v3 Authority Key Identifier:
                keyid:4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:cf:96:89:8f:4a:30:13:7a:cc:86:05:39:53:22:a5:72:8c:
         46:6d:c1:dc:c7:84:25:e0:44:6c:11:75:19:e9:ce:90:69:f4:
         d4:0d:b9:cb:28:22:8a:4d:5d:4a:13:55:21:50:3b:e0:37:24:
         65:32:0c:9d:22:82:0b:7c:c0:71:74:f1:74:1e:9c:ab:17:65:
         63:8a:94:99:73:99:73:c4:f1:82:ff:e3:19:21:b0:73:a8:cf:
         7f:6e:ca:1d:c4:2d:c9:43:4d:c9:9f:2f:aa:d6:e8:28:35:1c:
         91:0a:1b:fc:7b:3e:1e:4d:ca:ce:1f:40:94:5b:4d:04:f3:fb:
         9c:9e:09:31:4f:63:44:88:ce:d4:36:8f:74:f9:ef:b2:d9:15:
         b5:42:da:fd:6d:9c:4d:57:0f:93:58:6c:c4:17:0e:20:2b:fa:
         e0:c1:87:00:18:c0:a4:3e:28:2c:05:b1:3a:5e:8e:f9:dd:5c:
         67:9a:9e:d6:10:48:40:69:56:60:63:13:fc:29:5a:d9:fe:e9:
         e0:53:9a:4b:d5:bb:e8:5a:d0:a5:e4:55:17:22:49:d6:a9:1d:
         1d:75:3e:73:a1:2d:36:16:fe:e5:77:70:67:08:89:f8:d3:e8:
         3f:46:09:b3:d4:73:5c:ac:01:83:64:e4:3b:16:6a:87:63:ed:
         9d:24:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----