Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3101d80b-fa34-402d-938c-32e40d7a2124/bc38033378ed4a08405e5efa3049b070dfac5053.mft
File:                     bc38033378ed4a08405e5efa3049b070dfac5053.mft (raw, json)
Hash identifier:          alFiitToyoP6hTNVdF+XUNAOUH7v7u7EOQW9IDHqv2s=
Subject key identifier:   9F:53:E1:73:99:42:EB:DF:C2:CE:EF:DB:B9:80:C0:53:CD:6B:1A:F2
Authority key identifier: 60:A4:41:21:75:34:52:DB:3E:FB:AA:1E:04:FC:E4:D6:9C:BE:DF:1D
Certificate issuer:       /CN=bc38033378ed4a08405e5efa3049b070dfac5053
Certificate serial:       1CD973
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc38033378ed4a08405e5efa3049b070dfac5053.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3101d80b-fa34-402d-938c-32e40d7a2124/bc38033378ed4a08405e5efa3049b070dfac5053.mft
Manifest number:          0DEE
Signing time:             Mon 15 Apr 2024 03:21:25 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:21:17 +0000
Files and hashes:         1: bc38033378ed4a08405e5efa3049b070dfac5053.crl (hash: WZAbGuy7Bu8IlcW348lr/0mEdTOZDfzsSO+gh7+Lxic=)
                          2: d7544e606d7e6d6bf22ce05abfb6370ced4abb05.roa (hash: nhbH9OZ9cJwO8GWIEdHM2qsFmJHGzsyf2npYpY1OKd0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890675 (0x1cd973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc38033378ed4a08405e5efa3049b070dfac5053
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:21:17 2024 GMT
        Subject: CN=9349c9ac7f08b1a68c4cd62d5a4e3fc94e157764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:13:78:0c:f1:54:fc:ba:91:d6:90:fc:ae:
                    97:e2:b7:19:72:58:96:16:59:63:19:d4:7f:14:77:
                    52:2e:82:6e:a1:87:6b:c0:17:fb:ff:de:c0:3b:ec:
                    d8:1e:bf:43:44:85:29:c1:e1:bf:da:f6:0f:6c:39:
                    53:37:05:8f:ed:53:0f:f8:3d:ec:73:84:83:cc:73:
                    be:8d:7c:19:bf:9f:5e:b9:47:d3:18:b8:50:f5:fd:
                    f6:c6:29:58:f4:94:78:0f:74:df:79:63:f2:40:4b:
                    53:89:df:c3:00:06:1c:6d:64:53:18:57:f4:4c:c1:
                    ed:4b:27:88:76:13:26:f1:cf:d1:26:1a:f6:de:09:
                    c9:9a:c7:ad:c3:9d:7e:b5:e2:a7:79:d7:51:45:d8:
                    6e:a8:af:39:39:1e:a8:dd:6e:91:45:01:5a:30:79:
                    aa:85:f6:5e:0e:c6:32:f4:d9:ed:ad:ad:e1:54:e9:
                    7a:c1:c3:1f:b1:58:ed:f6:5b:aa:1d:72:da:bc:cb:
                    89:82:63:f7:39:57:e6:4a:6d:8e:cb:58:6f:2e:65:
                    03:c6:fb:ff:a5:05:72:4a:b6:3c:8e:28:ce:7a:16:
                    d6:24:36:16:42:3f:08:57:f5:30:e0:87:5e:22:0b:
                    7b:01:ad:ca:7e:9f:94:37:86:c2:d7:92:57:da:cd:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:53:E1:73:99:42:EB:DF:C2:CE:EF:DB:B9:80:C0:53:CD:6B:1A:F2
            X509v3 Authority Key Identifier:
                keyid:60:A4:41:21:75:34:52:DB:3E:FB:AA:1E:04:FC:E4:D6:9C:BE:DF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc38033378ed4a08405e5efa3049b070dfac5053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3101d80b-fa34-402d-938c-32e40d7a2124/bc38033378ed4a08405e5efa3049b070dfac5053.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3101d80b-fa34-402d-938c-32e40d7a2124/bc38033378ed4a08405e5efa3049b070dfac5053.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:45:c0:48:c4:f0:81:3d:e8:3a:19:a0:a2:dc:ec:38:f5:29:
         cb:2e:24:fb:f5:46:5c:fb:ca:69:0f:ab:8d:d5:65:1f:7d:f4:
         89:7d:aa:f7:b5:ed:72:44:87:70:a0:87:42:6b:ed:7e:35:61:
         6d:9d:a3:15:2b:c4:b9:e5:46:fc:ac:c1:3f:3a:58:d2:00:77:
         38:19:9d:d1:c6:cd:48:20:54:1d:93:16:f9:43:b3:c3:9c:21:
         6e:7c:6d:fa:c3:a2:b6:95:58:67:36:e2:7f:82:02:1d:8f:6a:
         7e:61:0b:3d:42:89:0e:ca:85:1a:1e:0d:f8:07:1d:a2:22:59:
         d1:e8:5c:3d:b0:f0:74:a4:19:0f:68:8d:07:ed:ed:32:75:2c:
         d6:06:aa:21:25:9e:72:06:9c:df:9e:b4:6f:0e:b1:10:f6:e9:
         32:e2:73:e0:1f:4d:d1:17:aa:f5:e0:18:59:92:de:80:95:45:
         a4:f4:58:90:88:de:a9:24:1d:82:9a:4e:a9:7d:b6:12:91:c6:
         73:6d:08:11:61:65:d4:b2:d2:cb:04:57:84:b1:17:bc:1d:88:
         67:e1:d6:d2:29:ac:85:05:27:4f:93:65:80:e1:5f:2b:19:6e:
         43:e5:52:4b:e5:ef:cf:f4:d7:d7:72:64:36:ff:72:22:f9:fa:
         b8:89:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----