Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3366c15a-4f4b-4255-a365-e497a746bf44/bcda816a9478e5fdfa19276ceb254457fbb05eaa.mft
File:                     bcda816a9478e5fdfa19276ceb254457fbb05eaa.mft (raw, json)
Hash identifier:          Fa0mDJPlkABPEiK8AYUvzBQ2yx3vTwdKMRtZVN//IoE=
Subject key identifier:   66:6E:F6:26:C1:52:1A:B7:5B:BD:9A:40:B6:CC:92:E8:59:3E:B7:3A
Authority key identifier: 68:71:C9:FB:8A:26:A0:33:D0:A0:3F:8F:E3:4B:FE:EF:A5:21:72:CD
Certificate issuer:       /CN=bcda816a9478e5fdfa19276ceb254457fbb05eaa
Certificate serial:       28B68D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcda816a9478e5fdfa19276ceb254457fbb05eaa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3366c15a-4f4b-4255-a365-e497a746bf44/bcda816a9478e5fdfa19276ceb254457fbb05eaa.mft
Manifest number:          0DFB
Signing time:             Mon 15 Apr 2024 09:21:25 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:50:18 +0000
Files and hashes:         1: bcda816a9478e5fdfa19276ceb254457fbb05eaa.crl (hash: Y1SuONMw8X2J9jiqP/VwvTk4l6KlQaF5iI3Dz4uT1r0=)
                          2: cb735e74b6b3e9b81b9040a390296b3922ea2719.roa (hash: IOkr3b+29p108szvTJd9cyr2nGUgjl8q8ytB3YK9oUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668173 (0x28b68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcda816a9478e5fdfa19276ceb254457fbb05eaa
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:50:18 2024 GMT
        Subject: CN=199197d716842fc8d610f52ccc0647984707ae14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:79:41:3e:e0:14:1c:4f:0f:3c:25:53:eb:
                    28:a5:d7:dc:9b:23:dc:1e:75:06:f7:ca:dd:5e:11:
                    45:b8:64:d4:41:2f:3d:b4:5b:02:51:c1:57:b7:cf:
                    4f:7f:e4:f2:38:e6:f1:03:bb:7e:b9:6c:19:b9:01:
                    29:25:4a:50:36:99:c6:08:f4:1b:1c:15:6a:92:79:
                    f5:75:6f:10:37:da:61:c9:20:ed:9e:d0:e4:d2:b0:
                    cf:e3:cc:f4:fb:f1:41:de:ea:d0:b4:db:f2:23:69:
                    a2:16:98:5a:3a:f8:52:8f:72:fc:fc:18:42:76:9c:
                    d2:4b:51:2c:ac:3e:07:0a:77:b2:38:43:ea:26:c0:
                    48:4c:ca:7e:bb:5d:18:5b:08:9d:5a:ed:ea:a4:45:
                    bf:15:8e:14:ce:82:1f:dd:af:53:3d:06:d1:ca:51:
                    8c:af:ed:41:af:14:3b:d4:e0:62:43:e6:e9:fe:0e:
                    b0:64:5f:07:57:db:d3:4f:02:3b:fe:bb:5e:84:bc:
                    0e:d1:73:a1:73:fb:ad:be:99:e5:da:f4:89:22:9a:
                    55:4f:8c:d9:a4:8f:19:e4:8e:fb:c2:68:b8:bf:0a:
                    85:13:73:ca:6d:de:7c:73:42:84:01:96:dd:a6:ec:
                    35:8b:3e:d5:fb:c0:76:90:19:24:55:1a:af:44:22:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6E:F6:26:C1:52:1A:B7:5B:BD:9A:40:B6:CC:92:E8:59:3E:B7:3A
            X509v3 Authority Key Identifier:
                keyid:68:71:C9:FB:8A:26:A0:33:D0:A0:3F:8F:E3:4B:FE:EF:A5:21:72:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcda816a9478e5fdfa19276ceb254457fbb05eaa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3366c15a-4f4b-4255-a365-e497a746bf44/bcda816a9478e5fdfa19276ceb254457fbb05eaa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3366c15a-4f4b-4255-a365-e497a746bf44/bcda816a9478e5fdfa19276ceb254457fbb05eaa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:39:45:45:64:bb:6c:0e:06:10:6e:16:86:88:4c:96:ec:
         06:98:3e:a6:c8:44:a6:6d:ba:6e:22:e9:f6:80:52:ce:65:78:
         bd:7b:62:1f:9e:6e:cb:80:93:e2:d5:3e:f6:fc:59:2f:f6:21:
         5e:5b:43:4c:d6:a2:fd:3e:c3:00:ad:16:cf:be:a7:7b:36:9f:
         7a:e7:ed:5a:81:fb:5f:9e:2e:77:be:b0:fe:0c:5a:15:0c:d3:
         c8:e0:e0:be:fa:29:83:c7:86:d5:e9:48:71:e1:f2:12:69:8c:
         41:d8:fa:80:52:ba:46:c6:a2:49:ba:49:d5:4d:c7:9a:88:88:
         b2:5f:20:2a:f1:4c:07:4d:3f:a6:b5:f5:43:1d:92:6c:2b:e1:
         b5:1d:72:09:a6:9b:95:87:56:1a:50:1d:49:6e:37:fd:3e:dc:
         b5:2d:ab:0e:3e:7d:d3:84:03:ac:e1:e8:87:c4:59:f5:ab:18:
         28:c3:ed:4d:21:39:92:41:fb:e4:3d:88:f8:8d:9c:e6:2c:0c:
         ea:84:f3:6c:e6:f2:7b:e0:44:d8:42:bf:3a:a4:30:80:0d:81:
         44:a0:4f:b2:95:b2:a5:94:00:a0:85:fa:b1:9f:98:00:4d:8b:
         3a:99:74:e9:2b:9a:d4:d1:29:77:dc:92:6d:a7:d5:95:82:07:
         4e:d9:ea:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----