Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.mft
File:                     a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.mft (raw, json)
Hash identifier:          EJLnXXchu7KsTrFGrWNe266DFDCCb3lAtFJq6Fcj3W4=
Subject key identifier:   B7:DC:8B:34:A1:D7:26:3A:2A:6F:9F:EF:BC:6E:BC:94:6C:9C:D3:68
Authority key identifier: 4C:06:A0:A8:A7:2D:5F:8C:DE:1F:A8:79:AB:EB:12:8A:63:12:DF:66
Certificate issuer:       /CN=a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3
Certificate serial:       279CE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.mft
Manifest number:          0E07
Signing time:             Mon 15 Apr 2024 07:21:01 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 08:16:17 +0000
Files and hashes:         1: 49449d714552f4f0cf1150d774fd803c0d1c6f59.roa (hash: e4QCEkkQ+M3Lo1bAnLvUS1Y8I9BK9LURN3rSeL1t2S8=)
                          2: a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.crl (hash: CH36s+9nQCtFFwHgq1yeVLzFqdZKV0mI2fOPp3GQsSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2596071 (0x279ce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 08:16:17 2024 GMT
        Subject: CN=0542c6a35b8868f925046758f48c5eb8da8d01e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:92:ce:3d:94:b3:16:13:d8:d7:9a:f5:cd:
                    cd:88:59:8b:de:f8:14:15:c1:a1:03:ca:8a:f9:82:
                    6b:a2:32:9f:5a:6c:76:ac:07:31:37:00:26:b2:c1:
                    ab:89:7e:27:0c:c4:12:92:b6:26:6c:cf:08:3e:48:
                    a8:2c:71:07:1a:67:49:9f:b5:93:a8:45:de:dc:95:
                    99:da:88:2f:73:2c:ae:7a:26:05:10:9f:c4:5b:f0:
                    ca:3b:64:36:1c:18:f7:4c:ba:56:13:cf:a6:9e:d1:
                    ab:03:53:df:8c:8c:07:94:6c:fe:32:a6:07:f2:78:
                    2a:d1:46:f4:d1:64:17:97:9f:95:97:f1:ab:7c:94:
                    21:47:fa:f8:ae:f8:1f:44:ac:df:3b:9f:99:8b:82:
                    32:28:ae:ce:a6:be:c6:ae:3f:9e:83:9e:5f:28:67:
                    12:74:f4:d5:99:8e:f8:3c:8b:a4:3a:d4:91:9a:ee:
                    2f:9f:81:04:f0:47:51:f8:b0:51:aa:cd:88:4d:03:
                    52:7e:86:e4:46:b0:0d:a1:33:e1:79:12:ae:e7:6a:
                    19:e2:47:8d:f1:e5:72:0c:c5:98:e7:eb:22:a7:fe:
                    89:60:1e:5b:35:ba:aa:2c:44:38:99:47:55:b1:c6:
                    99:f6:9f:10:e3:33:88:33:17:9d:2d:03:5f:23:8b:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DC:8B:34:A1:D7:26:3A:2A:6F:9F:EF:BC:6E:BC:94:6C:9C:D3:68
            X509v3 Authority Key Identifier:
                keyid:4C:06:A0:A8:A7:2D:5F:8C:DE:1F:A8:79:AB:EB:12:8A:63:12:DF:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3732b08c-a789-432d-a948-c70379709aff/a3a72ae0e45bc7ff3b30b9fe91714a9780c21db3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:f3:fd:1a:4c:89:49:79:1c:05:5e:37:cd:13:7a:50:88:
         6a:c6:ea:12:61:32:fb:88:04:21:76:51:dd:af:69:64:fa:04:
         54:5c:4c:87:35:73:ae:14:13:e4:ee:a2:39:68:07:8a:19:c1:
         e8:0c:33:22:12:01:6e:ce:b5:ca:24:0f:61:48:99:35:4e:21:
         04:f9:6e:8c:e9:4d:75:ee:f1:e1:4a:10:db:c7:84:74:e3:ff:
         f0:f9:f9:56:f4:d1:e2:01:44:d5:fa:b1:52:97:25:ac:7a:34:
         2b:ad:25:d7:d3:cd:77:06:62:2a:9f:75:4e:3a:3e:ba:9f:b2:
         4f:20:1e:63:8f:1f:a8:50:99:ba:b8:98:fc:4e:59:35:1b:4b:
         a1:3c:57:20:7b:23:d5:e9:48:4a:26:47:0c:a8:52:15:3a:59:
         6d:08:0f:ff:09:42:55:83:e8:f9:cc:2d:97:d0:93:8f:5f:c8:
         b1:41:65:3f:30:fa:a9:1f:fd:7b:08:5b:da:65:74:d2:da:c5:
         ae:1b:46:9d:87:e7:2d:04:ab:c3:fb:4f:96:05:ab:2a:9e:89:
         dc:6d:8d:04:6e:4f:29:f5:74:59:98:31:8e:96:b7:30:d9:64:
         4c:b9:c4:24:a4:96:73:47:7b:c7:92:8b:87:30:4c:59:0d:64:
         ae:1a:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----