Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.mft
File:                     bce920cc53ed6dc0af3febc31cab5b52dff302fa.mft (raw, json)
Hash identifier:          xYUS/3j5u7vV6/5U/PylUZhgVTPqR3y15yRFOtg61yM=
Subject key identifier:   3F:DE:0C:9B:EE:C6:89:23:3A:6C:42:5E:55:2E:13:D6:0F:C6:AA:BF
Authority key identifier: 82:61:8B:57:DB:A6:EE:6D:FB:F8:BB:41:A8:2B:9F:DB:E0:6D:FB:53
Certificate issuer:       /CN=bce920cc53ed6dc0af3febc31cab5b52dff302fa
Certificate serial:       27B899
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bce920cc53ed6dc0af3febc31cab5b52dff302fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.mft
Manifest number:          0DF7
Signing time:             Mon 15 Apr 2024 05:20:41 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:14:17 +0000
Files and hashes:         1: 110eed28da505fc1e375920409b5a8a0a0c04d25.roa (hash: Rsu49FTXYnh6bSPleRZwXk/psxfrA1H68aStlByOqFE=)
                          2: bce920cc53ed6dc0af3febc31cab5b52dff302fa.crl (hash: GA4wXV7sodlWIP5OgevUuEsBZrYAvRoxSLmKL3ARCZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2603161 (0x27b899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce920cc53ed6dc0af3febc31cab5b52dff302fa
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:14:17 2024 GMT
        Subject: CN=e36668950d5a2f892686515c68d1e89291178781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:df:90:d2:11:5a:1a:5b:4b:85:a5:a6:f3:
                    ec:16:4b:11:29:45:eb:69:40:90:b0:6c:02:b2:92:
                    be:2b:aa:5e:e3:d8:64:19:03:32:4e:84:f2:0d:3e:
                    42:cb:3d:79:02:03:d1:69:86:d1:f5:ad:76:a6:32:
                    1d:8b:01:d9:19:b5:5c:5b:78:96:7e:8e:95:03:bb:
                    43:5b:3d:5b:cd:67:ed:1a:23:51:bd:83:22:c0:7d:
                    d0:a2:e4:af:66:56:e8:33:c3:e0:8f:59:46:be:7e:
                    c2:2c:75:cb:52:18:fb:ca:80:ee:e8:14:7e:fb:7e:
                    30:cd:9f:dd:00:ae:2f:59:85:c1:ff:f9:44:a0:6a:
                    90:b1:93:63:5c:2c:1d:dc:a5:aa:cb:36:70:0d:d6:
                    a3:54:1d:08:d7:e1:da:72:fb:17:30:c0:26:6e:c7:
                    05:fd:9b:e8:7e:16:45:ad:d4:d9:8e:e1:f0:f1:4c:
                    00:4d:3d:1e:c3:db:6a:38:e8:e7:c0:03:cd:fc:fa:
                    95:14:00:e4:b6:bb:11:da:0f:f2:2a:13:21:77:51:
                    5a:9e:c1:cc:98:88:b1:b9:75:2b:80:db:a2:b9:41:
                    6e:be:d1:7e:94:5b:08:09:b3:a9:b1:27:81:4a:08:
                    41:aa:80:4d:72:92:da:3e:60:06:2f:db:5c:9b:ab:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DE:0C:9B:EE:C6:89:23:3A:6C:42:5E:55:2E:13:D6:0F:C6:AA:BF
            X509v3 Authority Key Identifier:
                keyid:82:61:8B:57:DB:A6:EE:6D:FB:F8:BB:41:A8:2B:9F:DB:E0:6D:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bce920cc53ed6dc0af3febc31cab5b52dff302fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ce:dd:e1:e3:fd:6a:3f:ed:cc:c8:ef:f2:86:2a:b7:3e:50:
         d7:e9:e4:9e:49:19:60:0b:86:9d:4c:2c:f0:16:76:63:5a:da:
         76:ed:28:45:c9:36:98:ba:83:ae:5a:ca:5d:c5:7c:14:71:9c:
         83:1c:fe:a5:bc:e8:32:22:8e:8a:89:11:a6:cd:17:cc:48:b6:
         58:6c:85:95:30:1c:3c:b7:b3:34:2e:16:07:09:5d:1d:a6:3a:
         67:a6:50:c4:48:c0:b8:ae:1b:75:a0:8e:1a:e8:a8:dd:0f:f3:
         cb:a0:f3:cf:b6:89:10:e6:cd:bc:ef:e3:55:85:f7:b1:c8:6a:
         dc:57:c5:54:39:7d:72:0a:4f:10:34:23:1c:7a:3c:b1:a5:62:
         87:86:4d:37:6c:59:5f:84:3d:bb:50:00:7e:52:39:03:0c:f9:
         0c:09:0c:04:15:12:e3:34:d8:fd:72:de:06:65:49:fe:5d:f1:
         9a:4b:98:59:27:45:c8:f9:23:66:0b:4b:71:cc:b9:68:07:aa:
         b1:f1:9f:d0:00:f2:dc:3b:30:7e:46:f2:b1:d4:25:5c:29:7e:
         d7:3b:3c:4c:a0:9d:4f:17:fe:81:e1:6f:f5:30:2f:cc:89:1b:
         45:11:21:fe:66:08:82:80:c3:0e:69:56:ce:7b:b9:34:2b:a4:
         e4:d8:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----