Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3a42a7b9520279dc23cca505fffe138c6e922475.mft
File:                     3a42a7b9520279dc23cca505fffe138c6e922475.mft (raw, json)
Hash identifier:          Ueo6hKR/JhJzL14NW9lcClzelK5a3QHWh9mYN8iv9Jg=
Subject key identifier:   AD:60:98:8C:01:21:9F:6C:09:0B:30:35:2A:AA:67:20:BE:CF:49:53
Authority key identifier: 14:A5:D5:FB:37:98:45:41:6C:D0:23:61:A8:3A:8C:C7:DD:E5:D6:A8
Certificate issuer:       /CN=3a42a7b9520279dc23cca505fffe138c6e922475
Certificate serial:       28C7E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a42a7b9520279dc23cca505fffe138c6e922475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3a42a7b9520279dc23cca505fffe138c6e922475.mft
Manifest number:          0DF4
Signing time:             Mon 15 Apr 2024 06:21:30 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:38:39 +0000
Files and hashes:         1: 3a42a7b9520279dc23cca505fffe138c6e922475.crl (hash: RmXELIgfQgNAKcDU07d+5tMvAZcMlJxPcj8BT7AppO8=)
                          2: 48fb834f1e0794375ab1ef6d947be1f69549cc00.roa (hash: jsYazWnIEjewmuWfysS9nzgJq/zRsvuMTGviV3EIDWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2672608 (0x28c7e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a42a7b9520279dc23cca505fffe138c6e922475
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:38:39 2024 GMT
        Subject: CN=b9c6a2281ac1dd26c885bf76e6af099c55c718a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:45:d5:61:b1:4e:04:c3:8e:34:bb:01:e1:e5:
                    a6:08:f9:36:0b:0f:09:41:59:48:eb:35:69:ef:d9:
                    87:cb:ea:c2:7c:4c:de:41:19:e1:b6:49:e9:20:36:
                    02:3e:ff:62:d5:0d:16:fb:a3:8f:7b:12:10:70:f9:
                    7d:ff:c4:5e:3c:ba:92:44:b7:57:aa:07:01:6d:af:
                    18:ee:1d:33:5d:33:1d:a8:13:5e:e7:01:fa:75:19:
                    df:fd:06:7f:8b:33:cd:99:55:3c:ef:31:57:7c:81:
                    24:77:04:38:93:6e:e9:cf:fd:ec:c4:b0:c0:64:2a:
                    8c:25:fe:79:1e:3a:7d:29:6b:79:0b:eb:d3:9b:e0:
                    ea:d8:f2:93:a8:ea:77:06:c1:f5:f4:75:3b:a3:52:
                    4f:ce:65:4b:2d:c1:3c:ca:be:de:8a:16:d2:f5:64:
                    30:1a:fc:3e:b1:ca:cc:3a:92:ef:2d:b3:70:cb:56:
                    37:7e:b0:34:9b:df:ec:90:b8:86:d8:05:27:d8:8c:
                    14:d7:2d:a5:33:f3:ec:91:7c:4c:12:f7:cf:33:c7:
                    5a:b1:c5:68:b2:f5:65:a0:0a:2e:21:f6:66:9f:54:
                    93:65:96:ae:70:de:c5:9a:e1:1f:af:6a:41:ae:39:
                    54:cd:f6:79:08:dd:8a:8a:83:74:21:e8:4a:31:0d:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:60:98:8C:01:21:9F:6C:09:0B:30:35:2A:AA:67:20:BE:CF:49:53
            X509v3 Authority Key Identifier:
                keyid:14:A5:D5:FB:37:98:45:41:6C:D0:23:61:A8:3A:8C:C7:DD:E5:D6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a42a7b9520279dc23cca505fffe138c6e922475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3a42a7b9520279dc23cca505fffe138c6e922475.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3a42a7b9520279dc23cca505fffe138c6e922475.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:fc:e3:cb:c9:a2:a4:8f:8a:68:08:0e:6d:c7:dd:55:88:
         52:e0:2f:96:f3:df:71:6e:4e:04:d0:5e:5f:b8:e4:ba:e9:66:
         03:20:a2:69:cb:ec:79:c7:96:b2:b1:5f:46:ae:c3:e1:c9:2c:
         82:d0:ad:25:19:49:6c:e7:68:8c:01:b9:95:dd:9e:fb:29:fd:
         f7:d2:30:b0:eb:b6:39:c4:46:12:c1:d0:3b:2c:af:42:dc:ee:
         ca:32:2e:7c:f2:d4:46:15:a3:47:c2:db:92:a6:ca:57:73:10:
         51:2a:f8:05:56:27:dd:3e:77:9a:c1:4c:90:fb:8e:b0:5f:2e:
         31:b7:30:18:75:77:31:95:21:a7:1f:8a:d5:61:0d:f5:81:22:
         db:5d:7a:a8:19:01:d1:da:fc:de:d1:84:9d:fb:a3:d1:c9:c9:
         f9:9f:ac:97:82:48:70:4b:48:2f:27:9a:e9:8b:ee:a4:27:a2:
         71:8a:0f:62:ce:47:66:1c:32:f6:ea:fc:b0:4b:09:cc:81:79:
         6d:7d:f8:e4:f8:6d:f8:43:62:fb:a9:bd:7e:23:d3:d0:1f:33:
         17:86:bc:19:77:a8:f4:80:da:07:ac:53:d5:a3:da:2d:cd:2a:
         e8:c9:ca:48:a1:ec:98:1b:49:04:04:2e:cb:d0:09:0a:4e:39:
         88:e8:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----