Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ecbfa20-6ac8-4fce-9fc0-bbda596b652c/e84cb642b7860fab75abd8516251a0639a3a2530.mft
File:                     e84cb642b7860fab75abd8516251a0639a3a2530.mft (raw, json)
Hash identifier:          pEOF8EAtrT4vzvN/xJhDrKCC/XBm5Wcfdj7/uYDhV+8=
Subject key identifier:   34:A9:8F:4F:94:2C:57:D7:94:7E:D7:9F:CE:74:AE:55:89:7A:80:44
Authority key identifier: 12:EF:59:3E:08:7A:C8:DA:F2:5C:35:63:A8:F7:1A:B3:55:62:D5:47
Certificate issuer:       /CN=e84cb642b7860fab75abd8516251a0639a3a2530
Certificate serial:       080BC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84cb642b7860fab75abd8516251a0639a3a2530.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ecbfa20-6ac8-4fce-9fc0-bbda596b652c/e84cb642b7860fab75abd8516251a0639a3a2530.mft
Manifest number:          0425
Signing time:             Mon 15 Apr 2024 10:21:23 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:03:25 +0000
Files and hashes:         1: cb3b1c707952ba81fb6311d8537168f19d1fca9e.roa (hash: eIEK5Jyg1qeDoiiVR7mvOn7fjyFFP5yCxdPbBWB/ovc=)
                          2: e84cb642b7860fab75abd8516251a0639a3a2530.crl (hash: PnM63S584OrhcEqqqwtXTfSU+s8qjFnUMIEzEQMbnk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527299 (0x80bc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84cb642b7860fab75abd8516251a0639a3a2530
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:03:25 2024 GMT
        Subject: CN=3bab3c3e10ecb763e66c60add94fa79392e48264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:24:55:a7:f3:e1:c7:cc:f8:6d:54:03:66:64:
                    60:63:64:d8:70:5f:42:e8:90:03:04:24:bc:dc:ff:
                    4b:f3:b4:7e:df:22:05:93:03:92:c9:18:69:1b:c1:
                    d3:a7:da:81:8c:96:8a:e6:24:d0:bd:9e:01:6d:3a:
                    95:74:f5:5e:22:7a:d3:cb:55:5e:1f:aa:1b:0a:64:
                    fa:61:d5:59:2d:d8:22:c6:a9:ca:89:15:f5:c7:d2:
                    3a:21:3a:6d:5e:45:d1:d3:95:81:ae:9c:ff:93:7a:
                    71:23:2c:65:79:3a:0f:a4:3b:42:b9:20:16:b1:0b:
                    ef:42:41:48:bf:d5:c3:ac:5c:97:ef:33:82:e3:a2:
                    32:d1:06:fc:4c:b5:8e:60:b1:bb:c0:17:9f:e7:61:
                    31:7c:4a:08:a3:f8:d0:d9:ca:1e:d3:28:f2:15:f9:
                    f9:86:3e:9e:17:44:ee:96:16:5c:ec:e1:f5:c9:0a:
                    6d:c0:54:79:13:2f:c6:4b:61:7f:14:75:84:39:a8:
                    a5:30:ef:86:1e:72:a6:90:10:1c:be:0e:4e:1a:8e:
                    24:47:0c:16:56:6c:ae:5d:a3:80:bb:24:36:3c:e4:
                    8d:78:33:97:ca:64:68:55:b4:4c:d5:5c:53:ec:f2:
                    9c:5c:df:6b:ac:d1:f0:a2:e3:cd:67:ba:81:cc:23:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A9:8F:4F:94:2C:57:D7:94:7E:D7:9F:CE:74:AE:55:89:7A:80:44
            X509v3 Authority Key Identifier:
                keyid:12:EF:59:3E:08:7A:C8:DA:F2:5C:35:63:A8:F7:1A:B3:55:62:D5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84cb642b7860fab75abd8516251a0639a3a2530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ecbfa20-6ac8-4fce-9fc0-bbda596b652c/e84cb642b7860fab75abd8516251a0639a3a2530.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ecbfa20-6ac8-4fce-9fc0-bbda596b652c/e84cb642b7860fab75abd8516251a0639a3a2530.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:d0:c5:9b:05:30:ac:f9:11:f5:01:a4:50:53:d6:32:9a:
         d5:63:f4:6a:a0:09:47:12:da:c2:ad:32:53:3d:b7:42:1b:d5:
         9c:33:14:12:75:6b:37:57:7e:5b:4d:b7:76:50:db:9f:7f:95:
         7c:f7:cc:f7:29:c5:be:77:1b:68:6b:8e:25:5e:af:d2:67:0d:
         ef:ef:c2:5e:02:ad:15:f9:74:27:36:d6:d6:66:bb:a1:12:bd:
         11:89:c1:17:e6:74:e9:15:bb:4a:69:80:70:50:ac:ad:c4:24:
         43:c4:a5:9b:24:e3:a7:02:73:76:56:4a:bb:5d:ba:3e:c8:54:
         92:c6:9d:83:4b:7a:61:b3:51:a5:b5:be:9b:e7:b3:d7:7b:a7:
         8e:9f:92:e0:c7:c0:d3:64:9e:dc:bb:2e:c2:38:38:f7:8f:a8:
         04:67:ad:64:96:78:76:54:20:1e:40:23:7d:87:72:47:ed:38:
         76:ce:26:e1:8d:7d:82:94:82:8a:67:6d:7a:12:f8:cb:fa:75:
         29:a2:28:e1:12:cf:7c:68:35:75:e3:4a:fa:e9:29:a3:73:99:
         c6:1d:2a:42:3f:2e:a5:ad:7e:da:fb:ff:e2:bd:0d:fb:96:33:
         e0:d4:e5:38:97:90:89:62:54:a0:be:4c:06:ec:81:65:58:ef:
         90:57:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----