Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.mft
File:                     3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.mft (raw, json)
Hash identifier:          l8nY8duhQ5biXV74vV+g5PxM9MPm+bsUE1pKpjD1AYc=
Subject key identifier:   0A:2A:E0:8D:2E:CC:19:EE:DF:68:C5:FD:1E:E6:5A:31:79:69:71:43
Authority key identifier: F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83
Certificate issuer:       /CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
Certificate serial:       0A18B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.mft
Manifest number:          0508
Signing time:             Mon 15 Apr 2024 05:21:20 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:47:17 +0000
Files and hashes:         1: 01380ff78937771d1b9501df7a22cec4e4f19312.roa (hash: TiB1SzMgwRr8uKeE6lA8L/FUmDmJXC6/LV+9oka8GQA=)
                          2: 06fa82b352c9afd540905062817505ec3765f1f8.roa (hash: 5GaakPjsjfpXgb2QGJgp9EVN0QwHNPH7d9evFlT0EBM=)
                          3: 31a555a45c38f0a84458330f83c842e3c610c0ed.roa (hash: dnfVI13Dh/xx4wvb2v3qjUb5TLWg15ipNDBaUmqNyEI=)
                          4: 3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.crl (hash: IJzrIobU2xa9yW1OuF7pALFrn+jZEkabGwBDZ7mpUIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661683 (0xa18b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 05:47:17 2024 GMT
        Subject: CN=216fe2856eeee02cae87c6c102a4c2697b8f39f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:74:e7:bc:1f:d3:20:dd:dd:cb:34:9c:52:27:
                    2d:59:3e:2d:47:28:db:6d:91:cb:15:d5:0e:9e:18:
                    24:ab:0a:c5:53:f5:89:43:ae:1f:ee:d7:00:51:c9:
                    d9:e6:c7:72:64:b0:60:3a:50:e8:69:8c:46:55:49:
                    91:ae:da:4a:35:78:35:4e:42:a7:6b:2c:ae:37:9a:
                    b6:ff:c3:d1:c8:04:a2:81:77:da:67:33:16:11:43:
                    03:9d:d3:26:ea:40:b4:99:0b:15:0b:6f:46:c7:e4:
                    0e:e7:d5:ff:5e:bb:32:2e:c7:e2:e4:44:b1:54:49:
                    a1:0a:81:3d:c0:a7:9b:74:88:b9:3e:57:b1:30:1e:
                    c1:14:67:e6:f0:81:b7:3b:a1:5b:1c:72:d7:0c:32:
                    5c:a5:6b:91:8b:28:1a:37:3d:06:05:7a:16:06:a4:
                    86:e7:8e:cc:30:f0:d2:ad:1a:75:31:cb:57:68:13:
                    d6:82:ba:1d:65:2c:f7:45:25:c0:06:24:f5:d9:40:
                    a4:ec:6a:95:e5:19:96:2d:60:d8:1e:37:2d:d0:c9:
                    f1:7a:2f:d3:77:95:fb:7d:0f:d7:90:49:3e:6c:b1:
                    57:73:51:1a:2a:7c:1b:4c:34:59:3b:0b:e7:f5:5f:
                    46:4b:d8:5b:cf:aa:7e:73:72:05:23:0e:c4:31:23:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:E0:8D:2E:CC:19:EE:DF:68:C5:FD:1E:E6:5A:31:79:69:71:43
            X509v3 Authority Key Identifier:
                keyid:F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:0b:fe:1d:6b:7c:68:18:ed:f3:73:4e:d9:c3:ef:e4:cb:
         74:8e:35:21:11:6c:14:5f:97:9e:3d:28:6b:a2:48:e1:8a:43:
         83:2c:f1:ac:ea:c8:df:c6:21:da:21:38:d8:c4:f9:23:ec:8d:
         cc:1a:97:d7:10:75:a0:cd:d9:18:f7:a5:1f:88:89:35:8b:15:
         90:e3:f8:0d:6b:ff:4d:4e:81:9a:1c:6a:8e:df:1d:18:92:75:
         e6:12:ed:30:d5:4a:99:14:f1:25:48:1d:14:36:da:f8:1c:da:
         0b:57:b5:99:2b:fe:cf:f5:35:bc:d6:45:48:39:c0:7f:24:e8:
         c6:9b:64:fc:89:6f:c9:7f:21:df:60:dd:54:ae:3d:c6:f9:f3:
         42:4d:33:9a:32:a3:6b:b8:e2:d8:52:b7:6a:49:6d:21:63:ca:
         28:64:41:14:55:6a:12:0c:05:e7:95:38:71:17:eb:4c:f2:78:
         04:12:36:2a:d7:12:d4:7a:13:06:24:07:2d:cf:b5:16:6e:87:
         ab:81:13:82:0b:24:fa:d7:b4:a9:68:a5:96:6a:48:55:e3:de:
         3b:92:5b:12:71:36:7b:a1:5c:e4:9c:89:7f:15:e2:5d:c6:9d:
         69:ce:31:60:71:31:28:31:f8:ca:c2:36:78:04:8d:86:2b:38:
         a0:a6:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----