Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a0be2e-0dd0-4cc8-a532-5856378c35b7/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.mft
File:                     3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.mft (raw, json)
Hash identifier:          5DBU+ZFjFPWoVdzIX1lET1ScCFlXk6w1AJ2A6pyfUWM=
Subject key identifier:   B7:29:BA:1D:DA:44:ED:DF:50:5D:B7:88:DF:7B:AF:5C:F7:45:75:94
Authority key identifier: D3:4D:EA:56:DF:A5:B9:FE:A9:C2:51:7E:83:BB:9F:67:7F:42:23:A8
Certificate issuer:       /CN=3c9d5cf2a0b729fc7f0dad085e5abae19691a64a
Certificate serial:       0F3194
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a0be2e-0dd0-4cc8-a532-5856378c35b7/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.mft
Manifest number:          07FF
Signing time:             Mon 15 Apr 2024 08:20:27 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:17:16 +0000
Files and hashes:         1: 164ccceeab3704b8a737a1485dc721077c376a77.roa (hash: w2Pd9aQy68rWgs59Qsjt6tA4/KLBManSR9IWCp6MDRo=)
                          2: 3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.crl (hash: VNs+PqB9yI86P8Ej/ko/FDtCddf3qr8BGXLN5CSCTdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995732 (0xf3194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9d5cf2a0b729fc7f0dad085e5abae19691a64a
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:17:16 2024 GMT
        Subject: CN=1f70731f3da31a7b21c2b9d4317a2ddd351448c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:55:d0:e9:e8:33:76:12:7d:bb:ee:83:10:
                    83:c0:f4:47:d6:2d:68:11:72:77:84:12:01:ad:8b:
                    b2:fb:7a:d3:af:98:43:ff:4c:ae:45:91:9f:ef:5c:
                    7c:bc:a7:35:29:d1:7a:c4:40:c0:45:65:ea:e5:29:
                    a9:29:0c:cd:d1:0d:f1:5f:ec:9d:01:6c:da:01:59:
                    2e:3f:04:8d:2b:cb:41:96:13:69:d4:e5:41:8c:71:
                    e3:ff:5a:ec:7e:64:99:c0:05:67:40:18:1c:f2:66:
                    1f:a0:15:31:74:de:19:b3:99:3d:c9:24:57:72:53:
                    71:fb:31:98:7a:41:be:9d:0b:3d:48:5e:c1:7d:c1:
                    c1:fe:4a:e9:ea:44:85:d7:65:39:07:b0:3e:1b:d0:
                    de:41:b1:b4:c3:3a:b3:cb:e2:fe:2b:ed:11:9d:d4:
                    76:58:cf:f4:df:95:e9:d2:14:46:58:33:cc:21:25:
                    d2:1a:2f:4c:80:09:de:a5:2c:06:a1:34:56:f1:6e:
                    f2:9b:1c:9f:07:f4:b9:dc:62:07:49:13:36:fd:f6:
                    97:37:64:27:a2:3f:06:8c:41:c8:1f:5b:60:43:02:
                    10:36:80:8b:98:c7:cd:4c:f9:e8:60:db:5b:6b:53:
                    2b:28:53:d3:59:ab:49:a2:13:e0:29:bd:52:cc:15:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:29:BA:1D:DA:44:ED:DF:50:5D:B7:88:DF:7B:AF:5C:F7:45:75:94
            X509v3 Authority Key Identifier:
                keyid:D3:4D:EA:56:DF:A5:B9:FE:A9:C2:51:7E:83:BB:9F:67:7F:42:23:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a0be2e-0dd0-4cc8-a532-5856378c35b7/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a0be2e-0dd0-4cc8-a532-5856378c35b7/3c9d5cf2a0b729fc7f0dad085e5abae19691a64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:a1:f9:89:ff:1a:f4:2c:09:89:f2:73:2b:c7:9f:0e:46:
         e5:44:24:12:ab:93:c6:20:9e:8d:f6:18:ff:1a:03:75:9a:67:
         08:5b:f4:75:78:71:74:19:b3:6e:75:5c:d3:8b:5e:79:62:db:
         3c:2b:54:9b:a8:4a:25:cf:91:04:8b:a1:b5:29:bd:74:91:85:
         bb:0d:43:23:cf:83:61:f6:81:f5:2c:b7:80:31:b6:bf:c3:bd:
         4f:84:d5:9b:de:fc:5c:20:f9:8a:2d:df:44:1a:54:cf:bd:52:
         db:ed:51:eb:1a:c4:4c:44:81:bf:70:d0:79:e5:32:88:77:f2:
         35:c5:1c:6d:66:0d:d2:83:8b:47:67:65:af:9a:8b:bf:d8:74:
         de:c9:df:3a:6c:8d:b8:ad:00:de:78:9d:d2:af:fc:fe:2c:9d:
         23:63:9d:89:ef:f9:ed:4a:39:37:eb:b7:de:8a:aa:a5:84:bf:
         c4:9a:ab:ae:22:4c:5e:cd:c7:36:95:68:85:28:88:97:6c:2e:
         34:5d:00:26:24:64:dd:ab:ee:da:08:1b:15:d2:49:15:1b:d4:
         9f:73:0c:f5:94:e5:a9:3b:ff:fb:54:14:cf:99:08:1b:2c:4d:
         4f:e7:4a:2e:68:0e:70:e6:de:10:14:48:7c:6f:63:ef:fc:2d:
         d5:f2:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----