Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft
File:                     85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft (raw, json)
Hash identifier:          N05bx0FntMBVcbrOyNiHbYZp6yYRG6kvLtT9x+piAE4=
Subject key identifier:   A0:BA:16:B0:FA:F8:B4:B4:EA:74:4B:40:CE:35:A4:BC:38:B2:78:A0
Authority key identifier: 2C:72:18:35:71:B0:C8:72:9F:62:E5:A0:DC:9F:FB:6D:49:D1:E0:B7
Certificate issuer:       /CN=85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d
Certificate serial:       2859A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft
Manifest number:          0E16
Signing time:             Mon 15 Apr 2024 11:20:55 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:08:18 +0000
Files and hashes:         1: 1e25d8fc1ae704bf8a16c7a13ac4be548b73a6d8.roa (hash: fAStr3S8z+ZroGOa8lPpSkbeTMQ4gK92SCevjvadjAI=)
                          2: 85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.crl (hash: 2K116LpBFBcH/HgLMkkgWWsQ2w9WXZIayXtgQ9UnSrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644389 (0x2859a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:08:18 2024 GMT
        Subject: CN=c55953a2a16595f3be9f6f3be46c838515fa1e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:1c:76:e6:fa:b5:7f:95:63:56:23:0a:f0:
                    ea:58:33:39:89:20:00:07:40:e1:5e:88:3b:02:69:
                    04:7f:d5:f9:02:2c:fe:f2:3c:7b:e7:c7:b6:41:4f:
                    f6:43:8d:d6:d8:3a:fa:c8:73:ca:89:fb:a3:00:a5:
                    13:c1:0a:81:ad:74:7b:b6:f1:7e:83:79:c4:92:b7:
                    a0:47:c9:f7:76:11:81:bb:7f:f7:bd:ca:dd:74:5f:
                    8f:41:15:b5:6f:04:32:1d:7d:5f:7e:fb:e9:7f:6d:
                    80:7b:94:6b:cd:cd:69:fc:e5:fa:b2:b6:0d:6d:cd:
                    cd:f5:5b:5b:a2:dd:c6:44:4e:7f:24:c9:ce:11:3e:
                    6d:59:3e:1b:ec:37:93:e6:59:f3:e0:1e:31:f6:53:
                    c3:47:da:3c:79:6f:ab:b2:41:00:ab:1c:13:05:61:
                    85:c3:f8:be:d2:3f:67:88:1d:61:4f:f8:fe:80:6f:
                    68:ab:18:2c:ee:15:a2:75:f4:c5:4d:b4:1b:cb:89:
                    1f:69:41:47:f2:e1:cc:5d:28:ee:0a:5b:6f:90:40:
                    78:b6:05:a8:24:cd:2f:a5:9a:61:f8:83:5f:58:f3:
                    c9:13:8c:0d:de:ce:ea:5e:d4:84:c1:e0:85:ab:c5:
                    be:28:ad:07:90:31:fc:ec:da:cf:e8:53:18:0f:57:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BA:16:B0:FA:F8:B4:B4:EA:74:4B:40:CE:35:A4:BC:38:B2:78:A0
            X509v3 Authority Key Identifier:
                keyid:2C:72:18:35:71:B0:C8:72:9F:62:E5:A0:DC:9F:FB:6D:49:D1:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b0fc2ac-2b49-456a-8465-a09a50b46176/85e90ec496afbd0dfafd1b76a09f9fb2cc7a748d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:60:18:e8:6c:cd:41:e7:fa:7a:ba:ff:ad:72:81:37:34:5f:
         b7:c4:ba:f4:99:96:65:c4:16:74:da:48:04:0a:7d:c8:9c:9a:
         53:18:b5:d1:a1:5f:95:22:ac:e9:86:20:5d:6e:12:cb:ec:9a:
         82:dc:ad:f6:e1:56:41:ad:0a:d3:58:16:c8:2e:38:99:13:96:
         4f:bb:5c:46:5f:e4:3c:4c:f5:bd:82:92:72:cd:12:df:f7:6b:
         e8:63:23:37:e3:64:1c:4b:1d:41:fc:a5:8d:03:6f:00:52:59:
         39:07:3d:38:53:55:82:4d:cf:79:ed:40:a4:b0:bf:e5:86:24:
         4a:b5:3e:a3:d7:18:0f:dd:b6:60:e2:c3:e8:88:c4:d8:df:7c:
         0d:5a:41:39:fd:97:c4:90:2f:e3:fd:85:35:fb:c5:54:e1:38:
         c7:9e:c2:40:45:01:62:ee:03:ec:fd:da:01:ac:c6:c9:e0:53:
         c5:28:63:57:e5:fd:9d:30:84:f1:4c:6b:7b:ea:00:49:df:c9:
         34:09:56:fb:9a:de:77:88:31:70:66:28:5a:af:0d:df:3c:e0:
         d7:76:17:74:f4:4f:81:84:f3:09:dd:43:73:7b:7d:bb:32:5b:
         6c:97:8e:87:6d:4d:d5:d0:16:c1:47:9d:c8:2f:5a:ce:41:46:
         14:a2:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----