Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/b337a534780cb1f89f02f57838f0b895e5da3b0e.mft
File:                     b337a534780cb1f89f02f57838f0b895e5da3b0e.mft (raw, json)
Hash identifier:          W5BqZJ5XJSML4S0FTjL7PuwVv/NEdVQIiyiQ0b0asxU=
Subject key identifier:   68:5A:31:BD:FB:3D:62:13:92:10:37:C9:3C:87:5D:8C:4E:DE:65:21
Authority key identifier: B3:B6:62:F8:E5:E9:53:20:83:9E:CA:06:A4:37:1B:2E:01:2A:9F:52
Certificate issuer:       /CN=b337a534780cb1f89f02f57838f0b895e5da3b0e
Certificate serial:       1E9405
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b337a534780cb1f89f02f57838f0b895e5da3b0e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/b337a534780cb1f89f02f57838f0b895e5da3b0e.mft
Manifest number:          0E1C
Signing time:             Mon 15 Apr 2024 07:20:34 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:42:17 +0000
Files and hashes:         1: 625b00042a473a1e08c8a4583448f9840188be89.roa (hash: bp7ap5imvCIVFIgn0H2Ps1r46D4QRXX1J/lz6oe8+gI=)
                          2: b337a534780cb1f89f02f57838f0b895e5da3b0e.crl (hash: 6mnJ14aN8IR3YUI9C2TvZ9Mc0OOpLNOtNByV45jSF4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003973 (0x1e9405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b337a534780cb1f89f02f57838f0b895e5da3b0e
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 07:42:17 2024 GMT
        Subject: CN=f1981ed4603f1df1c9931ccdcd09af859f09e367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:66:fa:c8:1f:02:4e:68:df:0c:0a:77:d9:
                    5a:67:28:55:63:c0:ed:08:90:70:7b:25:46:86:d0:
                    93:4a:38:bc:9f:ac:11:1a:19:97:e5:8f:b8:a7:16:
                    18:a0:e6:59:21:01:9c:c1:5d:47:e1:4a:55:81:98:
                    8a:a8:20:f3:14:66:21:96:f6:89:a0:2c:67:5b:f0:
                    87:29:62:f4:b8:b1:de:c8:4f:39:1e:d2:0a:6a:d9:
                    88:95:a0:38:5a:94:ea:f2:05:ee:54:00:65:b6:78:
                    5d:d4:f5:2f:5f:5e:b2:b7:22:4a:dc:ee:19:34:86:
                    1d:85:ef:3c:75:c0:87:a0:93:33:2b:ed:d7:12:57:
                    cd:fb:68:7a:9d:74:c7:0e:cb:a0:b1:48:be:b0:98:
                    79:00:e3:ee:e1:5e:bf:d8:86:57:01:3b:1d:8a:9b:
                    a5:f0:ba:9f:8d:68:1a:8c:12:5a:8b:92:0e:26:1d:
                    9b:a9:a6:20:97:50:db:7f:4e:09:26:10:63:60:1a:
                    b1:4a:da:d4:49:17:a7:33:c1:88:c3:cf:b6:f6:df:
                    12:2f:8c:20:aa:4a:c3:90:02:3e:94:ab:a5:61:72:
                    d8:3c:60:4b:d2:a9:d3:4d:b8:a2:90:f8:8a:2b:b3:
                    0e:5e:c5:eb:35:ec:5b:23:ec:64:c6:50:01:63:19:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5A:31:BD:FB:3D:62:13:92:10:37:C9:3C:87:5D:8C:4E:DE:65:21
            X509v3 Authority Key Identifier:
                keyid:B3:B6:62:F8:E5:E9:53:20:83:9E:CA:06:A4:37:1B:2E:01:2A:9F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b337a534780cb1f89f02f57838f0b895e5da3b0e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/b337a534780cb1f89f02f57838f0b895e5da3b0e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/b337a534780cb1f89f02f57838f0b895e5da3b0e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c6:b5:e9:93:04:a9:70:d6:fc:82:be:b2:a5:55:6c:eb:f9:
         b1:1d:e2:7e:48:13:4e:76:d1:a2:21:76:23:f2:08:6d:48:2c:
         e8:24:94:bc:a5:7f:4b:47:cb:a1:76:e2:d2:e3:92:ac:f0:90:
         9c:7d:20:b1:7a:dd:97:66:bc:c6:e6:da:d3:81:78:68:0d:90:
         7f:cb:67:2e:09:e5:a4:27:e1:ab:8c:4e:0e:21:34:b4:56:12:
         fe:e8:e3:f2:21:b7:9f:98:0d:9d:54:10:9d:32:ca:ea:cd:71:
         89:e0:b1:b9:a2:5d:94:c9:dc:e6:60:02:5f:0e:19:70:f3:ea:
         1b:50:77:b7:72:b5:a8:75:e8:83:3e:9e:7c:29:aa:e6:3a:f2:
         d6:04:b1:d1:73:2c:a1:d5:9d:c1:01:4d:09:68:50:05:c0:42:
         67:fd:28:17:3e:f8:a7:c0:c4:08:d2:b4:13:c4:b3:c5:39:00:
         4c:90:4f:d7:98:ca:86:45:35:0b:e4:30:9d:21:b6:ea:6f:8b:
         b9:6d:b0:db:b1:ee:08:97:8e:b9:0d:7e:45:af:ca:57:d1:c6:
         db:c7:73:e9:d5:dc:76:6e:1c:b7:6f:5d:cf:90:1b:ad:22:1f:
         3e:c4:7b:b0:b6:68:41:27:b2:12:9e:3e:b8:b7:96:05:8c:44:
         a1:ad:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----