Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.mft
File:                     1c011c49ef045ef0e106ad87280aa70643378a03.mft (raw, json)
Hash identifier:          5T3m5A1jAoPWhIj+rXupzfn3zYxa9O0Mdx/6OMGWbK4=
Subject key identifier:   9D:A4:DD:0F:5F:E2:56:1D:A7:BA:7B:BD:28:A3:A5:3F:36:97:D6:22
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       1FBF18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.mft
Manifest number:          0E1A
Signing time:             Mon 15 Apr 2024 09:20:33 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:29:18 +0000
Files and hashes:         1: 06a38a06ab1a6e3e14e74d2768df75bd7de5334f.roa (hash: TdjXI13pPtcft2u6RIILJcGITEdz1xK4mspRBX3hDGw=)
                          2: 1c011c49ef045ef0e106ad87280aa70643378a03.crl (hash: dwzmCyGLkxB476MTeeHdzidhBi5hs/d0nt9an7P0hJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080536 (0x1fbf18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:29:18 2024 GMT
        Subject: CN=db845464f707cba34b4e734f9a832904984e58e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:d6:de:52:e9:37:e3:b0:a3:8b:ea:ac:a1:
                    db:76:a1:6e:38:f6:77:85:1a:58:31:c0:a9:4a:0d:
                    27:01:11:d5:8d:6a:8a:7d:cd:14:e0:d9:cb:76:c9:
                    7e:74:89:a9:4b:9a:62:a9:8f:4e:0a:f1:11:e0:ae:
                    03:3e:c8:18:c5:b0:5d:3b:70:f4:d9:c8:b9:f5:71:
                    e4:48:4a:5f:1c:04:5f:8e:20:6f:70:b3:d1:c5:bf:
                    8f:ad:8b:a6:82:60:89:77:24:c6:88:77:e1:a5:11:
                    b2:bf:ca:e7:06:04:ed:e2:35:09:f3:f4:ac:90:7b:
                    51:51:1f:37:53:f2:cc:1b:03:0a:00:75:12:62:a9:
                    b1:54:10:eb:06:06:54:9f:21:08:88:dc:a5:28:cf:
                    2e:af:29:8f:f2:76:e9:32:6e:c8:b4:bd:a6:1e:02:
                    c3:77:8a:1d:d7:19:cc:fb:91:9e:ca:d3:d8:2e:41:
                    ba:28:74:d2:d5:e6:f0:f5:3e:51:35:23:fb:51:15:
                    93:6e:23:f9:73:3f:7c:ef:61:4e:9f:45:14:00:45:
                    a7:e5:f2:d8:6d:9c:43:a1:2f:cd:9e:04:11:7b:a8:
                    82:53:85:08:5b:87:9c:60:8c:bb:d7:2a:83:b6:93:
                    c7:0f:84:f3:7b:9b:ab:03:42:fd:d4:8d:07:93:af:
                    58:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A4:DD:0F:5F:E2:56:1D:A7:BA:7B:BD:28:A3:A5:3F:36:97:D6:22
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3b:a7:ae:ad:8f:fe:62:48:64:c7:9a:a0:f8:da:1b:db:be:
         fd:46:25:c1:a1:f7:94:4a:d2:77:70:19:a2:c7:b3:82:91:41:
         ce:13:5b:90:3c:35:35:ae:4f:06:f2:e4:5e:85:3c:49:45:ca:
         0f:bc:f8:a1:fd:e4:7e:df:db:59:1a:41:50:5d:d3:59:ba:fb:
         06:af:34:f0:72:f8:df:62:be:bb:5c:13:7e:8f:a6:fa:0a:c4:
         fb:13:3f:6d:a4:e3:a0:43:57:5c:9e:bb:ea:98:71:b4:38:14:
         0c:57:0a:aa:f5:b1:f9:8b:06:7c:95:b3:86:85:24:e2:54:e4:
         39:3a:87:3e:01:da:41:ec:d3:ef:f6:60:ed:07:23:a5:3a:4a:
         1a:6c:10:7f:37:13:19:da:36:b8:90:8c:f2:f5:40:65:e0:40:
         24:0e:b0:bc:64:3e:38:ce:f5:18:91:6d:81:d7:6e:a3:1d:15:
         ba:50:04:c8:f2:57:b9:71:25:c9:f7:fa:96:7d:4d:84:36:10:
         19:54:65:9f:bc:fb:26:1c:f9:39:d7:84:7d:38:aa:5e:a9:c6:
         f8:c3:e5:63:3a:ed:70:9c:bc:0c:2b:5f:46:2a:2a:b4:70:87:
         10:d0:63:85:3d:a0:34:a7:29:b7:c8:bf:eb:b7:e4:35:c8:b1:
         b8:28:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----