Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.mft
File:                     cebcc65db675ffc3185449c18bd433794ea8ca5a.mft (raw, json)
Hash identifier:          5nEgTV97+oUylGC7DvJhNACTGdmMfHDt+h6TYY6rhCc=
Subject key identifier:   18:08:03:4F:7A:0D:72:34:2D:9B:09:80:25:05:67:63:B8:04:99:D8
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       28DDC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.mft
Manifest number:          0E11
Signing time:             Mon 15 Apr 2024 11:21:47 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:16:18 +0000
Files and hashes:         1: 1da65f08c1e7671fc0516b8464720e1b34c41429.roa (hash: HotBRX1lnCByT2N/sczt7dfHd4QDNXQHEwTDAaJQjYc=)
                          2: 634c8e030b1bc59253541e9b210fe3ce551aa087.roa (hash: xqVLy8KUPVqJymXgST8653MN9U0vEGr0/XS7+7Pv70k=)
                          3: b1450b51587490c5c32eb950e80e9403297a9899.roa (hash: 6LXUBD9MfrqpS5DVX+TCU0e+A+TYUygKu9lfWDQADOM=)
                          4: cebcc65db675ffc3185449c18bd433794ea8ca5a.crl (hash: 0OmicnY7MfvCgo6beoyahldPTvg3/59stiOfasqU11U=)
                          5: fdd1ab34cda7a05ce86ae3936dbd291589a94dd2.roa (hash: YzPBGKOAOJPrXvNpv/eExNRTJuxAtsQiRd+H+64qy10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678213 (0x28ddc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:16:18 2024 GMT
        Subject: CN=310f3077b62c72b0702c71af0dfb8207fcda405d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7f:ea:8b:52:90:04:99:8c:19:fa:c5:f6:1e:
                    cf:94:11:7c:58:d0:15:83:ef:64:af:f6:0b:88:3d:
                    c3:71:e8:bf:fd:83:cb:c1:61:ff:2f:3d:b4:a5:a7:
                    86:22:dd:27:3f:e7:36:87:5b:4f:ff:46:5b:45:47:
                    27:75:f9:75:6f:e0:cc:9f:3e:1a:54:ee:0e:2b:82:
                    6c:4f:3e:44:e7:b0:ec:c7:40:c1:92:d9:09:27:83:
                    a0:0d:3f:f2:f5:4b:61:85:d0:a8:a1:3c:e9:fb:2a:
                    1e:e8:ab:81:51:66:06:44:42:5b:3c:be:c1:fd:f6:
                    f3:40:96:3e:c3:be:ff:4d:42:fa:e9:f2:04:c1:7f:
                    b5:c0:f7:b7:b7:67:a2:30:1a:2b:a9:68:31:b0:42:
                    78:26:39:ef:41:8c:63:c5:49:68:87:fd:f7:83:2e:
                    0b:bb:ac:54:10:ff:e7:5f:5d:d5:ea:6f:28:b4:d2:
                    de:74:53:1e:f7:c3:1c:17:6b:a6:96:5f:51:ec:af:
                    d6:55:3d:3c:41:f1:62:7b:ec:9e:68:5e:01:e4:24:
                    a6:ee:f7:cf:50:18:7f:e3:0a:25:1d:4f:c9:80:70:
                    19:7e:c3:c8:e4:06:1a:88:a5:6f:b7:82:22:a3:50:
                    86:4c:9f:67:ff:d7:58:75:a9:9e:21:aa:f3:50:96:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:08:03:4F:7A:0D:72:34:2D:9B:09:80:25:05:67:63:B8:04:99:D8
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1a:5d:d8:4c:e1:02:83:24:5f:9f:f2:a8:62:e9:20:d5:49:
         a2:66:d4:d5:f1:80:ed:d0:39:d4:b6:bf:f2:c5:e2:0b:7c:a6:
         99:e4:5f:46:66:b1:46:20:9b:2d:c7:98:89:99:12:cf:a5:3f:
         84:f7:38:8d:c0:37:35:5c:d5:ad:10:65:56:90:d8:2f:a4:41:
         31:ca:0b:f8:58:c1:0a:e7:80:df:d8:8c:fc:7c:2f:25:cc:6e:
         47:94:22:09:c0:81:dc:bd:91:8b:4a:34:71:57:f3:9b:58:eb:
         31:be:67:39:59:27:cb:7d:8e:2c:73:17:be:11:7a:74:43:e6:
         e9:3d:d7:b3:e7:db:e6:10:b1:23:56:63:fb:58:d3:98:23:5e:
         4c:52:5b:db:ae:5d:75:e0:16:46:83:99:80:f3:80:e9:b4:c6:
         72:44:3d:9c:24:ec:93:f1:4d:c0:c8:46:a8:87:d0:c9:56:9f:
         b0:48:fb:0e:16:a5:d9:b8:59:6e:fb:36:53:6a:1c:07:be:e5:
         38:5e:81:70:40:52:83:ff:b9:a8:9d:20:46:85:20:c6:79:dd:
         48:3b:f8:69:58:58:ba:50:31:78:0b:2b:39:80:98:ee:f1:1b:
         ef:6d:0b:6e:44:e3:a0:04:e3:f0:92:26:7d:db:c0:9f:f8:c6:
         2c:04:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----