Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/03db7f368709412d68f18d6190ed8997e247550a.mft
File:                     03db7f368709412d68f18d6190ed8997e247550a.mft (raw, json)
Hash identifier:          kBxaQjCy6aL2/mly3A5InTtOVBnSOSeoz043VuYlz28=
Subject key identifier:   C3:43:4C:F7:0A:36:E2:3A:CA:91:3C:DD:39:56:63:3C:30:96:6F:D4
Authority key identifier: C8:9F:AB:1F:EB:EE:C7:35:7C:DC:80:17:DA:98:8E:81:B6:40:65:19
Certificate issuer:       /CN=03db7f368709412d68f18d6190ed8997e247550a
Certificate serial:       29364F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03db7f368709412d68f18d6190ed8997e247550a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/03db7f368709412d68f18d6190ed8997e247550a.mft
Manifest number:          0E04
Signing time:             Mon 15 Apr 2024 03:20:57 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:56:17 +0000
Files and hashes:         1: 03db7f368709412d68f18d6190ed8997e247550a.crl (hash: e+rLwGHOL3Sw++N57l6NXteBwAUBSL6zxj+cfh46Zz0=)
                          2: 0da729b3e8ae9786763aac9c698035a9fcbff614.roa (hash: mPG2kbX57lxP1G9QFNuZzkZWX2tD5dF74NBjaAe2UgM=)
                          3: 59428c021505035d07b02cebdaa405db0b9dfd99.roa (hash: /Icxg5+DxU4zOeZZVKIUakqekaNCoiOTW8D0aa0nUWk=)
                          4: 64bc2471e1a6203bf48fadfa3b50ede34a4cfc55.roa (hash: wBgKPJL5MRUToWkRLlxsdOlT2dUdu0UJ5hjDnLnkls8=)
                          5: d6a4f84c4ad03b6eaafc3efe13c72e240cb63db4.roa (hash: XQ6h/u9PDy3KY3xBK1LyXQrbbDCAA4Liq2BSl3hwOBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700879 (0x29364f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03db7f368709412d68f18d6190ed8997e247550a
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:56:17 2024 GMT
        Subject: CN=580021349eb3d4441601ab7366ed300f14f495ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:cc:e7:da:a1:3d:40:5e:c4:66:4c:17:e4:
                    5c:55:9c:eb:a1:29:d8:8f:f8:4c:54:78:d6:4c:6d:
                    66:25:17:5c:b3:fd:30:e1:2a:85:6c:c7:cd:88:0c:
                    cd:6f:0b:61:c3:8f:7c:ed:84:a5:90:bc:a3:41:b8:
                    85:40:f9:ae:20:3c:e2:15:86:88:4e:fd:ce:cc:4d:
                    0c:31:ec:bf:dd:a1:c9:80:02:ce:f5:ca:a2:cd:11:
                    79:1f:2a:cd:1e:28:f1:9a:69:ba:a4:ad:b6:47:34:
                    70:b0:ee:a3:2f:d0:bc:c7:51:54:b3:cc:63:57:53:
                    21:85:e0:88:c3:33:2f:23:d8:fc:38:ef:50:3c:fc:
                    ff:12:98:f2:b6:76:aa:c1:8a:b9:70:c0:c0:6f:33:
                    eb:de:e7:e2:02:e3:b5:ca:99:0c:20:2f:e1:32:68:
                    c4:c6:72:c8:9b:1a:80:e2:80:0f:47:f0:51:79:fb:
                    1d:d7:19:ea:58:44:d3:23:74:ff:d3:7c:8a:84:c5:
                    63:14:2f:3f:2d:ae:d3:71:ad:7e:54:b4:f0:a5:52:
                    ab:76:20:ec:9f:fe:3c:72:1c:c2:a8:07:26:e5:7a:
                    8e:ac:d8:96:13:02:d3:25:59:bd:37:46:03:5a:84:
                    b7:a5:94:f3:ab:9c:1b:e4:74:0d:d2:70:49:a7:b2:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:43:4C:F7:0A:36:E2:3A:CA:91:3C:DD:39:56:63:3C:30:96:6F:D4
            X509v3 Authority Key Identifier:
                keyid:C8:9F:AB:1F:EB:EE:C7:35:7C:DC:80:17:DA:98:8E:81:B6:40:65:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03db7f368709412d68f18d6190ed8997e247550a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/03db7f368709412d68f18d6190ed8997e247550a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a17cb29-660f-49bf-909a-28ce4bd7356c/03db7f368709412d68f18d6190ed8997e247550a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:d1:8e:ab:4d:2e:4b:20:22:3a:e0:a0:30:74:d4:3d:c1:
         88:7d:24:c5:36:5e:2b:ac:be:f2:34:53:13:11:30:9d:0c:e8:
         09:9e:ab:e4:8b:7b:e8:e1:af:2f:ed:3c:1e:1e:45:25:16:c8:
         c1:db:a3:91:4f:de:62:b1:20:77:98:b2:e4:9a:e5:7a:f8:47:
         4f:db:34:7c:2c:2b:c8:e8:1a:25:3c:d5:9d:fa:06:ed:27:13:
         e6:bb:8c:f7:f7:59:35:a8:5e:3b:8a:31:4c:d4:45:24:cf:82:
         83:80:00:1d:34:67:84:23:3e:12:3b:82:1f:5b:01:ca:4f:60:
         98:f5:8d:a5:f4:34:d6:6f:16:b4:a1:61:15:7d:8e:b8:ff:96:
         f0:2e:f6:32:ed:96:75:2d:8d:38:8d:99:c4:34:6b:09:b0:75:
         45:c1:0b:49:fb:fb:0a:d5:40:93:bf:45:e3:36:20:69:7d:73:
         38:ce:6c:85:68:64:22:ca:90:7f:6d:5a:c3:52:98:3c:84:6c:
         b5:05:4f:63:ba:5f:c0:74:42:30:66:0a:2b:3b:e6:20:57:2b:
         4d:60:57:30:77:0f:7f:4a:e4:80:ac:95:e5:6e:d5:56:de:2d:
         cd:eb:65:a1:52:c3:c2:87:4d:72:cd:1c:98:09:25:81:5c:cb:
         94:58:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----