Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.mft
File:                     3d834735280c5b9052510730fac20a4e6213a18d.mft (raw, json)
Hash identifier:          VfgfwL/Q/WZGr/olVF/kKRYyxCCyoeelJKhFcfYNMLM=
Subject key identifier:   56:11:C5:88:F4:45:8E:A3:19:2F:BF:A9:CA:42:77:32:9C:24:7B:48
Authority key identifier: 5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6
Certificate issuer:       /CN=3d834735280c5b9052510730fac20a4e6213a18d
Certificate serial:       1FB089
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.mft
Manifest number:          0DE0
Signing time:             Mon 15 Apr 2024 10:21:21 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:23:25 +0000
Files and hashes:         1: 3d834735280c5b9052510730fac20a4e6213a18d.crl (hash: WTCp3cSgssm3BdDMeHe+wLqRYowkEAvetRgrMcxofjU=)
                          2: 8d6aa1a2a9b267435de3b03c7ac66797ef21d1fd.roa (hash: zkH282gYELC91aCqqS/02zvGnRgWnQgdCX2/dZIcwmM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076809 (0x1fb089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d834735280c5b9052510730fac20a4e6213a18d
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:23:25 2024 GMT
        Subject: CN=d89844d58d0cd6a1d7da4507a9e7debbfd598f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:ae:a9:6e:f3:24:22:e3:74:d8:8a:67:a1:
                    5d:e2:1e:ca:d3:f0:ec:ec:71:91:d5:54:9a:59:76:
                    a9:9d:30:be:22:91:eb:9f:ac:5e:3c:f6:ea:aa:12:
                    21:d3:c0:42:23:23:9e:a2:28:d0:f2:8a:db:86:56:
                    40:18:06:6f:a2:68:05:14:a6:ca:35:c1:73:aa:eb:
                    ef:a3:9c:a0:c3:76:bc:39:4d:aa:7c:15:fa:71:9a:
                    e9:fe:45:d6:c9:c2:fa:d4:a2:46:1f:22:c9:a2:fa:
                    41:18:24:71:f3:8d:b3:9c:6f:27:b7:27:ca:44:85:
                    3c:53:c7:fd:89:c0:34:1f:d2:c1:1f:28:42:21:3f:
                    f7:a9:65:d5:14:b4:0d:69:88:82:af:bb:57:55:76:
                    25:33:a0:41:ff:a4:d4:73:d5:d4:86:15:78:64:e2:
                    0a:ec:92:0d:45:ef:07:96:46:fb:af:10:dd:dd:47:
                    47:5b:2f:c6:33:bc:db:1a:cc:4b:d8:3f:b2:be:0d:
                    b4:84:2b:b7:04:9e:78:f1:86:9b:ef:28:6f:f9:16:
                    36:ec:01:cd:e8:a3:38:20:ae:86:cc:59:00:73:99:
                    87:9d:ad:4d:e3:ed:a0:13:e2:fb:a3:ad:ce:47:cc:
                    a8:a5:76:6d:5a:29:6d:a3:11:a3:f0:5b:2b:bc:72:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:C5:88:F4:45:8E:A3:19:2F:BF:A9:CA:42:77:32:9C:24:7B:48
            X509v3 Authority Key Identifier:
                keyid:5A:F2:18:32:BF:E5:36:83:ED:B0:EB:FB:05:13:DA:06:78:ED:59:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d834735280c5b9052510730fac20a4e6213a18d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74acf5f9-c053-4a9d-a103-30431979d835/3d834735280c5b9052510730fac20a4e6213a18d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:16:01:15:89:e4:cf:a2:1a:a7:24:f6:7d:4a:b4:13:9e:
         b0:b2:98:4c:06:d1:5b:19:eb:34:d5:59:e5:c5:cb:2f:be:57:
         d9:a7:15:e2:df:d0:b8:52:29:db:45:ec:06:5b:3d:c2:14:bc:
         56:ab:5b:43:d4:ff:d0:dc:86:e8:28:0e:2f:96:a7:e3:44:de:
         08:79:12:c2:f4:88:a6:ff:9d:e6:a9:a0:d1:0d:3a:86:97:05:
         30:b9:fe:18:5e:54:05:e6:d2:45:82:72:87:4f:ad:0b:91:ce:
         f2:ff:36:3d:e1:e4:09:7b:b0:e9:ff:e2:21:ca:5b:15:66:44:
         e2:f8:ec:cb:25:0a:b9:44:f0:b4:00:fb:04:84:27:07:7e:30:
         92:83:92:b8:01:3a:d6:93:b7:36:3e:3b:1e:81:1a:5f:e5:72:
         f8:e6:bb:d1:9e:9e:19:9c:e1:c8:9d:7a:61:e0:9a:8b:b0:ac:
         11:ee:00:88:1d:a9:da:40:e8:f2:f9:72:7b:76:3d:6e:39:43:
         00:ec:82:46:00:8c:b7:e8:63:03:ac:97:4e:99:d4:aa:4f:71:
         7b:53:bc:d2:69:a0:7a:d9:1c:38:70:c2:23:ea:58:df:51:1b:
         ab:6f:6e:70:89:ff:b7:9d:55:87:43:ad:b4:5b:aa:c9:96:f3:
         e7:67:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----