Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d54f10a-7480-42ca-b336-fdb14396a612/86f774323c235bf52b2cb5fa18f7945e51ca702c.mft
File:                     86f774323c235bf52b2cb5fa18f7945e51ca702c.mft (raw, json)
Hash identifier:          RAtG8cYH5UhzuiUq4OEjVw7Z9CAh/VNoCNCJUCHFWxE=
Subject key identifier:   B3:3D:1F:64:1F:05:12:88:B9:96:FC:AD:3D:3D:A1:D9:1F:D0:CC:80
Authority key identifier: 7F:CB:FE:18:7B:BB:C4:B4:F4:50:A2:70:DE:43:72:FC:35:3F:F9:13
Certificate issuer:       /CN=86f774323c235bf52b2cb5fa18f7945e51ca702c
Certificate serial:       28CB2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86f774323c235bf52b2cb5fa18f7945e51ca702c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d54f10a-7480-42ca-b336-fdb14396a612/86f774323c235bf52b2cb5fa18f7945e51ca702c.mft
Manifest number:          0DF0
Signing time:             Mon 15 Apr 2024 07:21:20 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:33:17 +0000
Files and hashes:         1: 5e70b1ce0e0d717dadc891c2112c177c77cb1b7c.roa (hash: CQkC0UuqgFdP8sRpPqUlL7z8WZOUjJdLa171rvUXDm4=)
                          2: 86f774323c235bf52b2cb5fa18f7945e51ca702c.crl (hash: 6k23FUzw6Uh3YHl3H+k/rd7/NFLcoEhivmQUsZYXrtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673455 (0x28cb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f774323c235bf52b2cb5fa18f7945e51ca702c
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 07:33:17 2024 GMT
        Subject: CN=3eb9594a2bda4b55e2f8fa88b77d84ec4ede339d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:0b:60:bb:9f:da:36:67:78:95:57:5b:ca:
                    8c:46:3f:f2:3a:bf:f4:7d:bf:d8:00:2f:0d:b9:fc:
                    eb:d1:d3:87:d7:0a:4b:f2:05:8c:fe:30:38:10:76:
                    e1:37:f7:3c:7e:25:1c:9c:8c:f1:d1:08:80:fc:95:
                    bf:0c:92:6f:c4:75:37:c5:58:5b:af:32:c5:f1:ec:
                    99:b2:2d:76:65:4a:02:23:b8:74:46:7e:ca:85:cf:
                    71:2e:8e:65:7f:42:d9:88:e2:71:a6:15:ee:cd:8c:
                    4f:5f:18:75:0a:61:f7:35:61:32:41:fc:4e:ea:d5:
                    03:a6:06:32:08:eb:42:48:8c:7b:82:a6:b4:10:e5:
                    4d:d2:ac:07:f5:ea:0e:7a:69:a4:dc:3c:75:d2:7a:
                    2d:31:f8:01:40:a4:61:df:14:b8:96:e5:22:76:d7:
                    81:1e:58:58:2d:b5:2a:06:d3:4e:7a:98:c9:29:6f:
                    bc:43:fa:7b:36:48:8a:da:33:85:60:f4:09:7b:dd:
                    1b:33:f8:af:98:a4:b7:98:29:be:10:9a:81:88:c0:
                    56:6a:a9:e9:d9:ae:25:21:7e:31:13:42:fa:10:a2:
                    4a:21:74:1d:1d:33:82:d7:c6:32:af:f5:98:76:a2:
                    d4:e4:46:ee:44:5d:a9:4b:0f:15:b6:46:b4:75:11:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3D:1F:64:1F:05:12:88:B9:96:FC:AD:3D:3D:A1:D9:1F:D0:CC:80
            X509v3 Authority Key Identifier:
                keyid:7F:CB:FE:18:7B:BB:C4:B4:F4:50:A2:70:DE:43:72:FC:35:3F:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86f774323c235bf52b2cb5fa18f7945e51ca702c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d54f10a-7480-42ca-b336-fdb14396a612/86f774323c235bf52b2cb5fa18f7945e51ca702c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d54f10a-7480-42ca-b336-fdb14396a612/86f774323c235bf52b2cb5fa18f7945e51ca702c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:df:fe:83:ae:96:1d:63:1c:fe:43:3c:02:3c:a0:57:38:b2:
         f7:ee:8b:9e:14:c6:c8:7f:c4:7d:c7:7e:69:08:66:10:7f:7d:
         81:95:2b:ee:73:b9:00:39:96:53:da:bd:f7:83:95:65:36:70:
         95:cd:c8:fe:c8:d0:5c:b9:34:9f:1a:f9:07:c2:88:ce:4c:58:
         07:c5:51:3f:9a:5f:9a:b8:c5:36:65:07:3a:26:66:2e:9a:c3:
         95:b2:1a:4b:42:54:78:b6:d3:c8:24:55:d8:48:41:52:87:b4:
         ab:8e:93:e3:bc:65:a0:db:2f:96:f0:58:4f:b5:e9:43:14:a7:
         b0:2d:31:a6:28:8b:45:c1:b5:c4:88:7d:af:db:14:12:6f:23:
         30:18:97:77:34:09:1e:63:6a:e4:06:9b:d1:b6:cd:4c:2a:f8:
         14:02:5e:3c:33:5f:48:58:6a:c9:97:8a:3c:d9:34:64:4d:83:
         62:94:99:37:54:fd:36:82:62:a8:b9:76:45:5d:c2:32:60:58:
         f5:22:49:89:12:49:d8:4f:a3:42:e8:9a:a3:0d:78:13:41:0b:
         57:5f:f4:8f:11:8b:30:5c:44:25:20:e3:6e:c3:a4:3d:75:c8:
         cc:3f:4c:8f:b1:47:d3:21:94:f4:fa:e4:30:93:e5:d8:7d:c7:
         4a:19:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----