Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.mft
File:                     3412449a934b8459db5d421617e014290aa33b9d.mft (raw, json)
Hash identifier:          pHuu233DhCGMpwUhdQxVGnDEbaJ/exkYiPcZS7sYEvI=
Subject key identifier:   CC:7C:81:11:46:05:06:80:3B:4A:E8:F7:BB:BE:61:7F:0D:18:9D:D5
Authority key identifier: 6D:47:6F:A3:09:CC:24:11:D6:D6:B2:6E:44:01:DE:4F:1F:E8:A6:A2
Certificate issuer:       /CN=3412449a934b8459db5d421617e014290aa33b9d
Certificate serial:       2852D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3412449a934b8459db5d421617e014290aa33b9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.mft
Manifest number:          0DFB
Signing time:             Mon 15 Apr 2024 11:20:50 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:32:18 +0000
Files and hashes:         1: 2c3a27efa18917d28523d4450edb93f26972f74b.roa (hash: bcWoAPskTIHf8fwXH/AOyAhvv+/lVnQOHQbBXLt6z/o=)
                          2: 3412449a934b8459db5d421617e014290aa33b9d.crl (hash: jJd6u78tUlzgd8WC/2Zt32ihs/anXCC1wHGgLc7vWhU=)
                          3: 6b04c5c46747376b3017a4b7c12a5c200a38e545.roa (hash: l8L1gdgK3x1Zun+azgM5hma3ymcN4i7ReVSAkPZOsPQ=)
                          4: 6eb4d3f2e46601a2c45436c6f80a8a30bc1fd21a.roa (hash: Z4Xt6Kpeos/+BOW7J15WdVmThYceeFY0neNgdWm6XCM=)
                          5: b867c22f0a3419c6cb70a0892ef0a8a0789e793c.roa (hash: /0nWgSQlwXeEPKsLRbysyXG3IaiwrIdm6jBbSLH5lm8=)
                          6: b9b9a6a228b4f2f495f64bc407e115b51ebff4cc.roa (hash: SaRTysTO1drbQtTYLFXMmAD8yMCdfIKM6my+SJ5Rnuo=)
                          7: eca249978b3e830998f7e6c61f943ef37e7247b0.roa (hash: 415jt47D2eXVcE2OASz8F2GUM7k5jBdcYF6bxGZpgLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642645 (0x2852d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3412449a934b8459db5d421617e014290aa33b9d
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:32:18 2024 GMT
        Subject: CN=d6195cc468c4e50e1c48c2f7fd8a16f2b3261689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:78:ff:e1:d5:5e:af:1c:d6:f8:0b:34:81:dd:
                    dc:e1:2c:39:1a:1b:05:48:2a:83:15:cd:d2:90:0b:
                    36:47:14:3f:97:ef:38:5b:9a:16:dc:07:62:da:f9:
                    6b:ca:9c:f4:c8:fe:ef:5a:59:88:56:f9:d2:f6:48:
                    55:57:b3:3c:f4:29:9a:7b:03:3b:89:af:e8:8a:6f:
                    a0:05:eb:7f:f0:48:3c:c9:d9:8c:ff:47:ff:30:76:
                    da:7a:7b:d0:f2:c7:80:0e:5b:c7:3f:a6:53:1b:c9:
                    7d:c6:6e:17:4e:4c:9a:09:35:bd:ef:9b:e2:62:75:
                    ba:77:e1:8d:08:5f:9f:dc:c1:81:7e:ea:f9:8a:cc:
                    97:1d:c5:a3:f4:3d:e4:8a:c1:e7:35:37:f7:8d:70:
                    62:8e:41:55:0a:6e:b7:8b:75:24:71:97:4f:44:ac:
                    ba:b1:8d:a9:d6:3e:c0:cb:96:21:fa:e3:b4:81:d2:
                    77:83:d5:0c:00:17:4b:11:0d:86:cd:78:87:38:d4:
                    95:17:5b:5c:9e:d1:56:f0:7e:fe:ff:2a:39:66:79:
                    9c:52:20:cf:8d:62:75:8b:1a:5e:3d:24:31:51:36:
                    50:21:e2:c0:be:12:6a:10:8c:90:82:41:6c:59:b2:
                    c2:cc:22:0b:26:2f:1c:81:72:ad:5d:62:5d:72:60:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:81:11:46:05:06:80:3B:4A:E8:F7:BB:BE:61:7F:0D:18:9D:D5
            X509v3 Authority Key Identifier:
                keyid:6D:47:6F:A3:09:CC:24:11:D6:D6:B2:6E:44:01:DE:4F:1F:E8:A6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3412449a934b8459db5d421617e014290aa33b9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:62:7c:13:5f:f5:45:b5:00:17:58:e0:c9:50:26:44:6e:ce:
         7f:8d:bf:ec:8d:1e:80:f6:3e:5a:05:12:be:ce:d7:9b:6e:aa:
         10:9b:08:3c:8d:a8:28:50:f3:fd:2f:2c:58:c6:ff:f2:fe:a9:
         53:eb:9d:a0:18:97:3f:a4:dc:6c:1a:72:71:d8:9b:6b:d7:32:
         cf:9b:5d:11:34:93:76:63:fe:49:98:7b:f5:8f:96:b6:2b:5d:
         0b:7c:4b:8e:75:6c:74:74:be:38:f2:0a:d6:4c:b6:d6:46:b6:
         02:46:1b:28:7c:68:36:43:f5:70:b4:14:d4:89:3c:35:03:0f:
         a9:f3:7e:38:f0:4c:ca:34:ee:23:da:d6:3f:78:3a:a3:d3:32:
         d9:35:28:73:3d:3a:3c:56:81:9d:67:d1:7d:6e:62:bb:2d:02:
         d2:2e:51:97:07:38:22:73:5a:ad:ba:b5:ce:97:af:6a:11:29:
         42:09:f7:cd:a5:a6:30:63:f6:29:41:d5:b9:c4:76:66:b5:d9:
         da:18:07:f5:0e:a1:b4:ee:20:e5:aa:87:52:dc:4a:99:aa:76:
         71:34:77:f2:ae:99:e3:a9:f2:d3:70:15:f8:19:ff:37:69:cd:
         bf:c5:40:dc:7c:b7:f2:c0:ed:f6:6d:d1:ff:c1:67:83:42:e3:
         f8:2f:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----