Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.mft
File:                     dd138b8ca95e6a9f9b4da79a251cae5840e1b370.mft (raw, json)
Hash identifier:          yXklDwcVUbrcwu1rVdwjieBB9u1RO8KsoVqimCsbbtQ=
Subject key identifier:   37:0D:02:3B:A7:1B:20:54:A2:91:F2:60:8F:EE:13:09:46:40:BE:4B
Authority key identifier: 6E:61:07:E7:A9:6D:EA:C6:DC:86:C2:37:4C:5F:81:94:43:A6:D2:0F
Certificate issuer:       /CN=dd138b8ca95e6a9f9b4da79a251cae5840e1b370
Certificate serial:       0A4B5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.mft
Manifest number:          0554
Signing time:             Mon 15 Apr 2024 07:20:52 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 08:12:17 +0000
Files and hashes:         1: 08d49a1cac0de37ebb5763f8b45933376e310639.roa (hash: kw2uNZyG5tzwT/CyLm5HyKZo0CTh6o6sVF2th+5SBtw=)
                          2: dd138b8ca95e6a9f9b4da79a251cae5840e1b370.crl (hash: tFgEtKk1CU42xFQWRxN0GTYpH1bdIG56uaiudRYJJRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674651 (0xa4b5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd138b8ca95e6a9f9b4da79a251cae5840e1b370
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 08:12:17 2024 GMT
        Subject: CN=d7f1e8498acf29aedcabde05372e8164a024b112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:c7:f3:16:c2:cd:57:71:cd:c2:97:25:ab:
                    25:07:5c:03:b4:0c:c2:c4:84:8a:98:a9:a9:e7:27:
                    4e:50:a1:90:16:e4:0a:4a:38:21:55:10:cc:a7:9b:
                    42:d5:d8:7f:df:79:cb:df:d5:91:a2:fc:21:52:92:
                    7d:e5:fe:ed:af:fb:87:83:d6:5d:3d:37:d7:ff:4e:
                    04:04:0b:df:3b:f2:a2:45:f0:6c:17:88:a9:7e:f4:
                    86:e3:38:3c:64:0f:fb:c6:f1:95:ca:f2:60:f5:0c:
                    8c:88:af:d1:ed:fd:3c:ae:53:aa:ab:02:29:1a:f9:
                    7d:8c:cf:b9:14:fa:af:11:0c:b6:e2:e1:0d:5b:a0:
                    5c:62:89:59:86:c9:9f:e6:d5:d5:08:57:45:43:71:
                    38:e3:89:b0:43:ea:54:58:30:e3:f5:08:82:dc:c1:
                    8e:34:ff:84:d5:0c:b0:0d:b5:a4:69:10:7b:0a:9d:
                    ba:3a:68:c3:f0:40:59:30:50:92:aa:d6:cf:4b:1e:
                    05:22:f0:43:68:b2:81:58:32:b5:93:1d:ae:46:83:
                    7d:46:e4:8e:b6:f7:62:97:48:bb:96:a3:5b:a2:1b:
                    ea:6e:80:8a:1b:2f:52:e5:1d:9e:72:5d:31:20:26:
                    0c:91:36:47:58:a4:73:36:00:15:a1:40:5d:b9:a6:
                    53:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:02:3B:A7:1B:20:54:A2:91:F2:60:8F:EE:13:09:46:40:BE:4B
            X509v3 Authority Key Identifier:
                keyid:6E:61:07:E7:A9:6D:EA:C6:DC:86:C2:37:4C:5F:81:94:43:A6:D2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:74:7c:ca:c7:df:8b:49:2c:c9:bf:0a:66:b4:c3:b9:e2:
         33:a5:29:34:57:59:c4:48:21:38:68:a3:22:98:1b:5b:41:c5:
         2f:0d:cd:6e:41:56:31:fa:52:e5:8f:5c:e7:dd:fa:26:70:6c:
         fd:80:6c:db:fe:63:9a:59:d0:17:f8:03:ea:be:96:f4:2c:ff:
         9b:12:78:30:19:85:fe:e7:9c:ba:75:46:b2:8c:63:60:37:26:
         38:c2:fb:10:74:a1:e6:b7:72:3a:25:51:d3:4f:78:02:08:cb:
         90:6d:b0:6c:4a:d7:5e:ce:9b:38:ff:9a:9a:0f:ba:11:eb:3f:
         1b:d1:d9:7c:37:2c:c3:0c:28:50:af:1f:fa:b4:f9:c8:37:f2:
         ce:e2:7b:92:3f:af:0c:b2:07:4a:d2:33:5a:2e:67:10:7e:fc:
         77:91:7d:f3:b3:78:c9:d7:d6:ab:7b:37:3c:c8:f0:e3:bb:c8:
         b3:6d:e4:33:82:20:ac:e1:a6:7f:7d:f1:1a:df:67:99:16:78:
         7b:ca:a1:f6:e2:44:3b:27:57:ab:62:9d:b6:0e:fc:af:e4:b1:
         87:1c:e0:c2:aa:d0:56:ba:ec:7e:e2:fc:28:f5:74:ac:1e:4a:
         32:f9:de:94:0c:69:5c:ed:70:0e:18:df:75:d9:25:e7:e6:17:
         e1:8d:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----