Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.mft
File:                     ab3a4acea64b174081cdabbb007d6cd03d2a7357.mft (raw, json)
Hash identifier:          6qujT2lrJ1KlAvGu51OMdt8VYb9fp1px0s8Ot14twwA=
Subject key identifier:   10:C9:3F:1A:C0:0E:4A:3D:9F:51:02:BC:AD:7A:47:62:EC:8C:C5:1E
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Certificate issuer:       /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial:       20ED5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.mft
Manifest number:          0E0D
Signing time:             Mon 15 Apr 2024 08:20:57 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 10:49:16 +0000
Files and hashes:         1: 08334ad91ce532da45c25b1552700e33b4fdb13b.roa (hash: D217vF4OAlGeNj6AQp9+PjKhpqSb3BK5E7t4WZ1Fji0=)
                          2: 1487a9cb3abb7489bd7b397fe7cd7966e7177f21.roa (hash: iJY2o6NoRQ1sYbs5xWuENtzcA0b6+6BVexbLYm+l+Tg=)
                          3: 83cf2cb0d72ec59f2988e831b593dbcf9cef87a6.roa (hash: Gr79lI9Mghsn7NSpZ1p60kWsNTSum5I89HLvLaYCZ/k=)
                          4: ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl (hash: j6pKF29ZlyhbeyflrkTF8GmUz1PIeOWEvFYq0aLteBI=)
                          5: e6d0f5318364b39f661639ef7cec9f936be1a7dc.roa (hash: O1l4Jo5BM2wjhFxovOSB6nvoC9zVBi3+Yb5/K1cmPuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157917 (0x20ed5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 10:49:16 2024 GMT
        Subject: CN=00418d937dcad923a18738380b96cabbfedcfb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:a6:5d:d7:b9:8a:9f:96:d8:e1:9a:a8:c5:
                    1f:f7:5e:09:85:84:d8:ba:73:fd:20:77:db:5c:1c:
                    4b:61:22:c5:c7:19:02:24:d0:64:c4:54:04:c5:7e:
                    9e:36:c0:99:16:08:86:fe:fa:ad:85:cf:bb:47:82:
                    a0:3b:37:07:38:a7:5c:3b:1c:63:52:97:b1:1b:d7:
                    9e:3c:9b:45:95:96:81:1f:7f:ab:0d:ec:b5:fc:70:
                    88:60:d5:13:ed:36:11:ec:49:b7:1d:38:7e:aa:a5:
                    14:dd:6c:55:fb:b6:24:80:31:d9:5f:e9:d4:52:d6:
                    1e:94:72:9c:05:5e:01:ad:88:0c:94:ef:23:8f:04:
                    5d:c2:74:f3:2e:be:30:57:7d:29:0c:07:6b:73:01:
                    a0:06:67:55:18:a8:78:fd:f8:cb:e1:6d:94:20:97:
                    74:1a:02:52:df:08:99:55:74:d8:f9:e7:2c:f1:84:
                    ae:f4:94:60:7a:f6:70:00:2e:30:e8:bb:d1:30:79:
                    d5:4f:94:e3:fa:8f:4d:7d:bb:b0:d4:c5:88:2d:b7:
                    b1:f6:61:5d:a4:ea:0c:e5:c0:88:d4:1e:d4:3d:3e:
                    2a:34:aa:f5:c3:ea:17:bb:3a:7a:56:60:bf:33:94:
                    5c:89:91:88:f0:ad:74:71:1a:43:d8:d1:07:55:d9:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:3F:1A:C0:0E:4A:3D:9F:51:02:BC:AD:7A:47:62:EC:8C:C5:1E
            X509v3 Authority Key Identifier:
                keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:21:86:9d:fc:4a:51:29:e5:92:91:46:97:1d:02:ae:84:82:
         94:c5:06:a5:4d:d8:4b:24:40:b3:f4:96:b5:49:85:fb:93:ab:
         3d:7c:0c:20:9d:00:f4:5e:ad:47:fc:68:8b:db:1e:15:27:11:
         5b:a0:68:83:be:92:9c:39:64:00:2e:82:40:08:2a:e4:18:90:
         c5:d7:8d:69:91:5e:5f:22:6d:ea:6a:3e:fc:09:4a:79:56:c7:
         81:aa:96:89:fa:56:19:9d:3c:8c:ab:89:0a:e5:8e:e8:ff:f9:
         6e:d2:00:d3:57:f1:7d:94:8f:28:57:13:c0:2c:e7:28:7b:ec:
         d1:6f:ee:16:8d:c7:8f:eb:fc:e8:87:41:dc:c8:2a:f6:01:6c:
         d6:b4:84:12:9c:fb:65:4b:fa:e0:be:3d:f5:40:6e:8d:10:2c:
         59:eb:eb:b1:c0:1e:59:21:ce:6c:56:e5:f9:97:76:6d:f0:eb:
         ca:69:2d:42:b5:20:14:fe:91:5d:f2:a8:90:cc:60:33:68:2f:
         e9:43:1c:4d:be:c2:da:a4:ff:b2:f2:15:43:60:1a:b3:c9:d5:
         7f:49:7d:1e:47:22:0b:c5:ef:44:0a:71:fe:23:52:ed:f0:65:
         a5:98:54:9d:93:6d:62:ff:9c:2c:84:df:0c:64:0f:9a:1b:30:
         d6:5d:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----