Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/fd09ab3ff908b2be526716abb2521fca7891bc8b.mft
File:                     fd09ab3ff908b2be526716abb2521fca7891bc8b.mft (raw, json)
Hash identifier:          H0MuvTqjg0trFlXRo2ZT1Y2X/Updv0nRNmHikV5dREU=
Subject key identifier:   31:0E:C3:3C:AE:0D:C0:54:8A:F1:76:99:D6:65:50:86:C1:55:53:CF
Authority key identifier: D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A
Certificate issuer:       /CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
Certificate serial:       1765E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/fd09ab3ff908b2be526716abb2521fca7891bc8b.mft
Manifest number:          0BF6
Signing time:             Mon 15 Apr 2024 06:21:17 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 09:17:39 +0000
Files and hashes:         1: 4c2fd0deae4629d4f990162b647651a87c9944c5.roa (hash: wqeQ5l3J9/5PlFk4CqEjlSV8PmAHREG9cDqxf60GE+c=)
                          2: fd09ab3ff908b2be526716abb2521fca7891bc8b.crl (hash: ci5wCyRlGup0B9ggJZrvfclyf5BSNnLN3kdVCFArxtw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533412 (0x1765e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 09:17:39 2024 GMT
        Subject: CN=68bae3314e9102ca143b3bde91bdf61f80d17614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:5a:91:b3:be:46:93:89:4b:d1:82:e5:f2:
                    37:75:6b:31:97:b7:d7:50:3c:2b:4a:25:95:73:ef:
                    3d:75:5d:2d:24:e9:3a:09:10:78:81:cc:12:f7:89:
                    9c:56:fc:d6:84:48:82:38:12:6b:64:4b:4a:a3:c3:
                    d8:8b:f2:9b:3f:5a:aa:33:6a:9b:ff:d0:08:ca:b0:
                    fd:a9:a4:4f:b2:98:1d:75:46:3b:96:0a:d2:3b:d0:
                    a2:24:15:43:3e:f7:c7:19:11:97:80:62:c4:79:a7:
                    b8:6a:42:5a:da:30:8d:c5:5c:9e:88:85:17:ba:3b:
                    6d:13:73:7f:f5:47:a1:08:6a:d9:fd:fa:32:42:a7:
                    30:82:f7:fb:01:71:7c:fd:6b:5c:74:df:a5:02:a5:
                    f2:ea:89:89:3d:eb:fb:57:a7:8e:34:ac:fd:61:ab:
                    57:e8:b7:34:28:76:5f:bc:08:de:e6:07:30:64:83:
                    02:9f:15:5f:09:fa:23:10:95:0a:f5:c6:10:fc:75:
                    98:4d:06:8e:ba:47:51:b4:d2:e8:5f:68:b3:37:96:
                    fa:8f:c6:9f:13:df:88:9b:52:a7:9b:3c:5e:b1:32:
                    20:c8:eb:bf:82:ef:38:a9:30:1f:e1:3f:9b:fe:67:
                    dc:ea:dc:b5:7b:64:27:73:12:b6:5c:b7:c0:75:ae:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0E:C3:3C:AE:0D:C0:54:8A:F1:76:99:D6:65:50:86:C1:55:53:CF
            X509v3 Authority Key Identifier:
                keyid:D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/fd09ab3ff908b2be526716abb2521fca7891bc8b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/fd09ab3ff908b2be526716abb2521fca7891bc8b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:63:af:f2:59:1f:5c:18:49:02:6a:80:e4:d0:1c:05:69:24:
         48:a1:fd:5a:7e:2a:e9:70:6c:fa:75:90:6e:d3:97:0a:35:1b:
         fe:3f:b0:01:63:27:bf:c1:3e:37:3f:a0:67:b6:15:ca:88:7d:
         4f:00:f1:95:71:85:dd:81:23:90:79:1c:83:bd:b1:32:85:af:
         5d:3b:35:48:b9:92:db:0d:a6:78:9e:74:ba:08:fb:e9:70:be:
         18:d9:95:ad:3e:82:42:1c:c4:a5:1e:51:de:a6:13:30:19:fb:
         e8:00:0e:a1:9b:7b:32:9f:4c:f7:a9:b5:e5:1d:65:83:a8:d3:
         6f:e4:b6:a9:5b:24:26:b0:7f:a3:20:c4:15:11:12:31:36:ba:
         f1:a3:f3:20:f3:03:ff:2f:a7:fc:74:d7:cb:a0:42:86:0b:f1:
         6b:1b:76:a7:b2:86:52:a1:23:3d:38:da:b5:bc:9f:0c:f5:85:
         45:7c:aa:da:f3:e6:f9:bc:25:aa:37:2a:1d:e0:1c:aa:54:12:
         97:76:48:9a:d2:dd:16:b1:19:c5:f4:2b:dc:bf:9a:11:17:ec:
         91:f3:6d:8b:59:be:f1:ac:6d:d5:e8:16:dd:b0:bd:ac:1e:7b:
         62:4b:07:4c:b9:e2:e3:d9:98:9e:b7:d2:56:6a:5c:b1:81:46:
         28:f2:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----