Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/ae946cc9c707e5ce6195524f720cf4743e0df128.mft
File:                     ae946cc9c707e5ce6195524f720cf4743e0df128.mft (raw, json)
Hash identifier:          250IaHZ1C1fB6IynO08oa8VG6yyDNMsw1CrsTi4yI18=
Subject key identifier:   24:8F:90:29:EC:9F:98:1C:A5:03:74:A5:6A:A0:C8:DB:DF:89:F9:2B
Authority key identifier: E0:C9:83:E4:EF:EB:7E:D3:0D:9B:A5:50:DF:0A:58:BF:FA:CB:4C:29
Certificate issuer:       /CN=ae946cc9c707e5ce6195524f720cf4743e0df128
Certificate serial:       06461F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae946cc9c707e5ce6195524f720cf4743e0df128.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/ae946cc9c707e5ce6195524f720cf4743e0df128.mft
Manifest number:          032B
Signing time:             Mon 15 Apr 2024 06:20:59 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:55:39 +0000
Files and hashes:         1: 42442551be7e729190ab44084049f27b0eea0bb1.roa (hash: R6dHa6QY+U8ybQMdcq6P6LhLm7mJnOx/8e6DolxeaSQ=)
                          2: ae946cc9c707e5ce6195524f720cf4743e0df128.crl (hash: 4cSZbGLhVArBTonsk7eQhBO+B9pQFu5JaVdUkV15FIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411167 (0x6461f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae946cc9c707e5ce6195524f720cf4743e0df128
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:55:39 2024 GMT
        Subject: CN=a3972e53fbe5a764ee795bf30e049d92fee72847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:f1:cd:e6:e3:df:14:03:76:94:62:2a:4d:
                    93:74:70:eb:02:97:1c:61:c5:a8:fc:14:c8:84:b3:
                    f4:7b:e4:9c:74:d4:4a:09:31:37:a7:f3:b5:b2:b5:
                    80:a8:2d:f7:7d:ca:2a:d3:e1:c9:4e:f7:a2:bf:22:
                    a7:23:12:22:3d:cb:d9:c7:8d:9d:55:4a:78:9e:91:
                    44:d8:61:08:98:b7:4d:b4:9b:36:ad:30:21:2f:33:
                    95:f2:86:46:d1:c9:bd:07:ce:51:96:a4:81:7f:69:
                    93:11:74:8d:e5:e4:b0:65:0e:8c:b9:d1:0a:2f:3d:
                    8e:5f:cb:61:a0:c4:c0:88:ed:c0:29:2e:f7:e6:16:
                    f7:a7:9c:cd:af:2f:e7:2d:0d:fd:e6:24:7f:19:fa:
                    63:ab:c0:1a:21:58:79:16:46:1a:58:95:58:49:1a:
                    04:46:03:f4:98:77:bb:d1:cd:6d:eb:c2:c2:a1:ab:
                    38:ce:e2:92:dd:1c:57:77:b3:6f:78:5d:ae:52:58:
                    6b:6b:ec:be:dc:45:5a:60:ba:7e:99:51:12:76:c6:
                    c5:79:84:6b:84:88:8d:8d:d1:94:80:1f:34:d2:6d:
                    4a:18:dc:96:9d:21:4b:ae:6b:09:4d:47:d5:1c:9b:
                    07:5a:09:6a:61:68:21:c2:ca:49:6c:61:ae:6f:dc:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8F:90:29:EC:9F:98:1C:A5:03:74:A5:6A:A0:C8:DB:DF:89:F9:2B
            X509v3 Authority Key Identifier:
                keyid:E0:C9:83:E4:EF:EB:7E:D3:0D:9B:A5:50:DF:0A:58:BF:FA:CB:4C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae946cc9c707e5ce6195524f720cf4743e0df128.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/ae946cc9c707e5ce6195524f720cf4743e0df128.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/ae946cc9c707e5ce6195524f720cf4743e0df128.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:3c:33:3e:47:12:82:14:ce:c4:4b:ee:15:8d:4b:6b:d6:
         33:32:16:fd:99:9d:be:d3:c2:f6:41:92:61:88:db:1c:27:86:
         82:16:66:b3:e3:6f:b4:80:e5:50:cc:64:0f:8b:8d:d2:67:04:
         ec:25:e9:cf:97:1f:a9:88:37:e6:f7:53:eb:16:38:da:0c:b6:
         46:cd:b6:ea:cf:d8:9c:c2:20:5c:80:b9:c9:0f:b1:79:ee:60:
         d6:64:a1:06:77:21:7c:91:76:6d:1c:fc:f4:53:02:f2:b7:2a:
         47:c3:59:2b:86:3c:58:9f:31:c0:60:1c:83:21:7e:05:e2:c7:
         6d:5d:90:8f:c1:61:28:40:a9:cd:9c:cc:a6:d5:0b:64:35:ba:
         a3:f1:7b:4d:dd:8e:d5:79:a8:e7:46:00:1b:58:35:1f:6b:f5:
         ca:0f:3e:83:6f:be:14:aa:d0:3f:fd:a4:e4:c4:81:d2:ac:78:
         95:3b:fa:30:de:be:10:f7:36:0f:91:94:09:38:e2:85:78:e5:
         dc:3c:84:72:49:b5:47:95:19:e1:e7:f9:81:0e:b9:f5:5d:35:
         14:e5:70:4e:58:c8:25:d5:a1:5c:da:c0:b7:16:1c:aa:f7:e0:
         dd:cf:42:1c:dc:a6:18:f4:28:53:af:d7:08:b1:e2:9c:ba:53:
         62:f1:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----