Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9725fae0-79cf-43a5-93ed-0b67acb03459/bd356fa16701410ed220e07da0b0f97af447c0dd.mft
File:                     bd356fa16701410ed220e07da0b0f97af447c0dd.mft (raw, json)
Hash identifier:          gzTl/OA/WbYh+tkciZb4KbyxnDRk/vOFEPT3kj2H6DI=
Subject key identifier:   70:BE:AE:32:99:13:AB:FA:1B:CF:30:58:8A:D3:52:F3:CB:7D:DC:F7
Authority key identifier: 75:5A:84:CC:11:A0:3B:07:23:DD:A6:5B:C4:6D:62:0C:74:98:DB:B3
Certificate issuer:       /CN=bd356fa16701410ed220e07da0b0f97af447c0dd
Certificate serial:       28D045
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd356fa16701410ed220e07da0b0f97af447c0dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9725fae0-79cf-43a5-93ed-0b67acb03459/bd356fa16701410ed220e07da0b0f97af447c0dd.mft
Manifest number:          0E06
Signing time:             Mon 15 Apr 2024 10:20:48 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:44:25 +0000
Files and hashes:         1: 5a4ba4136ae09bd7ae0f6ed9b84ee8877fdc4eea.roa (hash: KJMtP850ch2NstOrR/yexXeLTZ1wWz+fXBlVJgxDxN4=)
                          2: bd356fa16701410ed220e07da0b0f97af447c0dd.crl (hash: LdG6FJ5jvCyGN1hDTcQbSSAzG4mAuxrC3PP36F9xy9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674757 (0x28d045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd356fa16701410ed220e07da0b0f97af447c0dd
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:44:25 2024 GMT
        Subject: CN=cf5a6c22140006fcf97af5da3697407bf2b8cd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:e0:2b:22:b0:b6:26:db:21:39:e5:a8:42:
                    f7:af:50:08:92:41:00:90:be:c9:93:93:05:78:c7:
                    62:1b:f7:53:e1:e7:8f:d7:89:07:ef:7a:14:d2:16:
                    41:e4:30:75:67:a8:75:01:c4:e9:89:3a:9c:6a:e8:
                    cc:c9:92:6f:99:c2:a3:c8:ea:22:9d:c0:74:eb:ce:
                    92:aa:12:a8:a6:3b:3e:96:1e:ba:3f:25:be:44:51:
                    57:df:7c:86:e8:b1:91:60:b3:8c:47:c9:ab:fc:29:
                    14:d4:97:9c:18:35:e5:90:65:f3:d8:a9:60:10:6b:
                    27:67:e7:b5:eb:0c:1a:ba:7d:e1:dd:ba:f9:29:c5:
                    83:b4:21:c2:c8:b7:dd:ce:81:cb:47:6b:e3:f6:f4:
                    5e:11:72:b9:b0:47:d6:73:17:89:ae:a5:a9:38:70:
                    5f:74:77:92:44:1f:64:f3:e2:7f:2e:79:24:20:83:
                    1b:d6:f9:94:3e:27:2a:dc:3d:49:0b:aa:86:13:36:
                    ed:fe:24:a8:3a:6b:9b:1c:87:83:dd:a7:d5:b7:5b:
                    0f:9b:66:d0:dd:b5:18:d1:d0:8a:32:0a:1c:b3:31:
                    5c:80:97:5f:e2:11:8f:16:5a:e7:ba:a7:c9:f6:0a:
                    f3:2f:f2:29:fb:04:40:d3:16:eb:fb:7b:b2:65:bc:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BE:AE:32:99:13:AB:FA:1B:CF:30:58:8A:D3:52:F3:CB:7D:DC:F7
            X509v3 Authority Key Identifier:
                keyid:75:5A:84:CC:11:A0:3B:07:23:DD:A6:5B:C4:6D:62:0C:74:98:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd356fa16701410ed220e07da0b0f97af447c0dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9725fae0-79cf-43a5-93ed-0b67acb03459/bd356fa16701410ed220e07da0b0f97af447c0dd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9725fae0-79cf-43a5-93ed-0b67acb03459/bd356fa16701410ed220e07da0b0f97af447c0dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:cd:ed:90:37:2a:5e:6c:de:d3:83:fb:d6:73:74:47:be:
         1b:cc:a7:44:9c:a9:81:c2:b8:95:9c:03:7c:68:76:79:76:06:
         84:3f:77:7f:7e:1d:84:dd:02:04:b9:f7:2b:7e:03:07:13:f1:
         62:b5:75:1a:d4:68:28:cd:50:0e:35:94:d9:34:64:a9:bb:7b:
         85:a8:fe:b4:25:df:be:dd:7c:d1:a5:57:5c:18:34:e2:e0:dc:
         a2:fb:78:dc:fc:06:73:89:71:88:3a:96:c7:93:62:91:bc:e9:
         d9:86:7b:ee:2c:e8:44:64:4b:11:8a:ef:9e:66:73:72:89:51:
         d0:0a:0e:a4:a8:b8:b8:f3:dc:13:1c:11:76:88:d2:af:d8:8d:
         eb:97:0b:a1:06:aa:37:97:a6:c2:c8:3a:64:e6:51:26:d0:5b:
         1f:5f:29:67:40:2a:40:49:e5:b6:a3:b2:e1:e6:51:3a:83:c1:
         96:4d:6c:6b:fe:20:3e:9c:83:04:4e:d9:27:e1:57:c2:08:c3:
         44:9b:81:f5:cb:ea:94:6e:0a:52:4e:4b:3b:5b:97:a7:0c:20:
         a0:45:d5:50:71:d2:ca:ee:20:23:72:3f:e8:ef:4b:7e:8d:fa:
         a3:9f:cc:97:3d:12:d1:b8:df:8a:91:1c:7d:b3:e0:31:08:8d:
         d4:f0:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----