Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9795ebf5-d15f-49f6-8f8c-54e7293cb745/285f3218c423687d52e7c2c3ff69a7cfba7ae018.mft
File:                     285f3218c423687d52e7c2c3ff69a7cfba7ae018.mft (raw, json)
Hash identifier:          jAeTnmttaFspCCFuZrVDjzST3HnzlYyDKGDHYTkxLeA=
Subject key identifier:   2E:9A:A0:46:FD:57:C5:E0:1A:1C:2D:B5:F8:1B:21:7F:98:E7:BA:D1
Authority key identifier: 24:29:9B:34:31:D6:21:37:CB:0C:D3:EC:5F:A6:81:C7:AF:E0:CF:B4
Certificate issuer:       /CN=285f3218c423687d52e7c2c3ff69a7cfba7ae018
Certificate serial:       221433
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285f3218c423687d52e7c2c3ff69a7cfba7ae018.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9795ebf5-d15f-49f6-8f8c-54e7293cb745/285f3218c423687d52e7c2c3ff69a7cfba7ae018.mft
Manifest number:          0E13
Signing time:             Mon 15 Apr 2024 06:21:38 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:03:39 +0000
Files and hashes:         1: 1584cddd13b958d7915bff9be315ff008704543e.roa (hash: qmbNTqc2dv/QYaKnkbvxoqC6fO/o7dR/zlKP8q1I14A=)
                          2: 285f3218c423687d52e7c2c3ff69a7cfba7ae018.crl (hash: mfbdMvCAvYtM6HQT5EUwi1VLOjFpXQn8iA6soXnzVAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233395 (0x221433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285f3218c423687d52e7c2c3ff69a7cfba7ae018
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:03:39 2024 GMT
        Subject: CN=3cb0ce54544287d037b3ecb56f3f24b084d62795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:d6:d3:af:b8:a6:37:82:aa:cb:8c:f9:5b:
                    5f:e4:00:f7:92:2a:3a:44:68:a8:45:22:22:d9:10:
                    bd:e0:db:af:19:ca:58:cf:28:b1:44:5b:ef:dc:5e:
                    00:05:8c:46:50:5c:0f:d6:04:88:40:f1:5b:d9:b0:
                    1d:79:49:b4:14:b7:2f:f7:ec:5d:c2:5a:1a:7d:6a:
                    48:49:e7:9a:cb:3c:e3:3b:5f:0d:0c:cb:af:01:23:
                    bb:aa:87:84:1b:10:e3:02:e6:00:68:1e:5c:c5:a8:
                    18:fa:fe:7d:2d:9f:76:f8:25:55:37:a3:ad:9d:21:
                    80:32:2b:7c:5f:c8:46:dc:ce:ec:9d:a7:8d:61:07:
                    ae:b2:0b:57:98:a4:78:93:f3:91:a3:e0:40:27:1f:
                    f5:e7:de:ac:90:42:38:92:10:2c:17:ae:ae:5b:ff:
                    ed:99:8d:70:ec:62:b8:be:b3:4e:55:02:2b:9d:4b:
                    1e:f6:66:1a:ff:03:fd:b5:41:28:66:13:84:80:56:
                    d0:77:3d:f4:5c:da:dc:35:9a:e5:e5:3b:94:74:c8:
                    47:fb:15:64:09:b3:2c:4d:e1:3f:93:9d:6b:95:0b:
                    9b:b0:89:76:57:9e:86:c2:7f:bc:f9:e0:39:fe:59:
                    0c:8b:56:2b:0c:71:7f:ed:a6:5c:c8:cd:03:4d:07:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9A:A0:46:FD:57:C5:E0:1A:1C:2D:B5:F8:1B:21:7F:98:E7:BA:D1
            X509v3 Authority Key Identifier:
                keyid:24:29:9B:34:31:D6:21:37:CB:0C:D3:EC:5F:A6:81:C7:AF:E0:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285f3218c423687d52e7c2c3ff69a7cfba7ae018.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9795ebf5-d15f-49f6-8f8c-54e7293cb745/285f3218c423687d52e7c2c3ff69a7cfba7ae018.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9795ebf5-d15f-49f6-8f8c-54e7293cb745/285f3218c423687d52e7c2c3ff69a7cfba7ae018.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:24:ab:a0:8a:0b:81:8a:3d:87:4e:ff:44:a2:88:99:c2:a3:
         02:d5:6e:09:ee:ce:d4:8b:db:17:f9:8b:47:2e:0e:1d:db:14:
         6d:68:87:18:fa:2d:16:d5:1b:91:d4:7e:33:69:59:92:e9:ed:
         d8:12:81:66:08:b3:b8:29:c1:3e:66:16:05:ef:0e:79:93:74:
         e2:f7:23:e7:f3:02:6a:b4:73:62:4a:7c:62:74:ca:60:2e:3b:
         69:e0:78:1e:6f:8d:95:ea:29:2d:ee:34:72:1f:c0:9b:66:45:
         58:8d:8b:fb:66:1e:03:7e:a2:c5:b6:c0:1a:76:34:f2:13:cc:
         51:7d:31:ae:8a:12:60:85:97:c6:ea:0f:85:db:05:b7:6d:72:
         e4:ae:dc:94:ec:80:d4:bd:5e:d3:b3:89:00:85:42:a1:0e:e7:
         d3:94:fa:e8:ee:72:46:97:b5:4b:bb:24:99:81:ab:c9:29:d9:
         e4:55:e3:33:af:3c:6b:83:92:6e:5a:1e:54:cd:90:49:52:f8:
         a2:c9:f8:aa:bf:7f:0f:36:ce:91:1e:8a:6e:05:cd:f5:7f:0e:
         04:26:47:5e:ae:76:b0:45:7e:8b:ab:ba:48:95:11:94:0b:e0:
         77:76:24:fa:19:0a:f3:ea:25:2e:64:1b:53:2d:30:ef:55:50:
         13:a2:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----