Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/695208cdb689241829fe22129267576a303ec708.mft
File:                     695208cdb689241829fe22129267576a303ec708.mft (raw, json)
Hash identifier:          jg1mbw8EhB9ZpdS0bRCAG0cku5SV6wwo7a0clcIqhu8=
Subject key identifier:   0E:3E:6B:09:D9:42:4A:13:D2:85:4C:DE:86:14:BF:57:C4:71:EE:E6
Authority key identifier: 41:52:A2:CF:04:9C:93:F3:9A:FD:44:B0:BF:B5:0F:BE:F8:B6:09:73
Certificate issuer:       /CN=695208cdb689241829fe22129267576a303ec708
Certificate serial:       28A663
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/695208cdb689241829fe22129267576a303ec708.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/695208cdb689241829fe22129267576a303ec708.mft
Manifest number:          0DEC
Signing time:             Mon 15 Apr 2024 05:20:45 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:06:17 +0000
Files and hashes:         1: 695208cdb689241829fe22129267576a303ec708.crl (hash: 9ZQcVIIjhlTUvQaK9mhmboett9k38INwF3nLNVKOYoE=)
                          2: fb4c5f1d15f335dde7e79ffaccafd6330570a5c5.roa (hash: f49EixBAuPuOsNLedES4jcdcZFx1t/+UOe4ganR/Zic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664035 (0x28a663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695208cdb689241829fe22129267576a303ec708
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:06:17 2024 GMT
        Subject: CN=3ff82908507b7d52924bf58bde907d8691ac38d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:87:06:d5:e1:97:43:91:95:36:ae:09:54:
                    77:19:7d:3f:cc:dd:53:b0:e4:89:dd:06:28:37:16:
                    aa:78:37:c7:73:a6:1b:f5:8f:8e:d5:3e:c7:6a:3a:
                    d0:75:83:99:09:a5:28:f6:8e:02:a5:b1:c1:31:a9:
                    fd:d9:7a:5e:0c:ad:b5:9e:d7:d6:65:f4:ab:d7:cb:
                    60:ea:c1:26:7b:f4:9a:4e:be:67:6d:7d:27:7f:89:
                    86:ea:66:99:3a:b0:32:6a:1e:e9:20:6c:55:51:db:
                    b4:9b:40:3b:a5:d3:be:de:cd:f1:1c:14:2a:d9:5b:
                    dd:bc:c7:97:8f:80:1f:31:92:6d:0a:ce:95:8e:5d:
                    5d:da:76:3b:71:07:49:aa:bb:ad:92:65:d3:d8:a2:
                    d0:1f:0e:dd:3d:b2:b9:7d:2b:f3:3b:df:56:de:d4:
                    1c:f2:d9:ae:57:20:d4:cb:3f:79:2e:18:5d:e4:a9:
                    50:16:aa:c2:05:fb:c1:d1:55:c0:fc:ec:5e:50:79:
                    f2:07:02:03:c4:92:4e:8c:b0:dc:c3:e1:33:01:ec:
                    f7:61:1f:63:f8:0e:08:3a:40:5b:fb:aa:65:7e:0b:
                    30:03:1a:c5:b2:23:b6:de:73:ff:18:11:79:de:92:
                    d5:b8:45:af:59:52:a7:ff:6d:80:c3:60:cf:e8:75:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3E:6B:09:D9:42:4A:13:D2:85:4C:DE:86:14:BF:57:C4:71:EE:E6
            X509v3 Authority Key Identifier:
                keyid:41:52:A2:CF:04:9C:93:F3:9A:FD:44:B0:BF:B5:0F:BE:F8:B6:09:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/695208cdb689241829fe22129267576a303ec708.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/695208cdb689241829fe22129267576a303ec708.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/695208cdb689241829fe22129267576a303ec708.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:22:68:d1:1c:03:33:c5:37:93:8c:ae:91:a8:76:bb:7e:1e:
         7a:10:87:93:da:3d:12:f9:19:e7:63:09:9b:ed:8a:fb:3a:89:
         b4:28:51:1d:99:cd:c1:5a:1c:00:31:5a:ce:6d:05:2b:a3:e8:
         83:fb:6b:4d:dc:e7:3c:b9:8b:46:23:1c:bb:f9:03:62:bc:63:
         70:68:31:68:0e:de:5d:7c:14:07:77:21:cd:10:a2:c9:7a:f3:
         1e:d1:82:a8:db:61:81:5c:6a:01:93:6a:19:db:89:10:11:f7:
         a7:4e:06:76:9b:c7:b6:12:34:72:27:66:04:ca:80:79:39:75:
         59:d9:af:d0:03:66:0a:cf:d0:3b:29:b2:47:55:ee:24:05:f3:
         9e:25:21:75:0d:a6:a3:c3:e7:8d:58:99:fc:e6:51:b1:bb:75:
         f5:94:13:93:4c:10:c7:88:21:0e:a8:e3:9f:fa:5b:e6:44:82:
         90:42:b8:6c:19:bc:15:9c:e9:0e:54:ac:da:e5:8d:d4:1f:b2:
         10:f5:c2:df:67:35:bf:89:8b:b7:cd:80:2f:71:98:88:8b:ac:
         bb:55:ac:93:ff:27:62:f6:e5:25:3b:07:15:ca:cd:28:33:23:
         5a:01:3b:0d:d0:a4:df:ff:67:91:51:df:f0:67:58:39:74:4c:
         10:89:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----