Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.mft
File:                     5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.mft (raw, json)
Hash identifier:          jNMA+imm6yx52fV7LOu48iAcYxUkY2bgKcJ0riZs+L4=
Subject key identifier:   E8:09:5F:92:FA:CD:B0:CD:72:B4:16:13:B2:02:5E:13:D0:49:52:FB
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       282690
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.mft
Manifest number:          0E34
Signing time:             Mon 15 Apr 2024 11:21:26 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:46:18 +0000
Files and hashes:         1: 0cb89b072560ca9a62a09960b1fa16bdadb5b5fe.roa (hash: SLHTvRKA//d5lHhqYBNS7dB/8sBLDbSKzZmElqTCwuc=)
                          2: 5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl (hash: 9rOgcYju6x34azAPPNwkURs9UPTstgjjqwjl+5Q0JG8=)
                          3: 91db1f9d1a98b809d750741392386197c64b560f.roa (hash: pA3MikAj9qmIzmQCyJmZfDZ5rHqww5SWE+vWr+e5+g8=)
                          4: a43040d10ae5760724ab781d0714435bb06f6ab7.roa (hash: GUZ3NECA1BKr9DiCqJRRhUgs+gS/64yW94N69uFr6gQ=)
                          5: f14ef64cffbb46e4304b82ddc9e1e0a6c2898d55.roa (hash: HfD9HaMf42buVrbxGn35pr4tFPsZ2p47RPOr81EZmEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2631312 (0x282690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:46:18 2024 GMT
        Subject: CN=6cf4c5d4740cc8fafae543f4548cffd21dffba23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:19:52:5a:a6:b6:ba:23:49:8d:af:12:38:
                    18:06:cf:76:91:17:71:2a:62:5b:4e:82:91:95:8c:
                    65:9f:d4:60:3b:4b:41:8d:d8:04:7d:b3:5c:12:6d:
                    c6:22:5b:5a:ca:29:36:62:a6:ef:74:a0:6b:00:81:
                    8d:79:79:6a:76:0e:b8:86:85:48:79:de:bd:5b:8d:
                    ae:97:ca:9a:40:3a:11:2b:45:0d:3e:1d:eb:fb:ce:
                    47:d5:8a:5b:ec:cf:c6:c9:6d:b6:42:7e:c3:e4:09:
                    a3:a7:26:e6:93:f8:37:f0:4f:68:91:a6:a1:3d:09:
                    7d:57:39:c8:71:3a:b2:62:84:ca:b1:b9:4c:0f:0a:
                    ef:bd:22:44:96:8e:b8:eb:bd:bc:06:24:ca:1f:53:
                    5f:fe:80:3b:0f:70:50:c9:d6:8d:d2:93:ef:b2:92:
                    7d:89:c8:9a:e9:2a:7f:e0:e1:7e:11:a0:0e:5b:93:
                    22:b5:25:f1:90:8d:5e:3d:52:ec:a8:24:9c:88:7f:
                    3c:63:72:fa:dd:d0:d9:5c:fd:56:9c:d3:35:d7:35:
                    70:78:81:2e:81:14:d6:38:b1:e3:54:96:f0:f2:3d:
                    c5:3f:1b:7a:a6:d6:4b:5c:3f:d2:7e:6c:06:39:79:
                    8e:56:3c:2f:26:2d:f3:f6:78:08:a3:f8:0e:c9:a0:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:09:5F:92:FA:CD:B0:CD:72:B4:16:13:B2:02:5E:13:D0:49:52:FB
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:db:be:31:f5:96:3d:5b:79:07:0f:d7:8f:7e:19:16:8b:a0:
         82:07:4d:3e:97:a9:c2:2f:a9:b9:b6:56:3e:8a:76:ad:75:a9:
         f4:01:f1:a1:cb:fb:f5:f7:50:1d:95:7a:83:f4:c6:58:e9:d0:
         ef:be:17:1b:63:2a:5b:a4:e8:31:68:e3:05:3a:bb:03:0f:0f:
         fe:96:7a:ed:eb:7b:65:96:5d:e5:e8:46:61:bb:e9:6a:e6:61:
         80:a5:be:7d:b4:80:37:fa:3d:9c:8d:40:41:d8:1a:e6:4e:ee:
         34:7d:1e:c1:9a:70:50:da:36:34:03:48:86:e4:ee:3f:0d:9c:
         c6:a6:d1:f5:d8:3f:11:af:b1:e4:1c:7f:6c:07:a9:11:ee:bd:
         98:6b:cc:67:a5:64:9c:75:9b:75:62:e2:62:a1:00:59:ba:93:
         41:58:60:68:04:23:19:1e:a6:9f:17:f6:c0:47:81:5a:d1:ac:
         57:45:b4:3a:12:b7:ef:19:80:68:38:d5:f7:0c:d4:02:44:63:
         b5:e9:b4:45:63:9b:cb:01:b7:81:75:5a:d7:f3:a1:98:ad:6f:
         73:c2:92:1c:2d:54:e2:37:df:38:aa:5c:41:0d:33:af:3a:7d:
         9d:d6:cf:6b:b1:47:5b:0e:e7:30:5c:46:1b:ab:9b:53:16:c6:
         8a:c8:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----