Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99b09289-7762-4b3f-b407-a857619dfd49/3d2b23a40d88ab6acc4648a94cb830c36b3530c1.mft
File:                     3d2b23a40d88ab6acc4648a94cb830c36b3530c1.mft (raw, json)
Hash identifier:          YATKkGWoRYerhHJ9f/vUkAIn8fSrcFNap9tWLHv2Lbc=
Subject key identifier:   DC:C2:15:33:FB:EF:FE:44:4E:B1:2B:E1:60:C0:67:B4:AE:30:BD:36
Authority key identifier: E1:D2:BB:8F:CE:D6:69:7E:39:43:34:38:A8:48:82:12:4F:C9:84:47
Certificate issuer:       /CN=3d2b23a40d88ab6acc4648a94cb830c36b3530c1
Certificate serial:       01D233
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d2b23a40d88ab6acc4648a94cb830c36b3530c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99b09289-7762-4b3f-b407-a857619dfd49/3d2b23a40d88ab6acc4648a94cb830c36b3530c1.mft
Manifest number:          F2
Signing time:             Mon 15 Apr 2024 09:21:31 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:28:18 +0000
Files and hashes:         1: 3d2b23a40d88ab6acc4648a94cb830c36b3530c1.crl (hash: MqtdFDDEjwGM4uoB8E25xJNJnfipOTMcxe72GK98PFQ=)
                          2: 9d4c8d7e3a7937458046466a93359ccab7d2c27b.roa (hash: JUOtTD+qoD3iCQxJimjG401RnNzd/kA+kQCLn+esY/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119347 (0x1d233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2b23a40d88ab6acc4648a94cb830c36b3530c1
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:28:18 2024 GMT
        Subject: CN=f87cd15cb934d9e3705cc55f754e5b0b78936390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:cc:5f:ae:be:c2:2b:aa:76:4c:e4:ec:36:
                    94:ef:2b:88:c1:8d:47:58:ae:d1:7f:e6:53:9b:2d:
                    46:20:41:00:64:d6:48:95:37:82:df:5c:19:6b:f6:
                    29:ca:c3:e7:3c:9f:bf:2f:d9:8e:a1:81:40:5b:cb:
                    a2:96:70:cf:99:51:f3:27:27:91:a0:21:d9:e8:70:
                    50:df:5f:12:e2:de:82:b8:d5:b9:70:f1:79:57:9c:
                    19:e4:78:92:e3:7c:22:2c:4b:37:50:e0:2f:c1:fe:
                    01:ff:f7:83:9b:90:99:71:de:44:b0:02:b2:6d:bd:
                    0f:0e:84:64:d0:1e:00:17:91:03:a1:9b:5c:7d:4f:
                    69:d4:72:32:85:73:99:98:f2:03:27:ca:53:be:2f:
                    c3:f5:8e:b8:50:16:64:89:b7:87:55:ce:fd:84:21:
                    ca:33:50:15:60:c8:55:ca:1f:21:da:64:e8:f7:2d:
                    5d:1a:8c:33:96:ee:c9:d0:35:84:3d:f0:d0:c6:2a:
                    48:c7:d6:8a:97:fa:61:5b:17:9d:e6:2b:8e:67:a9:
                    1c:53:7d:eb:cb:6a:95:1c:bd:67:09:81:51:bd:ab:
                    af:bb:13:be:fc:99:c5:c3:b4:26:10:da:29:d5:13:
                    8f:9c:27:a8:c5:f6:e0:24:37:c5:94:8e:b4:5a:14:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:15:33:FB:EF:FE:44:4E:B1:2B:E1:60:C0:67:B4:AE:30:BD:36
            X509v3 Authority Key Identifier:
                keyid:E1:D2:BB:8F:CE:D6:69:7E:39:43:34:38:A8:48:82:12:4F:C9:84:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d2b23a40d88ab6acc4648a94cb830c36b3530c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99b09289-7762-4b3f-b407-a857619dfd49/3d2b23a40d88ab6acc4648a94cb830c36b3530c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99b09289-7762-4b3f-b407-a857619dfd49/3d2b23a40d88ab6acc4648a94cb830c36b3530c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9f:b2:a0:5d:4f:0b:79:85:4b:fb:5b:30:de:c1:e0:d5:4c:
         0f:48:b2:ce:be:89:a0:2f:36:04:76:e8:8d:f3:47:75:ee:72:
         25:4c:7f:45:64:99:e6:17:7c:2e:48:47:6e:0c:3c:e2:2f:55:
         a1:7a:cf:5d:f8:ce:d6:86:e6:a1:95:ca:59:83:97:ed:68:e0:
         ef:2e:bd:8b:e3:d7:94:4d:76:94:06:55:1c:99:fb:b9:b0:2a:
         d1:54:ba:cb:8d:18:e8:4f:57:a0:ee:98:f2:39:28:e8:ad:09:
         a0:a5:e1:e5:de:6c:d8:7b:a2:55:e2:84:41:80:83:e5:b7:61:
         8e:b3:6e:cc:78:b5:a7:e4:6c:a9:e9:d9:0a:21:62:56:50:39:
         b2:22:ff:9b:6c:45:18:90:8f:50:38:da:6a:31:3a:c4:5d:bc:
         81:26:0c:43:8b:bb:f1:9c:fd:1e:a1:c0:1a:f0:da:ee:52:51:
         81:c4:fc:ad:fb:ac:5c:07:d4:3c:50:b3:d0:6a:54:2c:ee:f0:
         8f:fe:2d:43:2b:74:13:b4:0b:31:f5:de:ad:03:10:e0:97:79:
         3d:63:20:38:95:63:c6:19:e9:ef:15:24:a4:8c:e7:a4:98:cc:
         1e:69:37:54:ea:a2:14:f6:0c:34:29:8d:ce:fb:04:cd:9d:a1:
         65:c1:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----