Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.mft
File:                     d0615608a5f64a875e5be0a66c710b668ecb0886.mft (raw, json)
Hash identifier:          8M+1R0gqqGZM4qpnMpmV/KY7NRDHmJOhEcZ5rBD9myU=
Subject key identifier:   17:AE:58:81:C9:6E:B1:A7:D5:2A:C5:36:74:30:C7:A3:88:9D:B2:70
Authority key identifier: C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
Certificate issuer:       /CN=d0615608a5f64a875e5be0a66c710b668ecb0886
Certificate serial:       1B4CEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.mft
Manifest number:          0DC2
Signing time:             Mon 15 Apr 2024 03:21:32 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 03:56:17 +0000
Files and hashes:         1: 38b429e8dfe6ca0180b3050542b58230792a8229.roa (hash: edg0XWQZ5nZDsFIwBCAeKvD8hnHK4121UN3tgWSJcAw=)
                          2: d0615608a5f64a875e5be0a66c710b668ecb0886.crl (hash: NDukdxhZLaTtT/nF1xNySYG1h6DJaORXIhH1GkFqv38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789162 (0x1b4cea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0615608a5f64a875e5be0a66c710b668ecb0886
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 03:56:17 2024 GMT
        Subject: CN=607b41e5bd3ffb12b0eab72d32400ad5417ccdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:47:98:35:c8:a3:81:d3:10:f5:e6:bd:f4:
                    41:1b:f2:9f:1d:9c:b2:5a:84:0d:5f:02:09:cc:ab:
                    84:d6:7a:4d:5a:2c:ea:97:46:e0:53:f4:0f:b0:5c:
                    0d:13:f7:fd:41:e8:db:f5:08:3c:d7:98:60:dd:55:
                    e7:f5:3f:4d:7d:7c:f5:cc:bf:a1:77:93:d9:e0:9b:
                    d2:b2:f3:a0:a2:be:a8:87:a3:cf:0c:45:cf:64:2d:
                    1f:24:10:7a:df:0d:15:73:4e:51:9e:c1:24:17:ab:
                    f8:b6:fb:b1:98:18:62:be:9c:5f:2a:16:f4:36:85:
                    5b:0f:1a:e3:5b:38:a8:ed:52:0d:13:7c:db:5b:9f:
                    55:f0:d0:5b:b3:ca:52:e0:f9:34:e6:62:7a:7b:60:
                    45:4c:5a:1a:3c:32:8a:e3:53:a0:00:1f:84:93:28:
                    56:72:a5:a4:bd:07:ff:11:e2:c8:c6:17:5f:07:12:
                    d5:9b:f3:e4:74:d2:98:7f:81:7d:ab:34:e5:e9:c7:
                    13:6a:b0:93:d5:5a:b1:33:84:3e:ab:8a:89:b7:b9:
                    16:48:3f:c1:48:9d:e4:b6:0f:90:f7:34:47:b3:91:
                    13:3f:66:e5:fe:fa:f5:27:7f:bd:87:86:2d:92:b4:
                    cb:4f:86:c3:63:59:0a:8e:2a:28:d8:01:a4:35:48:
                    aa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:58:81:C9:6E:B1:A7:D5:2A:C5:36:74:30:C7:A3:88:9D:B2:70
            X509v3 Authority Key Identifier:
                keyid:C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:73:2d:72:10:ce:6e:c7:95:7a:26:9a:4e:ef:42:cc:3c:1f:
         e0:04:f1:e4:81:bc:bb:78:8f:e2:8f:35:36:55:4e:03:f9:bc:
         e9:8b:88:61:87:f7:14:60:dd:7a:d4:df:f4:bd:9a:95:81:8f:
         5f:f1:4a:72:c0:d0:ad:fe:05:6d:aa:73:11:2d:7d:5a:71:e5:
         50:aa:ec:2f:80:28:50:48:5f:a6:07:29:3e:3f:d3:fd:0e:8b:
         4a:88:31:14:f6:f0:1e:c9:c3:6f:5f:02:a1:e0:b4:6a:0a:8e:
         dc:b5:3b:90:9b:ae:3e:7a:a8:f2:dc:c7:f6:15:2e:1c:c0:ed:
         89:5e:d0:82:13:f7:3c:57:ad:7f:6c:38:5e:ae:e7:72:a6:f1:
         27:67:4f:07:3c:85:f4:c5:a3:bb:ed:55:45:5c:8e:f1:d3:f5:
         5e:69:16:8c:ee:60:21:7d:7c:eb:f2:5b:a8:75:30:32:73:4a:
         03:15:72:89:7e:88:0e:37:5c:c7:cd:5c:22:5f:6c:08:77:75:
         ae:06:e8:8b:09:6f:94:57:24:17:c8:bd:e7:7a:9a:c8:bf:75:
         39:0e:54:93:d3:29:c3:0e:c4:5e:40:30:ed:ab:d2:7e:dc:7b:
         89:be:c4:db:6a:1f:08:52:de:eb:63:40:c7:5b:b5:3f:c5:e4:
         1b:e9:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----