Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.mft
File:                     48947433eb003e1a071f4fff5deb96c87a6919a3.mft (raw, json)
Hash identifier:          QyC0Uqy5foMjEqjvo5t8Z72VgxGgCsFrHCrTF3JUSGA=
Subject key identifier:   13:72:BF:7C:DF:A7:39:19:86:3B:06:44:F9:05:D4:69:CE:13:2E:5C
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       2643C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.mft
Manifest number:          0E17
Signing time:             Mon 15 Apr 2024 06:21:07 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:00:39 +0000
Files and hashes:         1: 386470a081b75e6016edbf878abdd774803aaaa5.roa (hash: 1ELMJiY/yyjcKzoY+l/mKgbvLUzXfNP2LvQfOTIPUKk=)
                          2: 48947433eb003e1a071f4fff5deb96c87a6919a3.crl (hash: s331hJDg4Rlr5K2PhBNlMDnEWJY4q7Wow/wfXsurfMs=)
                          3: 694c519f5ed37e5b34e8fb07fc7b4a19b8ef5566.roa (hash: bGNDMAvfJRQi/jM0cwaonuJI1tI1O8xxyUFYpf+Ew1Y=)
                          4: da3b88eca0a14c9d3cdaec8765253ad47cb137eb.roa (hash: jGD65i/4Cml9iEIsSGZqP+31TmXa941J232WX6QFWlk=)
                          5: e1e5284947921a792ff02bba0a4b38155936a602.roa (hash: CuFBtq4dT1ng1+EK9kSgk69utEWyNAmgBTT2B1txhB4=)
                          6: f21e7587145e03a241df1e7fe525500e06cc41e4.roa (hash: n8FtGurGUWykmovBS/QKP3TY+epuyojySThdmE9v1dM=)
                          7: fea12df760485a04789f16e0d4a2727b74ff1621.roa (hash: e3xbpDlzSO8ygYTmsUmVFrJVPsF+i/Tpc4NzmDlroTU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2507721 (0x2643c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:00:39 2024 GMT
        Subject: CN=65c3d065546970610e68d03a21042f631c59491f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:19:3f:0c:30:de:39:6c:b0:73:15:ac:33:
                    10:45:25:8f:dc:12:f8:c6:73:7c:6f:98:ce:a3:84:
                    90:3f:0e:e8:1d:23:38:48:5c:d4:e5:96:6c:98:32:
                    a7:69:94:16:50:d7:1c:93:80:e9:1e:24:ef:58:72:
                    63:54:96:db:03:e5:39:73:48:19:30:b5:33:8b:e7:
                    4c:c3:43:16:1e:91:07:86:7f:2d:0b:d6:5a:ac:17:
                    a0:9d:88:a9:0a:eb:1a:ec:93:82:34:6a:47:33:c8:
                    30:54:e8:6a:18:b7:4e:37:75:1f:18:1f:13:4c:93:
                    59:c6:f8:f4:50:31:33:b9:29:33:19:2c:77:db:d2:
                    df:61:a0:a4:54:91:5a:09:e9:17:34:89:7f:c3:8c:
                    7c:a7:d5:72:3f:69:9e:07:53:50:29:27:b9:67:05:
                    f9:7a:d6:91:fc:64:0a:c9:09:94:90:79:a2:a0:86:
                    f1:85:6f:6a:13:09:57:95:f7:4d:9d:02:91:14:89:
                    8d:cc:cf:fc:49:33:1f:c7:ca:2f:c4:09:d9:7c:08:
                    c8:04:f5:b6:79:72:d7:83:6a:ab:fe:1e:d7:cf:47:
                    c5:28:68:2f:32:51:2e:49:09:d6:d9:20:cd:e7:67:
                    fc:0f:47:9b:6f:1b:1e:ea:9e:58:de:8d:dc:02:e0:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:72:BF:7C:DF:A7:39:19:86:3B:06:44:F9:05:D4:69:CE:13:2E:5C
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:fb:31:79:6f:88:07:b2:cb:38:18:7d:da:ff:f5:41:ca:
         fe:4b:19:d1:4b:52:27:69:1a:8a:0a:7d:3a:6b:3a:5b:b1:c1:
         0d:bb:ad:05:85:b6:9b:21:1f:a5:7f:37:c8:58:5d:d0:3f:26:
         6b:80:6a:f7:2b:4d:63:b8:70:c4:dc:2b:52:0c:66:7c:68:23:
         59:67:21:d1:d9:44:71:2f:8b:08:9a:b0:45:e5:f5:f5:80:b5:
         d1:58:c5:1a:00:dc:6c:81:15:99:fb:c2:5f:c7:47:7d:34:fa:
         3c:97:87:f6:3a:6c:81:bd:4a:70:34:66:af:62:4c:ac:ec:4f:
         39:8e:44:49:03:92:4f:fd:9f:5e:ac:e0:53:8b:05:25:bc:23:
         32:e1:10:73:c7:22:d6:76:55:e8:4f:e6:5b:de:62:76:23:b0:
         e8:cc:c0:61:27:d0:e1:90:89:c4:f0:0b:22:65:94:2e:d0:4b:
         f9:ad:13:74:31:e5:d0:a5:2f:a9:3f:f8:8a:5a:f0:75:4a:e1:
         38:a7:b6:93:ad:eb:cf:5f:b7:d9:f2:a9:35:e7:32:32:7c:13:
         34:2e:68:57:3c:f9:d3:15:26:09:19:98:cd:81:a0:36:fd:67:
         0e:f3:47:e0:1c:84:7d:b3:cf:c2:aa:61:ac:89:57:5d:2c:b4:
         13:60:7e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----