Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.mft
File:                     ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.mft (raw, json)
Hash identifier:          /iZMJIYejG96Ei+7SxPbmeaZH1rj5qCPXQPOz2p2mb8=
Subject key identifier:   58:CA:37:62:BD:C4:41:3F:F3:3C:67:16:54:69:30:95:73:5F:8D:11
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Certificate issuer:       /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial:       28B072
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.mft
Manifest number:          0E04
Signing time:             Mon 15 Apr 2024 06:20:49 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 06:20:39 +0000
Files and hashes:         1: 1d20ea42becb451c1ed2bb80f52024e1800d6abc.roa (hash: u3D0fmXYC0KDhgduIepJwBmf0FCWJuqVD/cGQQnZvYE=)
                          2: a12f6103ff0e83e4d1a76e6e9493b1df7eb67b30.roa (hash: NScvLwmtNNLHBnwq28EO3baPlASExJ5j/J+MGYg2aFM=)
                          3: e5e749bfbbce7a5a67d90564041ff405c13dadcc.roa (hash: zrr0qV1QFkA3OUpjXzStAppuGaY0X4gmEMnoLi5YNp8=)
                          4: ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl (hash: THcQV14SvGZyCnkKmpWvoefOXh7/C2M4DcS6zL6FlV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666610 (0x28b072)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 06:20:39 2024 GMT
        Subject: CN=4215ae7e7934d8acac6074c8ce0611bd897142c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c2:9b:fd:48:1f:73:50:80:d0:72:46:d9:9e:
                    39:f7:c8:f8:39:8b:ae:b9:fc:48:b8:c8:b0:04:48:
                    3f:3c:3d:20:d7:97:55:3a:06:ea:65:72:a1:69:82:
                    61:c4:b9:a5:4d:44:17:0c:ab:b9:dc:29:b1:19:a3:
                    34:e3:69:4f:d4:89:b6:d8:de:00:61:f0:82:3d:35:
                    3e:cd:d9:88:c0:3b:f3:4f:d4:88:5a:ba:7c:a2:11:
                    f9:f2:9b:93:26:c9:78:71:e8:62:94:52:96:c4:b4:
                    f9:9a:50:f9:a3:f7:48:d5:59:37:d1:a7:6f:f8:5a:
                    8c:37:71:91:2b:76:03:71:95:2d:2e:b8:e7:91:fa:
                    78:7a:7b:41:53:81:7a:5b:a1:48:ec:de:25:30:c3:
                    4d:e7:39:29:3a:73:fd:77:b1:00:97:79:85:0d:da:
                    9d:f6:bc:d6:e0:69:cf:67:98:a7:a2:58:1f:26:9c:
                    13:60:7c:c1:39:f9:0b:75:bd:2c:e4:e3:72:c3:1d:
                    63:51:89:5a:af:48:c0:cb:82:9b:e5:10:18:84:1b:
                    3b:70:5b:97:eb:83:12:80:9b:92:73:30:52:66:fd:
                    ea:eb:27:20:d0:b9:02:96:f9:85:ac:9b:2e:33:3e:
                    0f:89:e1:16:10:02:be:d7:a9:a3:e8:f3:6a:31:93:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:37:62:BD:C4:41:3F:F3:3C:67:16:54:69:30:95:73:5F:8D:11
            X509v3 Authority Key Identifier:
                keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:29:de:24:e4:40:27:f0:5a:9a:62:91:93:47:8c:d5:8c:79:
         2d:e3:e4:7c:d1:aa:e4:58:b2:66:11:00:4b:36:f2:c7:e7:74:
         3f:2e:14:6d:2c:a7:6b:3e:a7:46:fd:58:7b:bc:b1:80:bc:57:
         c5:cc:9d:98:a8:5b:c7:16:6e:6d:2e:e6:0b:e5:f7:83:89:23:
         0d:4b:50:6c:4a:af:24:03:64:32:ac:28:4f:e2:9d:3a:98:e0:
         71:b3:db:3e:58:2f:47:21:d7:86:b9:b9:3b:a0:0d:ee:09:9c:
         6d:af:d3:58:27:cf:f3:f9:85:0d:7a:80:8a:a1:f7:84:68:fd:
         34:10:4b:ea:aa:45:0d:2f:61:89:d3:6d:f3:60:29:c4:c2:1c:
         e8:cf:3a:1e:c9:11:17:f4:df:1f:e7:45:1c:f5:dd:a6:3c:d8:
         d1:49:03:20:46:7a:95:0a:1b:83:c4:47:18:d2:a2:50:3c:b3:
         b3:b4:bd:cd:62:44:e6:86:cd:28:2f:38:8d:54:f4:7a:51:14:
         51:46:7c:50:55:cd:80:38:f8:fc:12:b4:d3:00:fc:b1:7c:33:
         2c:09:90:40:28:e7:ad:71:25:2a:ea:3b:93:73:3d:a6:b0:9e:
         e3:24:09:29:cc:ac:1f:c0:dd:1b:7d:1a:7b:9d:ef:73:0d:ff:
         fb:27:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----