Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.mft
File:                     3a61a7a9840080a44173f942095ac78ead239107.mft (raw, json)
Hash identifier:          vPmILMzVIOEMtq6zKMGhc38bFjbtzuOkaVVjd9Aw7uM=
Subject key identifier:   C8:F7:50:16:3D:4A:06:2C:56:6B:7C:D4:CD:E7:87:3C:DB:6D:5F:F4
Authority key identifier: 33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C
Certificate issuer:       /CN=3a61a7a9840080a44173f942095ac78ead239107
Certificate serial:       1A68E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.mft
Manifest number:          0D30
Signing time:             Mon 15 Apr 2024 05:21:04 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:30:17 +0000
Files and hashes:         1: 3a61a7a9840080a44173f942095ac78ead239107.crl (hash: uZxzzVjcOFVxe380vSuqDfdSBz3bmyFilZTsMkXs+FA=)
                          2: c0881651a9ef07cbffd3d0fd544770f674e28187.roa (hash: pzrx2fzm+lc3y/KIZfWYKNDOdLXU5JJ/fig8upv2EhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730788 (0x1a68e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a61a7a9840080a44173f942095ac78ead239107
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:30:17 2024 GMT
        Subject: CN=423425e6f6322d3b52c6659ee416d7fb7bd35ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a1:52:b9:b0:30:09:fc:db:34:b3:27:3b:9a:
                    76:fc:af:51:70:90:79:e4:c6:3d:4e:63:34:d7:37:
                    e2:34:01:2c:14:44:fa:a4:a8:5f:2b:8c:cc:3a:41:
                    80:6f:e0:1a:13:27:28:73:99:63:3e:3d:52:c3:24:
                    c0:75:e9:ec:68:2a:7c:50:94:e8:71:04:e4:66:da:
                    ed:28:cc:18:c3:58:83:a4:98:51:bd:4a:ba:5e:95:
                    a3:58:0c:40:3d:05:b5:97:7e:c5:e6:ab:95:e9:ce:
                    1e:3c:e7:0f:9f:0d:7c:53:17:21:f2:5d:fb:96:68:
                    51:b9:bd:25:d9:c0:1c:76:52:ed:af:a3:2f:e9:55:
                    77:c9:cf:64:54:f6:d8:f6:a0:5c:63:76:06:55:18:
                    19:95:82:d0:04:ca:40:fd:e6:71:11:25:71:f3:09:
                    ea:47:5f:5d:d7:d2:b2:fe:89:7e:f1:cc:3b:8a:4b:
                    7f:f8:07:f9:33:58:67:0a:c1:22:d7:14:f2:7e:46:
                    53:10:d3:72:b2:9c:91:7a:36:f4:62:6f:fc:6c:6b:
                    e7:a4:7a:ce:72:f5:c7:2d:87:f8:70:b5:7b:77:88:
                    16:9f:a5:2a:4d:d6:ae:68:c9:33:fa:e7:45:fc:12:
                    1b:51:a3:82:eb:da:f8:44:38:51:b0:ae:08:a0:d4:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:50:16:3D:4A:06:2C:56:6B:7C:D4:CD:E7:87:3C:DB:6D:5F:F4
            X509v3 Authority Key Identifier:
                keyid:33:72:18:D6:D3:FD:14:5E:F1:AF:03:0A:D8:7B:62:9B:2B:B2:02:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a61a7a9840080a44173f942095ac78ead239107.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b006c5f3-a0c4-4b89-91f7-ea646bad577f/3a61a7a9840080a44173f942095ac78ead239107.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:bd:d1:e9:96:1c:3d:43:3a:18:44:fb:c0:33:5e:29:62:
         5b:7d:25:89:e4:4e:fb:6f:31:47:f8:9c:21:82:3c:2b:9e:69:
         79:85:f4:c5:53:49:6e:f9:31:be:b8:ef:fd:78:8a:2c:19:b0:
         47:92:e9:ec:fc:01:b1:69:20:98:20:a0:64:66:a5:97:5c:45:
         28:68:e3:97:08:b3:8a:c3:b2:08:eb:94:cf:5f:d4:74:0a:09:
         19:c2:ed:1c:70:9d:4e:82:8b:08:74:7e:ca:4f:42:a2:3a:d4:
         df:d9:16:f5:49:fe:cf:87:22:5e:5f:be:aa:c0:72:12:73:2e:
         73:61:53:6f:94:1b:8a:8c:57:f7:16:ff:8e:58:9b:44:12:c5:
         58:94:17:98:51:6d:14:bb:71:5f:0c:74:53:f7:7b:6e:e6:9b:
         8b:32:1d:55:28:ec:d0:98:b7:93:ea:15:ad:b4:95:78:bc:c7:
         18:f7:18:c8:9a:c0:d5:ef:54:db:d0:28:6c:bc:d4:63:aa:1f:
         2e:4d:8c:c1:4e:3c:54:3a:80:44:2a:06:cc:9a:dc:f9:b1:02:
         f5:6e:8e:65:df:22:e7:30:72:eb:1a:9d:e1:a5:96:fa:32:fc:
         68:00:6d:3e:61:63:80:78:03:87:df:64:a8:91:7a:2b:a8:e6:
         96:c5:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----