Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.mft
File:                     a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.mft (raw, json)
Hash identifier:          3CK+MyUjUYgMyjebYsacjddF7M1K47B1TOxz6H13sw0=
Subject key identifier:   2A:3A:12:51:A7:6B:0A:F0:20:E9:C6:6D:1B:ED:8D:50:16:74:0F:7B
Authority key identifier: 7F:C7:51:44:1B:C1:0A:A1:A4:72:8E:80:D1:07:45:34:FE:A6:D2:6E
Certificate issuer:       /CN=a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9
Certificate serial:       18E70D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.mft
Manifest number:          0CB4
Signing time:             Mon 15 Apr 2024 01:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 00:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 01:59:17 +0000
Files and hashes:         1: 2039e7fe313c9bbb76e0bf6a669c7e274f396430.roa (hash: RNxUKLZSHIDn7TePLwmzAr3PbOt6utU80FPrbRhcTsg=)
                          2: a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.crl (hash: ZTv4LZCOg4mmvM67XyrACT10g3SGf26OHz77h/stwR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632013 (0x18e70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9
        Validity
            Not Before: Apr 15 00:20:17 2024 GMT
            Not After : Apr 18 01:59:17 2024 GMT
        Subject: CN=c99eb71d34097285f4ba2870c78180020ec76ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:58:75:99:64:93:2c:57:eb:1e:92:cc:9b:
                    7f:bd:03:1e:05:e8:b8:08:2c:9c:93:4b:0e:d4:75:
                    ae:d0:21:1f:08:84:28:4f:2a:53:7c:3d:2a:71:c8:
                    4b:df:ad:08:81:ac:0c:79:ca:4d:40:47:63:61:8e:
                    49:6a:f8:89:aa:57:bf:95:7d:1e:f7:2e:25:0b:47:
                    74:82:44:11:34:26:bc:2b:13:c5:41:20:29:7a:d6:
                    e6:20:d7:75:a4:c8:87:78:5b:77:44:e6:cc:c9:4b:
                    4f:d7:22:31:43:bc:d6:9c:0e:64:f0:ec:d4:ce:0d:
                    28:17:f4:0b:ae:f7:f5:7b:90:60:49:4a:b1:df:51:
                    12:7d:12:52:2a:e2:98:ab:ff:ab:b0:01:4c:eb:7b:
                    b9:93:b2:3c:a8:ba:14:68:19:0a:88:c1:36:5d:0d:
                    7e:f4:62:36:51:7f:1d:67:22:06:e5:45:71:d3:0f:
                    ad:e7:1c:b2:9c:c7:1c:c5:c7:0c:57:65:73:d2:60:
                    6a:a8:1c:4f:43:4c:79:6c:35:f4:90:7e:2d:e8:b9:
                    68:3f:d7:35:30:e3:c0:7f:dc:1e:ba:1a:13:fc:97:
                    bf:1d:a9:73:85:da:df:07:8f:5e:94:cf:e0:41:7f:
                    e5:27:a7:42:04:db:a2:ce:bc:ce:88:c2:51:12:7a:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3A:12:51:A7:6B:0A:F0:20:E9:C6:6D:1B:ED:8D:50:16:74:0F:7B
            X509v3 Authority Key Identifier:
                keyid:7F:C7:51:44:1B:C1:0A:A1:A4:72:8E:80:D1:07:45:34:FE:A6:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3b309e6-967f-4d36-9587-ea96fd7b105e/a3e1a9fcaec0311d6b26e42dac9328e282f8d2e9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cc:59:83:1b:ea:80:7e:cf:9b:cb:2d:2e:88:91:11:cd:f4:
         2d:51:c5:80:09:e5:9c:a0:85:e2:7b:02:6e:e5:8f:fa:c2:29:
         a5:27:b3:2e:ca:43:40:d7:02:fc:f9:b4:41:90:e1:ab:9b:ab:
         c7:0a:d6:8d:51:9c:2b:11:8a:ef:5c:26:a4:3a:ea:de:0d:6f:
         97:17:ac:d7:9a:a3:c6:94:4e:68:0f:40:41:b5:40:b1:dd:cf:
         4f:a2:5c:51:64:29:27:30:70:24:80:cf:22:ca:f6:4f:23:a0:
         46:f5:21:e8:16:40:15:d1:33:ef:e7:72:66:12:12:93:19:12:
         b5:15:5b:37:17:47:79:54:cc:7d:e9:fb:fa:36:28:c6:67:8f:
         dc:67:49:a1:18:30:74:7c:09:98:86:6e:d1:72:14:c1:61:7d:
         3b:9c:d9:01:43:89:2d:0d:84:1f:e5:e8:5f:c7:e9:00:05:09:
         3f:5c:8b:73:07:24:fc:6a:83:c4:3e:b5:0e:ad:3a:6a:4e:6f:
         d3:0a:91:be:c4:24:f9:a6:2f:46:d3:6f:45:70:e2:87:27:24:
         fa:8f:d3:11:8e:60:f0:1c:fb:91:f0:c2:59:a3:3e:da:8d:74:
         25:5d:57:17:06:97:a7:c1:95:cf:e6:d2:59:85:ed:b3:5a:fc:
         4c:ab:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----