Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.mft
File:                     349196e5906873d34fd0c8ce899971e00093557a.mft (raw, json)
Hash identifier:          bT5gRcV+y1Poxp/y1HgPEVYmVQDHGGB0n25Z377ypZk=
Subject key identifier:   41:B5:75:16:90:2B:34:5D:D8:DB:52:45:D5:4E:EC:C1:91:47:6E:CD
Authority key identifier: 91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C
Certificate issuer:       /CN=349196e5906873d34fd0c8ce899971e00093557a
Certificate serial:       16CBA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.mft
Manifest number:          0B2E
Signing time:             Mon 15 Apr 2024 03:21:18 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:37:17 +0000
Files and hashes:         1: 349196e5906873d34fd0c8ce899971e00093557a.crl (hash: CyXcM/z7phOY3NHtUTqSc6G+08NyWuAJrVcXZF94t9U=)
                          2: c37d019ff1ca9a119b5fe05b59132fbc0a0f43fe.roa (hash: rbk+b+AXU/Kj3nrg4blSgdwdEszBWdAfZ9mPSYopbO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493923 (0x16cba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349196e5906873d34fd0c8ce899971e00093557a
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:37:17 2024 GMT
        Subject: CN=0f96864b8cd1dccaf560b640fe993b1a35c5de0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:7d:e6:eb:f6:bb:72:8f:c6:a6:7d:e6:53:
                    e8:8f:3a:4f:15:c9:2d:51:36:c6:54:85:5f:fd:3d:
                    61:7f:ba:c0:4d:57:46:6b:3a:19:01:56:75:35:72:
                    d1:b2:37:87:1a:15:fe:14:77:f4:d5:b2:7b:43:e1:
                    62:92:a8:28:04:33:60:ad:9b:21:85:c7:6e:60:97:
                    e2:4f:fb:a0:a4:e4:4c:ef:da:a7:65:f2:df:f9:be:
                    70:fd:37:d2:7c:3e:3d:0e:2f:61:28:53:d6:ff:ad:
                    25:d9:dd:60:87:2c:ec:51:7a:f3:16:3b:f6:39:fd:
                    2a:e2:cc:21:b4:09:d7:1d:86:50:b5:e1:bf:03:aa:
                    71:f5:ba:49:a4:bb:fa:25:68:1d:c9:b4:54:4c:66:
                    da:cf:1c:80:32:a9:46:b4:0f:ea:36:46:e5:3e:86:
                    ed:8a:07:0e:74:89:2c:16:f3:bb:ff:33:8b:be:dc:
                    aa:7c:e8:30:a4:54:3b:51:9a:19:6a:45:f1:51:5f:
                    4d:bc:1f:c6:31:a1:23:dd:52:99:3d:59:ca:6c:83:
                    d7:fe:6b:61:1e:67:f6:21:8c:71:1e:66:7a:50:ea:
                    74:f9:b1:25:76:39:74:2c:b5:ba:4c:62:6e:94:01:
                    26:92:3a:c3:d8:b0:94:fa:af:9c:e9:76:61:23:68:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B5:75:16:90:2B:34:5D:D8:DB:52:45:D5:4E:EC:C1:91:47:6E:CD
            X509v3 Authority Key Identifier:
                keyid:91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:84:15:58:81:4c:5a:64:58:13:23:d6:31:d3:cd:30:67:
         01:7b:02:30:89:a6:fb:74:ca:c4:b8:f3:b9:39:49:b5:cc:2b:
         bc:da:69:84:bf:61:52:87:28:22:90:54:0f:73:8d:4d:08:d5:
         58:4d:97:78:65:e1:e4:54:6f:49:a2:40:52:3d:04:07:08:0e:
         c9:6f:28:75:b1:f7:5a:ca:92:7b:52:8c:fc:53:26:cb:90:95:
         f4:f8:41:01:6c:ca:4e:c8:ef:e0:e0:58:75:b7:a2:e2:37:37:
         4b:11:8e:00:5d:bc:cd:7d:e8:1c:88:64:e5:94:76:47:50:06:
         0c:98:26:98:59:e7:4c:af:4f:8e:c8:44:ec:b9:97:fc:ab:83:
         58:67:2f:2a:bb:2c:8f:e2:ca:e7:44:54:9e:1b:b0:34:64:98:
         ba:b5:70:ea:27:16:56:18:c4:bf:99:e6:33:b4:9a:a0:9a:71:
         97:f9:f4:d4:40:fe:0a:be:1a:df:87:bb:38:50:f1:d3:fb:b3:
         a3:13:e3:e9:29:a6:c6:0b:39:72:12:85:a7:24:00:b1:1c:1f:
         7e:c3:9f:6c:b7:28:d8:81:27:2b:b4:f2:2f:76:0c:71:56:85:
         bd:0e:15:cd:2e:5f:b2:b3:bd:7b:3b:3a:d5:3a:19:1c:5c:06:
         68:fd:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----