Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba1ee3ee-8a19-4cb9-889e-655d44071b9a/338a5a680295e54a3479c7dd91ead53c71070cbc.mft
File:                     338a5a680295e54a3479c7dd91ead53c71070cbc.mft (raw, json)
Hash identifier:          +ObVrfLVSCuUOI6xO6DYsicdpzABZjML+71rC4d8rhU=
Subject key identifier:   E6:AB:06:A6:F9:0C:09:B2:9D:2C:84:B8:A0:AA:FA:67:0A:4B:A7:00
Authority key identifier: 31:D9:78:DB:16:1D:7A:3C:32:E2:28:8B:9B:D3:83:94:2C:D9:E4:C6
Certificate issuer:       /CN=338a5a680295e54a3479c7dd91ead53c71070cbc
Certificate serial:       07D502
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/338a5a680295e54a3479c7dd91ead53c71070cbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba1ee3ee-8a19-4cb9-889e-655d44071b9a/338a5a680295e54a3479c7dd91ead53c71070cbc.mft
Manifest number:          03FB
Signing time:             Mon 15 Apr 2024 06:20:49 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:09:39 +0000
Files and hashes:         1: 338a5a680295e54a3479c7dd91ead53c71070cbc.crl (hash: VKNup3AmmoUtsQg9T/QLzu3Gep631ctRYMrR0elgDHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513282 (0x7d502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338a5a680295e54a3479c7dd91ead53c71070cbc
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:09:39 2024 GMT
        Subject: CN=8deb6e6af9117b3920ca88988c33d95e6106e641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:ea:d6:64:ae:43:32:b4:b3:39:8c:0a:14:
                    2e:73:8d:e0:d3:22:da:e9:80:72:bf:4c:f5:56:bb:
                    d9:a7:1a:ea:69:ec:94:81:7d:f6:d9:05:d3:e5:32:
                    f4:63:03:e4:29:92:57:61:7f:f7:5d:81:01:a0:67:
                    11:81:75:d5:ca:35:cb:bb:e3:14:50:72:0d:17:be:
                    eb:2f:7b:2c:54:75:68:a3:22:18:6d:8f:cc:60:e0:
                    83:c7:18:1c:dc:be:7e:fb:44:84:05:64:80:3e:00:
                    84:68:6c:3d:98:85:30:5c:fd:b0:4b:da:7a:0a:c9:
                    bc:4e:e5:cb:b5:86:65:40:0a:46:20:61:16:e9:df:
                    95:2c:a0:65:ca:64:1a:b8:70:8a:8d:c1:99:23:9c:
                    80:bc:5e:b3:c6:a6:bc:35:5b:ab:09:d9:45:bb:39:
                    8f:4c:f3:56:bc:f0:05:51:3b:cc:fe:07:19:0e:8a:
                    b7:09:b6:d6:1f:55:f1:79:9a:50:f1:b6:62:f7:83:
                    bb:23:bd:98:81:16:4c:9d:13:b9:40:8d:b3:4e:e4:
                    c4:af:6c:c3:2c:26:fc:1e:55:93:f3:b2:cf:57:54:
                    38:96:1b:92:06:04:87:e4:48:e8:2c:a4:83:59:32:
                    42:50:84:f0:dc:69:b8:5d:0e:94:37:fa:61:c4:7e:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AB:06:A6:F9:0C:09:B2:9D:2C:84:B8:A0:AA:FA:67:0A:4B:A7:00
            X509v3 Authority Key Identifier:
                keyid:31:D9:78:DB:16:1D:7A:3C:32:E2:28:8B:9B:D3:83:94:2C:D9:E4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/338a5a680295e54a3479c7dd91ead53c71070cbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba1ee3ee-8a19-4cb9-889e-655d44071b9a/338a5a680295e54a3479c7dd91ead53c71070cbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba1ee3ee-8a19-4cb9-889e-655d44071b9a/338a5a680295e54a3479c7dd91ead53c71070cbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:5b:76:26:b2:2a:93:69:d1:cc:14:00:14:32:b4:07:d7:
         d1:95:cf:c9:ed:c1:88:d5:ea:ac:af:4d:63:aa:81:cc:51:3f:
         74:be:b2:c5:91:65:51:09:7b:9e:7b:33:c5:c7:09:12:a5:30:
         33:e4:25:52:8c:cc:7e:a4:68:45:fd:bb:d5:58:7a:a5:7d:1a:
         56:c8:96:80:00:95:19:01:4c:d2:3d:e3:1d:00:d6:bb:90:05:
         06:d5:36:42:8e:08:11:2d:01:ed:25:10:07:45:b4:1b:78:fd:
         b0:fc:75:a5:c9:38:95:fa:3a:28:dc:46:67:37:a5:61:49:8e:
         c7:3e:09:85:39:94:a6:88:55:82:32:81:17:c4:f3:a5:42:24:
         45:70:8e:a8:c4:a1:a9:1d:35:b6:6d:5b:63:c4:57:0a:50:c5:
         6b:e1:a2:15:57:29:92:da:dd:04:2b:6c:c7:bc:8d:86:aa:a7:
         e0:ca:52:93:b3:b1:db:c9:15:69:6e:78:7e:39:c5:84:e6:7e:
         e1:0b:db:f5:1f:bc:2b:ed:e4:19:b9:e5:68:47:04:7c:b5:e1:
         26:eb:28:8d:f1:2b:e0:79:74:28:36:e5:ff:e5:19:9c:5a:59:
         9a:e8:f8:c7:cd:d0:97:f2:cd:69:49:eb:46:f6:9a:27:83:c6:
         73:ed:48:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----