Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1f87d41-2420-4d8b-9b85-3a1e56c5b9a3/3e20d556cd0f6c69185fe4dde7c18ad09f497048.mft
File:                     3e20d556cd0f6c69185fe4dde7c18ad09f497048.mft (raw, json)
Hash identifier:          HA5+q9dsMVmX34RZ0Xc5pPrIJr0YzQhG1c/CEqNv+3g=
Subject key identifier:   25:8C:0E:7C:9A:43:29:0D:96:40:8E:92:9C:67:EE:FD:66:E5:7C:78
Authority key identifier: A7:4B:C5:33:CE:1C:D9:68:86:55:69:27:98:7E:4F:6F:6B:99:5A:38
Certificate issuer:       /CN=3e20d556cd0f6c69185fe4dde7c18ad09f497048
Certificate serial:       1494CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e20d556cd0f6c69185fe4dde7c18ad09f497048.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1f87d41-2420-4d8b-9b85-3a1e56c5b9a3/3e20d556cd0f6c69185fe4dde7c18ad09f497048.mft
Manifest number:          0A8E
Signing time:             Mon 15 Apr 2024 09:21:03 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:57:18 +0000
Files and hashes:         1: 3e20d556cd0f6c69185fe4dde7c18ad09f497048.crl (hash: 6zw1Ylk8PXHEOIVTeI9gCRA7kf6K4vus92H/iR4b48E=)
                          2: 78fb0c60c85df5750e2a40a0993e3e04156a4a9b.roa (hash: npvf2q6bj8ehwlO5g8v+XBjsSX25kpGh905dgmv06ME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348811 (0x1494cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20d556cd0f6c69185fe4dde7c18ad09f497048
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:57:18 2024 GMT
        Subject: CN=755d1c8303c48c52563f359476f531e1ba95bffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:91:e7:96:69:05:28:85:ee:a4:81:c7:08:
                    a7:b2:fa:f5:ae:88:a9:8d:9e:44:30:b0:77:4a:2b:
                    e3:40:74:fb:cd:ee:cb:39:0e:a1:a2:6d:a1:5a:54:
                    7f:aa:44:41:47:0d:23:0d:6b:80:ac:61:78:da:52:
                    75:78:3b:1f:fd:e3:76:a6:86:a6:4a:76:ec:aa:7e:
                    0a:24:45:71:a0:6e:fd:c3:38:1e:93:fe:76:49:ac:
                    ad:83:05:77:e4:38:1f:f1:37:21:52:d0:dc:bd:16:
                    a5:49:25:d2:df:b4:5c:71:de:dc:30:dd:16:f0:3b:
                    6a:fd:13:63:96:54:53:62:b9:b5:1b:33:1d:d2:4d:
                    98:a3:b1:10:db:8f:39:d1:e4:4b:e4:c6:28:c4:67:
                    9d:0a:56:20:6f:98:d2:64:17:eb:95:b8:5b:ac:f5:
                    9d:d1:4c:43:40:c1:6d:5c:b9:a2:a5:15:f6:83:db:
                    6b:b9:22:a5:c7:ba:13:d5:cc:76:13:a5:8b:d3:af:
                    68:84:7a:a4:93:05:59:cc:ca:57:11:95:13:1a:93:
                    ef:90:50:72:ab:ea:42:f5:bd:8c:10:3e:a5:1c:4c:
                    3c:86:ef:80:c8:69:67:73:74:12:83:69:f4:df:50:
                    92:c3:3b:77:d3:f7:8a:36:19:99:e5:40:62:dc:aa:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8C:0E:7C:9A:43:29:0D:96:40:8E:92:9C:67:EE:FD:66:E5:7C:78
            X509v3 Authority Key Identifier:
                keyid:A7:4B:C5:33:CE:1C:D9:68:86:55:69:27:98:7E:4F:6F:6B:99:5A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e20d556cd0f6c69185fe4dde7c18ad09f497048.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1f87d41-2420-4d8b-9b85-3a1e56c5b9a3/3e20d556cd0f6c69185fe4dde7c18ad09f497048.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1f87d41-2420-4d8b-9b85-3a1e56c5b9a3/3e20d556cd0f6c69185fe4dde7c18ad09f497048.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:b1:4d:fa:8e:69:b6:3c:a8:2a:b2:2b:bb:b1:49:ad:08:
         c3:ef:88:cc:bc:6a:3d:e4:6e:f3:79:02:c9:12:cc:28:22:bd:
         1d:32:58:e7:9c:a4:c4:45:67:a1:58:1f:19:ea:6d:1b:22:e2:
         c8:bf:fc:08:70:2d:19:77:33:de:30:07:0e:80:af:4d:e3:0a:
         23:c0:3c:be:ab:d2:bc:03:d5:71:9c:4a:0e:fe:35:82:d8:85:
         68:83:d0:03:85:9f:4b:44:e7:20:27:ff:d0:42:f2:2e:4a:99:
         53:3e:0b:d7:50:e8:a3:11:4f:ca:91:f6:36:f4:eb:96:19:b6:
         a5:34:31:63:4c:40:74:93:45:26:49:ee:da:16:59:be:c1:f6:
         8c:d5:9a:aa:09:e7:40:7d:49:a5:c6:de:87:4a:10:23:ce:52:
         ac:5c:8c:1f:32:2a:3a:06:3d:b7:a5:e1:8a:d0:b0:d8:1a:e9:
         17:08:86:46:c4:9f:67:59:90:6a:69:69:46:34:0f:de:a0:23:
         3c:c1:20:9a:6e:a7:81:09:6b:04:96:00:90:7e:6b:dd:4d:56:
         a7:58:44:3e:f8:d6:bf:9b:05:30:38:c4:b3:cc:db:73:28:83:
         02:ac:1e:71:fa:59:7e:7c:57:80:b9:5f:9a:2c:42:e0:e2:e2:
         86:93:03:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----