Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/35a22b288c1e4ed251559cdd04140e06dfc07d0f.mft
File:                     35a22b288c1e4ed251559cdd04140e06dfc07d0f.mft (raw, json)
Hash identifier:          5S8wiyqLZVLQei6d67YQNMAB0hma6lOcZoOMWroFjE8=
Subject key identifier:   70:38:6A:79:1F:0C:53:EE:09:19:03:61:53:B3:C8:D5:63:33:1D:D9
Authority key identifier: BE:F9:D4:94:52:95:E6:89:56:33:74:C1:CD:31:F1:07:66:19:30:85
Certificate issuer:       /CN=35a22b288c1e4ed251559cdd04140e06dfc07d0f
Certificate serial:       27E037
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35a22b288c1e4ed251559cdd04140e06dfc07d0f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/35a22b288c1e4ed251559cdd04140e06dfc07d0f.mft
Manifest number:          0DFA
Signing time:             Mon 15 Apr 2024 02:20:49 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:44:29 +0000
Files and hashes:         1: 1823f938e736874db7044553a87a26d050b9586a.roa (hash: byGmb/v0LrI/huEGxbpuY2/fa743bBmkKMDcGXxXKFY=)
                          2: 35a22b288c1e4ed251559cdd04140e06dfc07d0f.crl (hash: xaPL9isR2a4mOMTv5TSbqDx5l14zK3uxytQVsSbZ/cA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2613303 (0x27e037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a22b288c1e4ed251559cdd04140e06dfc07d0f
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:44:29 2024 GMT
        Subject: CN=1266ad75232977e3152fab66ca8dc72145869687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:f9:f4:26:82:34:63:b0:18:db:38:0f:02:
                    58:3b:f7:0b:dd:8d:21:6e:69:71:de:93:6f:5d:1b:
                    7e:a3:99:f9:e2:96:c5:85:3e:30:94:b2:85:f4:c9:
                    bf:80:52:93:f1:e7:25:5d:bb:88:a4:2d:58:64:47:
                    c5:db:c8:de:c7:1f:34:7f:84:6c:f2:4f:3d:d6:da:
                    e6:17:f9:55:6d:2e:de:40:9d:5f:43:69:cf:d1:69:
                    95:50:b8:7b:86:d9:41:61:8c:d8:c3:90:40:ed:a4:
                    52:27:12:87:30:2f:0a:e5:bb:7b:0c:ba:1e:0a:ef:
                    a4:9d:bf:5d:21:b8:1c:2a:60:28:a4:39:8a:d3:e6:
                    86:62:29:bf:06:5b:39:c8:7d:06:89:c7:c8:c6:8f:
                    2d:6f:6f:7f:d3:5e:c6:31:b8:ec:53:b5:31:1b:76:
                    f9:0a:70:4e:7a:7a:84:ab:54:fa:3d:80:a6:7f:b2:
                    c8:b6:92:52:80:78:6e:cb:aa:00:31:3d:b1:e0:d4:
                    18:10:7b:30:5b:d0:26:11:ce:5c:50:95:8c:6c:d5:
                    bd:c7:a7:b2:50:f1:c8:48:8e:36:ad:82:a8:6e:cd:
                    2e:0d:95:fe:2b:ab:d3:cf:b9:75:e9:a0:63:56:1d:
                    1c:32:24:8f:fe:ee:11:17:15:84:26:0f:27:e8:47:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:6A:79:1F:0C:53:EE:09:19:03:61:53:B3:C8:D5:63:33:1D:D9
            X509v3 Authority Key Identifier:
                keyid:BE:F9:D4:94:52:95:E6:89:56:33:74:C1:CD:31:F1:07:66:19:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35a22b288c1e4ed251559cdd04140e06dfc07d0f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/35a22b288c1e4ed251559cdd04140e06dfc07d0f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9978345-6a05-4395-ba69-6b3cca446d48/35a22b288c1e4ed251559cdd04140e06dfc07d0f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d4:59:5f:d9:71:c6:b6:6d:0a:ff:ae:c3:3b:59:4c:48:65:
         33:c0:70:c2:e9:a7:20:cd:26:97:86:03:7f:7f:7a:78:e4:6a:
         55:d9:d2:f2:b1:ec:24:b2:fb:76:7e:05:6a:c2:95:b3:70:43:
         ec:df:2e:37:1f:23:74:2b:aa:e4:b8:cc:1e:38:8d:71:01:f0:
         fd:14:cc:dd:d9:19:39:e7:54:3a:67:5c:ba:b5:d6:b2:25:9c:
         c4:94:18:c6:a2:24:87:71:6e:42:b6:9b:ff:39:81:ca:51:f5:
         bc:8d:28:5b:c4:3a:bf:5c:d8:6a:9f:7f:1a:c7:89:3f:fd:96:
         c0:af:c7:29:44:4c:7f:a2:cc:8f:f9:ff:a7:6f:c8:22:a4:68:
         64:04:33:30:34:18:f5:61:8b:c4:5a:31:31:37:7a:b7:1c:d4:
         f1:59:43:8a:36:91:a6:3a:ad:50:c8:d0:b2:f2:86:85:f0:b2:
         71:71:52:e2:b2:d3:79:67:d5:9a:50:c5:72:5e:11:9d:d2:7d:
         72:30:00:dc:8a:1f:cb:7f:4d:56:81:ec:a2:6b:6a:d6:bd:8a:
         35:e6:e1:35:0f:6c:bd:a7:28:dd:cc:92:70:9c:67:0d:3b:a4:
         06:1a:d3:74:d6:f1:1d:69:4a:08:18:f6:78:79:1f:28:c4:71:
         04:64:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----