Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df7d160e-dfe0-41d6-b4a4-f59a6a19a8ac/9035a8fa5af8ead4985158f93c6409d244feec86.mft
File:                     9035a8fa5af8ead4985158f93c6409d244feec86.mft (raw, json)
Hash identifier:          5v3P2BxmQ6qC7xuusMgjBbbKFeco5vbVi2eptku4PGo=
Subject key identifier:   38:C8:ED:FD:88:25:7E:56:29:DE:D4:33:C6:02:66:B3:60:85:9E:FF
Authority key identifier: AF:9D:B4:96:0F:ED:26:30:FF:63:24:D3:CC:FD:C9:9A:3E:92:37:9A
Certificate issuer:       /CN=9035a8fa5af8ead4985158f93c6409d244feec86
Certificate serial:       06865A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9035a8fa5af8ead4985158f93c6409d244feec86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df7d160e-dfe0-41d6-b4a4-f59a6a19a8ac/9035a8fa5af8ead4985158f93c6409d244feec86.mft
Manifest number:          035D
Signing time:             Mon 15 Apr 2024 03:21:42 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:48:17 +0000
Files and hashes:         1: 9035a8fa5af8ead4985158f93c6409d244feec86.crl (hash: g24i0Qd758e2ULnhd63caHMNZ690zI5ScGPr94Z55lY=)
                          2: a6a17ab4b97a369fb2c32c0c4e4b9883d40708ff.roa (hash: zS0UqjYy6rGHSO6FMNM6fDAzeflpwGOsCLNUG5Ep8rA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427610 (0x6865a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9035a8fa5af8ead4985158f93c6409d244feec86
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:48:17 2024 GMT
        Subject: CN=73ca5bcd535d67e007129bab88acca8e274689ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:80:3e:c3:22:32:bc:d9:7d:26:f4:b7:2c:
                    42:bd:59:c8:40:fb:a0:9a:c3:59:10:e8:b3:b0:8e:
                    c5:c0:e5:61:91:6f:83:09:0d:90:d4:36:8d:e1:ab:
                    6f:7d:48:0e:26:f4:e9:51:d7:bb:46:21:e5:e8:0c:
                    37:5a:be:bb:52:ce:0b:17:4d:05:6e:f6:27:f0:2c:
                    4b:dd:8d:97:cb:47:cd:8f:64:35:e7:20:0c:c1:19:
                    43:49:45:b7:3f:3c:ff:06:25:47:0a:9d:28:b1:5e:
                    2a:ab:35:e2:88:7c:26:3a:7b:b4:d9:ce:76:cc:93:
                    3d:24:2a:15:cb:3d:34:35:be:f0:ea:58:cb:d6:15:
                    cf:6f:f3:96:02:14:36:7b:d6:93:24:6c:11:bf:62:
                    e7:ad:2e:e8:d4:41:f7:65:70:c6:fe:70:3a:72:00:
                    4a:61:18:81:c4:24:33:e2:fc:3f:dd:72:8c:45:bb:
                    46:a6:70:e3:95:03:cc:5b:15:f3:5c:1f:2a:08:08:
                    c1:0d:aa:fa:6f:43:29:dd:3b:1d:9b:c1:48:35:8f:
                    af:23:b3:7a:8a:a5:ee:35:37:7d:61:b7:23:01:7a:
                    b4:d1:82:ce:18:9f:bb:68:ef:78:e1:67:24:9a:b7:
                    70:cc:80:f8:44:c7:ee:4d:6b:6e:cd:d9:9d:74:81:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C8:ED:FD:88:25:7E:56:29:DE:D4:33:C6:02:66:B3:60:85:9E:FF
            X509v3 Authority Key Identifier:
                keyid:AF:9D:B4:96:0F:ED:26:30:FF:63:24:D3:CC:FD:C9:9A:3E:92:37:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9035a8fa5af8ead4985158f93c6409d244feec86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df7d160e-dfe0-41d6-b4a4-f59a6a19a8ac/9035a8fa5af8ead4985158f93c6409d244feec86.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df7d160e-dfe0-41d6-b4a4-f59a6a19a8ac/9035a8fa5af8ead4985158f93c6409d244feec86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:04:03:fe:85:27:ba:49:36:db:9a:68:7e:a5:fc:c9:27:38:
         0f:44:da:52:91:bf:12:06:af:96:96:1d:2a:27:2b:b7:eb:21:
         37:7c:11:61:ce:76:ac:67:23:6d:e9:06:f5:f6:a3:9b:b1:71:
         60:56:66:6a:76:f2:18:8d:81:1c:14:f7:76:e9:87:e2:4f:3d:
         3f:31:eb:d8:36:09:08:75:31:bc:4d:af:a2:b6:2a:ef:77:29:
         68:ae:ad:01:be:5f:e1:5f:ef:21:4a:55:f4:5e:5f:85:1c:16:
         48:0b:58:5c:24:7c:83:03:20:a4:a8:51:3b:0e:51:f5:d9:32:
         84:dd:b5:f1:01:0e:25:bb:31:9b:e9:f4:8f:93:00:ee:ef:83:
         50:61:63:0e:5a:bd:f6:f9:1b:2c:6f:a2:dc:e3:01:61:7d:40:
         cf:9b:46:00:5a:90:0b:6a:d9:36:ec:50:23:63:fa:e3:c6:18:
         f5:be:f0:b6:cc:de:b5:c7:cb:83:e5:30:05:9f:31:d7:fa:6c:
         4b:8a:e4:63:04:91:c0:38:2b:c0:47:ee:5d:59:b9:a0:26:02:
         81:bb:29:e1:7f:ae:6f:b2:7e:bd:bc:fd:33:45:32:72:46:be:
         2f:36:b9:1e:7e:87:09:20:b8:34:0d:e0:14:37:0c:3d:ae:9a:
         59:c9:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----