Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/cd3c6cc0b111e1c19749d72c35803c56e03114ce.mft
File:                     cd3c6cc0b111e1c19749d72c35803c56e03114ce.mft (raw, json)
Hash identifier:          ikKVEj1B+W6wKi5VMMoDmWTZ866K0C089vRujZgzlGs=
Subject key identifier:   89:8A:2E:01:9A:1F:91:60:AA:6A:6C:4C:C8:E9:2E:67:68:41:6F:49
Authority key identifier: 75:2A:B0:64:A7:73:C2:50:BD:5F:28:17:2E:11:57:4A:26:E7:82:15
Certificate issuer:       /CN=cd3c6cc0b111e1c19749d72c35803c56e03114ce
Certificate serial:       2814FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd3c6cc0b111e1c19749d72c35803c56e03114ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/cd3c6cc0b111e1c19749d72c35803c56e03114ce.mft
Manifest number:          0DFB
Signing time:             Mon 15 Apr 2024 03:21:11 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:43:17 +0000
Files and hashes:         1: 8b56034aedcb26e8ef3e38db85059fa7c1f6a24c.roa (hash: s3X8+G31ZT1Mi23wXX/xFqY4IcIyRD0I2VggEQWHRr8=)
                          2: cd3c6cc0b111e1c19749d72c35803c56e03114ce.crl (hash: 1CbfTxAPGf4SmKybOVc4lR7WXWs3W3tS/sMfkgvbBuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626813 (0x2814fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3c6cc0b111e1c19749d72c35803c56e03114ce
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:43:17 2024 GMT
        Subject: CN=3af003e4e8dc1648f9e49d1763cb283234db824b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:79:9c:bf:a0:e3:c4:0e:3d:2a:05:d4:42:
                    cf:0e:b8:58:bd:41:f3:07:74:80:90:09:45:a8:27:
                    7b:81:d7:bf:0d:bb:84:b5:68:76:cb:43:81:e1:8b:
                    32:91:d8:14:8c:5e:04:3f:87:58:94:41:26:2c:ff:
                    9a:20:80:31:76:81:f4:10:d6:cb:25:98:01:11:02:
                    63:04:11:be:a4:35:c6:93:86:38:97:42:d1:21:77:
                    7d:c0:7a:fd:9f:dd:4e:4a:83:04:0b:24:b1:95:1a:
                    af:05:a9:b8:99:63:be:37:13:b4:d8:9e:e4:40:80:
                    17:a1:75:01:ca:4b:00:15:fd:77:1d:36:d0:e0:41:
                    1b:15:8a:e5:5a:ae:8e:94:b6:82:14:64:1d:de:74:
                    c8:38:c1:3c:91:1e:5b:0f:55:22:e8:4e:0a:01:9f:
                    29:42:99:49:43:a3:a4:e7:2e:7f:bb:5b:55:9f:22:
                    1a:ce:06:b4:d1:7d:d4:49:d3:fc:f4:56:6f:56:70:
                    34:2d:41:47:ee:fc:41:44:37:1e:20:34:1a:b2:ca:
                    73:42:a8:53:95:55:30:9c:a2:f8:c8:35:ef:bd:be:
                    99:ec:06:b3:52:a7:00:3f:6f:1a:52:8c:15:bd:cb:
                    10:a2:a7:94:94:bc:82:3b:b8:59:56:05:d5:f8:a4:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8A:2E:01:9A:1F:91:60:AA:6A:6C:4C:C8:E9:2E:67:68:41:6F:49
            X509v3 Authority Key Identifier:
                keyid:75:2A:B0:64:A7:73:C2:50:BD:5F:28:17:2E:11:57:4A:26:E7:82:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd3c6cc0b111e1c19749d72c35803c56e03114ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/cd3c6cc0b111e1c19749d72c35803c56e03114ce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/cd3c6cc0b111e1c19749d72c35803c56e03114ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:41:55:f9:7c:29:9e:ab:f2:c7:5b:ce:95:05:38:f5:f1:
         8b:41:c1:15:78:31:30:f6:1c:51:0c:bb:b6:52:09:56:7e:9c:
         b2:b4:b8:af:9a:ab:ab:9f:2b:73:41:cb:cc:df:f2:74:f4:cb:
         69:36:86:b1:f2:c1:db:12:1c:dc:fa:b9:e9:bf:a0:3a:86:21:
         50:5e:02:4b:e6:a2:34:46:65:96:03:50:bc:48:21:71:a3:b3:
         4b:f4:ef:49:b6:05:2a:be:96:5e:c8:66:de:bc:9f:dd:e9:b0:
         d7:ac:5e:e5:df:39:28:92:71:bb:3a:06:b4:35:16:e5:2b:e8:
         c6:8b:0a:96:e2:8f:3e:7b:a0:6e:80:40:38:c5:0b:c6:76:7f:
         3b:ea:d7:c0:03:22:41:73:b2:b7:29:a8:93:fd:30:99:27:5f:
         04:e1:ca:6e:9a:ce:21:89:cb:6a:75:47:1d:4d:c5:c3:ce:39:
         3d:b3:ba:ea:f7:7e:32:a5:19:5f:9e:05:05:2a:71:a6:ca:59:
         89:c8:e3:87:25:81:43:47:d0:25:94:d6:da:ab:d9:20:2c:57:
         59:d4:06:db:d3:b3:0e:b4:94:12:97:4e:6a:96:92:20:9b:ea:
         7c:6d:ce:80:82:42:0a:16:bc:f7:14:33:88:93:04:c4:56:5e:
         5b:d3:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----