Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.mft
File:                     b33596c5bda819ba4815e88789b6d43c8973f503.mft (raw, json)
Hash identifier:          bLQmfEhsXBAxdVHjiKu6McBtM9H1l7IyCt7LEph92bI=
Subject key identifier:   10:68:66:CD:23:02:A1:23:46:C8:AF:60:D1:33:8F:9A:38:60:62:D6
Authority key identifier: B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7
Certificate issuer:       /CN=b33596c5bda819ba4815e88789b6d43c8973f503
Certificate serial:       28965F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b33596c5bda819ba4815e88789b6d43c8973f503.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.mft
Manifest number:          0DFB
Signing time:             Mon 15 Apr 2024 10:21:12 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:44:25 +0000
Files and hashes:         1: b33596c5bda819ba4815e88789b6d43c8973f503.crl (hash: Sw1rzFQgTkDPBVEWQ6MTgZb5NlSMAnzy9EVT84DTlx0=)
                          2: c7399f35b5ce507efcb5967f1abebc02ceab7de2.roa (hash: yta05YJQThqLHEO+dVN0ugGHsWmM3tg2isD49n4vUpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659935 (0x28965f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b33596c5bda819ba4815e88789b6d43c8973f503
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:44:25 2024 GMT
        Subject: CN=ca3c5d2fdde055eeaaebac9bcadb2198dd8097cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:1f:37:ff:d1:04:f1:25:53:e7:64:e5:0e:
                    e7:10:07:c9:e8:6b:6c:dd:30:eb:b6:90:2e:20:e1:
                    03:b7:6e:61:44:72:f8:ff:52:5d:a3:96:b4:90:20:
                    91:ef:e5:b9:fe:8a:40:f3:01:6f:e6:9c:91:55:93:
                    65:8e:81:92:31:04:51:85:34:dd:1b:d4:46:35:34:
                    b2:10:74:d1:89:12:98:5d:97:91:8e:85:00:61:c2:
                    12:06:b3:ce:0a:14:97:c1:d2:25:46:89:73:e6:98:
                    ad:40:cd:97:1e:84:44:32:55:d7:00:51:69:16:54:
                    75:c1:aa:08:86:79:2b:57:4b:da:08:94:78:fc:6c:
                    b5:42:93:39:47:a8:6b:e5:95:20:9b:20:22:9c:04:
                    14:3e:1c:25:7b:fd:f6:ec:4f:45:b1:75:a0:5b:c5:
                    1d:b4:1c:04:db:61:64:44:21:08:67:0c:4e:5f:70:
                    c5:2c:2a:88:18:51:1f:40:cf:35:ba:f1:d4:dd:72:
                    ff:e3:03:5e:54:e5:f5:78:93:9c:8f:d8:1d:cd:73:
                    96:e6:16:fa:1f:14:a2:52:12:72:fc:e9:c7:bc:40:
                    f6:ae:9b:c5:42:c2:79:57:3b:6a:dc:34:73:bd:85:
                    19:26:80:ab:91:5c:1d:30:09:04:1d:50:94:36:0c:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:66:CD:23:02:A1:23:46:C8:AF:60:D1:33:8F:9A:38:60:62:D6
            X509v3 Authority Key Identifier:
                keyid:B4:89:5F:6D:4A:AD:A0:9D:9D:75:19:F0:E4:F3:15:A1:72:06:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b33596c5bda819ba4815e88789b6d43c8973f503.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1b7740d-64d9-4431-b811-69a3c58f49ea/b33596c5bda819ba4815e88789b6d43c8973f503.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:94:9b:aa:b4:1b:0c:24:b3:5a:2e:ae:75:8f:e5:49:89:1a:
         44:ca:d4:ca:b0:8e:0d:81:d4:43:21:17:77:c8:f3:36:af:cd:
         92:47:84:42:4e:cc:c7:ed:e5:5f:87:bd:44:7b:77:3c:46:78:
         8c:a5:c9:1d:0b:8b:b7:c7:e8:63:c1:43:3c:e0:4d:ac:06:ed:
         24:32:9b:6e:05:6a:1e:97:ec:84:67:e5:39:34:99:f5:5b:e5:
         ca:8b:61:44:ee:0a:7c:8c:54:1d:b4:e1:92:12:7e:fa:fe:bc:
         9a:9a:1d:b3:45:5c:01:8d:69:94:46:7e:de:67:c5:18:07:06:
         a5:84:cd:b9:73:df:41:7c:69:05:43:86:1c:e0:1f:63:dc:54:
         86:cb:5a:98:af:c9:6b:a8:92:ed:d5:e4:22:34:52:23:d0:ba:
         cb:24:41:c7:46:30:52:a3:8a:65:3f:4b:4f:ef:d1:95:23:a5:
         d4:f7:16:a9:c1:a2:d8:a9:9c:bf:f8:5f:41:9d:7d:ce:13:35:
         9c:45:c4:bb:75:e0:67:5a:dc:c1:07:66:a4:2e:43:f5:df:1c:
         08:41:81:21:0e:09:60:72:06:b5:cf:6f:75:fb:5f:da:0d:1d:
         75:9c:dd:22:b5:d1:f0:60:f8:d5:7e:30:ad:80:c3:ac:f6:11:
         2b:57:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----