Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/2a3b95fe9d581b4e12edf0884b053a4b1728b654.mft
File:                     2a3b95fe9d581b4e12edf0884b053a4b1728b654.mft (raw, json)
Hash identifier:          dC2D/VvU05ovyGXR4wboqcK2Z56UEF939SZWK+TZ4s8=
Subject key identifier:   35:1A:16:00:1F:F5:AE:EA:7F:EA:15:4B:B6:56:1E:BF:8B:A2:1E:D4
Authority key identifier: 60:88:E4:08:DE:AC:31:7B:2C:3D:1F:07:AD:A7:2D:F5:F1:80:9C:15
Certificate issuer:       /CN=2a3b95fe9d581b4e12edf0884b053a4b1728b654
Certificate serial:       0AC5D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a3b95fe9d581b4e12edf0884b053a4b1728b654.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/2a3b95fe9d581b4e12edf0884b053a4b1728b654.mft
Manifest number:          0592
Signing time:             Mon 15 Apr 2024 03:20:43 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:15:17 +0000
Files and hashes:         1: 2a3b95fe9d581b4e12edf0884b053a4b1728b654.crl (hash: ZTwqTro0yHVtObiZGNXQ4qiBdHkDpasTSBdLvCfK8Bk=)
                          2: 945a57841f6b413352af4f2d5c1b609979416c00.roa (hash: kDXi9xDwD9zKbBpODuyNoux+ALlfyLSUfRi1NlPAMxA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706007 (0xac5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a3b95fe9d581b4e12edf0884b053a4b1728b654
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 06:15:17 2024 GMT
        Subject: CN=85847d2eee365cdc5b189d828eae85ddeba3f33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:e8:34:f4:d2:8c:86:e1:c8:25:b5:64:3f:
                    29:12:a5:f7:6c:5a:d9:ef:fd:be:26:6d:3c:73:3f:
                    85:49:66:8a:06:5e:ef:76:18:1f:5a:2c:b7:de:ae:
                    31:9c:84:b7:e3:01:58:9d:55:c4:7f:a1:fb:77:b4:
                    ca:c7:8c:99:34:e0:88:2b:6f:ac:b1:c5:f3:90:2b:
                    14:29:52:7d:e7:80:04:12:a8:be:d5:be:d5:f5:22:
                    7b:cb:66:83:bf:d2:5a:21:6e:70:8e:19:0c:a9:5a:
                    cb:a4:0a:e9:5b:ed:e8:f4:f6:82:6a:c6:ed:89:61:
                    2c:14:62:ea:1e:d6:e5:d9:83:37:71:3f:9d:0e:f2:
                    6c:0e:31:d3:9b:37:cf:6b:fd:7d:ec:5d:c4:a7:66:
                    2a:d5:da:66:8e:63:1f:09:0b:d1:f6:cd:92:bc:d6:
                    d1:c4:61:1a:47:e9:c7:df:3b:94:de:3e:a5:86:bc:
                    90:9b:33:47:b3:ad:70:c8:5a:56:80:9b:9a:d5:34:
                    9e:a4:cd:c5:e0:65:3a:24:a5:76:fc:8e:be:e7:63:
                    17:47:ac:3c:d6:ee:ed:40:a5:54:0f:e0:7e:09:79:
                    2f:47:12:cf:e9:76:bd:7d:5c:98:fa:fb:f8:6d:94:
                    6d:d8:64:78:39:11:01:89:04:81:f0:99:09:14:e7:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:16:00:1F:F5:AE:EA:7F:EA:15:4B:B6:56:1E:BF:8B:A2:1E:D4
            X509v3 Authority Key Identifier:
                keyid:60:88:E4:08:DE:AC:31:7B:2C:3D:1F:07:AD:A7:2D:F5:F1:80:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a3b95fe9d581b4e12edf0884b053a4b1728b654.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/2a3b95fe9d581b4e12edf0884b053a4b1728b654.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/2a3b95fe9d581b4e12edf0884b053a4b1728b654.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c2:4a:94:d5:c0:8f:7c:dc:91:59:6b:c9:18:12:a2:02:3c:
         67:7b:ed:1d:4d:8b:62:e6:4a:c4:fe:80:3c:f3:6e:43:b7:1e:
         69:a8:20:24:1b:d6:81:cc:be:1b:4c:e6:07:17:0b:1a:2d:90:
         47:84:3d:5c:fe:cc:f8:94:b8:2b:38:73:94:94:c8:33:d5:25:
         d5:a5:38:7b:f7:89:0b:ce:bd:48:30:c0:2a:c5:2a:49:35:d0:
         71:33:a3:51:11:ae:b9:f8:b4:be:23:bc:0b:ba:2c:39:78:68:
         43:5a:df:f6:01:8e:bc:f4:88:3f:14:9e:df:68:17:93:b7:ba:
         ea:de:8c:9f:40:64:6a:47:e4:e3:a5:59:0b:16:c1:c1:dc:4a:
         a1:f8:60:c1:8b:b3:a6:28:6d:68:7d:95:fc:8e:a4:51:56:43:
         32:83:b9:06:01:a5:3b:40:39:dd:5b:eb:c5:5a:02:d6:91:78:
         d3:51:2b:b3:c2:2b:88:a6:02:d5:40:72:f0:08:9a:fe:8d:92:
         9c:40:ac:57:b7:6d:48:36:15:41:42:12:d0:f1:bb:90:7f:3f:
         44:93:50:60:af:c6:10:ab:3c:2a:34:83:ec:41:5b:b9:fe:16:
         e0:95:16:e2:c3:da:78:98:a7:65:ec:b0:18:0b:ba:f4:72:07:
         58:65:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----