Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.mft
File:                     aaf4571e3a5915e171eb5856008590d6211ff016.mft (raw, json)
Hash identifier:          1YhyHd5L90U1ou+J7a5NukQyIgTj+KML9yYhVsXgu3c=
Subject key identifier:   1B:07:F5:50:98:36:7F:0B:F6:4E:E0:C3:14:00:AE:E7:D9:70:E7:AB
Authority key identifier: 81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21
Certificate issuer:       /CN=aaf4571e3a5915e171eb5856008590d6211ff016
Certificate serial:       1A3AB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.mft
Manifest number:          0D58
Signing time:             Mon 15 Apr 2024 11:20:45 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 14:02:18 +0000
Files and hashes:         1: aaf4571e3a5915e171eb5856008590d6211ff016.crl (hash: 9gW1X0a8L3eVrL6mk3XqjN5VyM8tvUbD7MvsmdXCyVc=)
                          2: d6cfb371f6e5f6ffacd93ea58d5a19252a475230.roa (hash: NghxKGdVkEmlGvqaGSa2oHrq9GGg7JMW/l0ZfFkoSMM=)
                          3: f9fab44aed87bb2b875fcfd781d37b15ed5680aa.roa (hash: 5Ol/T1hdALOeKrZKFXtZZoqpSwrWF9PfXZhbhNNiP9M=)
                          4: fdb109091d8b1b8e3a7f958d4963b70a39f0169e.roa (hash: 9POIa3Ge8bo1qj+dHg3+Umf3yP1/mHolQfHMB//Tjr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718967 (0x1a3ab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4571e3a5915e171eb5856008590d6211ff016
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 14:02:18 2024 GMT
        Subject: CN=84d2e83345995c50285fb08572aa569f48fc4ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:f1:f8:ba:b5:29:6d:34:2c:af:3e:70:a2:
                    57:d8:72:42:9d:63:45:5f:2b:d9:77:12:5a:e2:68:
                    84:21:68:8f:cd:21:32:85:c1:03:7d:44:f4:8a:27:
                    19:68:53:d2:2a:5f:9d:00:7a:b3:6e:71:d2:6d:85:
                    45:78:20:31:41:39:32:be:a3:59:2b:68:a7:b4:c2:
                    17:54:6b:45:fe:14:70:6d:0e:50:7d:90:7a:77:ae:
                    29:d9:74:1d:5d:12:2c:cb:05:a6:6a:a8:44:92:45:
                    9a:a8:16:f7:3b:12:38:23:00:d8:45:9c:7c:47:86:
                    93:ff:1b:6a:20:57:3b:2c:ca:fd:85:44:c6:43:b2:
                    e6:7a:44:ef:86:58:ba:ce:fa:2a:fc:a3:a7:e1:f2:
                    c6:04:aa:84:c1:4d:a9:6c:19:b9:79:3a:fb:28:b4:
                    9c:f9:7a:32:94:98:3c:dc:bc:da:f6:a2:28:08:6f:
                    73:f4:37:3d:9a:a3:d5:6c:45:b3:8a:55:e5:49:50:
                    62:86:ce:ab:8b:1f:19:e6:e5:be:89:ad:29:ea:56:
                    e0:10:15:94:1b:54:98:63:98:b5:4d:28:68:3b:4d:
                    0c:8c:d3:35:1f:7f:68:1c:1a:5b:d7:dc:c4:04:cb:
                    8f:83:53:c1:46:33:ee:f2:08:86:fe:0b:8d:d4:fd:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:07:F5:50:98:36:7F:0B:F6:4E:E0:C3:14:00:AE:E7:D9:70:E7:AB
            X509v3 Authority Key Identifier:
                keyid:81:0F:F0:61:CE:B2:2C:B9:C7:D3:22:2D:E9:76:43:7C:B8:C3:FA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aaf4571e3a5915e171eb5856008590d6211ff016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e54b93f1-995f-4c8a-815b-bb0308d848cd/aaf4571e3a5915e171eb5856008590d6211ff016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:a4:73:1d:be:3f:9e:43:c1:1f:c1:68:85:2f:8e:73:23:
         6b:35:b8:af:56:5e:06:27:84:41:84:de:cb:ca:16:b1:07:f1:
         b5:06:59:68:eb:37:f9:a7:71:43:44:ae:86:c7:bd:52:05:71:
         8c:07:94:12:0c:d7:7d:b1:38:0f:a7:2d:7f:12:e8:11:0c:c5:
         f1:f1:80:06:c9:02:6e:1d:f0:4b:93:d4:a2:c0:eb:32:5e:30:
         f1:0c:91:e9:ae:b0:1b:dc:35:e8:fd:0b:80:e3:a3:13:86:16:
         a4:38:aa:33:7c:e0:8d:7e:9a:92:98:fd:fb:c5:58:63:fa:9d:
         69:13:89:99:75:ec:2e:d0:1a:7e:9c:74:c9:4d:9f:46:d2:fb:
         c9:01:cc:f7:b7:bc:84:ce:99:95:e7:a9:48:27:9d:b2:ea:ba:
         4f:55:4c:69:6a:d8:54:4e:e0:7e:c2:a5:c6:c3:91:d4:2a:f4:
         48:c0:06:24:c4:fb:17:65:8b:e2:5e:06:7a:06:a4:da:28:57:
         a9:fd:fc:91:fb:e2:1f:00:7f:d3:7b:f6:1b:ba:e4:9a:48:bd:
         94:18:4c:6f:0f:71:15:51:09:19:bb:fd:11:46:81:1f:71:23:
         cf:ed:78:6f:5b:53:52:f6:35:a9:4a:56:e1:55:b9:aa:d3:0a:
         2f:90:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----