Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/cd5bdf4364a69749441571efcc359e8b36e0aa9d.mft
File:                     cd5bdf4364a69749441571efcc359e8b36e0aa9d.mft (raw, json)
Hash identifier:          zOX6vJ5xMAX9mnedDM9zNWNvfQd4nQxA/cMR0WrWx/c=
Subject key identifier:   25:B9:75:3D:A7:C1:6A:C9:E5:4E:9A:6E:E2:99:75:98:50:90:43:C4
Authority key identifier: A8:58:B2:4C:DD:9A:12:71:8D:FF:37:C9:9C:4D:FD:8C:BD:DA:FB:ED
Certificate issuer:       /CN=cd5bdf4364a69749441571efcc359e8b36e0aa9d
Certificate serial:       290A0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd5bdf4364a69749441571efcc359e8b36e0aa9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/cd5bdf4364a69749441571efcc359e8b36e0aa9d.mft
Manifest number:          0DE1
Signing time:             Mon 15 Apr 2024 01:20:36 +0000
Manifest this update:     Mon 15 Apr 2024 00:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 02:06:17 +0000
Files and hashes:         1: 6ea25308cc0b5af8e52486e7a1273a10ccee66a9.roa (hash: 8kjeDVp6dJR9S7bVpKs+h1JUekWoiFGVgEd2ZVSdye0=)
                          2: cd5bdf4364a69749441571efcc359e8b36e0aa9d.crl (hash: 1J/b5kOB2zW5mt39w+gLWhgctL+NE3ORLWOb/mqstk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689549 (0x290a0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5bdf4364a69749441571efcc359e8b36e0aa9d
        Validity
            Not Before: Apr 15 00:20:17 2024 GMT
            Not After : Apr 18 02:06:17 2024 GMT
        Subject: CN=6be036c9885d5e35f4583ff9cdb359517b1f6fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:7a:5d:54:2f:a2:e6:68:ba:e9:fc:b2:04:
                    08:ae:9b:77:fe:e0:db:da:8d:52:ed:e8:0c:b3:b8:
                    11:62:db:04:a5:b3:12:92:6b:f8:a8:2d:86:ec:90:
                    79:73:76:f9:c4:47:f5:9f:35:3a:9f:af:fc:cf:5f:
                    f8:e7:c2:23:a5:11:92:43:29:e6:a1:90:bc:21:3b:
                    ec:d0:07:d4:f0:d4:e6:86:d9:af:bb:dd:b1:84:6a:
                    24:7f:20:88:74:ea:78:9c:aa:78:6d:ee:7e:eb:d1:
                    4f:a7:32:38:a4:aa:f4:45:bd:1a:33:0c:9a:c6:2e:
                    a8:18:ac:f3:5c:54:90:58:36:23:44:4f:6d:44:87:
                    8d:74:e3:a1:7f:bf:b2:70:a2:a8:45:f6:e8:9c:8b:
                    c3:57:32:92:6c:0d:03:42:d6:c5:67:60:bd:68:84:
                    f5:7c:73:63:4b:ad:66:a1:b5:98:21:be:4c:5c:f2:
                    5d:e3:4f:e9:30:9a:27:bd:8a:6c:49:d8:1f:ed:fc:
                    13:bb:f4:8d:b2:7b:08:5d:f0:34:c0:d3:96:fa:ce:
                    f4:2a:98:24:ad:f3:5d:1c:c7:91:dd:50:d8:19:92:
                    99:e4:ee:64:59:22:71:84:f7:c9:8f:8d:46:4c:7d:
                    b8:ea:f4:52:ac:b6:b2:5c:da:ac:26:f9:28:c7:16:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B9:75:3D:A7:C1:6A:C9:E5:4E:9A:6E:E2:99:75:98:50:90:43:C4
            X509v3 Authority Key Identifier:
                keyid:A8:58:B2:4C:DD:9A:12:71:8D:FF:37:C9:9C:4D:FD:8C:BD:DA:FB:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd5bdf4364a69749441571efcc359e8b36e0aa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/cd5bdf4364a69749441571efcc359e8b36e0aa9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebe90bfd-ba56-4046-aa71-cf50da5c70fd/cd5bdf4364a69749441571efcc359e8b36e0aa9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e6:78:ed:bb:86:51:10:b6:6b:d0:82:d1:da:78:3e:ff:48:
         6b:d0:72:cf:9f:ba:88:27:76:94:42:7a:f7:4b:a8:f1:c9:74:
         ca:4e:60:22:49:cd:52:d8:e7:63:89:3a:9e:45:d3:55:8b:7b:
         aa:d0:99:18:e3:06:fe:3b:9e:d4:6b:33:bd:56:d7:a0:63:6c:
         c9:28:cc:d8:f5:5d:46:dc:23:50:fc:8f:78:61:59:cc:72:f9:
         b8:2b:f0:14:e9:e2:da:88:27:b5:e6:4e:b7:f0:dc:ff:7d:29:
         ef:f7:2d:a5:f0:f2:42:43:88:20:2e:ce:3a:8d:c7:19:70:7b:
         0d:ca:cb:c8:1c:55:58:70:17:86:54:7f:ab:2c:3e:30:fd:ac:
         7d:fb:92:1f:52:f7:a9:a9:2d:2c:b2:8a:56:65:7d:40:7d:ef:
         ed:2b:ff:6b:ee:bb:0d:b4:00:0c:15:6e:70:89:6d:fe:8d:b7:
         54:f4:d6:fe:78:16:27:85:f7:d0:60:f0:8f:1a:52:d9:c9:fc:
         9e:fe:08:e6:42:08:53:29:af:0f:86:3d:be:5c:81:c4:ae:f8:
         08:3f:d9:37:41:d8:c4:b8:c7:17:17:c1:d1:2d:77:5d:24:e1:
         ae:6d:6b:bd:31:7c:8d:73:7b:90:c5:c5:20:ab:5c:11:8b:9b:
         78:02:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----