Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f19c3cd8-f4d9-48c4-9e08-1161720c49b1/5bd3725f942ee985da6354fa9323d3af10c9d2b8.mft
File:                     5bd3725f942ee985da6354fa9323d3af10c9d2b8.mft (raw, json)
Hash identifier:          nS95vUKq4atX8kWE4t9hPsgmVvfJS1RvxhjVylWUrEA=
Subject key identifier:   5E:F1:B6:0F:4D:1E:9B:03:2E:C5:71:58:DA:69:FB:3C:97:7D:D2:A4
Authority key identifier: F0:72:A0:23:66:33:CF:69:3B:A5:02:AF:B4:5C:37:43:5C:49:A1:C4
Certificate issuer:       /CN=5bd3725f942ee985da6354fa9323d3af10c9d2b8
Certificate serial:       142585
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bd3725f942ee985da6354fa9323d3af10c9d2b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f19c3cd8-f4d9-48c4-9e08-1161720c49b1/5bd3725f942ee985da6354fa9323d3af10c9d2b8.mft
Manifest number:          0A40
Signing time:             Mon 15 Apr 2024 07:21:22 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 10:16:17 +0000
Files and hashes:         1: 5bd3725f942ee985da6354fa9323d3af10c9d2b8.crl (hash: paHZzUFvNJO1rtysXznBlBwEcfcSsa+aHUfmPOIrEgY=)
                          2: 683d0a6adbec43bf9fd69af055fc079fcccef11e.roa (hash: E4X7Kwr61A+4IJXKu4cTz50gNBE6MZD3QRTxuXLJB7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320325 (0x142585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd3725f942ee985da6354fa9323d3af10c9d2b8
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 10:16:17 2024 GMT
        Subject: CN=d28393a6ec7d89c65110f0f185aeee16dda712f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:8c:95:13:ac:84:90:03:6f:8c:7c:ea:e7:
                    af:78:11:78:16:96:31:d4:07:a9:9b:80:f2:70:5a:
                    f1:09:7d:4f:6d:af:db:33:fe:f6:fe:81:ed:fc:a0:
                    ab:57:bc:63:93:50:6b:90:1d:e0:af:9f:5e:ee:43:
                    0e:fc:53:19:e5:96:5b:d2:58:bc:22:af:bd:20:11:
                    e2:5a:d7:c9:ba:9b:72:7e:32:81:f3:d8:79:82:4b:
                    d2:c7:94:d9:06:fc:ff:4d:54:f1:88:05:7c:9c:68:
                    c2:18:b8:72:df:17:46:ee:c3:38:fc:43:9c:bf:d0:
                    76:bb:fa:e5:ca:d0:2d:fe:6e:89:2a:f0:2e:45:3a:
                    12:a1:7e:b7:3e:96:5c:ef:df:f1:3b:db:33:e4:21:
                    35:28:b0:8d:1f:b4:2b:ad:5c:44:50:9c:eb:9f:63:
                    5b:51:f3:ef:e6:00:81:7d:b9:80:b0:43:aa:cf:00:
                    fa:b9:10:8f:2a:1d:51:5c:8c:74:4f:59:ab:c3:9d:
                    a4:5e:1c:08:e9:9a:7b:fd:fc:2d:d6:80:42:a1:75:
                    75:20:38:be:f8:06:65:b8:13:45:0b:74:90:60:e9:
                    8c:fb:c5:de:71:9c:b5:13:09:35:69:6f:7c:11:91:
                    0b:f1:c4:55:73:31:f2:31:ac:a2:65:80:01:d2:74:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F1:B6:0F:4D:1E:9B:03:2E:C5:71:58:DA:69:FB:3C:97:7D:D2:A4
            X509v3 Authority Key Identifier:
                keyid:F0:72:A0:23:66:33:CF:69:3B:A5:02:AF:B4:5C:37:43:5C:49:A1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bd3725f942ee985da6354fa9323d3af10c9d2b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f19c3cd8-f4d9-48c4-9e08-1161720c49b1/5bd3725f942ee985da6354fa9323d3af10c9d2b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f19c3cd8-f4d9-48c4-9e08-1161720c49b1/5bd3725f942ee985da6354fa9323d3af10c9d2b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:da:cf:83:19:a1:17:44:83:47:77:ab:06:c1:45:7d:3a:d0:
         40:11:12:d4:89:5e:62:12:14:49:54:4c:70:34:fb:eb:08:75:
         94:41:35:96:d9:15:da:14:63:e8:91:40:70:d3:36:ed:d3:f2:
         7c:86:db:9b:d7:fc:61:7c:52:9c:e7:cc:1f:d6:f2:dc:3d:ba:
         97:57:3d:9b:47:76:36:39:4b:31:4e:26:b1:a2:cd:8b:2f:54:
         a5:39:73:2d:5d:d8:f8:84:f2:1b:08:98:39:22:cf:ef:bf:e2:
         49:b6:aa:d2:f4:64:f0:68:f7:f0:83:8b:e9:15:00:ed:7d:37:
         48:ce:d2:2a:31:ac:38:ae:c1:7e:57:16:32:0f:b2:39:bc:f0:
         f0:41:0c:c7:f9:56:42:05:95:c3:6a:b7:9a:63:ee:8d:83:a6:
         c5:ea:5c:e4:37:94:9e:c4:0e:9b:93:65:4b:a0:ea:7b:5f:73:
         f2:71:fb:3e:8e:e7:27:b5:b3:62:c7:ef:4b:8d:1b:ee:6b:d4:
         11:ca:eb:6f:2a:8d:27:0f:fc:88:6e:0d:f7:68:34:33:92:de:
         5b:23:df:a6:40:4e:42:61:76:20:fb:b3:ca:40:92:d8:e4:2b:
         35:70:b2:d6:0b:9f:f8:dd:7f:ca:90:1e:42:f1:14:8d:50:a6:
         7c:dc:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----