Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.mft
File:                     916dc4971b2eb6e54e3aede8f95dbd507bde921b.mft (raw, json)
Hash identifier:          3jtA1EKdUun3ZPnN2lqTdTS6vqvtMyXNaZe1v/zH11g=
Subject key identifier:   9C:B1:BD:06:1A:0E:07:30:CF:11:72:04:21:1B:F2:5A:19:DB:BA:F7
Authority key identifier: 65:CD:F0:35:9B:09:96:A9:65:7A:30:44:B9:87:D0:30:A9:E0:87:D2
Certificate issuer:       /CN=916dc4971b2eb6e54e3aede8f95dbd507bde921b
Certificate serial:       26127A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.mft
Manifest number:          0E02
Signing time:             Mon 15 Apr 2024 04:21:08 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:25:26 +0000
Files and hashes:         1: 4c5064c1261c0e2b1c4aa01eaa5c68f5842014e5.roa (hash: IzcDxS0GzUNJDt2BEH8hRKs68j5JHxHvEsud1vTuFD4=)
                          2: 6e809f4f8ae3caea4067321c34594aea5ff3f189.roa (hash: oOUbvN9U5FHE0Pmd5zFwthEXU//oDeKtSjmvB841Ea8=)
                          3: 724866cbf48dc22f9ea0687967c09a1fb6361118.roa (hash: ginzv7WS7TIf5FaxN4dJlhGSsnuVuFUydS0/2JMbvJs=)
                          4: 7f45540396e9a0fb3cf73ec6673e96f0b7eededa.roa (hash: b1WyprUZ4yslIlN3QAm/jvZGpU+aGqTwcRNZfHHF1hw=)
                          5: 916dc4971b2eb6e54e3aede8f95dbd507bde921b.crl (hash: J7k04dlWHPubCWVBNHC7KvJygOhO92AT87HKa6gbgSk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495098 (0x26127a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916dc4971b2eb6e54e3aede8f95dbd507bde921b
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:25:26 2024 GMT
        Subject: CN=7bfe7287f9c9958698e69a0841804819f521236a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:8a:7a:a8:07:95:47:32:e3:bb:3c:6f:08:
                    50:a3:ad:68:c2:4d:b0:d6:fd:f2:8b:8c:b4:e0:bc:
                    41:de:ef:d1:52:33:da:cb:3f:05:50:89:50:f2:ac:
                    5d:44:2b:b8:5e:cc:cf:62:16:69:b8:8c:36:2a:f2:
                    16:0e:c0:98:b2:04:37:31:02:c8:fa:62:26:cb:c4:
                    ea:34:fe:cc:16:8a:d0:9b:bd:72:ff:b0:7f:7d:b0:
                    1a:a2:56:e7:23:68:5f:1f:34:bf:98:ef:02:00:78:
                    90:14:01:46:7a:1a:35:91:f9:55:12:e4:80:34:d0:
                    de:a1:61:43:65:49:af:05:32:60:26:a6:8b:9e:75:
                    fa:d9:22:89:f1:35:79:91:82:c7:92:17:7d:ba:8c:
                    5e:ad:03:11:f8:2f:ce:e6:8e:2a:c7:0a:b5:71:5b:
                    3c:54:94:d6:c2:43:5d:ee:24:8b:06:d3:80:8b:ec:
                    12:fc:66:f4:54:ea:f0:cd:cf:03:f1:e5:5b:8d:53:
                    f5:c4:75:91:70:35:18:8a:15:55:2a:01:15:83:f8:
                    9a:26:66:9f:a4:a9:c4:ec:3f:e6:4c:c1:c8:eb:d5:
                    55:83:9b:58:ce:d9:a5:b8:80:bf:21:56:b5:b6:f1:
                    7f:e9:b3:de:2b:79:be:86:8c:73:bf:a0:ea:9b:49:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B1:BD:06:1A:0E:07:30:CF:11:72:04:21:1B:F2:5A:19:DB:BA:F7
            X509v3 Authority Key Identifier:
                keyid:65:CD:F0:35:9B:09:96:A9:65:7A:30:44:B9:87:D0:30:A9:E0:87:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:75:90:c1:bb:d6:3c:e3:3a:a9:56:28:4e:7a:12:e2:e3:
         93:73:85:75:22:0f:9c:5f:1b:c6:c4:34:7e:82:12:02:37:30:
         32:87:56:ea:0f:f9:07:9a:d3:12:88:07:76:f2:88:9c:72:75:
         5f:9c:d9:b3:73:cb:6b:39:67:a5:27:50:f4:04:56:b8:8d:37:
         2c:aa:e8:ca:d7:ad:fe:ca:90:28:2a:38:6a:48:c1:f5:21:27:
         4d:a5:ad:a1:a6:cd:77:66:dc:44:b1:fb:cf:f9:0f:6d:00:4a:
         4a:50:93:a1:6b:46:87:1d:f7:73:6c:11:9d:35:eb:d2:32:93:
         e7:02:6f:c8:ae:0f:f1:1c:1d:a5:c6:91:c1:cb:16:7c:a9:9b:
         dd:6c:7a:84:4f:e9:7b:cc:0e:90:fe:28:17:55:d0:6e:79:18:
         99:7b:7b:07:87:51:97:d7:b9:c4:fd:99:cb:1d:43:02:d3:6f:
         8f:e4:b1:f0:2e:1a:2a:7a:20:4e:fd:fb:65:58:dd:b9:f5:9a:
         65:6b:bb:11:b5:96:d6:c6:18:41:0a:5b:86:1d:1e:59:96:76:
         6e:84:cd:52:e5:4a:99:f6:61:c7:8a:53:8b:5e:33:2c:89:96:
         70:c0:31:94:e8:11:17:8f:8c:ad:4d:a8:c1:54:0a:23:1b:08:
         0a:da:a1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----