Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.mft
File:                     85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.mft (raw, json)
Hash identifier:          /Zo1rvV7JXIs+NRLJq2qIbCK8zX2gvGripcUDbO85Wc=
Subject key identifier:   20:E4:AA:94:1A:91:5F:3A:D6:28:EE:46:D3:1C:ED:B0:59:6B:34:F5
Authority key identifier: 20:AE:FF:D0:A2:02:AA:14:52:26:B7:6E:56:6C:10:AD:2B:D6:A9:6F
Certificate issuer:       /CN=85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59
Certificate serial:       20A1BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.mft
Manifest number:          0DF3
Signing time:             Mon 15 Apr 2024 09:21:00 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:24:18 +0000
Files and hashes:         1: 85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.crl (hash: W0Ax2EzIN92GU9ByotsJruvpP1nJ70eZ0J1/jqK7wbc=)
                          2: 8d054d7f24eca8e582aab3c6edfa01e599f6a28d.roa (hash: SsfZchupUr5SW8gEUe7E4QzMYgyE10uFVGJ0MzeWqFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138558 (0x20a1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:24:18 2024 GMT
        Subject: CN=68c394d798df9150c991dca5a8dbef4813996fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:05:d2:48:5c:01:7f:1f:1a:06:f7:71:3f:
                    cd:42:ad:18:17:7e:af:9f:cd:23:23:0b:13:92:44:
                    65:06:fb:9c:10:c1:e3:9b:bb:d4:72:28:dc:e3:2f:
                    0e:98:a3:86:e5:25:38:76:23:6e:cc:af:24:5d:f9:
                    09:64:c2:19:48:80:39:bd:9c:d0:00:d8:fa:88:de:
                    30:f1:a9:bf:98:90:17:0a:b6:c8:2b:9d:f1:11:af:
                    d2:53:44:5c:72:a2:2d:9d:2e:57:42:51:3c:d0:40:
                    d7:49:fe:90:6a:c1:ed:83:cd:8e:14:54:cf:af:3d:
                    e4:25:a1:50:93:52:3c:c5:dc:fb:cd:70:71:eb:5e:
                    51:b3:2d:f1:ca:2d:38:d7:9c:67:fe:bc:6c:99:ca:
                    34:a6:b4:84:8f:58:b2:4a:df:53:d0:b2:43:92:90:
                    01:60:09:cf:20:86:88:80:01:82:f1:34:fb:d3:56:
                    d5:b5:a3:24:98:9a:cf:19:1c:a0:a3:e4:77:69:9c:
                    c5:c2:b2:63:65:96:8f:0d:fe:55:c4:da:24:1f:36:
                    ea:a4:78:76:89:62:87:e7:4f:2c:3b:cf:f6:57:00:
                    4a:44:b6:f6:94:d0:1b:10:d6:4e:5f:80:c6:62:2b:
                    b0:40:50:5d:93:82:df:a0:4e:25:d2:94:b5:56:a6:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E4:AA:94:1A:91:5F:3A:D6:28:EE:46:D3:1C:ED:B0:59:6B:34:F5
            X509v3 Authority Key Identifier:
                keyid:20:AE:FF:D0:A2:02:AA:14:52:26:B7:6E:56:6C:10:AD:2B:D6:A9:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a6:b0:dc:af:c4:73:61:60:f9:b2:22:7d:eb:3c:6a:a4:a8:
         43:b8:61:61:16:c5:e2:87:bc:1a:db:6b:dc:fb:e4:7a:bd:58:
         c8:13:35:4c:87:c8:06:81:cd:9d:12:a9:b8:cf:6d:d5:34:2b:
         8c:4b:94:de:7c:de:3f:ef:98:c1:02:12:34:48:92:eb:a1:46:
         ed:a8:38:fe:62:eb:7c:8b:de:78:ad:a6:88:62:54:3d:6c:68:
         4e:72:73:75:bc:09:90:0c:ab:72:c1:46:21:df:88:6d:cc:a4:
         e6:89:cd:7e:a8:57:3c:8c:bd:97:b3:86:77:27:e8:62:56:89:
         9c:ed:3f:d6:b0:9b:2e:4e:9d:e4:1c:1e:fb:f2:87:3a:b9:ff:
         9e:cd:72:c0:29:45:a3:7a:ee:24:85:b4:47:c0:11:4b:4a:13:
         a6:7c:5a:f7:66:48:ff:10:c5:ab:78:ee:e2:9a:0d:66:ff:60:
         9b:f1:e1:87:39:35:12:81:5d:18:e0:65:03:d1:9d:c0:88:39:
         0a:b8:05:cd:02:f7:70:23:e2:67:86:b4:72:a9:9b:41:d0:20:
         40:0d:db:8c:33:60:ce:6d:21:41:c2:5c:0c:7b:68:be:e8:40:
         50:c2:da:d9:22:e4:20:83:86:b8:22:58:5f:39:28:c0:89:83:
         4c:45:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----