Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/967ad948e81b47f5e461f955c58db8da221c1b8f.mft
File:                     967ad948e81b47f5e461f955c58db8da221c1b8f.mft (raw, json)
Hash identifier:          hQewNDBmtBFg3aMdJJpxLLC/ZsiPbVyisGLD/kHJGjE=
Subject key identifier:   94:53:29:28:76:4C:DC:1C:91:7F:15:10:04:19:F2:A3:23:59:BB:72
Authority key identifier: C3:ED:0C:B2:E4:DD:97:79:69:F8:9A:91:B1:C9:C5:68:4C:EA:26:0D
Certificate issuer:       /CN=967ad948e81b47f5e461f955c58db8da221c1b8f
Certificate serial:       289172
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/967ad948e81b47f5e461f955c58db8da221c1b8f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/967ad948e81b47f5e461f955c58db8da221c1b8f.mft
Manifest number:          0E0C
Signing time:             Mon 15 Apr 2024 02:21:57 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:15:29 +0000
Files and hashes:         1: 45fae6cc88719d17efe14ecd0e5eb651955861a8.roa (hash: IEin8Q9nxv0s81qKVuAoExXCFGtRIwDK75s4fDsMyi4=)
                          2: 967ad948e81b47f5e461f955c58db8da221c1b8f.crl (hash: MM7rbKkvDhLy897YKQsp1EvN0yoWnqSEpY75lQ6Ylyo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658674 (0x289172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967ad948e81b47f5e461f955c58db8da221c1b8f
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:15:29 2024 GMT
        Subject: CN=f8f19dab76208f48e78d657bd5dd3c4fb2f7cd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:90:f6:39:28:51:2d:c7:cd:12:62:10:c2:41:
                    bb:df:bb:a1:40:8f:31:e2:32:b6:ce:d0:c7:ee:9c:
                    a9:3c:93:a8:c2:34:7a:97:fe:d0:37:e8:c3:bb:de:
                    67:43:71:c5:bc:53:a9:50:57:42:9c:14:54:9d:a7:
                    b0:87:b6:c5:23:2e:a1:d5:32:c5:f1:5c:34:35:3d:
                    82:6a:45:db:6e:e0:dd:71:17:08:97:3e:58:68:32:
                    f9:e7:0f:da:c8:f2:44:bd:15:c2:40:57:a4:c5:30:
                    c2:18:74:45:2a:23:2d:e9:df:8b:1f:fc:a0:e6:21:
                    04:02:ad:c3:66:c6:54:79:a8:81:a0:a0:ca:22:8d:
                    eb:17:70:a2:b6:b2:d2:f6:ab:5a:6a:f1:95:0d:85:
                    5e:a6:cf:d9:34:de:55:91:e8:bd:d8:9d:7f:e7:1a:
                    05:71:49:fd:1f:32:83:7f:59:6a:99:0d:13:30:a1:
                    3f:e6:4e:18:a2:dc:ec:1f:b1:90:1f:76:42:47:f0:
                    bc:86:b2:a1:07:59:39:68:f1:eb:f9:5d:04:e1:e1:
                    5a:72:96:a9:60:6a:ff:cd:97:ff:81:af:7c:06:b9:
                    1a:f2:5c:f4:8c:96:58:7e:b5:1c:a6:ef:07:5d:56:
                    c8:72:83:30:29:6e:e0:8d:f1:38:3e:28:8a:a9:2d:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:53:29:28:76:4C:DC:1C:91:7F:15:10:04:19:F2:A3:23:59:BB:72
            X509v3 Authority Key Identifier:
                keyid:C3:ED:0C:B2:E4:DD:97:79:69:F8:9A:91:B1:C9:C5:68:4C:EA:26:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/967ad948e81b47f5e461f955c58db8da221c1b8f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/967ad948e81b47f5e461f955c58db8da221c1b8f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/967ad948e81b47f5e461f955c58db8da221c1b8f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:48:01:f5:7c:30:0a:ec:ac:fe:d7:f1:75:70:e8:e9:f8:
         c4:b4:29:a2:b8:c0:ac:86:34:5c:1c:41:79:a5:f8:59:2f:87:
         4e:b8:18:c7:0a:8e:28:ec:db:ab:c2:e0:77:46:d0:04:e1:02:
         7c:b4:9b:ab:71:73:53:d8:01:4b:ef:ee:73:1f:15:b4:9d:91:
         31:e8:b9:1b:06:2c:70:24:15:af:79:33:89:10:bc:a6:6e:7a:
         76:39:d1:0e:ff:ab:27:e1:38:ed:e3:4a:ff:52:dc:1d:a2:1c:
         17:8c:59:8f:99:d3:ac:f5:ca:f2:49:f9:f7:b9:cb:e5:53:c5:
         bf:95:9f:28:2f:40:2d:62:83:01:60:c0:37:ab:1c:cf:17:f7:
         25:7f:9e:47:d8:c6:c8:4b:29:77:fc:ad:ba:5a:79:8c:02:5a:
         80:a4:fd:2e:5d:02:d9:99:bc:a7:62:8c:83:e9:70:f4:57:8f:
         4b:0c:1d:82:5d:b9:01:ac:8e:77:81:71:e6:3d:9b:3d:66:02:
         3a:bd:99:c6:bc:dd:d8:6a:77:50:5a:5a:60:df:6a:bb:07:59:
         f6:f7:e3:f8:de:73:49:d9:0c:f0:68:b9:9e:b2:a7:b4:dc:2c:
         99:68:b6:d1:f5:90:5c:0b:a2:a6:cb:39:fd:37:c5:3c:ea:d5:
         a4:5d:4a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----