Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/005fd53f-1b74-4ae1-9065-238e483fafa0/954215b7e138f59c8d5c180e4e67f38a3a575722.mft
File:                     954215b7e138f59c8d5c180e4e67f38a3a575722.mft (raw, json)
Hash identifier:          c7uPXm7z28GaumhY3yZ7+sPaz/jhYNDBCG/HO47KS2I=
Subject key identifier:   22:FA:4B:57:89:57:38:F5:AC:C2:C0:D0:AE:08:4A:DE:69:C3:44:23
Authority key identifier: A5:20:F9:17:07:B4:77:7E:A1:D4:52:26:D7:EE:F5:70:AC:31:0E:09
Certificate issuer:       /CN=954215b7e138f59c8d5c180e4e67f38a3a575722
Certificate serial:       07CF95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/954215b7e138f59c8d5c180e4e67f38a3a575722.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/005fd53f-1b74-4ae1-9065-238e483fafa0/954215b7e138f59c8d5c180e4e67f38a3a575722.mft
Manifest number:          03D5
Signing time:             Mon 15 Apr 2024 11:20:25 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:33:18 +0000
Files and hashes:         1: 954215b7e138f59c8d5c180e4e67f38a3a575722.crl (hash: ZF0arlUqBVNbQDfxrYEZ0cr5GOqMIq0MVCWuykfVg7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511893 (0x7cf95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954215b7e138f59c8d5c180e4e67f38a3a575722
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:33:18 2024 GMT
        Subject: CN=58cc1608fc49ff56803f20bed52f8235e9784593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:67:95:fe:b5:16:f2:57:6a:08:bd:ee:9e:37:
                    3d:bd:11:ff:41:03:9d:6f:6a:5f:b9:18:51:4f:04:
                    ed:fb:12:6a:db:16:e1:c6:f1:a0:67:74:73:84:90:
                    08:5a:a7:76:3b:04:62:52:f5:0a:da:e8:97:d2:b1:
                    63:22:39:6e:62:f9:90:58:75:46:de:5b:16:a5:4c:
                    ba:f0:66:86:ed:35:83:ff:3f:73:4f:65:79:48:49:
                    5b:4a:6c:0b:99:ad:d0:b8:b8:b5:7d:b5:92:d7:f5:
                    37:10:e2:fd:2b:69:9b:d1:94:c4:fb:e4:39:d3:95:
                    d6:f7:22:2d:f1:f1:02:8c:b5:ad:f7:04:f0:fa:b8:
                    4f:6f:67:cc:f3:37:dc:f3:1f:19:5d:bc:d2:46:2c:
                    3e:89:f2:fd:ab:73:0c:2e:3a:13:dd:85:e2:09:81:
                    03:26:3e:36:34:e4:16:a4:ce:59:22:3d:62:3a:72:
                    24:61:25:3c:d5:1c:5a:8e:32:c0:3c:af:ab:f9:08:
                    be:ce:b6:cc:6e:ea:41:9f:2b:77:7d:67:14:ba:56:
                    fd:85:41:9f:d7:60:75:a2:26:43:9c:5f:ac:92:f1:
                    6e:5c:31:6f:c9:a3:1c:e8:77:ce:8d:ef:a8:9e:eb:
                    29:14:01:58:df:a8:77:a1:3d:73:c2:3f:06:19:01:
                    5d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FA:4B:57:89:57:38:F5:AC:C2:C0:D0:AE:08:4A:DE:69:C3:44:23
            X509v3 Authority Key Identifier:
                keyid:A5:20:F9:17:07:B4:77:7E:A1:D4:52:26:D7:EE:F5:70:AC:31:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/954215b7e138f59c8d5c180e4e67f38a3a575722.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/005fd53f-1b74-4ae1-9065-238e483fafa0/954215b7e138f59c8d5c180e4e67f38a3a575722.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/005fd53f-1b74-4ae1-9065-238e483fafa0/954215b7e138f59c8d5c180e4e67f38a3a575722.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b8:33:06:69:ae:69:80:6a:33:9d:75:f0:3d:96:ca:cc:45:
         bd:7b:cc:6d:fa:58:9b:2f:a0:db:31:54:2c:38:9d:c7:8e:c4:
         17:31:08:c1:6b:29:12:f7:a2:b7:f0:61:de:e7:b4:99:e3:2f:
         88:8a:e2:c8:cb:b9:0c:75:05:84:ec:90:36:c6:4b:a1:40:d4:
         48:a9:79:ad:8c:aa:5e:60:5b:f3:c9:71:0f:4a:97:5f:c4:9a:
         7f:16:79:d0:2e:09:cf:e0:0b:70:8e:24:ff:a1:90:de:36:10:
         cc:a3:bc:28:75:01:a7:7e:ce:e5:86:3e:9f:2e:18:6e:16:9b:
         4e:2f:7d:e0:0f:8d:88:2a:8d:fe:f0:77:2e:a4:c8:79:f1:4f:
         6c:40:89:c7:a0:fa:77:c3:db:ed:95:81:dd:e6:14:9d:2a:4c:
         fc:38:a9:85:bf:75:30:5e:1c:08:e8:a0:14:b5:c0:c8:f9:ed:
         c4:f7:8f:6b:65:22:c5:36:92:75:a9:98:83:24:70:63:45:ac:
         c2:23:b2:a0:c5:c7:a2:bf:bf:05:40:0e:c2:1f:d8:6d:22:64:
         90:f3:97:18:0d:f3:b1:20:19:f1:89:0b:5d:7f:c0:20:e2:be:
         66:5c:9a:2e:3c:24:d4:d7:72:06:74:06:ab:5f:3a:a9:d4:c2:
         ad:75:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----