Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef4aaf3-3259-48f0-a2f9-b27fd4da2f87/25d5cce30222e125dcd0e3e703615e77b6c2353a.mft
File:                     25d5cce30222e125dcd0e3e703615e77b6c2353a.mft (raw, json)
Hash identifier:          FimpLmtWR3BZuXyLPScMZpe4posy6+AgZWh25JRBPtg=
Subject key identifier:   E2:76:27:78:42:A0:F3:E1:01:32:6E:33:78:24:0D:54:D6:2F:D2:4B
Authority key identifier: 7C:08:51:80:F9:2A:B2:2D:CC:BF:60:C6:54:EE:FD:1B:DE:93:B8:50
Certificate issuer:       /CN=25d5cce30222e125dcd0e3e703615e77b6c2353a
Certificate serial:       27B563
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d5cce30222e125dcd0e3e703615e77b6c2353a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef4aaf3-3259-48f0-a2f9-b27fd4da2f87/25d5cce30222e125dcd0e3e703615e77b6c2353a.mft
Manifest number:          0DEF
Signing time:             Mon 15 Apr 2024 04:21:35 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:08:26 +0000
Files and hashes:         1: 11ff360c02198b82182b37c5d7eb3b153f7c80fd.roa (hash: kwvfmJ/93C5Koog/P6wHBV3lsxdjYCQKlV8w5iZ0Mks=)
                          2: 25d5cce30222e125dcd0e3e703615e77b6c2353a.crl (hash: Ctxb5/wKWulv50fp+QqRN+FYHu3NmArFeHql1WoVE1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602339 (0x27b563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d5cce30222e125dcd0e3e703615e77b6c2353a
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:08:26 2024 GMT
        Subject: CN=194ed5e6ed32e9cc256e0dda6d240fca86fc24c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:08:b7:c3:8a:42:7a:73:c1:43:82:80:e8:
                    85:2e:67:bb:f3:98:60:85:fc:24:67:b4:49:65:9d:
                    9a:e3:7f:34:79:07:ec:6f:56:1d:34:18:0f:9d:50:
                    5f:9a:83:1f:46:76:c9:28:0f:55:aa:37:b0:cd:c7:
                    fb:4b:f0:15:dd:8a:75:f5:1a:1f:c5:3c:6a:33:e2:
                    7a:e0:e2:2f:fc:2d:a7:d4:b0:10:0d:35:76:dd:e7:
                    d2:ca:df:73:05:3d:d7:63:5d:9f:ff:91:0a:e0:64:
                    b9:40:6e:dd:a1:82:0d:2d:32:92:9f:3d:28:6a:b2:
                    1b:d2:98:db:a5:77:05:a6:29:7a:39:8a:67:e7:6f:
                    0d:50:8d:e7:74:b3:b9:61:74:78:44:50:49:a9:88:
                    76:71:85:ec:98:c2:c8:9a:06:fa:4e:80:f2:d7:e5:
                    06:07:0d:a2:86:e7:b0:5d:89:40:7b:d5:a4:36:48:
                    20:1a:11:ec:8d:09:91:1d:e4:4f:e8:39:fa:8f:27:
                    fc:87:7a:ca:df:88:84:ab:b7:d2:26:15:40:46:e5:
                    5f:f6:f7:01:c4:83:3d:63:8e:a6:01:83:8d:3e:f5:
                    a3:8f:c2:c0:96:75:e2:83:6f:62:b8:bf:6d:06:44:
                    ba:34:0c:9e:71:b9:3e:d0:e8:1b:81:4d:78:9c:3f:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:76:27:78:42:A0:F3:E1:01:32:6E:33:78:24:0D:54:D6:2F:D2:4B
            X509v3 Authority Key Identifier:
                keyid:7C:08:51:80:F9:2A:B2:2D:CC:BF:60:C6:54:EE:FD:1B:DE:93:B8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d5cce30222e125dcd0e3e703615e77b6c2353a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef4aaf3-3259-48f0-a2f9-b27fd4da2f87/25d5cce30222e125dcd0e3e703615e77b6c2353a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef4aaf3-3259-48f0-a2f9-b27fd4da2f87/25d5cce30222e125dcd0e3e703615e77b6c2353a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:d6:3c:1b:d2:97:e5:af:c9:26:0b:d0:a3:f7:32:58:59:
         f7:48:c7:44:15:e5:20:e2:75:62:6a:78:08:1f:6f:cc:ac:97:
         26:6a:66:83:8d:35:81:cb:24:2e:b1:7b:ff:d1:86:59:9d:65:
         d4:e4:f1:d3:a1:5b:9f:74:10:02:35:d8:a5:a3:cd:f1:a6:2c:
         d8:0f:15:57:0f:01:2e:56:5c:fc:fe:b5:76:eb:50:2c:ed:7f:
         22:40:13:6f:37:4d:86:6b:ae:d8:9f:b4:e8:d1:f4:d4:b4:4e:
         60:22:f6:7c:fc:0f:22:ac:17:d6:53:1a:60:7f:e3:91:01:f7:
         26:92:35:5e:44:be:1b:3d:33:6d:ea:5a:29:cd:5e:a9:1b:f5:
         2b:fb:8a:0e:8a:1f:17:fe:fc:8d:b4:8e:15:bc:dc:04:06:c3:
         d4:a9:95:a5:6d:9a:db:04:fd:fa:39:f1:c0:af:6e:39:2d:f4:
         36:24:5b:af:9a:a3:7b:52:f6:cd:92:4f:a9:c5:78:0f:34:d1:
         3f:5f:7b:b0:8a:72:5e:c4:d5:33:1a:05:db:d2:8b:62:bd:b3:
         d8:8c:9f:65:fc:3b:9d:0f:cd:b0:04:c9:8c:51:59:1d:1d:be:
         fb:ac:16:e6:25:80:e7:67:c3:a5:1c:09:15:13:a0:e9:ee:69:
         d7:c6:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----