Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.mft
File:                     7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.mft (raw, json)
Hash identifier:          Rlnij3ogGANBDLbsrPoHA+7nZrLJEraGjNu8MfDmKTs=
Subject key identifier:   FB:AA:AD:52:7B:3A:39:99:AC:2F:7C:1D:7E:35:63:C0:91:E5:BC:D8
Authority key identifier: EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88
Certificate issuer:       /CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
Certificate serial:       131DD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.mft
Manifest number:          09BC
Signing time:             Mon 15 Apr 2024 05:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 08:11:17 +0000
Files and hashes:         1: 1bf3a6faab9b85b75116af35b7880c162c2284d6.roa (hash: sPQBRdcL0Nl0MdM3XambbLgjsd+4ovfLqXCYaD0ObDo=)
                          2: 3a8d1a8682f18a000c36377dcc532cf37b8a4271.roa (hash: RwxfFkTJdDhBGJME8oNSfLICzGI62INO+D/+cW4/wbI=)
                          3: 56723428e241ee5857e40e454965cc06199b00f2.roa (hash: rTfZsXvbl7AONsLG3hyzIlGR7e25NpoENSIzuru4Sz0=)
                          4: 7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl (hash: 5q6u/riq/mXLuyafWjXtkYWeaCicI/yTkjOAOTxES6s=)
                          5: 86abb6b9302dfad5eca9a6cba301c84e0d0b87df.roa (hash: VjydSKWs/GSdjG5HPDJTIBJ6utscL/morxI8xYlXpGw=)
                          6: 94da7fd93a12fae42a62fd6c0b137836c199c678.roa (hash: HvHiUTzm/ILh08hCv2YrG2Bx4GyMX028yzgRIlCi6xo=)
                          7: eae09291da1391c4b380ac60648879231bac4b76.roa (hash: cQIITepbS13btZ66tOKqzLVt41+Sw/FxzXawezc1Uro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252817 (0x131dd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 08:11:17 2024 GMT
        Subject: CN=98f8c64b4c5b1a4feecea0545125313a8691c1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:eb:25:2f:78:6f:7e:91:a5:29:64:2d:06:
                    89:07:3a:bf:02:9d:55:e8:b1:48:bc:e5:92:15:a3:
                    ee:f3:9d:ed:86:1d:f0:a0:28:4b:79:21:8d:ee:ba:
                    9e:68:bb:5f:dd:f4:51:c2:da:db:c7:9c:e3:a8:67:
                    f3:10:3f:96:c5:e5:0b:f5:ca:a4:fb:a4:69:6f:a9:
                    bc:9e:33:86:3a:b5:50:c2:b6:65:29:29:2b:68:3a:
                    d1:be:94:fd:75:30:26:76:0c:3c:83:c2:94:2b:0d:
                    29:5a:cf:fe:ad:4a:06:09:ac:2b:61:b7:9f:4a:c3:
                    51:c6:d2:f7:30:34:d3:99:fd:3b:b7:8a:cb:10:1f:
                    07:7d:bd:17:39:4a:cc:04:e0:b7:e2:10:d4:1c:64:
                    85:e1:ec:8b:fe:c8:e0:85:42:f2:e7:b9:13:3d:70:
                    5b:99:d1:45:24:66:b7:48:cf:89:8e:ec:43:87:77:
                    4e:23:18:42:90:56:17:b8:4b:f3:e5:b8:1c:a1:3b:
                    2a:32:e5:22:99:d5:bb:8e:f1:b6:f1:e6:a7:1e:3b:
                    8f:0c:63:06:1d:f4:17:c6:5a:00:dd:48:15:74:4e:
                    47:69:fe:8f:a5:2b:11:47:b6:d6:71:8d:77:3f:1d:
                    08:89:16:b7:88:f4:2d:27:67:82:3f:02:6c:1b:64:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AA:AD:52:7B:3A:39:99:AC:2F:7C:1D:7E:35:63:C0:91:E5:BC:D8
            X509v3 Authority Key Identifier:
                keyid:EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a9:e0:10:b6:c5:94:01:4c:b9:b8:c7:c3:26:f3:64:c3:c3:
         83:1f:63:eb:c6:d6:ed:e6:84:d1:9e:47:42:0c:b3:8b:77:54:
         5c:95:96:0e:72:59:a3:da:45:a0:49:45:98:d9:83:de:e8:60:
         93:11:fb:f2:6d:cc:d5:f0:49:54:78:71:5f:c5:2e:0c:62:56:
         e4:d3:04:69:f8:f3:6f:df:de:8e:8d:72:be:fc:85:ac:63:6d:
         c8:9b:b4:8e:fc:44:b3:bd:b7:3f:e6:1b:37:37:25:57:95:3e:
         18:25:31:fe:e5:fa:2c:1e:15:77:b5:cb:45:52:1b:07:3d:1e:
         43:ff:73:b7:39:73:e5:03:29:e7:94:f1:22:54:73:55:e6:bc:
         89:39:06:7e:ea:69:62:fd:21:f6:25:55:35:8d:ee:02:20:de:
         36:27:45:7c:44:bc:ca:69:9b:2d:62:2f:82:b7:a9:d6:bf:f5:
         c5:a4:78:f3:6d:5d:a7:98:21:b6:a8:c6:f2:5d:2a:2b:09:6c:
         42:2e:ba:db:3f:73:af:c0:e3:6e:c0:6b:51:b3:3d:51:74:53:
         39:d2:fa:44:5b:22:9d:23:b6:7a:59:da:09:69:c4:79:46:90:
         ca:5b:eb:c5:2f:09:83:06:f8:09:4a:18:45:42:c2:25:d1:fe:
         f3:0b:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----