Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d3eb8bd-d161-4d4b-91bc-bdfe763ab7de/df587b2f77bf817a91270574d9018f4b58f2b58a.mft
File:                     df587b2f77bf817a91270574d9018f4b58f2b58a.mft (raw, json)
Hash identifier:          Sh8PbVXlOp61jhPYSlUe0d5cK0enHwrGeUSNyHcp1hM=
Subject key identifier:   49:13:4B:7A:67:89:D8:97:E3:97:39:F6:AF:8C:95:9F:AC:04:8E:D7
Authority key identifier: EB:09:33:63:F1:8C:13:4F:F2:87:50:1B:D2:46:04:B2:1F:24:CF:25
Certificate issuer:       /CN=df587b2f77bf817a91270574d9018f4b58f2b58a
Certificate serial:       085C7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df587b2f77bf817a91270574d9018f4b58f2b58a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d3eb8bd-d161-4d4b-91bc-bdfe763ab7de/df587b2f77bf817a91270574d9018f4b58f2b58a.mft
Manifest number:          0424
Signing time:             Mon 15 Apr 2024 04:21:03 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 06:45:26 +0000
Files and hashes:         1: df587b2f77bf817a91270574d9018f4b58f2b58a.crl (hash: YWAy2hQTfwSs9nh0jYmcUz8fjxfxQ6KNo5Gnw46kKVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547962 (0x85c7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df587b2f77bf817a91270574d9018f4b58f2b58a
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 06:45:26 2024 GMT
        Subject: CN=f071c2a33407a2ad1feafa4977b65676acbdb3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:40:2b:94:2c:c7:e6:2e:fb:f1:6e:ed:49:3c:
                    2f:cf:7b:f2:49:de:63:70:52:71:01:ef:2c:c9:ea:
                    71:6d:a5:30:44:00:b6:85:86:81:79:6e:96:e8:23:
                    28:2f:0a:31:05:00:48:02:68:9b:de:de:ff:f6:1f:
                    05:4d:77:a7:32:9d:a8:28:48:dd:f7:c1:f1:ba:e7:
                    6b:34:f5:46:fc:18:88:ae:95:e7:29:93:14:a9:c8:
                    3e:a2:0b:cb:bf:f7:fc:0c:ec:a7:c9:dd:bd:8b:8a:
                    2f:aa:3a:7b:31:62:e1:2c:e3:b3:4c:37:ef:a4:94:
                    56:c9:f8:2c:f3:b7:82:4b:73:ab:20:a1:61:f1:d2:
                    03:ad:84:f1:90:b8:b6:92:2f:e1:79:8e:8d:18:c7:
                    a1:00:ec:8a:03:ec:f1:20:16:e0:64:ab:6c:e3:35:
                    3b:da:bb:a1:e4:b7:db:33:c2:43:5b:ac:19:89:df:
                    c2:51:cc:22:36:c6:4c:7d:82:c9:a6:85:5e:b5:30:
                    e0:93:1f:81:8e:30:11:14:a3:33:4d:e4:ab:35:a8:
                    b1:a9:f4:1d:07:dd:25:64:3a:06:79:75:4e:a4:94:
                    b9:07:a4:bb:b0:bd:6e:89:ea:c3:17:4a:29:1c:27:
                    26:dd:17:ba:bb:10:ea:19:f5:30:d9:84:ea:ca:70:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:13:4B:7A:67:89:D8:97:E3:97:39:F6:AF:8C:95:9F:AC:04:8E:D7
            X509v3 Authority Key Identifier:
                keyid:EB:09:33:63:F1:8C:13:4F:F2:87:50:1B:D2:46:04:B2:1F:24:CF:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df587b2f77bf817a91270574d9018f4b58f2b58a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d3eb8bd-d161-4d4b-91bc-bdfe763ab7de/df587b2f77bf817a91270574d9018f4b58f2b58a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d3eb8bd-d161-4d4b-91bc-bdfe763ab7de/df587b2f77bf817a91270574d9018f4b58f2b58a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:10:fd:88:bb:cb:6a:0f:21:b7:04:a6:7c:21:ff:d9:ee:b5:
         92:2e:5b:85:3f:2a:4b:4b:63:41:01:40:23:7f:6d:e0:c9:9f:
         fa:04:90:62:ea:32:1a:13:db:83:c8:5c:07:03:48:c6:97:f0:
         cc:bd:e8:86:87:3f:21:54:bc:d1:70:39:95:91:cf:af:77:fd:
         e8:4b:73:db:e6:8f:76:98:96:b9:a8:e0:c5:e4:eb:a9:55:ce:
         bc:4d:81:2f:7c:fe:08:b6:ae:3c:3f:d6:d5:46:f2:a3:7c:1c:
         65:c1:7a:db:f6:29:b9:6d:5c:68:4e:cf:53:c1:4e:68:12:eb:
         97:6e:b1:ce:a3:04:ce:50:0f:09:37:12:d5:4d:bc:ce:7f:a7:
         af:39:46:ba:11:a9:28:ef:cb:8c:2e:50:49:43:dd:ab:72:b4:
         d0:32:f1:9e:b6:14:8f:04:a4:45:fc:28:ba:a9:5e:f9:3e:41:
         75:a8:48:83:a3:7d:09:e6:1c:8c:02:ca:6b:01:eb:24:52:e1:
         67:e5:99:6f:25:26:fc:50:17:83:74:6c:16:93:f4:43:36:32:
         e7:e7:58:f0:a9:ea:40:78:68:62:75:bc:1d:23:6f:c6:11:7c:
         1a:7a:0b:9e:dc:88:43:d5:54:44:62:13:b4:b7:19:c8:bd:0f:
         0f:fd:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----