Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.mft
File:                     0127eff5fb89d4f04f362b89beb72d612147af7f.mft (raw, json)
Hash identifier:          Dh/0Wm3nbIhKc+omJtUDSzSP0jyBtxd/U6bL0Mg3GL4=
Subject key identifier:   A5:F0:F8:4B:3B:B4:51:BA:52:FB:E9:EE:7A:4C:F3:01:06:D6:CA:DE
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       278AEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.mft
Manifest number:          0DE7
Signing time:             Sat 30 Mar 2024 18:20:37 +0000
Manifest this update:     Sat 30 Mar 2024 17:20:07 +0000
Manifest next update:     Tue 02 Apr 2024 20:14:07 +0000
Files and hashes:         1: 0127eff5fb89d4f04f362b89beb72d612147af7f.crl (hash: WSlSbPaorMols2iMUoykgYCqkj/LJMT2JUdjoY9nJc4=)
                          2: 310ab2e11bf6ae050c8f7022c5a7936bbce3a230.roa (hash: +Hk/tYotRX36gpnojVZAhbDqgmT0/q66PDpRQi6KrUA=)
                          3: 3bc46b12b3233ad9c9a12d181180d7bc0050961d.roa (hash: YZuNokzBDS6ti51mEea9+LkSeeKDNE1d+hI+0vgXBMQ=)
                          4: 77ec6215b907ea664bbcec1e7ba4edf820805497.roa (hash: onfGagMbHj+BUc73Qlh91tBQxhk650rbdo67lUZnuDU=)
                          5: abfd90ca1b150823df4316cc8a10795127605327.roa (hash: nz0Uy8I7jW104MAm0kPdpr2Eq9RBkxMmnBryttTs1Kw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591468 (0x278aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Mar 30 17:20:07 2024 GMT
            Not After : Apr  2 20:14:07 2024 GMT
        Subject: CN=5600fe8e46484c010745459b89ecf816b0bb95e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:6e:04:80:04:49:dd:39:5f:5f:79:67:0c:
                    69:f1:ad:ab:ac:7b:18:99:7e:a8:32:eb:77:ce:99:
                    14:09:0f:4c:2a:ba:c3:07:7a:b1:cc:06:60:cb:de:
                    9e:05:d8:83:c0:5d:49:41:80:08:66:f6:db:a0:61:
                    25:7f:0a:c3:bd:69:87:a6:c1:4f:37:60:84:80:15:
                    61:a2:b6:c7:f2:12:26:6a:9f:5d:41:90:9d:82:0b:
                    39:51:a5:58:a0:62:3b:23:1c:38:44:d7:ca:4c:9a:
                    74:fc:73:b9:40:db:fa:1f:4c:d1:2f:31:67:84:2a:
                    79:f7:45:44:78:ca:7f:16:1c:f5:5e:b8:22:6e:6b:
                    e0:48:48:b1:29:0c:4e:a8:e6:18:e0:17:2b:bf:44:
                    74:18:e3:fc:82:4a:15:ad:99:44:f5:39:71:27:46:
                    84:df:3b:b7:b0:43:e6:6d:af:6f:1b:8b:1b:ac:d5:
                    de:a5:f8:1d:93:65:5a:15:59:a5:81:03:62:b4:5f:
                    d5:f8:43:86:48:8c:a6:d1:56:48:ac:f9:53:dd:88:
                    e3:d4:56:32:09:e3:55:82:54:e5:b0:96:09:ec:ee:
                    41:99:3f:05:65:44:d5:a3:8c:69:29:bc:3d:ad:d6:
                    68:8d:b8:74:97:ad:1c:4b:02:a2:55:32:7f:b9:13:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F0:F8:4B:3B:B4:51:BA:52:FB:E9:EE:7A:4C:F3:01:06:D6:CA:DE
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4b:f4:2c:ee:af:f4:b8:47:97:43:2c:37:ef:80:ce:0a:d1:
         b4:cb:42:f9:6a:25:a3:dc:2b:fc:17:b8:ae:5e:3d:43:f3:14:
         c3:0e:99:ee:8b:7b:88:d6:e0:ea:71:30:7b:9b:6e:1e:35:67:
         41:f3:7f:a9:45:c2:dc:9d:e0:b6:90:e6:33:22:49:56:7e:0e:
         f3:f9:59:82:a6:74:fb:d2:1f:02:a4:6a:d8:a9:52:40:27:78:
         b5:57:7e:4b:df:18:32:91:09:74:70:8a:6c:6b:40:df:c6:8c:
         61:e5:4d:d7:83:74:6a:24:30:15:27:9f:18:e0:d7:be:05:fa:
         9a:b3:5b:09:f8:ac:33:4d:f1:a2:eb:aa:2c:03:05:3f:22:26:
         2d:ba:7c:c9:17:d5:87:60:56:81:ba:56:b4:5c:cf:0a:09:f9:
         34:b0:a8:a7:63:b6:3c:6b:89:7c:b8:8e:db:d2:cf:7c:94:b0:
         55:07:3a:a3:c6:96:9b:00:07:ab:89:a7:f5:da:0a:f4:98:c3:
         dc:60:12:71:7b:a8:5d:52:25:a6:71:07:27:87:d6:9e:6d:d1:
         20:f0:59:e5:87:c2:e5:72:a7:a3:b5:43:1a:76:d7:5d:2f:82:
         67:b4:92:64:7e:bd:69:e8:ac:dc:38:c8:a8:6d:2f:09:f8:5a:
         cc:de:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----