Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/52123ef187606a1f9e354af3d71983ad0a3cd822.mft
File:                     52123ef187606a1f9e354af3d71983ad0a3cd822.mft (raw, json)
Hash identifier:          ulviZLzF72GPi+dVvkJKB/rySsqELn04I08y4P/E7P4=
Subject key identifier:   A9:3A:59:FE:2D:C6:0E:48:25:8B:4D:07:6D:B5:62:D9:42:5D:87:7C
Authority key identifier: F3:C0:32:AD:9D:33:B2:C0:86:87:52:69:91:75:D2:40:F9:68:E8:85
Certificate issuer:       /CN=52123ef187606a1f9e354af3d71983ad0a3cd822
Certificate serial:       288E34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52123ef187606a1f9e354af3d71983ad0a3cd822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/52123ef187606a1f9e354af3d71983ad0a3cd822.mft
Manifest number:          0E0F
Signing time:             Mon 15 Apr 2024 04:20:59 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 04:28:26 +0000
Files and hashes:         1: 20cee5035a34fac16234ff2f20d8736c71ec34a3.roa (hash: P1k4nLvARSFEqUMVBCMcDO4MpEGAta79RiJB4eRJrlg=)
                          2: 52123ef187606a1f9e354af3d71983ad0a3cd822.crl (hash: SqDCbU4TylbeMOuLoZUuLq4vayGS1E0iJUqo7uinoAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2657844 (0x288e34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52123ef187606a1f9e354af3d71983ad0a3cd822
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 04:28:26 2024 GMT
        Subject: CN=be12f2acb4b116fc2cea74c98d35e7feb7a8c5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:4d:61:0c:9b:72:86:8e:56:74:b8:3c:ab:
                    61:c4:a4:88:4c:75:c3:8e:92:a5:74:fe:45:a8:ea:
                    80:e2:5e:99:23:24:a2:a7:f7:8f:7b:bd:1b:f7:00:
                    32:0e:fa:28:c4:8c:57:b9:25:2a:80:24:c5:b9:b7:
                    e5:46:8a:65:ec:99:e7:4c:a1:12:01:72:45:45:be:
                    48:1c:5c:00:4e:eb:49:40:3f:e7:13:31:92:fc:04:
                    76:83:ef:59:c5:a2:ff:fa:c0:96:29:5f:48:57:64:
                    cf:0a:40:61:bb:28:c7:34:7d:61:90:37:77:3b:71:
                    da:ed:fe:c4:92:77:e8:c6:91:99:a3:6f:df:ea:63:
                    10:05:4c:57:72:9e:70:ff:bd:66:7b:cc:21:0b:c8:
                    71:81:04:f8:ab:82:83:99:77:ed:30:86:f1:78:d2:
                    89:e0:5c:01:7b:2a:db:b4:60:c7:c1:eb:7c:f9:b0:
                    1e:0d:05:7c:22:52:02:f4:b7:5c:82:03:06:79:b6:
                    cc:e7:8e:81:a5:aa:b2:ab:7c:5c:25:f6:81:1e:28:
                    ff:eb:b8:c3:ed:95:03:1b:8e:c1:d9:6f:01:8a:e3:
                    b0:11:57:55:6f:24:c8:4e:a8:c1:05:4d:55:5c:8b:
                    0a:b2:b2:05:79:a4:82:b9:fb:97:02:7f:60:e2:2b:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3A:59:FE:2D:C6:0E:48:25:8B:4D:07:6D:B5:62:D9:42:5D:87:7C
            X509v3 Authority Key Identifier:
                keyid:F3:C0:32:AD:9D:33:B2:C0:86:87:52:69:91:75:D2:40:F9:68:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52123ef187606a1f9e354af3d71983ad0a3cd822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/52123ef187606a1f9e354af3d71983ad0a3cd822.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/52123ef187606a1f9e354af3d71983ad0a3cd822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:15:30:6f:72:c7:0b:91:87:af:94:14:28:af:8b:2a:39:89:
         ec:5f:f4:73:9c:c1:20:fa:d4:fb:e6:0c:c8:86:b7:ee:44:1f:
         b7:b2:25:35:8e:e9:25:60:60:62:9e:90:6d:b5:a5:0c:72:34:
         e4:ee:ea:27:eb:d3:bc:cd:51:52:6d:b0:25:e2:03:fa:71:ed:
         1a:e0:79:bd:f1:3a:ea:47:ef:8b:11:b2:41:ec:d2:09:a8:5e:
         0a:9a:c2:16:9d:2e:2f:2f:e2:6c:2e:ac:d2:be:53:c9:2b:92:
         3a:89:ec:d6:ae:a6:44:a4:b4:11:67:c9:d8:ce:50:0c:b3:72:
         6e:8c:55:d7:75:be:6f:a0:5f:01:a0:2b:4e:d7:6e:93:23:1a:
         f3:ca:72:90:cf:d7:a7:ef:eb:b7:88:d2:68:5b:ed:17:76:e1:
         f8:13:9f:06:fe:eb:49:d1:f4:18:7e:17:24:59:bf:79:d7:14:
         a0:0d:f0:41:f5:b9:2e:e7:93:65:04:10:98:33:cf:78:8d:9c:
         63:18:d9:f8:35:58:ab:73:15:af:53:83:fc:6a:42:9c:d6:b6:
         25:0f:5b:71:9f:a3:9b:75:bc:c0:78:01:09:3f:58:eb:51:69:
         f0:e1:71:e3:0e:82:ca:84:0d:11:92:86:c6:84:0c:30:7c:16:
         ef:b3:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----