Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.mft
File:                     bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.mft (raw, json)
Hash identifier:          H3ySCWWCp7xh3gSlAsv03atxl7iJDqrFHav3Nm4YTLU=
Subject key identifier:   A8:84:8E:CA:C0:8C:8D:57:0D:2B:C1:AD:72:09:5D:32:FF:54:CC:E7
Authority key identifier: 09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E
Certificate issuer:       /CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
Certificate serial:       120D9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.mft
Manifest number:          0922
Signing time:             Mon 15 Apr 2024 09:21:02 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:23:18 +0000
Files and hashes:         1: 49159c097c4e081b8113085cfdbd9c2eaeab50e9.roa (hash: +sSAlGeF69kOqbIhmb2KPSw1obX/WgPpcWN/z6wi/yA=)
                          2: 5cbeab42a6a898e705d831d31049a0b2d546005e.roa (hash: yfZ/Ob0fGBH3AfTdl5RE6DYibLOts/J2cdRElojk7vY=)
                          3: 67e5be78c6c66a84b856a66709f532008bd99869.roa (hash: 169gAcbVLtHMwEmkeA0Xx+SfbyT+VfBcnC5qUDfmdn4=)
                          4: 9d5e3348460567c7572faa3e28a0578db95e732e.roa (hash: QKpiXXDh8kdFh1uJukAUvE05/lEKeXLWr8MSVwxG7XI=)
                          5: bb7538e72ec41686ac50a5d2c2dfe54b39fd6e33.roa (hash: uupq+pYMPYScGnnu9g9pbWsEpLMgncN23Cu52yJUG94=)
                          6: bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.crl (hash: XET+ceiiM+gwljpume7979e1mliiIjbYJAkKcJFgAYg=)
                          7: c4cbf591bc70717fe0a14f1dfa05fb64d40168c6.roa (hash: /uA9j2P/Yi+GuJhfw+pVuvswvOitfKUdVBNP1w6JgD0=)
                          8: da230defd48d3d127072d5ae353cd7fa95ddb310.roa (hash: fW3sAVASZ+O4GNaU7I9o8Z217ChyamsAERf2KKlrsyc=)
                          9: fdbf963c68adf8eacd6edaed6715a7b45e48737c.roa (hash: yFriy534piifkqnBS4CUgU+26fsAgcuXwmfyEIemuPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183131 (0x120d9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:23:18 2024 GMT
        Subject: CN=200dbb41d398d693bde32cc64d7471ab83892880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:4a:d5:f5:45:ab:9c:b0:22:b2:5f:67:8d:
                    33:dd:08:97:39:a4:ac:30:89:c2:e6:26:f3:cb:52:
                    f0:57:66:d3:6a:b3:32:d9:be:06:05:4b:d0:cd:3f:
                    5d:4b:4e:99:a0:ab:29:b9:89:17:58:57:8d:51:41:
                    59:f3:80:c4:f7:02:fa:72:89:e8:d9:47:f5:0c:b8:
                    c8:83:e6:2e:89:ed:0e:7c:9a:9b:91:67:01:77:ed:
                    4c:bb:4b:a6:1b:ef:1e:87:88:67:68:65:61:d7:62:
                    ab:a0:47:66:ef:a0:09:5f:0d:f0:01:1a:29:f8:71:
                    da:5e:37:1c:80:47:0a:85:77:f0:09:f2:f9:f7:d1:
                    8c:b8:e4:23:39:13:f7:5a:b2:c5:bf:71:91:a0:8a:
                    7b:0f:ad:26:67:d9:f6:49:5c:f7:58:42:58:57:11:
                    f8:1b:e6:34:f3:09:97:6a:a8:a1:ab:19:7a:b7:47:
                    2c:3e:ed:a9:2b:33:d4:d1:9f:3b:28:ec:1c:f4:1b:
                    0c:cf:5b:f7:a7:f6:07:2e:c9:86:b1:dd:23:3e:56:
                    12:63:02:ea:f8:c1:1d:34:f3:3f:30:49:75:9c:99:
                    ea:78:79:15:00:97:85:cb:d5:56:59:44:a3:0a:59:
                    8d:75:8d:3e:25:4c:65:25:21:1c:25:8e:3e:98:6d:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:84:8E:CA:C0:8C:8D:57:0D:2B:C1:AD:72:09:5D:32:FF:54:CC:E7
            X509v3 Authority Key Identifier:
                keyid:09:79:D2:E5:30:32:6D:03:CB:CF:74:CC:C9:7C:68:B4:D3:3F:23:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c1f7034-5aec-4de1-9326-049dc6fc08ea/bfc0e7fb6dd1e9381394d6a43415d9ea2f0fbdd3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:94:70:d7:ec:51:ae:7b:fd:56:57:8b:c5:1a:ef:88:a3:
         b5:32:7d:6b:5b:11:2d:4b:2c:e9:c5:a9:28:1a:3a:ee:a9:25:
         a5:f3:3e:dc:13:86:94:38:19:15:20:f1:15:e0:5e:69:e7:29:
         ed:3b:5c:16:b8:cb:7e:c0:48:c3:a6:87:24:a4:72:51:b8:18:
         b2:b4:1c:b2:35:50:69:73:0d:7e:f1:a9:d6:54:d5:b0:bc:4b:
         53:0f:12:46:5f:9e:95:15:a6:29:fe:6d:44:06:9a:30:1a:8a:
         ec:dc:06:7a:4b:33:17:62:4e:93:8a:dd:ea:1b:b3:ef:2b:51:
         ad:9d:22:e6:46:10:5b:e7:94:ea:5a:68:bc:7f:b0:21:1c:d7:
         0e:4b:f5:e8:fa:43:5c:27:bc:66:1d:36:f3:20:56:28:81:a4:
         76:e1:0c:6e:16:c6:35:c4:77:43:92:65:89:c6:d1:0f:bc:50:
         0a:a9:7d:67:0f:63:db:e0:75:45:96:58:6e:e4:e4:04:44:b9:
         8f:2b:80:6d:d9:c3:4d:9e:44:79:ef:22:39:38:78:8e:67:e4:
         8a:0b:06:d4:55:15:64:5d:f5:e4:c4:77:61:14:a8:6e:da:1a:
         8f:0c:f9:14:bd:50:48:21:f7:05:8a:e0:c5:d8:fc:bf:fc:dc:
         44:1c:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----