Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.mft
File:                     950b09210530c2a8f9ddac3b8483a9df5c0f7b70.mft (raw, json)
Hash identifier:          OOobuynRLL+o2tMsmRXZE5Cbh9SD2B7kTlFmV5aIu4M=
Subject key identifier:   A0:47:93:E8:3C:F5:A8:5E:73:D8:32:71:32:C5:B9:FB:37:94:C0:DB
Authority key identifier: 83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7
Certificate issuer:       /CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
Certificate serial:       1AB9CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.mft
Manifest number:          012A
Signing time:             Mon 15 Apr 2024 05:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:13:17 +0000
Files and hashes:         1: 950b09210530c2a8f9ddac3b8483a9df5c0f7b70.crl (hash: +sfdh+two0KpUFUhGHvqTAcOMHxHxU9JgJGsVmX4lus=)
                          2: a723861e0a161874ff7ca018b1b69639808cc2bd.roa (hash: 3tkwPJuMaaTJ87voNcMsOm1up5b4mEtY3UF5JWUAI4M=)
                          3: b98e81bbfd10ff3158e284d535cbd537073a8232.roa (hash: UGgl7u+xrfrMxPpV340wfs0pmKKWKfrscRfv98cDy44=)
                          4: c197d625467d21eb3f35a4079cb24c9a002ba847.roa (hash: 3ksBZtUU58M+E9WEDfQYZOPaTPHM+PG4KqRBr8lof/M=)
                          5: e85d79958964ca1094c5bcc1bbdbba824aacf18f.roa (hash: 6wDKAXUyqjSeQKCniovYOYxhusfsyhTEnrTEiCYuZBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751500 (0x1ab9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950b09210530c2a8f9ddac3b8483a9df5c0f7b70
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:13:17 2024 GMT
        Subject: CN=0e86dee7b4ac3d2f8a4d66288ca4a192229d575e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:32:1d:9a:ca:62:52:3d:ba:37:12:c4:a5:
                    44:0f:0b:0a:32:06:20:07:38:f9:46:71:5e:c0:94:
                    17:56:22:aa:68:5a:ac:24:9e:18:c8:97:33:b6:41:
                    96:be:a3:8c:10:5d:53:ba:55:fc:df:95:12:b3:8a:
                    07:34:c3:80:ef:8a:ca:68:be:d8:fc:22:83:cf:f2:
                    9a:45:72:9d:80:8d:53:97:79:eb:6a:90:6a:1f:e7:
                    95:fe:e3:04:12:62:dc:48:6d:6a:3c:8b:87:4b:36:
                    54:06:bd:36:e4:7d:b7:7f:f7:a4:38:02:13:f8:a0:
                    c3:aa:1e:9d:88:24:31:17:69:fe:56:d8:a8:da:58:
                    b8:a9:bf:4c:d8:3b:ec:8d:3c:42:6e:f6:d7:68:1f:
                    ad:b4:42:bb:9e:f1:e5:28:30:7c:63:ac:7d:af:8c:
                    4f:d0:42:64:a7:a7:cb:e0:b5:d6:10:e0:a2:0c:ff:
                    18:b6:5b:1c:45:20:05:fb:0a:08:d8:c6:41:12:77:
                    80:3a:b3:2e:aa:74:de:79:d2:1e:f6:4c:5b:92:37:
                    c7:a9:4a:c9:a4:42:50:01:08:bd:08:5e:81:bc:a4:
                    16:9b:04:ea:01:9d:31:ca:01:26:d2:43:ca:56:35:
                    38:7c:e2:36:78:81:7d:a9:df:46:43:f5:52:ce:8d:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:47:93:E8:3C:F5:A8:5E:73:D8:32:71:32:C5:B9:FB:37:94:C0:DB
            X509v3 Authority Key Identifier:
                keyid:83:62:47:EA:DD:C7:74:49:96:54:34:30:B7:65:6D:46:60:84:9C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/950b09210530c2a8f9ddac3b8483a9df5c0f7b70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6e:55:19:03:b7:7c:b8:b7:ea:a3:37:c3:2d:67:f5:32:33:
         9f:c0:3d:e9:4d:35:06:54:c6:a9:37:6a:29:cc:d6:d1:ad:5b:
         69:6f:6e:61:8a:47:4f:62:ff:88:de:45:d8:ce:a8:89:00:20:
         6f:3f:d0:13:df:fe:c0:69:51:83:b9:f2:9d:f0:3b:a2:7d:76:
         91:04:4e:8b:70:ce:75:62:01:88:bc:f5:4f:48:a7:d0:1c:c0:
         97:c9:f9:ff:d3:19:7e:00:7e:fc:26:a7:47:c7:57:50:95:2b:
         0f:8a:27:c2:7d:24:a7:d8:fd:9e:33:d2:4b:6f:c6:af:f1:a5:
         0d:93:c7:25:e8:b4:bc:89:0d:5a:fb:d2:e7:68:f3:d0:6c:1b:
         2a:74:fa:d0:3e:d9:43:3d:7b:19:d7:d4:e4:a4:1a:9b:41:55:
         66:b4:ff:a7:d1:60:46:d3:30:52:9a:d8:1d:88:5e:bc:be:d0:
         1e:b6:09:4b:43:d2:33:3c:33:c3:23:7c:b9:ae:19:30:a1:9c:
         c3:e5:f1:c6:cf:b1:e0:5e:3f:af:d4:29:ae:a1:15:b3:d9:f5:
         89:0b:57:d7:e2:46:7b:0a:21:47:a0:c8:42:02:b8:38:cb:78:
         6c:ed:47:7b:70:b3:49:34:70:1a:12:26:9f:f2:23:69:47:42:
         4c:c4:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----