Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.mft
File:                     1e11687078667bdcd452bb7b0f00bb86dcfed972.mft (raw, json)
Hash identifier:          qx+uXpV6ijUEv/7jvbxiS8iYSi2YCWDemoJi1nu3kJA=
Subject key identifier:   36:E9:04:E2:AC:17:F7:43:85:48:BD:36:DF:4F:F3:8D:F3:8A:68:15
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Certificate issuer:       /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial:       1F17E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.mft
Manifest number:          0DFE
Signing time:             Mon 15 Apr 2024 09:20:40 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:24:18 +0000
Files and hashes:         1: 1e11687078667bdcd452bb7b0f00bb86dcfed972.crl (hash: nLUvfHtJgT2uvH4gwp7ykJSTSd07C77hNIaiIe8uHiw=)
                          2: 4449589dd6e5fa7edfb88d4abea8a2e1d4cc64b3.roa (hash: CcIoDY/ubkMn4AQGiMTV6yAYM3cJuXyN5b4BGqJUgiI=)
                          3: 7ea5ba6c29e99fd55eb42dddcb978de41956cd1f.roa (hash: V2h7lY9T2IuotgLTlkXZ5YHi/m47s9Qc1jS22HG2EWQ=)
                          4: 98642092534d5dc65a953f126981355361d6c35e.roa (hash: a/PmeG+YzAvqP1tUfE9SIn94MyEfAlz7QjK5zRLEnxs=)
                          5: 9884b217497aa62dc38e8858c1ba83cf0be0f366.roa (hash: JmiMWis6ZWyh22QEyelkl2JsGnZ0REie0Pxh9KdaUl8=)
                          6: b8750a6cff6838fa74ccc0d33b7eb5cdae93a404.roa (hash: ZEvqNJXTzFcXMSIaG/KotJ9VWgWD7tklu6sYRP080zU=)
                          7: d519ee74ba7d8ba819f9e48781c86aec75bb809b.roa (hash: UHiBEjBm15ZBSr2XvLqIx6Z0Sa1PM/1iFwCz3hodwoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037729 (0x1f17e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:24:18 2024 GMT
        Subject: CN=c98818a645b4cbae6d863fa3c6fc83054dd4911e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:e0:b5:74:2f:b3:bc:3e:b0:12:6c:c5:9e:
                    bd:3b:ab:ae:93:81:f6:d5:c1:e0:9e:65:43:39:56:
                    3d:f6:b5:fc:24:f9:5a:97:20:41:82:59:e5:c6:39:
                    9d:46:13:bd:57:86:9e:4f:38:c7:89:5c:b5:75:58:
                    0b:13:fe:c7:86:57:ac:b6:e0:cc:e4:95:15:42:5a:
                    be:06:e2:50:fe:6a:12:fa:db:cc:33:c1:5e:bc:db:
                    d8:6d:33:f1:6a:f1:c8:23:8d:00:e3:5a:c1:aa:71:
                    90:c8:42:67:72:05:a0:86:9c:2d:71:2b:86:a8:70:
                    e7:90:1e:b2:a5:b2:e8:b4:a2:86:be:20:39:ed:62:
                    da:dc:b1:12:4b:28:2b:54:0f:9f:95:d9:8d:18:06:
                    90:fd:23:4f:1c:ec:ea:49:63:1e:7e:be:cd:54:f9:
                    1d:df:e4:0e:74:40:0a:f6:0e:10:ef:d2:5a:bc:03:
                    a6:97:2f:22:39:e6:b9:1d:d6:e5:00:ab:d6:5c:78:
                    65:02:b0:77:eb:ac:64:91:27:11:e6:94:6b:af:f9:
                    e0:a1:6f:75:de:a7:09:e8:f9:94:22:67:8b:c2:c1:
                    1c:36:f7:06:9b:d5:23:57:37:f5:e8:6a:e5:0f:d6:
                    b0:f9:f4:c3:06:29:93:c3:c0:fc:51:2e:7c:1d:c8:
                    bc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E9:04:E2:AC:17:F7:43:85:48:BD:36:DF:4F:F3:8D:F3:8A:68:15
            X509v3 Authority Key Identifier:
                keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:97:de:06:58:1d:72:37:57:f1:04:62:f9:04:1b:91:60:86:
         82:63:97:47:b3:a9:f9:7b:7c:d4:a3:de:86:b4:82:2b:e9:ba:
         a7:bc:bf:c7:a1:e6:ad:f4:0b:eb:5a:23:ca:d5:9c:36:fb:75:
         65:fd:f2:58:fa:e9:ac:71:3c:13:15:80:9c:c4:a2:25:f8:b6:
         dc:50:88:9a:78:33:5e:3b:e9:00:db:7f:38:3f:5e:ac:91:fe:
         1c:f9:e6:12:e3:47:12:b3:96:47:90:f6:a9:ea:e3:d5:7d:80:
         50:52:f1:00:31:d7:2c:a2:e9:3d:1a:28:6a:b7:c9:60:66:2e:
         21:b3:3b:8f:86:8b:65:ad:b7:54:ae:cc:cf:ad:e5:f7:df:a5:
         d8:f1:b2:54:1e:b4:58:12:2a:d4:e9:1e:1e:27:ff:88:90:f4:
         f6:d3:fd:0b:92:f6:bf:c6:8a:a9:50:0d:e0:2d:7f:31:04:f2:
         8e:12:e1:6c:62:51:38:cf:3c:f8:74:4e:98:8e:66:1a:49:12:
         38:f5:69:69:99:a9:f6:ef:0f:7d:12:74:16:2c:6d:70:73:0c:
         62:e2:19:e1:78:b9:e1:1b:ee:09:55:62:a5:9c:f0:0c:5d:f3:
         b8:da:45:d0:14:39:44:cb:0a:8b:62:48:16:37:97:d4:4f:38:
         48:67:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----