Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99366c7a-2bd9-4084-b7a4-a625dfdb3c27/f970f202e47da3240414c89f65127afcb786a7ba.mft
File:                     f970f202e47da3240414c89f65127afcb786a7ba.mft (raw, json)
Hash identifier:          IEb8EWX+3x7xuadyIRH393Cbl2Ir+IGOJKyRI2jQ2KQ=
Subject key identifier:   97:B4:02:B2:66:98:D7:48:24:3C:55:81:68:48:A3:4E:81:C9:7D:F5
Authority key identifier: 69:CD:84:A4:FE:E8:C7:98:63:06:2D:F0:14:03:E3:A0:6F:7F:FB:A8
Certificate issuer:       /CN=f970f202e47da3240414c89f65127afcb786a7ba
Certificate serial:       1F746D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f970f202e47da3240414c89f65127afcb786a7ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99366c7a-2bd9-4084-b7a4-a625dfdb3c27/f970f202e47da3240414c89f65127afcb786a7ba.mft
Manifest number:          0E0B
Signing time:             Mon 15 Apr 2024 07:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:54:17 +0000
Files and hashes:         1: 3c3ecedcb6d60eb6aef91d387697217eb514853c.roa (hash: bRPk3L9+VoNJqeTc5n2zihY7GruG239DSGuiu7CM9Cs=)
                          2: f970f202e47da3240414c89f65127afcb786a7ba.crl (hash: GrK3orOmDZpugk8Mc7pfYJTqwQ/+P8u+UtBAHAmwq4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061421 (0x1f746d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f970f202e47da3240414c89f65127afcb786a7ba
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 07:54:17 2024 GMT
        Subject: CN=b72b944448ff977f1546d6c771352a1381cfd341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:03:7e:3f:26:c2:12:f5:14:d7:05:36:3a:
                    b9:f6:02:ee:e0:5d:37:d5:af:c0:fa:21:50:ee:5e:
                    87:69:00:a1:dc:48:06:6f:a9:f5:f5:a4:cc:9e:33:
                    6f:2d:26:aa:d3:0b:b6:06:97:62:c7:d1:f5:6d:d4:
                    68:96:1d:db:37:f8:65:a6:1a:be:18:ce:a1:7a:98:
                    d1:7f:28:bf:f7:f5:45:66:70:4d:ac:1a:80:2a:58:
                    ed:13:5d:1d:21:4a:d9:cd:69:ce:09:b7:4d:6f:28:
                    42:0f:d8:24:45:d8:24:48:df:77:96:9f:c5:e0:80:
                    70:0f:8d:d8:2e:5e:93:ee:ad:e1:e2:0c:eb:8c:1e:
                    71:22:70:84:4c:e0:82:18:b7:84:89:06:cb:22:b5:
                    4c:28:85:b5:0f:b2:18:f2:59:1a:54:78:b5:f3:8f:
                    10:dd:58:1f:ac:00:2b:44:fb:88:a5:2a:d6:32:4e:
                    a1:ff:30:48:d7:8e:6c:bd:5b:43:d5:eb:ca:bc:80:
                    52:91:f9:a7:41:a7:84:e3:a4:22:71:1a:9e:46:91:
                    30:68:92:cc:58:a8:61:2c:73:9b:5a:38:97:a1:34:
                    8b:f0:3b:70:9a:71:75:8c:04:ee:6d:d4:00:3d:f2:
                    3c:40:19:1a:0b:1a:72:63:f3:0d:41:f2:2b:c2:34:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B4:02:B2:66:98:D7:48:24:3C:55:81:68:48:A3:4E:81:C9:7D:F5
            X509v3 Authority Key Identifier:
                keyid:69:CD:84:A4:FE:E8:C7:98:63:06:2D:F0:14:03:E3:A0:6F:7F:FB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f970f202e47da3240414c89f65127afcb786a7ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99366c7a-2bd9-4084-b7a4-a625dfdb3c27/f970f202e47da3240414c89f65127afcb786a7ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99366c7a-2bd9-4084-b7a4-a625dfdb3c27/f970f202e47da3240414c89f65127afcb786a7ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fc:cd:31:94:d3:f9:6b:e2:79:33:35:15:21:33:6f:f5:9d:
         e9:10:7c:25:57:5f:a0:70:e7:7c:28:56:02:1f:72:79:56:4b:
         a9:a1:f8:ae:13:92:77:b7:8f:72:28:00:8f:03:01:10:86:4f:
         f7:72:3d:68:ad:b5:ef:45:b4:6e:5c:05:5a:16:91:7c:04:60:
         34:94:d6:fe:7b:7e:35:de:04:94:82:1d:1c:94:53:0e:54:b5:
         37:e3:1b:25:10:b7:0f:da:fe:e6:db:dc:d9:a1:5c:fe:a6:9f:
         0d:bf:2b:dc:80:c0:5d:5f:bc:a3:ce:b1:3b:c1:cc:0d:99:6b:
         c5:e6:34:a7:c1:ab:3d:59:17:8d:e4:9f:50:6d:3e:f3:00:91:
         d4:ec:40:85:ba:c6:2b:8c:42:7c:ab:c7:03:fb:d1:28:f9:5f:
         ca:4b:39:47:c4:d0:b4:4e:06:bf:36:75:85:32:d1:4f:fc:1a:
         38:82:8d:c3:b7:3c:45:8f:2a:69:eb:a6:53:7e:b6:99:96:98:
         d2:ed:ec:34:d8:5e:59:67:ac:c6:0b:d5:1d:da:79:54:49:3d:
         fd:95:7a:dc:70:66:95:04:8a:c4:f8:32:dd:93:c3:59:0f:09:
         33:fe:37:7c:6b:b0:98:ac:cf:78:22:9b:f8:f9:9a:31:d5:3b:
         72:3d:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----