Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.mft
File:                     d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.mft (raw, json)
Hash identifier:          xOWas8Kq/VXk92RE9BgPSTlekpfDbvSaZt7Wp00p3Ew=
Subject key identifier:   D5:D0:33:03:34:B4:D2:DF:0D:B4:DC:A3:76:AC:C0:B6:00:74:11:4D
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       1DD4E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.mft
Manifest number:          0E21
Signing time:             Mon 15 Apr 2024 02:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:07:29 +0000
Files and hashes:         1: 39667c57d22640e6aff51590136d85c9b43c1cd4.roa (hash: 6leZov2f+JH4zRL2w5b8ns58scZjDY0qJHUBXP1+SIs=)
                          2: 7184ded9ae67ebf9d038e716318a2589ba7ce668.roa (hash: TL3XcUzY62ibPbV8iHZ3xBuK3VXsnkqMUB5IGUgs3Xw=)
                          3: 7cd0c968a40a03ff0226f288b7d87f9b9b87662d.roa (hash: 0y4Cji23lCP6luO5rLo6hT1acU0wiXhK/8kS9mkUlDM=)
                          4: b8dc90eaa1f290c470c52e09e15cdddfb3f34e04.roa (hash: XxR3j8SPU37nkgBhF0lPeNyUCw+mlr1qUsV45uSwJ7M=)
                          5: d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl (hash: WcjckTI0oil1pwhSDQFalkbD3++yPuwLyXXLf0M5DB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955049 (0x1dd4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:07:29 2024 GMT
        Subject: CN=e17e254a5706723c3f12bef3ec7e97a351864d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e6:d8:6b:53:e6:5c:3d:ec:43:d3:12:9b:3a:
                    a4:d1:6c:d0:53:1d:c4:4a:b6:ed:5b:15:19:6a:4f:
                    10:a2:6f:54:04:ff:b6:71:65:bd:71:c0:27:82:80:
                    cc:9b:60:0f:f6:9b:64:5f:e8:ab:48:9b:85:ea:fa:
                    83:54:27:99:64:87:ea:d3:1c:8b:32:a8:bb:59:fc:
                    83:84:6b:db:8c:69:83:33:15:34:cf:71:6e:7b:87:
                    e9:7e:5a:2c:4f:2a:c2:f6:8a:c7:58:8c:1e:27:bb:
                    9f:2a:1d:1d:9a:ad:3d:12:48:b5:4c:24:8e:ef:0c:
                    50:05:30:bd:43:9d:c3:58:55:09:03:33:e3:35:01:
                    98:24:9d:59:2c:ac:9f:60:d4:f4:2e:0c:78:aa:9b:
                    7b:fe:74:ea:4e:19:d9:3a:71:7a:82:33:c9:34:c4:
                    78:61:0f:8d:60:2b:0c:45:26:79:a8:ab:1f:a3:cd:
                    7f:8f:92:bd:e8:1b:89:de:68:81:7b:40:11:cf:6e:
                    a6:46:2b:7e:ad:8e:87:0b:e8:c4:33:e8:98:9b:a7:
                    10:6f:e6:ac:54:58:e2:6a:67:07:05:ce:6d:8b:ca:
                    19:00:43:cf:14:fe:f7:01:0f:9d:d6:58:ee:9c:78:
                    d0:89:36:5f:a4:78:1f:b5:5d:ae:f5:52:b6:3d:fd:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D0:33:03:34:B4:D2:DF:0D:B4:DC:A3:76:AC:C0:B6:00:74:11:4D
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3c:cb:a2:47:86:37:a6:55:c2:50:60:98:b5:a7:15:0f:ce:
         04:11:ba:39:c8:63:5b:d7:45:f3:1d:23:32:00:95:dc:7f:32:
         3e:d8:a1:bb:cb:9c:6d:ea:f6:7b:e4:dc:90:c5:67:09:62:c1:
         3b:bc:b4:88:9c:25:f9:0c:84:e2:98:79:af:e0:f0:68:5d:3b:
         64:18:5d:88:96:24:5a:f0:15:73:c4:23:32:74:6b:40:43:d3:
         d3:f1:99:1d:23:e1:a1:a2:6d:1d:26:dd:23:97:0b:47:f7:56:
         42:03:66:22:f4:e9:ee:3d:1c:e1:e1:48:1b:d7:21:cb:7c:5b:
         25:5e:43:ba:e9:20:e5:90:be:68:3c:a9:d1:fc:65:f2:5f:cc:
         8d:2f:8f:23:c9:6f:e0:f5:94:59:14:a7:c8:dc:3f:1c:b7:42:
         94:5d:0a:f5:23:1c:c9:50:88:fc:f0:30:24:b7:3d:c4:10:9f:
         b5:77:59:1e:34:8f:8a:1a:b7:5d:2d:aa:d5:65:37:5f:5b:7f:
         64:41:9e:04:10:98:f6:19:b7:98:f2:1d:d6:0d:b3:54:83:3a:
         0e:c0:f1:eb:fd:01:45:55:65:17:2d:0e:10:62:b2:fa:5c:3d:
         78:af:52:2b:e3:96:54:c3:96:fa:a2:d9:08:01:93:b0:01:a7:
         bd:77:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----