Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a084bbae-d0dd-4332-b165-7132cc4da8c1/5f20b283048ed58e775700a6d3b879f684d967fd.mft
File:                     5f20b283048ed58e775700a6d3b879f684d967fd.mft (raw, json)
Hash identifier:          Sg/4Uzx0ZIxz0eryOltA8EF3oMyowV5xwDu226QzKTk=
Subject key identifier:   7B:31:AE:1C:30:D8:71:CA:A3:86:38:30:12:18:EB:D0:8C:A4:04:51
Authority key identifier: 8C:35:B5:20:7E:6F:04:1A:92:90:E9:91:FE:F9:FF:32:61:58:EB:78
Certificate issuer:       /CN=5f20b283048ed58e775700a6d3b879f684d967fd
Certificate serial:       074B74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f20b283048ed58e775700a6d3b879f684d967fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a084bbae-d0dd-4332-b165-7132cc4da8c1/5f20b283048ed58e775700a6d3b879f684d967fd.mft
Manifest number:          03A3
Signing time:             Mon 15 Apr 2024 08:20:55 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:56:16 +0000
Files and hashes:         1: 5f20b283048ed58e775700a6d3b879f684d967fd.crl (hash: HjBxn+1lCCn5RfyaRp9tPYqNPsMj3aR7HZCmTKMZww8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478068 (0x74b74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f20b283048ed58e775700a6d3b879f684d967fd
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:56:16 2024 GMT
        Subject: CN=7333e232c0e456ea73086d00a11c5ee05c127904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:fc:10:c6:dc:74:f6:63:5a:1f:a1:b0:f3:
                    d4:c0:17:af:39:cc:59:39:20:da:20:db:d1:42:a8:
                    ce:cd:92:e5:63:af:10:f8:ce:09:e0:0e:15:d2:28:
                    9b:99:68:ea:54:7c:92:04:19:53:b3:ad:7e:17:40:
                    30:15:88:d6:66:0f:6f:f2:d1:f2:aa:33:55:0c:c7:
                    80:2f:84:28:5a:25:08:de:2d:37:19:59:a0:18:77:
                    29:e2:1f:fe:7b:2c:d0:d0:aa:47:3c:9f:00:d3:10:
                    eb:79:e0:53:20:6d:b4:59:86:89:e7:69:af:2d:33:
                    e5:e4:3b:69:95:8d:03:96:1f:ac:d9:90:ff:f1:51:
                    07:c8:99:9d:81:13:1c:38:8e:85:c1:81:d8:71:a8:
                    89:44:e6:e1:11:3b:c4:bd:8e:2c:9e:6d:99:0b:14:
                    7a:3a:14:07:38:57:f7:28:d3:dc:99:73:92:9f:79:
                    47:4c:78:b0:16:17:1c:f2:3c:9f:b1:9a:6e:36:5d:
                    f1:c9:ea:9c:d4:86:26:6b:f8:49:0c:4c:cf:de:f1:
                    06:c3:86:8c:15:3e:04:aa:94:40:f1:0d:e5:c5:1f:
                    bc:3c:6c:6d:ed:47:28:e7:c9:d1:5f:c9:c5:53:a6:
                    c4:ac:d3:b5:b1:a3:26:83:88:df:77:c7:8a:c0:3a:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:AE:1C:30:D8:71:CA:A3:86:38:30:12:18:EB:D0:8C:A4:04:51
            X509v3 Authority Key Identifier:
                keyid:8C:35:B5:20:7E:6F:04:1A:92:90:E9:91:FE:F9:FF:32:61:58:EB:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f20b283048ed58e775700a6d3b879f684d967fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a084bbae-d0dd-4332-b165-7132cc4da8c1/5f20b283048ed58e775700a6d3b879f684d967fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a084bbae-d0dd-4332-b165-7132cc4da8c1/5f20b283048ed58e775700a6d3b879f684d967fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:aa:48:94:db:9d:3e:66:88:fd:ab:9b:b0:ff:16:3d:c0:
         de:39:2a:fd:d4:01:47:8b:1e:bc:45:a8:d9:6b:b7:87:bb:96:
         99:b4:30:ff:59:9d:fd:94:60:d8:80:15:57:de:6a:6d:be:f7:
         3f:c9:19:8d:19:d4:f0:1f:21:11:78:c7:8b:82:d4:80:c4:99:
         09:96:48:6a:40:3c:3e:ef:60:20:75:4a:74:8b:f9:4a:5c:07:
         44:58:c7:4a:8a:11:45:4f:74:a7:9a:1d:c9:d0:4f:a4:0b:a6:
         c5:06:21:2a:d1:6c:b9:07:97:2f:43:ca:21:43:10:a6:58:60:
         f2:ca:4d:ad:14:ab:85:ca:0c:d0:63:94:96:bc:ed:c2:1a:56:
         ff:a7:fe:01:14:14:d4:fc:d1:6c:91:7b:7a:35:0c:3c:6c:f2:
         eb:04:35:e5:0d:ab:62:62:30:32:64:cd:b8:90:23:90:69:1c:
         7d:57:87:cc:1c:96:93:a7:61:3d:b0:05:2d:e4:41:9c:4d:be:
         8e:3d:4a:80:38:18:1c:b2:5f:d9:19:2c:5d:b1:a9:18:c7:11:
         61:eb:34:49:05:a1:21:80:99:cc:e4:ac:6c:3c:c0:a1:46:5f:
         6e:f3:a9:a5:81:78:4c:53:e4:ca:00:c4:a5:d7:dd:47:17:21:
         91:73:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----