Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a232ad36-0d48-48bf-960e-41c9f4c08ea7/20633e878296dac3ac416cc6bbbac4a296ac0b94.mft
File:                     20633e878296dac3ac416cc6bbbac4a296ac0b94.mft (raw, json)
Hash identifier:          qpIBPACKASqMBBiyEn+VbsAmzK1M4yPDDALeV1laqgw=
Subject key identifier:   31:24:5D:97:E1:2D:EF:2C:EC:24:E8:05:D2:E2:80:E1:3A:A3:7F:A1
Authority key identifier: 36:F8:31:42:D2:41:26:4B:55:A1:B6:9E:CB:79:96:52:C6:05:A8:BD
Certificate issuer:       /CN=20633e878296dac3ac416cc6bbbac4a296ac0b94
Certificate serial:       041B7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20633e878296dac3ac416cc6bbbac4a296ac0b94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a232ad36-0d48-48bf-960e-41c9f4c08ea7/20633e878296dac3ac416cc6bbbac4a296ac0b94.mft
Manifest number:          0201
Signing time:             Mon 15 Apr 2024 08:21:33 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:32:16 +0000
Files and hashes:         1: 20633e878296dac3ac416cc6bbbac4a296ac0b94.crl (hash: zmfPf7lZDgl4whhB33WvLjYcIyiss22FKkLQQFiYB4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269180 (0x41b7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20633e878296dac3ac416cc6bbbac4a296ac0b94
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:32:16 2024 GMT
        Subject: CN=827310c3e3844e21702eef2cf57996e4146ff707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:c7:36:43:7c:b6:b0:1f:31:b4:10:76:3f:
                    a7:c3:92:f3:98:cc:03:73:79:c0:2d:58:5f:f5:8b:
                    00:f0:15:48:1e:d7:da:d0:dd:d6:a6:9e:e4:8f:cf:
                    de:c5:f6:54:ae:a5:56:ed:dc:fb:f9:ea:ee:bc:32:
                    99:ea:3a:8b:97:c8:7c:18:47:ff:c2:c0:d1:8a:7f:
                    80:8c:39:da:9f:83:de:46:51:3f:09:67:ff:f3:64:
                    1f:27:5f:a8:20:ea:10:02:e4:dc:ab:b7:72:9e:8c:
                    17:32:09:44:7a:b3:2e:38:4c:e3:de:ce:30:3f:45:
                    de:5d:f9:bd:8c:f4:f8:9a:c9:47:84:44:09:fd:90:
                    36:51:22:9d:76:9e:7a:a7:50:36:d8:63:92:61:92:
                    ab:31:22:45:62:ac:d9:3d:a6:97:f2:1b:bf:16:00:
                    88:67:ae:36:49:69:fc:11:51:b5:52:74:69:dc:5d:
                    c9:38:9a:bf:33:b3:4e:ec:c2:a3:33:c3:90:ef:25:
                    aa:34:ef:7f:17:3d:6a:41:94:d7:e8:d9:1b:51:35:
                    e0:f0:c3:6b:a7:46:8f:c1:06:5d:15:42:b3:49:84:
                    ef:7c:25:cd:57:ef:cb:a7:d0:69:ef:c2:25:d0:c2:
                    7c:b2:09:1d:27:cd:11:db:94:67:c9:41:f9:bb:db:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:24:5D:97:E1:2D:EF:2C:EC:24:E8:05:D2:E2:80:E1:3A:A3:7F:A1
            X509v3 Authority Key Identifier:
                keyid:36:F8:31:42:D2:41:26:4B:55:A1:B6:9E:CB:79:96:52:C6:05:A8:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20633e878296dac3ac416cc6bbbac4a296ac0b94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a232ad36-0d48-48bf-960e-41c9f4c08ea7/20633e878296dac3ac416cc6bbbac4a296ac0b94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a232ad36-0d48-48bf-960e-41c9f4c08ea7/20633e878296dac3ac416cc6bbbac4a296ac0b94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4b:c5:cb:2e:b4:d2:13:c9:d8:f0:d1:b7:ac:f0:c3:5e:bb:
         54:4e:38:6d:4f:83:1c:82:33:41:d7:a7:54:55:a0:0c:ac:1a:
         f4:43:aa:7c:7b:90:32:09:9a:f0:4a:59:68:96:4a:cb:6e:e5:
         c4:ca:4c:08:59:95:e2:ae:e0:f1:ca:67:f8:21:9c:b1:11:9e:
         29:22:82:92:fc:f2:d7:61:77:fb:a8:30:80:ce:ac:6e:a3:2e:
         21:ac:76:27:e7:33:28:43:5a:61:2b:91:52:5a:60:7a:69:cd:
         75:cd:8b:5d:e8:9c:e3:f9:7d:34:46:f6:3b:37:04:69:9b:1c:
         df:55:41:91:60:04:02:37:b6:0a:90:9a:e3:0c:e5:df:0f:5b:
         fd:4c:83:0a:db:21:74:84:97:5a:f7:c6:ff:da:c3:6a:45:27:
         81:44:78:8d:17:06:67:80:1d:a2:65:e4:33:9b:40:af:35:ac:
         d2:b5:68:63:3e:1c:02:25:32:4b:3c:ed:9f:9c:bb:dd:6e:b8:
         74:f9:01:11:f3:32:f0:fa:00:aa:ac:fe:a0:38:06:40:9c:1f:
         2e:81:f5:50:4f:67:ad:0e:34:8f:23:60:ef:bc:08:38:4f:18:
         fe:b2:06:5e:e8:66:47:91:14:e6:5f:8e:9d:d9:ba:52:ad:9f:
         dc:fc:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----