Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b754da9b-2ed5-41f5-be5f-0fb0028f11c1/958391604d7a4a2c8cb87a2980ac1e779eeace28.mft
File:                     958391604d7a4a2c8cb87a2980ac1e779eeace28.mft (raw, json)
Hash identifier:          UmHy8vyhpsdeKb87dnbSc111M2o3/0LTA9JZugFzuuY=
Subject key identifier:   54:8C:16:F6:1B:3F:79:7E:5C:EB:FC:AA:26:89:0E:65:F2:E0:99:9E
Authority key identifier: DE:52:46:78:A1:8C:77:22:46:7E:24:6E:76:E3:9D:7C:9B:0D:F1:CF
Certificate issuer:       /CN=958391604d7a4a2c8cb87a2980ac1e779eeace28
Certificate serial:       06327D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958391604d7a4a2c8cb87a2980ac1e779eeace28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b754da9b-2ed5-41f5-be5f-0fb0028f11c1/958391604d7a4a2c8cb87a2980ac1e779eeace28.mft
Manifest number:          031A
Signing time:             Mon 15 Apr 2024 06:21:04 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:43:39 +0000
Files and hashes:         1: 958391604d7a4a2c8cb87a2980ac1e779eeace28.crl (hash: 68rGR1LHGuRsC7IR7U6Clxinu91JqrD9wjyFPgoq1j0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406141 (0x6327d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958391604d7a4a2c8cb87a2980ac1e779eeace28
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:43:39 2024 GMT
        Subject: CN=40d23287b61fb5428cecfa8d2764c888cecb6022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:34:8b:05:f1:5e:08:00:61:73:60:06:f0:
                    7f:52:28:9f:5c:6e:93:2b:89:f8:bd:ea:89:49:7e:
                    c0:89:31:5f:83:94:ff:6b:8b:0c:42:23:d6:f5:1c:
                    14:a8:61:de:67:46:49:a9:d9:f6:35:57:cb:38:b1:
                    95:f2:a9:b9:39:25:d2:bf:84:30:ec:f1:35:3b:ed:
                    b9:ef:19:fc:dd:08:3c:67:76:a9:1d:d7:b4:ec:7a:
                    18:78:b0:cf:36:c8:df:b3:2a:88:00:1b:2d:c5:49:
                    90:f2:20:5f:ec:b3:2e:93:dc:4d:e4:8e:51:ea:1c:
                    9e:a4:9c:20:13:5d:72:ab:16:c7:1b:08:1b:9b:2d:
                    b8:9a:64:cb:1a:d2:e5:f4:92:a9:d0:b8:f8:30:b0:
                    f0:7b:0e:fc:7b:d2:69:48:cc:0b:f0:62:41:71:1b:
                    a4:1d:19:81:15:29:5e:11:2a:82:ce:19:5c:d8:bf:
                    ed:5a:43:ff:09:c3:96:3e:3b:64:3a:62:aa:3a:12:
                    44:8f:2c:82:6f:7c:ac:64:21:d1:63:00:8a:3c:4e:
                    5e:a8:e8:a5:b3:a5:e2:80:0b:e0:ce:12:62:fd:02:
                    1e:93:2f:c1:03:4e:72:65:32:95:38:fc:1a:d0:08:
                    08:3c:e5:e5:08:9d:34:89:8e:cd:88:ce:63:ec:2f:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8C:16:F6:1B:3F:79:7E:5C:EB:FC:AA:26:89:0E:65:F2:E0:99:9E
            X509v3 Authority Key Identifier:
                keyid:DE:52:46:78:A1:8C:77:22:46:7E:24:6E:76:E3:9D:7C:9B:0D:F1:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958391604d7a4a2c8cb87a2980ac1e779eeace28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b754da9b-2ed5-41f5-be5f-0fb0028f11c1/958391604d7a4a2c8cb87a2980ac1e779eeace28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b754da9b-2ed5-41f5-be5f-0fb0028f11c1/958391604d7a4a2c8cb87a2980ac1e779eeace28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:fc:b8:91:e4:b8:8e:8c:26:6e:1d:f7:7a:a6:c7:53:8f:
         3b:1d:e1:17:80:36:4b:d2:8f:7a:aa:cd:8c:44:07:85:94:80:
         b0:e3:8c:d2:42:4f:3f:e2:11:a7:ed:37:ba:2d:9e:05:b9:e5:
         eb:0f:77:35:30:83:2f:82:b9:d9:1b:11:2f:7a:00:24:a2:a6:
         ee:d4:c4:88:66:99:0b:91:69:92:db:43:21:83:de:e2:90:33:
         33:bf:3f:99:f5:e5:e2:0e:da:3b:57:8e:93:06:bf:67:88:0b:
         e7:16:2a:81:fb:06:92:7d:49:52:d1:b5:bf:42:8b:31:28:9b:
         13:83:d5:66:40:ec:ea:93:4a:40:ea:b7:74:bf:ce:3f:59:77:
         b4:31:fb:3e:16:d6:3b:9c:c4:cb:d5:e5:ef:47:9f:56:72:fa:
         11:4f:96:0f:4f:f1:14:57:bf:06:f3:c8:69:35:ba:7e:bc:ec:
         3c:c6:a9:87:62:89:20:b0:54:c2:4e:c4:ca:7e:44:72:98:8a:
         b6:79:8c:40:74:08:93:43:d8:4c:25:95:72:bf:15:ea:3a:3b:
         71:2b:b4:61:c7:20:2d:09:71:cf:1a:c1:1f:d5:b2:c7:8c:27:
         fd:10:36:67:d3:f3:6e:07:81:a3:14:b2:ee:ca:e1:aa:19:36:
         ad:3f:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----