Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfe07b11-4b09-4cba-a8c6-937d39fbaa29/7058f9f7ce26a22c4fc12288f523165f063ea87c.mft
File:                     7058f9f7ce26a22c4fc12288f523165f063ea87c.mft (raw, json)
Hash identifier:          qPI+7yAbHsR03juiqSC508brPZTHcrH14DvNDSyFUO0=
Subject key identifier:   3C:44:25:18:8E:CB:D4:C5:79:D3:52:39:45:8F:AE:19:65:06:AA:F0
Authority key identifier: 49:69:3F:25:85:36:79:7B:BB:AE:91:8D:DB:F0:71:10:6E:7C:1B:6F
Certificate issuer:       /CN=7058f9f7ce26a22c4fc12288f523165f063ea87c
Certificate serial:       1D2268
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7058f9f7ce26a22c4fc12288f523165f063ea87c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfe07b11-4b09-4cba-a8c6-937d39fbaa29/7058f9f7ce26a22c4fc12288f523165f063ea87c.mft
Manifest number:          0DE3
Signing time:             Mon 15 Apr 2024 09:21:10 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:11:18 +0000
Files and hashes:         1: 7058f9f7ce26a22c4fc12288f523165f063ea87c.crl (hash: WCENSN5QVKVJnuTt2TfOU7XYZz1BjuudkSzp5L+U0Kc=)
                          2: fe2974d0afc5583f0bd0dc6b58af336edeaf9969.roa (hash: tP4kdmwp3KbILnBR/z+GoSEpQiECveVZtvw73g7v78U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909352 (0x1d2268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7058f9f7ce26a22c4fc12288f523165f063ea87c
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:11:18 2024 GMT
        Subject: CN=869d1d7aae1e5e078a0f76846911ef92a763cd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:41:20:c3:f9:ee:3c:96:7c:ce:74:ec:0f:
                    2a:c9:4b:3b:fd:1a:3a:f6:45:8f:dd:0f:8f:45:75:
                    48:e7:69:bc:51:0e:73:a2:09:fd:c4:48:15:c4:98:
                    10:9f:1e:2f:aa:3e:5e:15:d6:4e:23:10:12:34:9a:
                    70:40:37:6c:53:1c:3b:8a:25:b1:db:13:43:92:f9:
                    b4:63:2d:eb:7d:89:9a:b8:4a:0f:5d:73:69:9d:87:
                    dc:53:18:81:9b:78:8b:01:0d:51:d6:ff:95:21:f7:
                    8e:d3:ab:f6:b7:f4:13:c1:fe:0d:63:3b:e5:58:18:
                    5f:73:7a:4b:fc:10:c4:f8:ab:ff:93:60:7a:1c:60:
                    68:d0:20:24:07:b4:ab:fa:08:a6:69:cc:78:cf:b5:
                    2f:c7:18:41:d2:89:fc:f7:10:9f:9f:4f:22:00:62:
                    eb:db:14:50:e5:a0:cb:fc:e5:92:e6:08:66:9b:1a:
                    4c:c3:aa:57:49:5e:94:25:db:01:f5:73:87:f5:92:
                    09:7a:45:ba:3f:6b:e4:09:6f:ee:e8:87:95:d5:12:
                    52:3f:20:c1:2b:2b:9a:68:21:b7:b4:5f:07:14:1a:
                    8f:0f:a8:0e:6c:3e:66:af:65:27:02:34:42:bb:d0:
                    db:91:33:12:0d:7b:27:04:ad:d7:b6:9f:a2:34:d4:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:44:25:18:8E:CB:D4:C5:79:D3:52:39:45:8F:AE:19:65:06:AA:F0
            X509v3 Authority Key Identifier:
                keyid:49:69:3F:25:85:36:79:7B:BB:AE:91:8D:DB:F0:71:10:6E:7C:1B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7058f9f7ce26a22c4fc12288f523165f063ea87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfe07b11-4b09-4cba-a8c6-937d39fbaa29/7058f9f7ce26a22c4fc12288f523165f063ea87c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfe07b11-4b09-4cba-a8c6-937d39fbaa29/7058f9f7ce26a22c4fc12288f523165f063ea87c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9a:b0:22:e8:c5:ec:c4:54:c9:61:77:2b:6f:81:f7:8b:0d:
         1b:18:6d:9e:92:be:4c:b8:16:a2:66:87:39:25:5f:45:ea:72:
         05:f9:b8:57:6d:77:85:ed:00:c8:b5:9e:51:2d:e7:2f:48:12:
         73:ee:61:d9:31:25:aa:a4:12:4c:d0:a5:61:61:84:d4:2d:2c:
         8e:7e:21:4d:f2:7f:5c:93:49:32:29:d2:0b:32:73:a5:e3:b2:
         da:5e:21:de:2d:49:38:ca:6e:92:7d:44:04:8e:70:56:dd:04:
         cc:36:f6:83:99:ed:64:cd:df:d8:7c:46:37:e8:77:e2:e2:a5:
         0c:2c:2b:ca:41:0a:5f:f9:da:7e:59:6d:b5:74:ce:1a:db:97:
         cf:97:dc:fa:19:fa:b5:9f:07:5c:b0:f5:24:14:d5:d8:81:c5:
         ea:85:50:9f:76:c5:be:a9:ae:bc:7f:aa:24:2b:fd:36:a1:af:
         27:de:df:2f:27:4a:c0:a7:59:2a:6d:c5:9e:6f:7c:41:7b:c7:
         c5:6e:76:ff:d3:50:5c:19:a0:1f:45:2e:fe:1a:ce:10:d9:d7:
         fa:4f:d9:e7:d4:91:47:9e:0c:0b:aa:42:8b:a3:eb:9f:33:ed:
         ea:5f:40:cd:d5:92:b0:ea:3c:34:2d:03:01:30:76:ca:7c:66:
         6e:5d:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----