Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft
File:                     132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft (raw, json)
Hash identifier:          hOlTAQpLaxiqEyONBvYslylxW43nbI2DqyJ/ccwAbU0=
Subject key identifier:   58:08:F7:2C:79:35:31:9B:E3:15:DF:2B:84:03:DF:0F:B4:A2:2A:3A
Authority key identifier: 50:F9:00:34:5B:2F:F6:D1:61:4A:38:08:71:C0:E8:3C:C0:5A:A7:6E
Certificate issuer:       /CN=132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc
Certificate serial:       16F435
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft
Manifest number:          0BDC
Signing time:             Mon 15 Apr 2024 02:20:40 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:32:29 +0000
Files and hashes:         1: 132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.crl (hash: FXHyLpCUe4nFmWr9kfvGkP7EPxloFqZxxt0h8SGORtY=)
                          2: 2dda2e5ed611da7b3c4a3b0eba0672cb725987d8.roa (hash: TqtysDha38hwneqjaqGOq1ctNRSSzs4Pm+RJnbvs35I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504309 (0x16f435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:32:29 2024 GMT
        Subject: CN=0b3fd890025c445a75cebe549880da9c3146020e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:69:b3:82:c3:ac:7f:d3:bf:61:1b:ed:6d:1c:
                    a5:04:03:8f:85:2d:b0:84:46:20:2e:b5:96:23:78:
                    48:d9:88:ad:4b:26:a1:e4:a1:57:65:71:29:39:a4:
                    65:2b:3c:26:1b:73:0d:15:54:72:73:6c:5c:e7:76:
                    a4:c2:f6:1b:f3:5a:6b:bd:9f:23:69:a1:b6:23:6c:
                    ae:48:7a:01:66:5b:cd:85:b9:d5:5a:28:00:3d:1d:
                    ad:c8:37:3c:fb:a1:9d:e9:54:68:f3:25:c1:54:dd:
                    bc:83:33:d7:42:ab:09:d2:ca:b1:55:86:e8:55:3a:
                    0a:35:92:35:04:3e:9e:91:3b:a1:e6:d2:b4:6b:16:
                    c8:8b:81:d6:ef:a0:5c:94:0b:4c:d5:f2:83:f3:51:
                    d2:e2:6a:45:76:21:69:be:19:f1:14:19:c6:68:d1:
                    59:4e:8c:38:99:a3:7c:1c:94:bf:b8:fb:7a:ac:41:
                    bf:f7:b9:f0:aa:15:04:b5:5f:01:6e:ab:da:e4:e8:
                    77:f7:af:99:6a:6a:b8:2d:18:80:02:1b:a0:db:67:
                    99:f0:58:55:76:4b:41:22:89:f7:12:69:14:68:2a:
                    05:8b:ad:f4:e0:05:b3:a3:73:b2:78:b2:12:df:3d:
                    fe:83:df:c6:f5:d5:a6:13:01:26:fb:5c:03:42:6e:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:08:F7:2C:79:35:31:9B:E3:15:DF:2B:84:03:DF:0F:B4:A2:2A:3A
            X509v3 Authority Key Identifier:
                keyid:50:F9:00:34:5B:2F:F6:D1:61:4A:38:08:71:C0:E8:3C:C0:5A:A7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:9d:b8:d2:ea:e6:b0:58:1a:e0:46:cc:93:3d:c4:65:1f:
         0e:e6:ee:45:72:4f:d4:b6:17:e2:85:05:0f:77:cd:98:09:5c:
         2a:99:56:93:e5:39:be:d5:d7:d0:b3:d1:bc:24:68:00:24:02:
         df:82:80:05:6f:f4:67:4d:bc:d0:c7:26:66:90:f4:6d:74:a7:
         2d:cb:50:de:8a:82:4b:86:48:02:dd:1e:4c:c7:6c:5b:45:98:
         35:0a:35:ba:3d:d4:88:6d:98:76:ef:2b:b3:7c:6e:3a:c9:31:
         bf:a5:d7:9d:83:1d:e7:ed:86:b9:a9:72:2a:c3:29:50:f4:cc:
         fe:2b:7c:86:b6:e4:c3:d3:7f:30:74:72:7c:cc:e8:86:75:7e:
         26:e7:7b:56:90:c0:cb:a2:3b:69:b7:e6:cd:4e:8d:aa:f5:72:
         0d:95:ea:e9:b7:8f:63:f0:20:a2:bd:2a:62:41:14:ac:65:a4:
         ec:42:2a:e4:33:9c:ac:66:b8:70:cf:9b:bc:09:71:2b:39:64:
         55:78:b1:e6:06:5e:56:85:d5:af:32:72:12:68:3a:f0:cd:18:
         fa:47:f4:9a:7b:78:c2:31:0c:f8:9d:13:ad:d0:04:26:f1:3b:
         74:22:ea:e6:9d:9a:53:1a:d7:13:a8:67:f1:bf:98:01:7c:bf:
         a9:85:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----