Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.mft
File:                     120d3f1dd0412637d6cfe87a0a26d34c0665388a.mft (raw, json)
Hash identifier:          b/Ufc45qq7OCWWhUWv9ibCxNO3DMWf2rVqjv4n7beRQ=
Subject key identifier:   64:28:44:27:82:83:03:75:C1:97:E6:AC:85:48:66:15:DD:97:B8:08
Authority key identifier: B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA
Certificate issuer:       /CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
Certificate serial:       27C060
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.mft
Manifest number:          0E13
Signing time:             Mon 15 Apr 2024 06:21:25 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:24:39 +0000
Files and hashes:         1: 120d3f1dd0412637d6cfe87a0a26d34c0665388a.crl (hash: 4NfPu+hrKuVBWB+4vQr/ayn1mN6aU3iXvFYwgHXGHks=)
                          2: 2ddbccde1f82eebb0123c2b22bf8b9d24219f656.roa (hash: dQDCq74zdHe4LmeKBoJXMA8Qwfa9h1KSzv0+qAcEPsM=)
                          3: 62d6ce4938545482cf5d32416badadee60923896.roa (hash: xr2cajt0VdETe92VtiDS4nMoimqXSbWyef64/Du8Ae0=)
                          4: ab161cadfde344c8fc5d80446af3aa3884945e31.roa (hash: nxrQwWd3QQ87fKhvi2oK2AUEe16YeUUIZnTcrnJCFfc=)
                          5: ba5d506eba7ed1ca7e858abe58fb56895dfcc099.roa (hash: lPtKJACTKeqFSk9t/DqOFoVyIYJ3QWMc5qWPvuL7vqM=)
                          6: c46b9d6dcb1514e8a53cf84f0b05a1c7d08b7e53.roa (hash: rR6EbA69FSrVyv940sG0KNoSS1ba+drArRHzaEElhmw=)
                          7: c73c5a892ddfb41406f59fe7be846c7fbf1c8e01.roa (hash: 0kdNAV/P6gw2Ziw78FhF0ypCoOfyu5jGfiouZU+zM/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2605152 (0x27c060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:24:39 2024 GMT
        Subject: CN=e76bae6950f4d719db442b0cfeb8efa4853b91ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:69:77:02:5e:c8:3c:f7:26:45:e8:a8:2a:
                    a8:8f:3e:8a:e0:3d:3e:c3:cf:73:69:f5:e4:97:8c:
                    cf:46:f4:2e:a1:4f:60:ce:6a:56:44:c0:b4:dd:d9:
                    1c:13:7b:4b:02:82:d5:31:71:7a:0c:97:26:bd:04:
                    67:ff:23:86:16:5b:0e:e7:55:31:59:1a:82:4f:d5:
                    a8:b0:8e:4c:b5:3a:70:1d:4e:bb:aa:4d:61:2f:a9:
                    e1:aa:5b:e0:2f:21:a2:42:82:9f:b9:36:31:82:b8:
                    b1:08:a0:ca:12:05:43:df:07:1a:89:fd:4a:64:62:
                    0f:cb:38:bd:1a:47:2d:e1:2b:0e:92:76:3c:7d:d8:
                    ed:cd:a8:a8:46:76:15:e6:89:de:b8:3b:f9:be:e5:
                    5c:f7:51:b6:3a:eb:e5:5e:d1:b2:28:eb:a5:35:ea:
                    3b:56:74:4f:ee:a0:25:d2:55:cd:df:da:54:9a:a0:
                    f9:79:52:98:f5:18:82:2c:56:d2:3a:c0:f3:46:ea:
                    20:3b:3e:dc:53:86:7a:42:b9:14:ca:8e:5c:03:14:
                    cf:37:3a:1d:d5:3f:eb:dd:b8:18:42:5d:ee:ab:6d:
                    17:e0:ea:b7:75:4a:94:b3:07:97:e7:dc:b0:39:2c:
                    0b:f3:53:02:55:d2:d5:1e:9b:ba:8e:4f:43:1a:98:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:28:44:27:82:83:03:75:C1:97:E6:AC:85:48:66:15:DD:97:B8:08
            X509v3 Authority Key Identifier:
                keyid:B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e8:17:2d:12:be:4b:4c:d0:0f:46:2f:30:7a:cf:74:9b:aa:
         00:f7:e1:e7:56:b0:12:d4:62:ce:79:b3:0b:30:1a:f9:79:71:
         47:36:ba:d0:e4:e4:24:5b:d7:67:33:a3:9e:e5:2b:82:55:6b:
         55:c7:a0:44:70:b3:f7:3c:92:d3:f8:7d:49:72:7a:cf:c2:13:
         5f:78:52:1e:50:cd:98:d9:75:ca:54:f5:2d:fe:89:0d:09:c4:
         75:4f:51:23:a0:e6:57:10:48:f6:2c:07:07:36:27:ca:d4:77:
         69:68:cb:76:3d:64:75:a1:eb:e7:bd:af:99:67:f2:15:9a:34:
         ae:93:17:0d:a1:0e:78:b5:04:63:86:3c:cc:9f:39:86:bd:7e:
         87:cd:49:17:44:e2:4c:72:76:96:de:7b:a9:33:ed:20:86:e7:
         c3:15:97:e1:7e:74:54:a4:b0:59:15:63:23:62:2b:e1:b3:70:
         4c:41:cf:ff:6c:e2:23:22:9b:98:de:0e:cd:68:37:a2:c9:e0:
         af:f5:d7:87:ca:e5:9f:fc:b2:4d:3c:3b:1e:9a:47:ee:28:59:
         53:58:79:b3:82:dd:24:5a:ae:ab:d1:70:39:48:8d:a5:ff:3c:
         74:fa:7a:f6:6e:d8:b4:0a:bc:8b:c8:40:5a:03:63:68:91:f8:
         e1:2e:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----