Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d52f2a0f-48c7-4fa5-8811-119016f3739d/5bc2036c974a57129ba37058894d0aa5285b22af.mft
File:                     5bc2036c974a57129ba37058894d0aa5285b22af.mft (raw, json)
Hash identifier:          i89/2+UM2cn0r4mVVQP3POz+l7OF8M+q1FgS/ntG/NU=
Subject key identifier:   B0:D0:35:E7:DD:39:3C:C0:33:20:44:C0:C9:45:E3:8F:DD:11:33:24
Authority key identifier: B1:2F:7C:05:64:E0:F8:44:FC:A6:F2:FA:27:7E:F7:74:4D:3F:D1:14
Certificate issuer:       /CN=5bc2036c974a57129ba37058894d0aa5285b22af
Certificate serial:       2747A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bc2036c974a57129ba37058894d0aa5285b22af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d52f2a0f-48c7-4fa5-8811-119016f3739d/5bc2036c974a57129ba37058894d0aa5285b22af.mft
Manifest number:          0DF9
Signing time:             Mon 15 Apr 2024 08:21:32 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:42:16 +0000
Files and hashes:         1: 5bc2036c974a57129ba37058894d0aa5285b22af.crl (hash: OZYoL+3UFqi8M2NH8iAFVlyPf7bIWlup6dRVz0ZH3T0=)
                          2: 7b64ff1f96eebf05e145fccb967e00e772fa81c9.roa (hash: 6MwBuBiMq7oWT746Ut16eKvK6n+yaIM1HVD6PsaMEok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2574249 (0x2747a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc2036c974a57129ba37058894d0aa5285b22af
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:42:16 2024 GMT
        Subject: CN=ef05b4beb9fb4935ca4c2d7f8faba3e6c25258f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:9b:5b:e2:22:f3:3b:81:e2:e6:8d:07:94:
                    40:e4:cc:83:bd:01:9d:ac:7a:ce:b1:18:c0:97:02:
                    0f:60:c6:c9:01:a9:71:14:84:a8:7c:fb:a8:5b:98:
                    50:ea:9f:32:34:cc:2a:c3:99:c4:2a:19:06:cc:71:
                    94:6b:4d:50:6f:a3:32:06:2b:5d:31:a1:9d:eb:90:
                    c6:61:fc:f3:29:41:b6:f6:23:71:30:1d:ca:4c:30:
                    d2:66:25:e9:03:11:de:da:de:b8:4b:b9:72:4a:1d:
                    2b:cb:ff:95:6c:72:ec:ca:1c:c4:7c:1e:76:f4:80:
                    32:b5:03:81:a2:d7:8b:83:07:09:17:21:8c:b9:5a:
                    3a:9b:ab:1b:23:6a:f1:01:7b:70:95:63:43:1a:42:
                    1a:b1:c6:cd:0e:7a:de:5d:6e:c6:f6:a8:7b:a5:74:
                    38:b5:08:6f:c4:60:7c:d7:42:be:2d:69:96:7c:eb:
                    24:55:ae:3d:1e:3a:8c:0a:54:35:46:1a:1f:0c:68:
                    b2:4c:70:b2:d4:74:2c:24:69:fb:bb:e6:f0:2b:4d:
                    ca:43:e3:4b:c5:9c:f2:09:0a:26:d3:89:71:d1:14:
                    4f:59:a8:a4:59:46:6a:49:fd:32:3e:e0:40:1f:c3:
                    50:42:96:b7:49:d1:8b:f7:dc:d4:b9:55:5f:86:26:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D0:35:E7:DD:39:3C:C0:33:20:44:C0:C9:45:E3:8F:DD:11:33:24
            X509v3 Authority Key Identifier:
                keyid:B1:2F:7C:05:64:E0:F8:44:FC:A6:F2:FA:27:7E:F7:74:4D:3F:D1:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bc2036c974a57129ba37058894d0aa5285b22af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d52f2a0f-48c7-4fa5-8811-119016f3739d/5bc2036c974a57129ba37058894d0aa5285b22af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d52f2a0f-48c7-4fa5-8811-119016f3739d/5bc2036c974a57129ba37058894d0aa5285b22af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:02:0a:0b:5b:f8:2b:96:d0:51:2a:4a:17:b0:01:5e:88:1a:
         10:e9:d1:b6:7b:ae:33:6c:ea:51:d3:12:86:93:f9:d6:97:41:
         cc:46:50:a5:e9:08:40:e2:a5:57:3e:2b:53:5e:11:92:0d:b4:
         9d:38:5c:89:09:0a:37:4c:bb:da:27:b2:c6:db:33:9d:1c:1d:
         e5:bc:3e:39:1f:8a:32:dc:3f:44:c6:a5:74:d8:6b:95:a8:6f:
         6d:61:61:75:1b:76:2a:a0:10:d2:88:a3:f7:80:76:7e:3a:d1:
         7f:16:ce:54:05:0f:69:35:56:12:24:a2:ff:b9:c0:36:03:f9:
         0a:fc:3c:f7:68:e4:de:41:1f:39:bb:5e:88:be:85:3d:99:d4:
         6e:cd:d7:6e:5c:cf:89:67:68:bf:12:73:6f:f3:b2:ea:56:85:
         81:31:41:4f:fd:17:97:89:31:7a:19:b2:5a:83:89:23:2d:1c:
         31:db:3c:bb:9e:10:19:c2:bd:70:c9:85:5d:70:5a:66:f3:79:
         e7:a1:cc:3d:cb:5a:f1:fe:0e:ec:88:ef:15:9c:a4:04:6b:8b:
         34:ae:e2:91:d6:4c:a2:3b:6a:2d:92:8a:42:6d:77:1d:b6:86:
         38:f6:00:14:c0:c5:db:d8:d7:5b:0b:36:92:d1:b2:aa:ef:fb:
         3f:9b:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----