Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2cc92e-4d0c-417b-964a-a925b4ffc836/d20a45f74b82029f96fe66b8a7d46cc4228921fd.mft
File:                     d20a45f74b82029f96fe66b8a7d46cc4228921fd.mft (raw, json)
Hash identifier:          cuQcWOCoJjsD1veM6i1+Y2gT3qBEYLGUht7qLC1fJnE=
Subject key identifier:   3E:F1:44:BC:AB:3E:4B:3B:56:BE:22:BE:C7:34:B9:F7:40:1C:02:A4
Authority key identifier: 43:1F:85:54:1E:87:91:04:0A:41:17:6A:03:5F:5E:F3:4B:DF:F4:C2
Certificate issuer:       /CN=d20a45f74b82029f96fe66b8a7d46cc4228921fd
Certificate serial:       093C63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d20a45f74b82029f96fe66b8a7d46cc4228921fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2cc92e-4d0c-417b-964a-a925b4ffc836/d20a45f74b82029f96fe66b8a7d46cc4228921fd.mft
Manifest number:          04BB
Signing time:             Mon 15 Apr 2024 07:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:28:17 +0000
Files and hashes:         1: 286452fae30a2deb1d172b11658b0eb14adb5924.roa (hash: Tv9/c75HDSe6btYvR2OaPx6/aPhbZCYmtpa7jWgCJQo=)
                          2: d20a45f74b82029f96fe66b8a7d46cc4228921fd.crl (hash: ip4o+dh+HnXw9XTXklj7YCDJXWYe45/ATXTKKaF9AwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605283 (0x93c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20a45f74b82029f96fe66b8a7d46cc4228921fd
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 07:28:17 2024 GMT
        Subject: CN=6887d6221f2db24989ecd717fde5bb2176966f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:3c:6d:99:e5:9c:1a:cb:a5:9a:ce:34:68:
                    4c:4c:7b:22:66:1d:d4:b9:ff:c4:f9:af:6b:25:1d:
                    36:7f:cd:82:82:c2:49:c2:a8:da:b5:07:53:1f:40:
                    6a:60:88:f2:ec:bf:0c:ff:96:0a:2c:f2:23:24:c1:
                    d4:b2:d2:27:a3:44:30:2d:7e:a8:4d:fa:eb:1f:b6:
                    0e:80:11:cb:d5:2f:72:cd:26:db:84:90:ed:ee:39:
                    52:2c:44:58:3e:67:e3:0c:ff:ee:ab:3f:42:cc:f5:
                    e5:2b:ca:25:92:8f:64:7b:b1:86:d5:67:67:5d:2c:
                    77:4b:a4:30:f6:ac:c2:a3:ed:4c:20:00:76:f9:97:
                    d6:e4:5b:47:d1:f2:a9:27:67:f8:b1:c4:01:9b:80:
                    3b:a0:9b:91:b7:ac:9c:b4:cd:2f:ff:08:b2:67:75:
                    5b:61:4d:9d:51:9b:b4:40:0f:a2:22:3b:98:90:7f:
                    a8:d0:a5:99:d6:69:09:3d:35:1a:97:90:1e:da:31:
                    95:71:61:8b:71:66:c2:31:f1:9f:be:72:6f:e2:84:
                    8b:67:ff:a4:2e:1d:b3:20:07:30:8c:6d:bb:79:4a:
                    1a:4b:c4:b9:49:e9:43:40:16:f3:12:0d:aa:51:11:
                    f1:59:f2:62:5c:7b:c5:eb:82:63:57:55:02:99:58:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F1:44:BC:AB:3E:4B:3B:56:BE:22:BE:C7:34:B9:F7:40:1C:02:A4
            X509v3 Authority Key Identifier:
                keyid:43:1F:85:54:1E:87:91:04:0A:41:17:6A:03:5F:5E:F3:4B:DF:F4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d20a45f74b82029f96fe66b8a7d46cc4228921fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2cc92e-4d0c-417b-964a-a925b4ffc836/d20a45f74b82029f96fe66b8a7d46cc4228921fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2cc92e-4d0c-417b-964a-a925b4ffc836/d20a45f74b82029f96fe66b8a7d46cc4228921fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1d:56:ae:b2:77:12:4c:69:72:92:84:8a:60:8e:64:31:94:
         70:97:de:cd:ae:12:a1:7f:65:e0:5a:9c:aa:01:e0:85:5e:a4:
         06:2c:92:fe:cf:fa:04:23:2b:84:f4:ab:b8:64:69:3d:ae:ea:
         a4:9c:4f:71:4f:99:2d:ab:7b:5a:fd:0e:b7:de:73:ff:a5:e2:
         1c:26:ac:1c:2a:47:a3:a1:03:7d:15:3e:36:63:3b:d0:58:73:
         11:a3:4c:04:de:aa:4b:4d:d5:bd:e6:2f:69:16:38:09:87:2c:
         b8:18:2d:c1:46:e0:7d:10:00:28:00:0f:57:bc:5e:da:fa:f8:
         52:24:58:5c:df:9d:4e:bb:10:9d:1c:14:e4:a9:97:93:f8:f7:
         71:8e:cb:ff:06:0a:32:25:6a:ff:e3:55:c4:cd:88:d4:cc:0e:
         6f:91:8a:9f:b9:46:5d:c5:f4:58:8d:40:51:06:8c:31:fd:45:
         d9:c8:60:c3:fd:99:10:0a:39:27:9b:f6:6a:43:61:33:4f:52:
         80:ac:20:51:f3:53:f1:d4:68:59:b6:c7:99:bc:c4:f0:63:fa:
         44:3a:4b:90:1c:09:a4:ed:34:bb:36:cb:d1:1f:5f:87:51:24:
         6d:b0:69:c6:7d:72:95:95:53:07:ee:35:da:7e:9c:0f:64:55:
         72:4e:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----