Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d658008cfdae8c7d23365aa2047feba21cb9074d.mft
File:                     d658008cfdae8c7d23365aa2047feba21cb9074d.mft (raw, json)
Hash identifier:          xaqtFmw80RHoLUjLqZD0IgeZJCBrCJxYHCy+4wHYPOs=
Subject key identifier:   7F:39:49:09:5A:11:8C:D3:FD:23:43:AD:DA:12:15:2E:00:89:33:2D
Authority key identifier: F4:74:11:E5:A7:10:20:3B:2B:2D:A9:29:49:78:12:D5:18:3F:B9:45
Certificate issuer:       /CN=d658008cfdae8c7d23365aa2047feba21cb9074d
Certificate serial:       A196
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d658008cfdae8c7d23365aa2047feba21cb9074d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d658008cfdae8c7d23365aa2047feba21cb9074d.mft
Manifest number:          01
Signing time:             Thu 21 Sep 2023 12:51:33 +0000
Manifest this update:     Thu 21 Sep 2023 11:51:33 +0000
Manifest next update:     Sun 24 Sep 2023 13:52:33 +0000
Files and hashes:         1: d658008cfdae8c7d23365aa2047feba21cb9074d.crl (hash: fK6BPvWNXHzI7NSCeClnJZf+rmtJXsqdZaFUiTSmgUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41366 (0xa196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d658008cfdae8c7d23365aa2047feba21cb9074d
        Validity
            Not Before: Sep 21 11:51:33 2023 GMT
            Not After : Sep 24 13:52:33 2023 GMT
        Subject: CN=a81d7a68490d35d3d2d22e4ed879a532eb1fb425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:41:8d:e9:ff:49:6e:80:0e:fa:5c:c1:6a:
                    53:94:78:21:bf:9e:60:0e:f5:5e:2f:5c:3d:89:40:
                    90:58:6e:98:8c:a2:50:e7:ef:23:14:53:4f:7d:6f:
                    07:96:ed:15:78:77:3d:ab:a8:e3:c4:5d:ab:0c:e1:
                    57:a1:e6:e5:5f:a2:3b:ba:3e:90:bf:bf:9d:ca:7e:
                    9c:df:0e:e2:76:60:06:73:62:9b:e2:be:2f:f6:e7:
                    25:b4:4e:b4:b0:21:40:db:cf:9d:40:88:4c:a9:a0:
                    97:83:d9:d7:65:fd:ad:89:2e:ab:50:eb:e3:aa:f1:
                    23:98:56:ff:63:98:92:88:66:08:ef:6d:6e:5a:da:
                    1d:90:f2:85:1e:98:b3:c1:7c:3f:e8:d9:19:9e:b0:
                    67:92:51:bb:f7:ee:11:e7:81:af:74:a8:fa:73:df:
                    e6:8d:b6:66:11:69:77:a3:5d:21:2d:d8:4d:32:1e:
                    53:49:c1:65:ef:99:18:4d:2a:95:44:2c:af:c9:77:
                    11:d9:ea:4a:3f:e8:c7:8f:1b:72:05:ad:46:cb:76:
                    7a:f4:54:4b:e0:3c:a8:5f:60:a7:2a:92:43:20:09:
                    27:63:57:1d:c1:49:a9:fc:a2:43:51:a9:02:e5:d4:
                    12:b3:4f:59:47:c0:ec:20:d7:d0:66:7a:b8:e1:6f:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:39:49:09:5A:11:8C:D3:FD:23:43:AD:DA:12:15:2E:00:89:33:2D
            X509v3 Authority Key Identifier:
                keyid:F4:74:11:E5:A7:10:20:3B:2B:2D:A9:29:49:78:12:D5:18:3F:B9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d658008cfdae8c7d23365aa2047feba21cb9074d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d658008cfdae8c7d23365aa2047feba21cb9074d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d658008cfdae8c7d23365aa2047feba21cb9074d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:55:1b:5f:9b:e6:78:ec:6a:68:e8:12:1b:f7:f4:12:f3:
         81:2c:a1:d2:2b:1c:e9:fd:d6:88:61:4c:8e:fa:04:dd:35:89:
         4e:40:5b:fe:4c:d3:bf:fe:7d:22:57:75:2d:d5:7f:6f:f4:fd:
         88:3c:d0:cc:b5:50:b4:72:e2:b0:f6:84:0a:a6:81:66:b3:79:
         f6:1d:e8:4b:0e:57:bb:d9:1d:7f:d1:cd:46:3a:ae:61:db:28:
         35:68:49:fe:e2:91:c4:43:d0:fe:2e:e9:38:02:13:c9:78:4c:
         b1:75:37:df:a2:24:12:39:38:44:f8:bf:54:58:33:56:a4:fd:
         1d:94:45:cb:cf:5f:1d:46:66:4c:3d:f1:fc:e4:4f:d1:0e:8f:
         0e:f9:bd:5c:d5:8a:b9:71:b6:17:4b:60:2d:34:32:42:6b:d0:
         1f:cc:7e:01:7e:51:da:38:8b:8c:1d:58:d3:39:81:10:eb:8a:
         6a:93:e0:0b:20:31:b6:7f:4e:25:4a:ff:d4:aa:cc:b0:43:03:
         3c:b2:30:57:32:df:d1:b6:3b:4b:7c:c5:32:6e:83:bc:58:0a:
         0e:10:28:09:20:e0:fe:36:ee:02:c8:cb:1d:a9:3e:7e:35:07:
         36:ba:ce:95:60:12:19:87:3f:10:c1:c2:6c:3a:48:f7:4c:4e:
         d7:a2:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----