Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/a48fe311c2a83c0820501183fc544237207ec446.mft
File:                     a48fe311c2a83c0820501183fc544237207ec446.mft (raw, json)
Hash identifier:          i/fWTY+PMDqlmsiMXx1WTMB5ymbphdK8xi+LQe234Ps=
Subject key identifier:   64:93:C5:B1:75:CE:22:5F:38:F5:3A:4A:7A:FE:A3:D4:A3:1C:5A:9A
Authority key identifier: EA:3C:98:02:6F:A1:69:9B:C0:CB:15:2A:76:FD:43:BE:5C:A4:8F:C5
Certificate issuer:       /CN=a48fe311c2a83c0820501183fc544237207ec446
Certificate serial:       254C23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48fe311c2a83c0820501183fc544237207ec446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/a48fe311c2a83c0820501183fc544237207ec446.mft
Manifest number:          0DEC
Signing time:             Mon 15 Apr 2024 10:20:36 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:39:25 +0000
Files and hashes:         1: 198300e7a37cef74e7a6063bf3db874d30d765da.roa (hash: BIezf9KiDhtcALD5T8OJWf+8P2sy/7k3Mn4woN044cY=)
                          2: a48fe311c2a83c0820501183fc544237207ec446.crl (hash: l5o2WLtO61wd15JpqrbcyzBnT/BQfgsfkFAUR2xNaLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444323 (0x254c23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48fe311c2a83c0820501183fc544237207ec446
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:39:25 2024 GMT
        Subject: CN=57ad9ef74e5e9d66078a9cd82f44877e1c1e2827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:af:22:44:a6:1f:2f:88:e4:d4:a8:4e:ed:9a:
                    6e:3e:02:b7:3f:75:5a:94:cb:ef:16:30:9b:2d:5d:
                    3a:81:43:48:de:ff:b5:1a:3d:c1:51:f6:b0:7c:fa:
                    d2:32:6c:67:04:3c:d4:2b:ab:9e:3a:14:7d:d0:d1:
                    7e:b0:b0:c7:74:1a:54:73:93:40:91:e7:a2:d2:3e:
                    1b:94:92:97:8f:ee:b1:d2:03:c8:63:bb:f4:51:31:
                    3b:14:16:91:f9:7b:5c:27:60:b4:5c:a0:7d:06:cf:
                    b5:36:ba:30:7e:0e:f1:05:1b:73:47:a9:fd:0f:c4:
                    e9:7d:c7:73:ba:91:9b:5e:68:de:a0:89:07:42:70:
                    b1:15:38:8d:41:8d:0f:b7:ff:b6:f6:b5:f5:13:cc:
                    2e:86:21:de:a7:f3:34:5d:dc:7d:88:88:7c:71:a5:
                    37:d8:bb:0d:70:8a:18:d5:d6:25:2b:3b:24:98:77:
                    99:eb:f4:13:21:e8:07:98:5f:c1:b9:a5:12:c9:34:
                    dd:dc:90:94:17:a2:6c:9a:ff:d3:a3:84:75:6f:4e:
                    8a:60:ad:0c:d6:27:d9:c4:73:1a:a9:c9:d6:ea:69:
                    b5:88:6c:d6:10:a8:e0:06:81:bf:db:db:04:1f:da:
                    f4:a8:f4:32:41:75:2a:b7:62:a9:9c:00:04:96:1c:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:93:C5:B1:75:CE:22:5F:38:F5:3A:4A:7A:FE:A3:D4:A3:1C:5A:9A
            X509v3 Authority Key Identifier:
                keyid:EA:3C:98:02:6F:A1:69:9B:C0:CB:15:2A:76:FD:43:BE:5C:A4:8F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48fe311c2a83c0820501183fc544237207ec446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/a48fe311c2a83c0820501183fc544237207ec446.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/a48fe311c2a83c0820501183fc544237207ec446.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:43:09:73:e4:d8:61:ec:05:79:7f:91:27:eb:0e:4d:79:61:
         ac:f9:7a:49:f1:f3:25:2d:ee:4c:42:8a:2f:cf:c8:4d:7c:f6:
         a7:eb:ed:0e:04:15:8b:c8:e8:68:49:bd:83:f0:4e:f9:53:0c:
         1f:54:ab:14:a3:9b:6a:d9:72:c4:95:5a:f8:62:25:04:ba:4a:
         7a:70:17:24:83:03:16:1a:87:fc:8c:ab:f0:86:fb:69:d2:d9:
         26:8e:ef:46:a1:f8:7c:28:cb:45:de:52:61:f9:25:91:80:28:
         ae:9a:a9:56:6f:3c:ff:25:63:8a:af:98:16:1e:76:ef:a7:1e:
         db:d3:80:72:9a:6e:22:66:05:1c:4f:5b:07:79:25:bf:2e:d3:
         5a:42:28:81:12:4a:14:80:aa:4d:4f:89:95:db:f1:b4:fa:b0:
         4b:de:de:03:49:e0:d7:d0:72:b8:e3:da:5c:ef:d0:de:55:9e:
         fa:8d:6c:ac:0f:7d:0b:9d:ba:05:52:07:0d:87:7d:aa:67:cf:
         83:af:d9:d3:44:e3:27:70:e9:60:ca:92:5b:7a:27:8d:80:52:
         ec:af:fe:f7:1d:95:19:cc:4f:94:5c:1f:f5:2f:54:3e:47:cd:
         43:71:4a:51:f3:94:60:45:69:37:86:53:36:68:c3:7d:b0:cb:
         87:b7:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----