Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/643083949234b7f46a60f067fefdeb0e758ea956.mft
File:                     643083949234b7f46a60f067fefdeb0e758ea956.mft (raw, json)
Hash identifier:          tGyMYX716bxrUuw+qdxmxzylWNFxRiWp86ey1uF4GAE=
Subject key identifier:   9D:2A:05:A2:FF:5A:75:FC:08:16:D2:84:48:91:D7:6D:2F:3B:33:88
Authority key identifier: 9E:65:D1:1B:86:3C:44:18:14:79:A7:3D:3F:FE:3C:EE:A4:68:B4:FE
Certificate issuer:       /CN=643083949234b7f46a60f067fefdeb0e758ea956
Certificate serial:       162355
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/643083949234b7f46a60f067fefdeb0e758ea956.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/643083949234b7f46a60f067fefdeb0e758ea956.mft
Manifest number:          0B6D
Signing time:             Mon 15 Apr 2024 11:21:22 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:22:18 +0000
Files and hashes:         1: 643083949234b7f46a60f067fefdeb0e758ea956.crl (hash: SJl1xv41smm00Bl2YS3tUWh2ckOyS6VpwkOov6vymhY=)
                          2: bb57ac63bcf616dd8bee27b76fa0c21058d40e81.roa (hash: hDXxRZ8ebcVDiDE9Ammp2376dZlkbUnPkYPak7pTw3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450837 (0x162355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643083949234b7f46a60f067fefdeb0e758ea956
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:22:18 2024 GMT
        Subject: CN=f6cfd9173371a633eee0c4392109aec613ac761d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:b9:7d:b8:08:91:23:39:f4:f8:d9:76:eb:
                    2c:89:a0:c8:92:7f:5a:0d:b0:b3:15:67:9d:5e:b7:
                    73:b3:9c:10:9a:f0:08:73:ed:bb:15:a0:46:3b:19:
                    b0:89:8f:41:ed:80:89:d8:b2:37:47:d7:79:10:75:
                    0a:ce:b4:5c:a6:62:ed:93:d7:49:d8:24:f5:3d:7f:
                    0d:c4:0e:89:67:aa:bc:17:87:77:3e:7e:31:96:cd:
                    0b:2e:74:08:e5:a1:72:fe:3b:38:06:40:05:49:ce:
                    bb:1b:48:bd:cb:18:d4:27:a4:29:f2:9d:98:3b:75:
                    f0:bb:58:e6:40:c5:01:70:fe:51:b7:3b:84:1b:04:
                    48:cd:20:e0:84:44:e9:61:2e:8c:f6:08:bd:eb:80:
                    dd:9d:4d:c2:f2:dd:55:79:b3:89:86:aa:80:eb:0a:
                    9f:0a:04:44:0f:90:a0:56:2b:48:45:5c:4a:61:df:
                    6a:7f:45:a1:6a:17:72:49:22:e4:ea:8a:51:f8:91:
                    d9:ad:07:fe:ce:1d:2b:f7:bc:a1:74:f2:19:39:06:
                    5c:d8:d9:dd:7b:40:79:68:8d:72:bd:a2:f8:ac:7b:
                    66:2d:39:0a:c3:d1:78:de:13:77:67:df:78:f1:4c:
                    1b:73:7a:bb:de:84:cf:dc:28:30:be:d0:03:33:df:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2A:05:A2:FF:5A:75:FC:08:16:D2:84:48:91:D7:6D:2F:3B:33:88
            X509v3 Authority Key Identifier:
                keyid:9E:65:D1:1B:86:3C:44:18:14:79:A7:3D:3F:FE:3C:EE:A4:68:B4:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/643083949234b7f46a60f067fefdeb0e758ea956.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/643083949234b7f46a60f067fefdeb0e758ea956.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/182323c9-0e6a-49ae-9873-3a0460bb1b16/643083949234b7f46a60f067fefdeb0e758ea956.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b1:cb:5f:c3:ed:50:96:ee:54:62:86:ec:57:9c:43:87:51:
         aa:bf:21:a8:9a:25:cf:6e:10:a2:9a:0a:28:f4:a4:3e:45:c0:
         97:92:0f:a4:be:a9:a7:f8:42:4f:cb:02:c2:3d:ea:5a:5e:3c:
         77:7c:33:6c:37:9d:bb:bd:d4:09:82:cf:3b:7b:a5:b1:58:51:
         cc:2e:2c:d3:64:d4:94:54:af:63:6c:7c:5a:93:7b:1e:7c:04:
         8c:8d:24:f1:50:bb:11:34:97:7d:6e:b5:f1:62:f7:d4:3c:98:
         c0:72:69:db:a0:f3:ca:85:fb:af:e4:fa:06:80:ea:a3:56:6a:
         e9:37:4c:3e:6b:9a:59:1e:fe:e0:c1:a4:27:9c:40:a6:95:b1:
         ec:70:d2:a0:de:15:f1:b5:8c:68:ba:95:d8:b0:93:3f:35:5f:
         4e:88:c7:c2:2f:b0:e6:34:96:fe:5b:a1:62:05:9c:38:68:56:
         37:40:f6:24:5c:8e:b1:c6:92:29:73:4d:30:84:00:9a:30:a6:
         6b:0b:a6:41:d5:43:02:7d:cf:f5:a0:c7:6e:2e:01:1e:c5:19:
         fd:04:e0:f0:3e:59:e9:de:9e:fd:b0:58:cb:b9:c8:69:ad:bb:
         ca:63:6e:51:60:10:7f:f3:2d:b5:95:ef:2c:26:04:29:ac:e8:
         3c:9c:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----