Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/70d0dea43310326c8a8f5fa6afb4d9c816721165.mft
File:                     70d0dea43310326c8a8f5fa6afb4d9c816721165.mft (raw, json)
Hash identifier:          M5E1bCBRij9meVI8yj1o8OQQ2u4I7Hrxus2hCnVuCdE=
Subject key identifier:   69:6C:B2:EE:1C:DF:EB:93:90:74:05:69:CE:3F:F7:9E:81:E1:7B:9C
Authority key identifier: 09:19:A3:85:C9:62:54:B5:78:61:79:3B:EE:56:0B:9B:3A:C2:3B:8D
Certificate issuer:       /CN=70d0dea43310326c8a8f5fa6afb4d9c816721165
Certificate serial:       2975FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70d0dea43310326c8a8f5fa6afb4d9c816721165.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/70d0dea43310326c8a8f5fa6afb4d9c816721165.mft
Manifest number:          0DEE
Signing time:             Mon 15 Apr 2024 03:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:14:17 +0000
Files and hashes:         1: 70d0dea43310326c8a8f5fa6afb4d9c816721165.crl (hash: Q5enfBaxZpZiM7VElliYjDpN2FEXQXi8p8dNgxBl8Xk=)
                          2: f0ed0c70b799e99fe2f393ad7859f0d43efceb38.roa (hash: KCoXpb3kz4H8sxRlx9qmiBFjd9FyJwnP5jR6cdkEqyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2717179 (0x2975fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d0dea43310326c8a8f5fa6afb4d9c816721165
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:14:17 2024 GMT
        Subject: CN=2e36b03d89810168817128d2878e7cb7a664b08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:41:8b:2a:a8:90:15:31:8b:db:99:cd:a5:29:
                    ec:a1:f7:06:a6:7f:06:6f:cf:31:f8:a4:d7:48:67:
                    99:32:53:24:b6:81:6a:f6:13:69:75:10:8f:dc:66:
                    9c:92:cf:7a:d2:0a:d5:76:1c:0f:4e:7d:4a:55:c4:
                    99:a2:09:50:a7:bb:a9:a6:0c:c0:bd:85:f8:b3:d0:
                    7f:ec:16:b4:26:4d:6d:8a:7d:4f:25:94:07:a7:7f:
                    0e:dd:18:bf:76:68:53:55:8a:2d:b1:dd:d2:1a:ef:
                    be:ca:ca:1a:6a:f4:09:20:e0:38:66:4a:42:6a:7b:
                    74:34:25:4e:e6:c0:57:45:86:4a:5a:1f:28:8e:b1:
                    3f:04:85:58:2c:70:cc:66:56:5d:38:ae:4c:37:56:
                    d7:c5:83:06:64:38:42:00:06:d6:70:e6:09:ca:66:
                    37:50:0a:91:de:0d:13:12:af:9e:e7:bf:3f:4a:4d:
                    4d:5d:72:22:e2:6e:75:a3:aa:45:4a:af:ad:c6:1c:
                    2d:35:b4:9e:d4:f8:43:e5:a9:0e:64:65:85:85:12:
                    16:ef:00:06:7d:11:dd:6f:f0:9f:83:d7:da:8e:46:
                    1a:9f:ca:0a:4e:ff:2b:98:ec:24:60:93:8c:34:b7:
                    c4:5c:4c:5d:ba:aa:60:88:a8:7e:01:8f:5d:8c:b9:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6C:B2:EE:1C:DF:EB:93:90:74:05:69:CE:3F:F7:9E:81:E1:7B:9C
            X509v3 Authority Key Identifier:
                keyid:09:19:A3:85:C9:62:54:B5:78:61:79:3B:EE:56:0B:9B:3A:C2:3B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70d0dea43310326c8a8f5fa6afb4d9c816721165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/70d0dea43310326c8a8f5fa6afb4d9c816721165.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/70d0dea43310326c8a8f5fa6afb4d9c816721165.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d1:ff:12:3b:00:79:6d:f0:f9:8b:3b:07:66:d2:75:26:76:
         dd:b9:bc:6d:ff:9f:d5:a5:d6:3d:27:ef:93:f3:55:1a:01:fc:
         ad:0b:13:ac:78:b1:6f:3f:96:79:26:dd:94:45:41:c2:ac:c9:
         bd:a9:94:d0:5a:c1:45:a8:80:40:f8:e5:7b:b6:2b:69:b6:cd:
         75:d1:68:b0:45:fa:16:62:e6:cc:e4:fa:39:4a:e3:76:41:86:
         a4:03:1b:88:46:34:d6:dd:ee:2d:34:41:df:1a:bf:0f:e2:70:
         1c:0a:dc:e4:a9:86:ca:1c:fd:15:be:6d:bf:ac:b6:05:ca:31:
         75:6d:41:1a:e2:a6:5f:75:ec:25:5c:3b:ae:30:ac:be:90:44:
         e8:c3:86:91:5e:1f:80:4b:58:72:87:08:00:8e:9f:f6:38:96:
         22:e6:c9:be:21:6a:0e:25:22:84:f5:e8:3a:4a:7d:15:fe:b1:
         16:6b:bc:81:3e:cd:a9:4d:cd:73:6a:48:ac:07:b0:87:b7:c3:
         c8:c6:d9:6a:3b:4a:ff:6e:8e:c9:51:db:07:70:f0:24:c8:79:
         a8:e8:64:45:47:ca:12:c7:70:e3:d9:ca:d9:02:be:8b:68:27:
         21:cd:cc:cb:f1:5f:30:fe:ff:64:cc:d7:54:c4:d4:e5:80:d6:
         81:ce:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----