Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft
File:                     011a9b477733e7669c43604e0c34e662ac21a23d.mft (raw, json)
Hash identifier:          u7w+ozjNf/cZEvgt1bYcJU/G8wibIlA4Tn8q+xRb63A=
Subject key identifier:   68:22:4A:32:B1:72:92:22:A5:F8:A9:B5:98:22:90:1B:9D:05:70:D5
Authority key identifier: F7:F0:8B:33:82:C4:07:B8:0D:D4:5A:61:A6:A6:0F:55:D4:46:51:D8
Certificate issuer:       /CN=011a9b477733e7669c43604e0c34e662ac21a23d
Certificate serial:       0CFA26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/011a9b477733e7669c43604e0c34e662ac21a23d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft
Manifest number:          0673
Signing time:             Mon 15 Apr 2024 02:21:11 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:05:29 +0000
Files and hashes:         1: 011a9b477733e7669c43604e0c34e662ac21a23d.crl (hash: qOmTZWnn3cWoavkiGQCdgE8dqKzI4vsLcyqx9JP9bE4=)
                          2: cfb14fc051a0066f97f79bb9cb1d232d818dd81d.roa (hash: LRjUIVzU5L/lzRjhOdDn0q0hX0PKMaUQjofkeUeK/X0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850470 (0xcfa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011a9b477733e7669c43604e0c34e662ac21a23d
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:05:29 2024 GMT
        Subject: CN=64f23721fb56177c3faa04fbadbf12988041e5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:e4:b8:1f:71:7e:6b:8a:9a:12:8e:0b:05:
                    78:91:d0:0a:fc:87:83:d4:0d:9b:53:f5:ca:68:31:
                    21:bd:f5:a9:bd:87:d7:b2:df:f5:93:7b:be:24:a9:
                    85:53:b1:a7:aa:24:b9:43:f1:51:8d:2b:fd:08:a5:
                    3a:9f:c7:bf:90:66:46:b8:71:cd:f9:8c:7c:e6:f3:
                    60:8e:ab:17:e8:b7:0d:28:82:88:7c:51:7e:7e:3e:
                    79:ec:f4:8c:e9:f3:08:c6:75:11:9d:82:c7:62:4c:
                    67:bc:a7:8a:b0:a3:d3:fc:24:11:10:55:a6:64:56:
                    4f:5b:8a:ae:ea:00:e6:fb:d3:3f:92:8c:2b:45:e2:
                    a5:b3:3d:02:09:b5:dc:ed:23:52:3f:cf:3b:b4:70:
                    ba:36:b0:8b:ea:2f:6a:be:62:91:7b:65:20:06:d1:
                    8d:7b:de:67:20:46:7d:22:bc:84:f7:43:ad:3c:2e:
                    99:47:4c:ed:ac:1c:8f:01:2b:6c:67:c6:b2:aa:88:
                    6a:83:bc:2a:01:c6:f1:1d:1c:e6:8c:11:ff:d7:87:
                    32:de:a0:05:64:21:d6:76:e6:5c:18:ff:3a:b3:99:
                    9e:05:8b:87:a6:95:8c:89:e4:c0:80:8d:05:3d:45:
                    65:ae:26:60:9c:65:67:3a:1d:97:a7:c0:66:90:c0:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:4A:32:B1:72:92:22:A5:F8:A9:B5:98:22:90:1B:9D:05:70:D5
            X509v3 Authority Key Identifier:
                keyid:F7:F0:8B:33:82:C4:07:B8:0D:D4:5A:61:A6:A6:0F:55:D4:46:51:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/011a9b477733e7669c43604e0c34e662ac21a23d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1af1d986-c73f-4a08-a3fc-bbd6a48c3609/011a9b477733e7669c43604e0c34e662ac21a23d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:fb:2b:ba:44:63:86:c2:2e:93:d6:c3:28:5d:c1:48:ef:91:
         b2:18:16:8c:e8:e7:5f:ec:df:d6:7c:d7:2e:1b:5c:0f:13:27:
         22:90:63:a2:a3:38:b6:fc:ca:30:ee:b5:a8:d4:bd:ad:32:b6:
         8e:27:64:64:5f:50:fb:56:9c:95:fe:63:34:cd:9e:98:5a:8e:
         06:45:50:3c:35:c7:d1:bb:2a:49:d5:15:c7:9d:76:25:aa:b0:
         69:f3:91:e7:f3:8f:8d:92:92:46:ec:62:9f:74:59:d7:48:0c:
         8f:9b:64:6e:91:fc:73:c9:e6:60:b4:99:d7:7c:bf:63:e2:d5:
         01:98:ce:fb:9f:68:6a:4a:38:cc:57:93:d7:9c:12:59:de:ea:
         d5:b9:20:1f:3c:97:bb:07:75:00:7d:0d:06:4d:b0:6a:df:65:
         53:05:34:8e:5d:c6:81:68:cb:bd:8b:79:1b:92:2b:9b:8b:0d:
         bc:c8:0d:f8:1c:a4:c3:9b:05:c2:38:6f:97:db:f7:35:d0:e7:
         44:5a:5a:bf:c5:6c:ef:8f:1b:4f:db:88:9e:35:f6:c6:e4:d9:
         e0:08:15:89:d6:71:00:68:27:f9:6b:81:99:96:50:fa:e2:52:
         c6:53:8e:67:52:73:21:34:c6:7f:cf:d0:76:a9:2a:c4:00:34:
         01:18:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----