Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft
File:                     9d0eefbeed1a04984bf835792198e2b00880f6fa.mft (raw, json)
Hash identifier:          FCDm+K4U0odEH8QAfcnl1PPIAc+g7SoRP2eOsqd05Oo=
Subject key identifier:   74:4D:8E:EA:E4:DD:CA:44:03:87:D7:D1:5A:35:9B:B5:BE:5E:DF:9B
Authority key identifier: 1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70
Certificate issuer:       /CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
Certificate serial:       1D2A4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft
Manifest number:          0E10
Signing time:             Mon 15 Apr 2024 09:21:14 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:12:18 +0000
Files and hashes:         1: 9cc977feb2997a9ae59c40d3f4db71f7b82175e7.roa (hash: 4klH9zB3JIvICEJiqEGEu7q9qx4RVBit8IRiZAM7bNs=)
                          2: 9d0eefbeed1a04984bf835792198e2b00880f6fa.crl (hash: cTD307zsiB9J0NMf9OtjmWjgTY68KzpBrn4Adt6/FLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911375 (0x1d2a4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:12:18 2024 GMT
        Subject: CN=713c074ab10fb938d46b8337aec07a75562ebdfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:75:da:d5:0b:4f:1f:8e:42:0b:15:94:c4:
                    49:42:de:d8:3e:89:dc:10:62:49:33:12:00:82:10:
                    0a:f3:ce:b8:97:07:36:12:bd:ef:61:ea:d0:13:3c:
                    fb:35:25:68:9b:e8:24:fe:e3:b6:f7:fe:d6:1d:ca:
                    4a:bb:c0:ba:1c:97:61:32:19:0a:4b:27:f4:db:f6:
                    c3:f2:aa:cf:7f:5b:36:b4:8f:cc:90:48:cd:db:23:
                    79:c3:1d:b5:0f:d9:0b:b9:8e:da:0a:27:a2:4f:41:
                    87:5b:43:e8:20:21:35:55:3c:1f:68:b9:ed:5c:ea:
                    e8:5b:6c:29:25:34:a2:3a:b4:3a:53:d0:7e:70:1b:
                    9f:bb:77:c6:4e:64:e4:c6:bd:14:b6:ff:b1:fc:20:
                    d1:66:45:01:8b:48:e6:15:bf:3b:87:60:d0:bb:93:
                    08:51:b0:f7:2b:da:ad:75:eb:85:0e:eb:46:cf:cf:
                    c9:3d:b8:21:36:16:88:50:01:77:ec:c4:37:e4:1e:
                    c5:a8:ee:65:21:31:c7:40:5b:d2:8e:3c:5d:c4:a2:
                    ed:26:c3:32:00:1b:d6:0c:86:e6:09:24:fd:2a:b4:
                    bd:80:16:1d:b5:5d:88:62:e2:69:89:5e:17:33:d8:
                    d5:6c:42:69:89:19:3c:d2:ee:e0:3b:8d:3c:03:5b:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4D:8E:EA:E4:DD:CA:44:03:87:D7:D1:5A:35:9B:B5:BE:5E:DF:9B
            X509v3 Authority Key Identifier:
                keyid:1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:69:5b:cf:8d:73:ff:0d:44:37:9c:81:86:c7:48:3d:59:88:
         f6:a0:ec:c1:c8:e0:b6:91:3c:40:97:ba:e7:c5:25:ae:08:83:
         54:d1:85:e7:56:b4:89:d3:d8:72:72:ab:ce:d5:9f:bd:59:a7:
         07:b2:3f:87:38:87:63:72:06:32:ba:59:51:4b:ed:88:a3:e0:
         19:64:6d:64:af:4a:ae:2a:ff:33:5c:7e:84:84:86:21:2c:41:
         da:73:be:9a:47:92:79:82:0d:94:0c:fc:f6:fa:79:e9:4c:f2:
         e2:fa:b4:06:e1:4c:ae:f7:24:11:8c:51:5b:4f:12:34:e2:76:
         ac:81:bc:05:50:a8:fe:64:7f:b6:0d:44:d4:16:cd:d5:b2:dd:
         4d:48:0a:ee:99:ae:c9:24:2f:e1:ac:0f:48:49:a3:b2:07:19:
         4f:3b:32:83:33:6c:19:27:c1:1d:65:ed:ad:ad:9a:f4:16:f4:
         80:c3:d3:4f:6b:b1:75:fe:38:84:2f:94:44:bb:01:52:83:a9:
         9a:23:35:56:c1:1a:84:bc:20:2e:fd:05:78:c7:be:09:f6:92:
         fd:d2:ce:53:d2:4b:cb:9c:39:87:62:f3:4a:1a:44:c3:6c:61:
         25:df:58:21:c5:af:d4:0e:bf:db:fe:7e:32:e8:fe:e7:1b:67:
         7a:50:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----