Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.mft
File:                     d67721c2027f185afaeb0fd9d993b9129e9feda6.mft (raw, json)
Hash identifier:          qmyjll78LgQEmfSDjrbp+D4suOQ5SDMcGD2h8QINO/A=
Subject key identifier:   BC:8C:F2:F9:BC:B8:B2:D2:DB:37:D1:C1:CF:10:60:64:DB:4B:48:79
Authority key identifier: C8:0D:D7:45:1A:E4:AB:F7:71:85:CA:6A:47:59:55:64:92:AD:B9:55
Certificate issuer:       /CN=d67721c2027f185afaeb0fd9d993b9129e9feda6
Certificate serial:       223225
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67721c2027f185afaeb0fd9d993b9129e9feda6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.mft
Manifest number:          0DF8
Signing time:             Mon 15 Apr 2024 05:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:48:17 +0000
Files and hashes:         1: 37877c4389797fd296803c78f0f88ac7ab724585.roa (hash: YvQnCgCG9ymrq4fzpAZbw/G5NmtO+aG0z+v3hevA4YI=)
                          2: d67721c2027f185afaeb0fd9d993b9129e9feda6.crl (hash: fXmxOccuBb1buCbjigvZyyeg6Y7qPqSVYPE6JDwlkDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241061 (0x223225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d67721c2027f185afaeb0fd9d993b9129e9feda6
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:48:17 2024 GMT
        Subject: CN=dcdde89d48731c2d331191b757406e82ea5f2683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:ba:6b:f8:67:d7:7f:97:fe:2d:18:80:e5:
                    cd:b8:82:44:20:08:19:47:b1:11:49:96:9a:e2:eb:
                    8d:20:94:f4:55:3d:5a:73:bf:03:2c:9a:c3:8a:6c:
                    d3:c3:23:1f:7b:cd:86:72:07:2a:66:0f:eb:b7:03:
                    61:c5:1f:a7:c9:0d:85:35:c7:31:90:18:fc:e7:b0:
                    ed:fd:d4:76:d6:88:d6:bb:e4:37:64:e7:5c:04:06:
                    c3:60:9b:1d:85:3f:c5:1e:90:bf:a6:cc:52:3c:71:
                    79:f5:66:c1:c1:6f:76:d8:77:ef:5f:92:bb:e6:b2:
                    e5:a5:c2:35:06:03:b1:bb:3e:4c:bb:d7:c0:d6:a1:
                    01:c1:f6:51:e4:34:1e:86:f5:e5:f3:d9:da:e7:60:
                    67:8d:cc:1a:73:a6:96:e8:ff:da:fd:ad:32:d4:68:
                    0b:66:67:a1:aa:13:86:6d:d4:4f:ff:d7:f4:77:72:
                    b9:55:05:e2:2f:07:1c:72:ad:2d:85:ef:94:e7:e6:
                    c4:b6:8a:88:5d:b0:32:9b:31:b1:2a:b1:23:ff:bd:
                    32:57:c4:24:79:40:1d:2a:21:e7:0d:13:12:74:0e:
                    94:4d:ab:5c:af:21:a8:38:0f:53:09:11:06:f9:7b:
                    63:50:e3:31:c8:f0:ff:82:89:33:ed:a4:55:20:7c:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:F2:F9:BC:B8:B2:D2:DB:37:D1:C1:CF:10:60:64:DB:4B:48:79
            X509v3 Authority Key Identifier:
                keyid:C8:0D:D7:45:1A:E4:AB:F7:71:85:CA:6A:47:59:55:64:92:AD:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67721c2027f185afaeb0fd9d993b9129e9feda6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21b23a8b-1ed2-48d3-8fa0-0bbae9d1e7de/d67721c2027f185afaeb0fd9d993b9129e9feda6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2d:6d:85:db:d9:1c:e4:ee:e1:99:5f:d7:62:37:04:24:b0:
         72:bb:0b:1d:bc:c9:92:ec:df:c5:ae:9f:76:a9:04:9e:c3:2c:
         10:dd:6e:7b:87:80:84:89:3d:3c:74:f6:02:67:59:0d:80:30:
         3d:d4:7c:e4:ec:ff:f8:96:4e:9e:a4:7c:cb:a2:7c:92:71:8e:
         e6:ce:f1:69:74:b3:1c:6c:fb:8a:d7:9a:bb:1a:0d:bb:55:64:
         3f:81:96:22:bc:d0:0b:e5:39:52:8b:62:53:9d:08:c2:a6:0f:
         22:46:20:23:c0:ce:28:f8:24:73:50:ff:71:6b:c9:83:57:31:
         65:dd:64:ad:ba:1d:44:77:1d:4e:68:72:87:46:91:30:e9:a2:
         94:43:1f:bd:30:6b:d1:7e:98:83:04:a7:4f:26:4f:a2:58:0b:
         26:3a:65:d5:5c:92:bc:2a:e8:4c:c0:c4:70:bb:98:e3:f5:4a:
         ce:a4:23:7e:a3:81:3c:bd:25:b2:5e:79:69:e9:2c:3c:6c:69:
         72:c2:42:5f:2e:cc:b3:1f:8f:13:48:ed:e1:57:2c:b8:1c:39:
         a9:f7:8c:d9:13:ee:6c:9b:69:2a:a7:c2:c9:33:57:08:28:a5:
         f8:80:da:6c:7d:57:6e:33:a2:68:ec:59:7c:77:55:13:43:ca:
         60:0f:87:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----