Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21db4aef-aec8-40ec-b240-96befd91e38d/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.mft
File:                     2362ee0dcdc1ccc539ff28ab9ce488172720f59a.mft (raw, json)
Hash identifier:          RLnTOt7E1gPRCmU6Ru6XKIiazNxE33VFo2tvNwkEUJc=
Subject key identifier:   FC:6E:63:1D:39:35:82:09:C4:17:AE:7E:80:4E:87:3B:6B:FD:1D:DF
Authority key identifier: 37:E9:F9:AE:50:84:84:4B:AD:22:B7:92:09:7F:4A:0B:6D:D1:55:EA
Certificate issuer:       /CN=2362ee0dcdc1ccc539ff28ab9ce488172720f59a
Certificate serial:       051675
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21db4aef-aec8-40ec-b240-96befd91e38d/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.mft
Manifest number:          02AD
Signing time:             Mon 15 Apr 2024 09:21:26 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:13:18 +0000
Files and hashes:         1: 2362ee0dcdc1ccc539ff28ab9ce488172720f59a.crl (hash: 3zPBorBdymzzxZcR0E3WpGfepK7GSv8a3CL7TE9ks+4=)
                          2: 9a1d9a97733ac98add644dbcd26629fe266e8a1d.roa (hash: Co3Hw7uV0qof0ofpXDL9LsE5RVMgAl6HN7tqZ46yWcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333429 (0x51675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362ee0dcdc1ccc539ff28ab9ce488172720f59a
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:13:18 2024 GMT
        Subject: CN=7af7188ba50fa2e30c5108bbb0669a445b82ba77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:0f:3a:64:f7:45:3c:1b:9a:16:3b:60:ad:
                    1a:3a:a3:70:3a:b9:0e:4d:a8:7d:bc:8f:69:d2:1c:
                    4c:ed:7b:23:ef:fa:76:b2:ec:f6:1a:bb:ba:bd:c8:
                    bb:e1:5b:ec:18:08:cc:41:4d:f8:e1:20:bf:1c:e8:
                    bf:79:5f:e2:32:5a:2b:cd:12:f8:f6:93:01:36:90:
                    61:98:a2:58:f1:4c:9b:19:cb:4b:05:9a:ac:74:1a:
                    3f:1a:60:c7:c7:f3:20:5f:ad:57:56:5e:ea:f9:d6:
                    ea:37:8f:3f:9d:ac:bb:ca:7d:2c:28:dc:57:68:5f:
                    12:86:51:32:4b:e6:8c:38:0a:8f:59:7d:0f:ca:6a:
                    08:ee:c3:90:35:9a:2e:af:e2:0a:8a:1e:2b:68:42:
                    87:df:97:bb:04:21:4d:67:39:d5:7f:2c:a4:d1:b7:
                    e6:a5:9e:2c:3d:e5:2a:fb:d1:60:00:de:69:32:ba:
                    d8:9b:17:87:46:61:24:42:f1:75:2c:98:ce:3f:23:
                    44:2c:17:f0:f1:da:72:3f:60:22:c4:e8:80:8f:a4:
                    5e:39:d7:47:fe:f5:87:16:41:69:7d:29:50:1d:9d:
                    de:0e:28:2c:56:6b:41:f9:2f:46:ca:a3:eb:e9:bf:
                    3e:fe:c6:88:b1:75:cd:42:69:d7:13:97:14:a2:36:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6E:63:1D:39:35:82:09:C4:17:AE:7E:80:4E:87:3B:6B:FD:1D:DF
            X509v3 Authority Key Identifier:
                keyid:37:E9:F9:AE:50:84:84:4B:AD:22:B7:92:09:7F:4A:0B:6D:D1:55:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21db4aef-aec8-40ec-b240-96befd91e38d/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21db4aef-aec8-40ec-b240-96befd91e38d/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1a:b8:f9:60:ef:b4:66:bf:81:45:85:dd:a8:d1:15:63:45:
         bd:22:a8:78:c3:a9:f5:98:f9:33:ca:38:6a:d2:30:88:fa:c7:
         e7:44:0c:fc:3d:41:1b:5c:e9:69:8a:21:f1:87:28:06:7e:a0:
         0a:35:8a:cd:fa:9d:f9:87:26:06:b9:b7:07:d4:20:e5:d9:21:
         5f:c4:10:24:bc:47:d8:b2:a7:23:04:8d:9f:9c:32:98:9e:9b:
         ae:ee:83:d9:dc:5e:ff:16:e4:89:5f:ac:d6:81:40:5a:49:91:
         2a:f8:77:27:28:2e:26:00:c7:dc:ba:ed:93:8a:cc:50:f5:67:
         f6:17:62:a8:50:b3:a3:18:11:eb:f8:f4:77:be:a4:93:af:76:
         f7:a4:84:65:c3:fb:62:4f:a5:f2:25:79:08:be:06:6c:c8:31:
         45:d4:17:5c:c2:34:a0:f1:bd:9e:ab:67:87:22:f2:76:4c:7a:
         9e:5f:22:f2:51:16:8e:b8:a4:b8:9b:98:3a:32:8b:0f:cb:45:
         29:c4:35:ca:b9:64:0f:17:23:70:37:87:36:c6:27:a5:81:b4:
         6e:29:22:61:52:fd:5f:bd:cd:1f:6a:39:ea:45:a6:12:68:be:
         9a:5a:07:dc:d4:fa:62:11:ea:5a:da:1c:51:f7:5b:1f:31:50:
         c3:47:a3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----