Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22db2502-23a6-4caa-8813-8cf46c988cbc/453ec10f3993401e3469868a74f33edb1e92d6e3.mft
File:                     453ec10f3993401e3469868a74f33edb1e92d6e3.mft (raw, json)
Hash identifier:          rRMyS/U+dcFAnd5zSBtM/gFwAIQ46N5EE/IO2Ye4b0k=
Subject key identifier:   ED:C1:3C:83:D3:8C:02:00:A9:E3:3F:88:C9:89:F7:00:C3:D4:4B:68
Authority key identifier: F2:F5:6D:94:4C:EE:4B:76:C7:FC:32:DE:30:3F:6E:B2:CE:A1:1B:C1
Certificate issuer:       /CN=453ec10f3993401e3469868a74f33edb1e92d6e3
Certificate serial:       07C061
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ec10f3993401e3469868a74f33edb1e92d6e3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22db2502-23a6-4caa-8813-8cf46c988cbc/453ec10f3993401e3469868a74f33edb1e92d6e3.mft
Manifest number:          03F9
Signing time:             Mon 15 Apr 2024 03:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:18:17 +0000
Files and hashes:         1: 453ec10f3993401e3469868a74f33edb1e92d6e3.crl (hash: Pwc8j6wAGERmUR21SYPAmHIDOF2aQelPPB7p6S+eU20=)
                          2: 7425482cc20f25851cfad60adcf36dac40d66df9.roa (hash: 26A83nfB5La2RniX/wuYCRvLyQxkHTIjAlj1/DtnCzg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508001 (0x7c061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453ec10f3993401e3469868a74f33edb1e92d6e3
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:18:17 2024 GMT
        Subject: CN=9e243c917b8308fecac10479713a5f93f5cfaad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:59:43:a6:18:4e:ed:94:3b:aa:81:ee:0d:
                    97:38:a1:0c:1c:1f:c6:1d:c9:41:c8:a9:f0:40:7a:
                    e5:94:90:42:98:0f:fb:44:3e:ce:b4:44:70:67:18:
                    d9:c1:f6:66:42:6e:9a:8d:79:12:8a:5e:3c:8c:cd:
                    f6:38:b2:92:91:a4:08:de:66:71:53:8c:6b:74:01:
                    0b:59:40:85:11:d1:49:d4:56:43:b7:33:db:7a:c1:
                    08:dc:9e:5c:d9:18:41:93:96:9f:ed:01:ce:b9:b1:
                    09:03:08:34:cf:15:64:02:8f:e5:3b:d1:aa:2c:08:
                    a3:9d:ac:47:ea:56:48:09:d4:19:1b:26:88:30:9a:
                    9b:e1:6b:e6:dd:33:1f:e4:bc:e3:ef:5a:2e:52:64:
                    be:5c:58:5e:9a:dd:38:12:9f:d1:b3:2b:cb:95:a7:
                    b3:1d:0f:27:d4:a3:bb:d5:08:f8:00:f9:f3:4a:55:
                    52:1a:4f:98:60:55:ca:0f:74:a3:db:0c:4d:de:58:
                    41:29:c3:34:29:c6:a8:36:55:5a:d4:22:6b:80:68:
                    de:9a:4c:c8:f6:51:fc:a4:2f:c3:5e:89:e6:df:a4:
                    d9:07:55:a0:91:cd:9c:15:d7:88:70:6a:e9:ea:09:
                    0b:10:24:21:08:d9:49:97:80:0c:89:12:b5:54:88:
                    1f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C1:3C:83:D3:8C:02:00:A9:E3:3F:88:C9:89:F7:00:C3:D4:4B:68
            X509v3 Authority Key Identifier:
                keyid:F2:F5:6D:94:4C:EE:4B:76:C7:FC:32:DE:30:3F:6E:B2:CE:A1:1B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ec10f3993401e3469868a74f33edb1e92d6e3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22db2502-23a6-4caa-8813-8cf46c988cbc/453ec10f3993401e3469868a74f33edb1e92d6e3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22db2502-23a6-4caa-8813-8cf46c988cbc/453ec10f3993401e3469868a74f33edb1e92d6e3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:d6:58:34:30:2e:dd:9d:07:eb:ff:64:83:89:9a:3c:8e:
         82:a7:98:de:b9:b7:df:b1:73:41:fa:e5:4c:a8:5d:d4:87:de:
         22:fd:f5:cd:cf:d4:00:b3:32:7f:fd:0d:ae:d3:0c:80:08:4c:
         c1:28:51:ff:68:07:b1:42:f1:be:34:91:a4:46:07:85:06:59:
         ea:67:bb:66:8a:6c:43:4a:02:86:55:09:e7:79:c4:b3:ed:e7:
         76:ac:cf:8e:44:41:2c:cb:df:64:04:12:5c:41:0d:44:17:7c:
         cd:0f:a9:bc:74:2e:33:8a:04:5a:47:f2:dd:de:f0:41:cc:58:
         fb:da:13:6e:d7:b9:58:94:9a:8a:0c:09:30:f3:41:83:98:46:
         d8:a6:ea:72:e1:7f:22:78:09:aa:44:e0:f8:b8:b5:54:ef:43:
         74:0c:88:35:3b:b7:c2:1c:6c:47:0a:de:ee:cb:7e:d9:15:9d:
         e0:63:c9:a3:3e:fc:b1:14:bb:91:38:7a:3d:dd:b0:b8:c2:e5:
         34:a9:49:c0:cb:5b:63:7b:43:ca:50:3f:13:c3:92:08:0d:da:
         05:d5:49:99:33:9f:03:2a:4a:1b:84:d1:0b:00:e7:c6:56:44:
         5c:87:7b:0d:73:56:08:a5:a3:53:2b:eb:e3:c6:83:23:b5:55:
         ae:93:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----