Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft
File:                     422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft (raw, json)
Hash identifier:          A3jdhYjPOd3LMBfxsYxkt3Uvbc2zSDukMyHWEnRzosE=
Subject key identifier:   17:BE:A8:4A:56:40:79:2E:87:5D:BC:F9:12:DD:14:90:4A:E4:67:56
Authority key identifier: 95:BB:CD:72:F2:F6:AA:D0:1F:CD:3B:31:F9:5D:5C:D1:07:0F:AC:35
Certificate issuer:       /CN=422dc8daaee10e58ba4d2326d8ac255f9b9994e0
Certificate serial:       1B2F26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft
Manifest number:          0DE4
Signing time:             Mon 15 Apr 2024 08:21:09 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:10:16 +0000
Files and hashes:         1: 3110fdded26d05d5054f988ab77d312a917a28b8.roa (hash: FHUR8+G/RSao/TCS4SlJJdsY/N7O+nMwAllD3YmxwuY=)
                          2: 422dc8daaee10e58ba4d2326d8ac255f9b9994e0.crl (hash: o8R/+jV14IAzgYcOgO51XVM6LRNSvKayZRFif2svu7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781542 (0x1b2f26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422dc8daaee10e58ba4d2326d8ac255f9b9994e0
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:10:16 2024 GMT
        Subject: CN=843ef96b22fef89373df4c65c1d04f0f68370109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7f:33:98:86:94:33:76:ce:63:f9:b6:9b:0a:
                    93:31:28:5b:bf:0d:35:fb:53:e9:e2:e1:d4:1b:d4:
                    5f:f3:2c:3e:0b:1a:a9:a3:bf:a5:61:3f:83:08:be:
                    42:b1:3b:7a:99:8d:ab:52:30:fe:05:9d:55:01:7f:
                    39:4d:6d:67:1f:4f:32:e3:74:bd:57:b4:5b:dc:e5:
                    9d:12:88:f8:87:9f:20:85:c6:cc:07:4a:ed:d1:0a:
                    19:a9:8d:76:6c:5b:78:63:ee:b2:9d:c1:33:90:00:
                    d2:4d:de:aa:c8:77:e6:0e:87:80:3d:99:10:d1:cc:
                    9b:90:98:38:3b:62:35:f4:f3:c5:cf:f2:cc:78:73:
                    70:f7:0b:d8:90:38:67:42:05:09:35:88:f1:a1:ae:
                    eb:e1:0f:ab:c4:f7:3a:7b:e4:f4:07:f6:47:91:c6:
                    af:0f:2d:99:f7:f9:c0:7b:98:6c:ce:a2:1d:d2:69:
                    a9:04:2b:08:a0:65:ac:6c:95:58:67:b1:03:f7:13:
                    b8:a1:bd:be:96:6f:3d:f4:9f:24:3a:88:a9:dd:3e:
                    45:81:6b:8f:b3:dd:99:83:40:ce:3d:22:12:10:93:
                    a1:ad:dd:08:ff:86:9b:fb:bd:67:71:bd:27:29:44:
                    be:95:87:32:38:0e:90:4e:1d:93:48:b6:62:3d:c0:
                    9c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BE:A8:4A:56:40:79:2E:87:5D:BC:F9:12:DD:14:90:4A:E4:67:56
            X509v3 Authority Key Identifier:
                keyid:95:BB:CD:72:F2:F6:AA:D0:1F:CD:3B:31:F9:5D:5C:D1:07:0F:AC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:71:f9:e0:c0:81:c6:17:22:65:76:2b:88:cf:c5:96:cf:52:
         b8:b2:a0:d5:67:f2:b7:07:19:c5:f4:12:b6:0e:6f:ae:18:cf:
         29:cd:90:c3:a4:d0:23:8e:81:06:a9:a1:42:73:0c:7f:21:0d:
         c3:ff:d7:12:93:6c:cb:75:a5:23:a0:27:ba:6a:28:a7:fd:99:
         30:82:68:e3:aa:2d:e5:78:c8:a8:21:a6:e4:17:be:88:cc:9d:
         68:36:a0:ad:ec:26:f6:39:ed:69:05:45:a5:22:91:38:62:51:
         49:3f:8b:b6:42:0e:a0:9c:84:37:94:82:54:88:6a:a3:00:25:
         b8:33:dd:67:33:c7:10:4e:fe:76:ea:19:72:98:48:b5:6d:d0:
         9e:da:ac:8e:a6:01:cd:a9:53:d6:92:02:76:d7:d3:33:87:33:
         60:f1:94:dd:8d:d7:73:f5:b3:5b:df:af:b5:7b:f3:33:59:d5:
         ac:c1:0d:2f:5c:91:14:b4:d1:69:db:dc:67:b7:a3:72:55:77:
         e8:2b:db:4b:55:c4:02:36:ee:3c:d0:89:6f:d1:2b:80:b0:24:
         d1:01:43:3b:3b:ad:8a:4a:4b:f6:07:40:1c:ec:3d:a2:83:f2:
         59:ea:f4:e9:f6:6d:01:3c:ea:28:78:5d:78:71:03:1d:0f:4f:
         65:bd:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----