Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cec1e6d8a1f33037dace1b9778780270c02863f0.mft
File:                     cec1e6d8a1f33037dace1b9778780270c02863f0.mft (raw, json)
Hash identifier:          WNIY+FSE3A2+WhK/ik8FiFEmlseNpigl29WUx3VppSE=
Subject key identifier:   4B:AF:1C:AC:34:FF:A7:2A:C5:DC:74:97:B3:C0:F6:7C:18:0E:0A:D5
Authority key identifier: A6:DC:CB:1E:24:96:F6:51:2D:02:3C:A1:39:91:D2:85:E5:63:D2:2C
Certificate issuer:       /CN=cec1e6d8a1f33037dace1b9778780270c02863f0
Certificate serial:       208B3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec1e6d8a1f33037dace1b9778780270c02863f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cec1e6d8a1f33037dace1b9778780270c02863f0.mft
Manifest number:          0DFD
Signing time:             Mon 15 Apr 2024 11:20:33 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:23:18 +0000
Files and hashes:         1: cec1e6d8a1f33037dace1b9778780270c02863f0.crl (hash: zOUXPi6uU97g85MqdxwyWnksf7cuFiaKqGsOji05k24=)
                          2: cfc4a24746f50627887f41ee7e0f65e6a9832f1a.roa (hash: SHG5kLn036KrcB8exnpJJ64ubDyv2Wz4/mOmiKOq5dI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132797 (0x208b3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec1e6d8a1f33037dace1b9778780270c02863f0
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:23:18 2024 GMT
        Subject: CN=9543367c13fe1156cf35fa266f5437f681c2919f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:65:59:de:7c:98:9d:f7:33:2f:88:51:ae:
                    da:0d:cf:32:49:2c:02:6a:46:f1:f1:f7:ac:da:73:
                    e5:9b:44:62:18:37:b3:e7:c2:fa:00:5f:9b:6e:a6:
                    13:18:66:18:d1:24:97:8a:a9:10:80:a0:7f:3a:0e:
                    03:a9:35:b2:35:f0:66:be:8c:b4:08:9b:3b:b0:5b:
                    51:33:fb:ea:58:b7:26:5f:d5:c9:d5:20:57:f8:c3:
                    bd:8d:a1:ee:8b:53:bb:12:13:22:ed:68:90:dc:e1:
                    d6:09:95:ee:b5:fd:4b:cb:0e:73:33:8f:eb:14:21:
                    8f:68:1e:7a:83:d4:f0:84:56:83:0e:57:8a:56:2f:
                    c8:2e:5a:5d:29:76:ee:e3:12:0a:26:b3:41:1d:e8:
                    64:12:7c:4a:ea:c5:a8:2a:3b:11:9c:d1:db:fa:f4:
                    c4:20:c0:b8:aa:38:b2:68:1b:0d:0f:1e:4c:9a:de:
                    4f:92:76:ff:4c:e8:db:a3:94:cf:d3:42:d1:61:6f:
                    83:ab:89:8f:7a:1b:c1:93:36:40:cf:97:c3:55:21:
                    be:37:3d:66:4d:dd:dd:12:6a:58:cf:0c:d8:9d:5e:
                    a7:72:21:a1:89:c0:14:af:8b:60:3e:d2:8a:16:67:
                    f3:38:c8:c5:a1:60:e7:01:27:e9:6b:b0:aa:b6:5f:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AF:1C:AC:34:FF:A7:2A:C5:DC:74:97:B3:C0:F6:7C:18:0E:0A:D5
            X509v3 Authority Key Identifier:
                keyid:A6:DC:CB:1E:24:96:F6:51:2D:02:3C:A1:39:91:D2:85:E5:63:D2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec1e6d8a1f33037dace1b9778780270c02863f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cec1e6d8a1f33037dace1b9778780270c02863f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cec1e6d8a1f33037dace1b9778780270c02863f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:43:75:32:00:89:f2:f6:9c:a9:66:00:c8:68:7d:64:0c:
         38:a3:b0:23:3e:56:91:38:ab:aa:d8:36:b5:ea:ad:c8:87:13:
         0b:15:a3:42:e2:d2:e7:b0:80:72:d9:3a:68:ea:2e:ea:a1:8e:
         55:f3:1a:a6:b4:44:77:21:d0:26:27:5e:12:24:03:c4:60:b5:
         9a:a6:f5:13:21:9a:8f:e4:5b:0a:3b:7a:f0:af:25:8e:5e:12:
         10:67:33:29:59:7d:e1:9d:5f:e5:75:51:2e:c3:7a:6e:94:1e:
         03:f5:0d:3d:6a:ea:70:3d:76:e5:97:86:e8:71:a1:54:14:7d:
         e4:de:d1:10:ae:fa:04:1a:7f:7c:6d:fe:de:60:72:19:3c:9c:
         fa:52:cd:0d:75:8a:9f:90:27:f1:9f:97:c1:f8:02:8d:cd:7a:
         44:53:2f:26:c0:7c:96:a7:91:9b:08:fe:4e:29:f5:e0:67:f5:
         3a:53:2d:af:6e:7f:3a:b8:a6:e1:67:2d:97:41:27:f0:68:ca:
         de:a5:ad:72:a7:07:1f:4d:cd:84:9d:78:88:17:8d:03:c2:37:
         f9:2d:6a:f8:e5:07:09:7e:d0:1b:98:f8:33:3c:ac:83:32:fc:
         62:cf:76:5d:f6:d2:9a:07:5f:4b:17:a1:81:87:eb:98:4e:d3:
         44:3e:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----