Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/281909f7-dc31-42b7-ac90-56f1b0b4b59e/7d02586442e6bcef08f18170297faf76439ff22f.mft
File:                     7d02586442e6bcef08f18170297faf76439ff22f.mft (raw, json)
Hash identifier:          EXS48EaiAzqShgZjXotQx8ix7nCvpB+s84wWafQo4GA=
Subject key identifier:   ED:B4:40:21:B4:99:F0:60:37:EF:ED:BC:98:37:61:6B:48:B5:4A:A8
Authority key identifier: 83:79:42:86:60:49:BE:B8:81:9D:A9:2D:8B:20:C3:D9:F1:CD:AE:CF
Certificate issuer:       /CN=7d02586442e6bcef08f18170297faf76439ff22f
Certificate serial:       16BDB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d02586442e6bcef08f18170297faf76439ff22f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/281909f7-dc31-42b7-ac90-56f1b0b4b59e/7d02586442e6bcef08f18170297faf76439ff22f.mft
Manifest number:          0BC6
Signing time:             Mon 15 Apr 2024 09:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:41:18 +0000
Files and hashes:         1: 6cf37807de2f124e0cacb7d87efefd9776c49526.roa (hash: eEF2bPnS+/9xtu6/F2SwZsROSv6CM240hzOU5EgIOLo=)
                          2: 7d02586442e6bcef08f18170297faf76439ff22f.crl (hash: N3MSOjFil9Zhk25D8i9oHR9PzNIx0i+iQoLL8fcr0K4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490358 (0x16bdb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d02586442e6bcef08f18170297faf76439ff22f
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:41:18 2024 GMT
        Subject: CN=9d7ef9440098be4c5409ab59052b0ec9cb5557fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:ed:82:03:a9:31:6c:bc:a1:b5:52:6b:f8:
                    bc:f2:14:21:94:62:51:fc:f1:d4:94:49:d7:df:3d:
                    5f:c9:e3:80:37:02:34:3f:f0:e1:cf:c5:39:f6:6b:
                    2b:ab:67:16:54:96:b3:95:9f:8c:83:7f:e0:4b:e9:
                    6f:b0:16:c7:4d:6a:7c:68:b5:4c:6b:62:69:41:bf:
                    ec:e0:40:fc:e6:77:21:cb:84:09:a1:38:8c:99:73:
                    ce:0e:fe:e3:b6:5e:1e:ab:94:f9:af:d3:f2:35:4c:
                    3a:2f:97:01:f4:3f:07:ac:95:6f:35:e3:d7:f9:6f:
                    3d:86:4f:a7:2f:16:03:08:6b:4d:6c:2d:e7:08:c7:
                    b3:83:c0:49:d1:ce:07:27:53:6a:9a:ad:8c:bc:78:
                    c6:1e:44:54:8f:49:8c:17:d2:8f:db:69:5c:62:ec:
                    f0:82:2c:76:36:1b:94:7d:64:fc:2b:8e:c9:68:c6:
                    56:29:a7:09:f4:2d:56:84:19:ae:b4:90:ae:6f:7e:
                    70:47:67:7e:02:f3:0f:d8:3a:c7:55:d2:0c:bd:f5:
                    b6:7c:1a:97:36:ec:a1:63:33:91:55:28:c1:80:ee:
                    68:17:ad:f1:b9:79:a6:87:d8:28:3a:f3:b4:d0:44:
                    c9:3f:74:8e:4c:14:10:2f:3b:b1:13:de:a0:56:2a:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B4:40:21:B4:99:F0:60:37:EF:ED:BC:98:37:61:6B:48:B5:4A:A8
            X509v3 Authority Key Identifier:
                keyid:83:79:42:86:60:49:BE:B8:81:9D:A9:2D:8B:20:C3:D9:F1:CD:AE:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d02586442e6bcef08f18170297faf76439ff22f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/281909f7-dc31-42b7-ac90-56f1b0b4b59e/7d02586442e6bcef08f18170297faf76439ff22f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/281909f7-dc31-42b7-ac90-56f1b0b4b59e/7d02586442e6bcef08f18170297faf76439ff22f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:ff:61:16:2c:15:c0:61:32:9e:20:bc:8c:71:f3:70:24:
         c6:a3:7b:49:4c:9a:b2:b4:cb:f1:70:77:92:40:59:8f:23:5a:
         73:7c:3a:f9:1c:ee:bf:26:42:8f:b9:86:65:1c:b6:1a:39:05:
         ac:5f:65:a7:d6:17:9a:98:ff:7b:cc:a9:25:58:dd:65:9c:b6:
         76:4a:eb:00:a3:d1:48:bd:d1:18:31:ef:52:f5:25:f0:f8:80:
         6c:3b:3e:b0:95:bf:59:57:fe:00:2b:23:1e:65:20:a2:53:c8:
         7d:a9:69:4d:83:21:9c:86:e7:1b:1d:62:ba:11:2f:bf:02:f7:
         d7:84:72:82:61:04:c5:90:62:51:83:3f:ec:5a:ee:da:b9:36:
         52:bc:b7:e9:39:59:3b:43:4c:0b:b3:d9:cf:97:fe:30:f8:22:
         05:d6:c7:6f:71:c8:4c:a1:cc:da:c0:02:17:d7:83:24:52:b2:
         89:05:d1:57:b0:02:7d:f6:9b:a7:42:d8:2b:ce:3d:62:14:51:
         cb:51:15:2e:bf:48:9f:e1:5e:9c:b0:69:7c:98:03:97:30:8f:
         11:47:7d:8a:5d:b7:b0:30:63:39:c9:21:09:bb:e0:eb:04:12:
         4d:df:42:bb:29:5e:c3:c4:02:db:56:a5:6a:fd:8a:cc:34:ba:
         29:b7:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----