Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/384eaf38-3a48-43ea-a83c-34de50da4ed0/4306c4e56ccb91e8b4e89045e188b60029e8eee7.mft
File:                     4306c4e56ccb91e8b4e89045e188b60029e8eee7.mft (raw, json)
Hash identifier:          9L7o3rGOZBhzEeoiU5f+EYIllHLgN0sm7+gG/AR2IpQ=
Subject key identifier:   85:34:69:68:C2:C1:A2:27:7D:AF:D9:05:0E:21:23:D8:47:24:88:87
Authority key identifier: BF:9C:97:46:78:4B:99:AF:58:B1:9C:DD:89:62:0D:39:67:8E:46:4E
Certificate issuer:       /CN=4306c4e56ccb91e8b4e89045e188b60029e8eee7
Certificate serial:       2697A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4306c4e56ccb91e8b4e89045e188b60029e8eee7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/384eaf38-3a48-43ea-a83c-34de50da4ed0/4306c4e56ccb91e8b4e89045e188b60029e8eee7.mft
Manifest number:          0DF2
Signing time:             Mon 15 Apr 2024 05:20:51 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:01:17 +0000
Files and hashes:         1: 3a1bd8242bad2ac54b9098e2e592b49a948330b2.roa (hash: Uncs/dncxvsbE7whrv4JxQNWGMlgJNGBB/D0DiwPpE0=)
                          2: 4306c4e56ccb91e8b4e89045e188b60029e8eee7.crl (hash: nRbvmZDoZE/eLPmrIfrXOlDC+qS9CS7kFAjN+s5DAmM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529187 (0x2697a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4306c4e56ccb91e8b4e89045e188b60029e8eee7
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:01:17 2024 GMT
        Subject: CN=81a805d7cf576311ef8724945f198103ea4ba02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:07:5d:15:2d:8b:e2:9a:b5:c8:49:98:7d:
                    d2:7b:cf:f3:b7:94:3a:91:95:f6:fe:33:98:f5:ac:
                    c8:cb:84:0b:b3:e3:8e:58:ef:1c:9b:76:cb:82:44:
                    a5:49:f9:48:5f:2d:32:72:d9:b0:5f:7b:15:c3:a9:
                    12:68:29:55:b7:5b:29:16:6a:f9:b8:25:1b:b0:08:
                    7a:53:81:e4:32:95:7d:bf:7a:7a:32:db:58:e9:6a:
                    6c:0f:7b:9c:45:61:c4:34:6f:6a:ad:5a:7b:80:7d:
                    3e:3e:74:94:7d:03:30:98:63:c8:f2:a6:6e:23:32:
                    34:e5:d0:b7:85:76:8d:c2:a9:48:56:2b:51:a6:80:
                    a8:51:fe:15:a6:fc:63:49:ff:9f:00:d7:a6:66:56:
                    34:15:8b:7f:dd:52:ef:4e:06:dc:8d:96:ff:4f:03:
                    90:ca:c4:e6:2d:d2:da:14:6f:6d:8a:5e:8c:1b:ff:
                    0b:a5:e9:42:44:f8:e8:9d:d0:97:27:02:04:66:94:
                    af:13:53:f8:82:3d:dd:03:5a:1f:22:4f:27:46:93:
                    a4:cd:cb:64:51:6f:ce:25:11:09:d0:a1:06:b8:86:
                    c6:7a:61:82:b9:c4:2a:6f:eb:a3:9d:58:38:70:2a:
                    e7:46:cf:ba:93:81:8a:31:08:c1:f7:b2:b1:5a:77:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:34:69:68:C2:C1:A2:27:7D:AF:D9:05:0E:21:23:D8:47:24:88:87
            X509v3 Authority Key Identifier:
                keyid:BF:9C:97:46:78:4B:99:AF:58:B1:9C:DD:89:62:0D:39:67:8E:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4306c4e56ccb91e8b4e89045e188b60029e8eee7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/384eaf38-3a48-43ea-a83c-34de50da4ed0/4306c4e56ccb91e8b4e89045e188b60029e8eee7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/384eaf38-3a48-43ea-a83c-34de50da4ed0/4306c4e56ccb91e8b4e89045e188b60029e8eee7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:f4:21:15:f4:51:87:c6:af:08:0e:61:ae:fb:15:8d:6a:
         3a:5c:f6:1a:d5:31:65:b1:6b:7e:e3:a3:56:ee:59:74:a2:83:
         54:70:4d:d5:25:e2:e1:c1:e2:88:ee:83:f3:8a:f3:e1:65:d1:
         06:29:65:a6:52:bd:f3:3a:c0:22:f8:80:94:79:a4:de:6c:a1:
         dc:4f:46:aa:bc:90:59:af:31:5e:4c:e3:0f:42:45:06:74:ca:
         40:3a:d2:9d:d0:c5:25:2a:2e:be:3c:aa:b3:78:e9:8f:5e:87:
         45:ba:5f:47:ee:2d:1e:e7:a5:5d:78:e5:70:e5:0e:d8:50:1a:
         31:e8:c5:c3:cb:56:7d:9a:8b:1c:7c:5d:45:dd:3c:4f:f4:60:
         ec:b9:92:63:76:01:d2:bc:ab:78:2a:29:8c:66:0f:4c:6a:50:
         3c:b1:35:9a:9e:4c:97:7d:41:ce:94:1c:67:71:c0:34:7b:b7:
         a6:10:2f:7f:75:89:b8:a9:5f:cb:4a:3f:f7:b1:7a:09:9b:ea:
         29:4b:77:ca:d4:9a:c3:69:0f:45:12:28:bf:7d:3c:f0:e0:05:
         6d:5a:76:58:b7:57:33:f8:ec:aa:09:ab:63:83:c3:50:7f:7c:
         09:c5:0d:75:75:d5:98:c0:6c:70:0f:a6:36:f1:d8:5f:6d:88:
         ad:ce:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----