Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/d67a2511cddb03773fd7ab77a77fce811a97e2f5.mft
File:                     d67a2511cddb03773fd7ab77a77fce811a97e2f5.mft (raw, json)
Hash identifier:          C9meP5K38qm6CgJf1LCfNLR/fLtmE7AXAlZj/vDc3Rg=
Subject key identifier:   B8:D4:B6:7F:C8:CB:87:73:2E:30:2C:3E:87:71:B1:EC:8D:5A:FF:52
Authority key identifier: 51:02:5E:78:BE:A6:CA:C5:FC:23:16:42:9F:68:67:60:C4:94:98:68
Certificate issuer:       /CN=d67a2511cddb03773fd7ab77a77fce811a97e2f5
Certificate serial:       280A10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67a2511cddb03773fd7ab77a77fce811a97e2f5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/d67a2511cddb03773fd7ab77a77fce811a97e2f5.mft
Manifest number:          0DE4
Signing time:             Mon 15 Apr 2024 11:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:48:18 +0000
Files and hashes:         1: 170dd66fa1b2c367dd2fcf7ce0ec321163736812.roa (hash: PEaYPNVou9U3o3Pyi5pP8LAFH1t/q1eP8WmFwqRRaUc=)
                          2: 1feb5a5351caf97844d3605ffe4fcc91442e380a.roa (hash: EKn7vwzxbIqbumLIKS4+49r1LswpBifZ/+tJdVBBLvw=)
                          3: d67a2511cddb03773fd7ab77a77fce811a97e2f5.crl (hash: U05xCNWjd43d+MHL3v1fhKL4DAns++zAF5gqqmJTmIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2624016 (0x280a10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d67a2511cddb03773fd7ab77a77fce811a97e2f5
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:48:18 2024 GMT
        Subject: CN=a1e9fbc025b3b827de9292ca3f76c6daba1cedc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:f8:e1:7e:35:89:23:01:7d:64:2f:ad:78:
                    38:b1:c3:e6:21:1a:94:c1:20:39:d1:92:30:d0:28:
                    7d:c2:ae:a1:54:15:88:ee:21:15:06:21:cc:fa:1a:
                    b9:22:35:bc:d3:ed:44:3e:6f:22:56:94:d0:a2:c1:
                    44:68:56:28:29:7a:53:3b:30:53:75:dc:7f:4c:ba:
                    1e:92:32:31:4f:da:81:72:36:fd:9a:91:7f:2b:55:
                    1f:37:9f:c3:17:7d:23:9c:81:a4:f3:38:69:01:e8:
                    b2:ab:c8:a6:79:61:86:2c:c2:52:88:c0:70:b8:c6:
                    21:aa:dd:55:a0:31:df:22:0c:77:84:a5:b2:9c:8d:
                    4f:71:6e:33:66:a3:5c:9a:6a:f1:db:36:34:07:73:
                    25:16:ca:0e:e0:11:84:c2:e2:48:d9:8d:f6:80:58:
                    94:ae:f0:bd:e1:83:a1:c2:be:b6:f3:06:44:3f:12:
                    0a:1c:73:24:08:52:17:82:a8:dd:be:c3:a6:6e:69:
                    5a:08:51:e8:5f:8f:90:eb:7b:bb:9d:75:7b:35:5a:
                    78:97:2f:65:10:6f:21:f0:30:34:0a:fc:8c:93:13:
                    1f:4a:e6:ca:da:88:1c:a6:bf:87:82:d0:17:2d:d1:
                    70:d0:53:64:38:10:cf:7d:7b:e7:6b:bc:2b:83:ba:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:B6:7F:C8:CB:87:73:2E:30:2C:3E:87:71:B1:EC:8D:5A:FF:52
            X509v3 Authority Key Identifier:
                keyid:51:02:5E:78:BE:A6:CA:C5:FC:23:16:42:9F:68:67:60:C4:94:98:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d67a2511cddb03773fd7ab77a77fce811a97e2f5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/d67a2511cddb03773fd7ab77a77fce811a97e2f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4642638e-5ad1-4be3-aa7e-4237c60bf808/d67a2511cddb03773fd7ab77a77fce811a97e2f5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:17:de:8c:d5:5d:63:12:16:b8:3c:30:48:91:65:3a:63:09:
         c1:5e:9f:41:a0:ed:4a:5b:bf:10:4d:e4:ee:c5:61:ca:bd:96:
         25:a4:e6:b5:b4:c7:3b:8a:c6:0d:66:08:5e:ea:60:c2:b7:6a:
         a7:48:87:2b:62:f3:5a:98:9b:55:7b:fd:27:29:1a:71:b9:f8:
         65:45:2a:f7:12:55:3e:d6:8c:75:97:9c:52:f8:80:6d:0d:1b:
         8a:dd:78:ae:ac:3b:2e:39:74:72:13:05:2b:11:a4:81:c0:f1:
         43:fd:ec:06:7a:54:0f:e7:80:ca:ca:69:50:b3:7c:6e:66:bf:
         ac:8e:a0:15:c7:0e:cd:2e:5d:ee:aa:4a:8b:5e:6d:a1:3a:15:
         6e:12:b5:0e:5b:2e:c8:ef:98:a8:30:6f:58:94:a5:76:f5:5b:
         83:ea:66:c1:65:dd:9d:71:95:6f:6a:bc:a3:95:9f:6f:9a:b5:
         c8:a1:be:f0:44:69:49:8e:b1:0b:a3:7a:71:1a:b7:6f:38:a1:
         82:a5:23:b5:65:54:7b:f6:2f:b8:38:b9:7b:c1:5f:1b:36:90:
         12:23:8d:f0:65:9a:14:8b:22:0b:fb:e4:13:50:19:11:8f:1b:
         39:95:79:7d:24:75:e8:f6:e8:fe:08:54:11:a7:95:4d:5e:2e:
         a2:bb:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----