Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.mft
File:                     4595a58b3a4feac2e2f273ac67d4559442b976dc.mft (raw, json)
Hash identifier:          MekGx2axWDb8RqXdwVRYzd7uANmTS3Qe4/1SUnigKpM=
Subject key identifier:   6A:B2:5B:54:00:85:E1:4F:DF:1F:2D:6A:FF:81:F7:26:08:80:C4:71
Authority key identifier: 84:6F:82:BE:FB:A7:6F:BD:51:57:A6:B7:22:EF:57:F5:31:BD:33:D7
Certificate issuer:       /CN=4595a58b3a4feac2e2f273ac67d4559442b976dc
Certificate serial:       292F86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4595a58b3a4feac2e2f273ac67d4559442b976dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.mft
Manifest number:          0E04
Signing time:             Mon 15 Apr 2024 04:21:25 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 04:34:26 +0000
Files and hashes:         1: 4595a58b3a4feac2e2f273ac67d4559442b976dc.crl (hash: uJvifdqb/2QmLYEorif27zgwXPYNJ3xiArGeKiXxwQw=)
                          2: 61a22c8be47b4c5ac20773b1a5f589a604deb2b9.roa (hash: 003xml6V22qzo2weIUQrqCqJTQfP/W5j6IIyylFQLnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699142 (0x292f86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4595a58b3a4feac2e2f273ac67d4559442b976dc
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 04:34:26 2024 GMT
        Subject: CN=7144da76a47c0c2b069a39bf1bba13e1b10c223b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bb:37:33:09:36:57:7b:6f:14:e7:8f:7f:53:
                    14:45:a2:25:4e:8e:5f:f6:76:7c:e2:23:57:a7:b4:
                    fd:10:61:df:70:f2:fb:d9:99:07:1e:fe:11:e1:7d:
                    ca:e8:d8:95:af:7e:68:c9:bf:5a:60:9f:4d:bd:40:
                    78:64:df:2f:10:be:a9:d9:40:f7:4a:69:39:0e:8c:
                    29:0d:0d:35:83:0c:53:20:71:b7:3f:70:f6:77:e7:
                    0d:b2:83:60:aa:db:ef:78:4c:12:91:93:f6:07:6c:
                    f1:75:3a:2e:ec:8a:d7:7b:35:c9:45:8c:86:fa:f5:
                    66:c4:bd:57:c8:10:40:b7:5b:63:00:a8:92:2e:cc:
                    8f:83:7e:18:52:cb:af:77:75:5e:14:e4:bb:bb:f8:
                    e4:a4:51:f8:cf:40:cc:a3:34:03:77:2a:8b:92:e5:
                    63:b4:bc:51:42:87:cc:1c:15:e1:b3:7b:df:8a:2a:
                    e9:d2:0a:34:fe:66:a9:17:03:49:19:99:da:e2:02:
                    5c:45:e8:bd:da:3b:86:6d:17:e5:74:be:94:1b:39:
                    f6:95:7b:d0:46:7a:90:2f:69:0b:d6:fe:04:e4:5b:
                    9c:5b:4a:13:6a:b7:77:1a:a0:f1:5a:dc:52:29:9f:
                    be:f6:fb:64:e8:d9:23:51:d3:8a:25:c0:b6:6a:d8:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B2:5B:54:00:85:E1:4F:DF:1F:2D:6A:FF:81:F7:26:08:80:C4:71
            X509v3 Authority Key Identifier:
                keyid:84:6F:82:BE:FB:A7:6F:BD:51:57:A6:B7:22:EF:57:F5:31:BD:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4595a58b3a4feac2e2f273ac67d4559442b976dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:47:b3:b0:26:b5:4d:2e:4e:5e:48:82:f1:a4:d4:bd:ad:9d:
         fb:60:77:ea:9d:c2:0b:4c:b1:c2:b7:b0:d3:8a:17:d6:4d:d3:
         3f:f7:fa:59:71:b5:76:0e:8e:c6:58:ed:18:b3:a7:61:ad:e5:
         55:b4:5d:28:a1:09:df:f6:8f:46:a2:65:ed:ef:ea:13:d1:e1:
         1e:3f:d1:29:de:10:29:eb:b4:10:53:4a:fe:de:9f:e9:fd:77:
         46:3c:c2:f1:57:d0:4d:95:ac:ea:96:4c:51:c3:a1:0c:e7:74:
         e0:4c:12:07:6b:6d:b4:d9:7f:cf:6b:58:83:39:7e:f5:0c:59:
         93:6a:34:3d:ac:2d:9e:2a:7e:0d:b0:3a:60:56:d3:0c:49:17:
         27:bc:51:2f:2d:61:bc:cc:31:7f:38:6c:eb:c4:a4:10:9f:11:
         b5:f4:21:c1:fc:73:03:b5:78:79:19:7f:ef:db:9b:b1:99:1c:
         88:0f:2f:61:a2:13:32:6a:a4:53:bb:74:2b:9b:a2:f3:b9:c7:
         bd:0c:94:56:5f:e4:68:02:f3:e9:e7:79:58:4c:9f:2f:80:2e:
         8e:c1:49:8b:b0:a2:0b:71:b3:10:f1:b7:98:be:bd:a9:3a:c4:
         b9:ea:54:f2:c5:b2:8f:3c:13:ce:58:4d:a0:0a:80:1a:47:8c:
         7d:7b:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----