Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/f17650a807d8733d69a847baa5df03d2d89197f8.mft
File:                     f17650a807d8733d69a847baa5df03d2d89197f8.mft (raw, json)
Hash identifier:          gFXMI/9P0tVAtMJ/miaGnlr3zhNh1IncAgTHkOyshWA=
Subject key identifier:   E5:F4:C6:A5:D7:4E:F7:87:40:5E:9A:2B:17:C5:4A:CF:27:23:79:3C
Authority key identifier: 83:65:08:E4:32:7E:F9:52:BC:B8:0D:AA:FD:C8:68:17:F2:B6:DC:F7
Certificate issuer:       /CN=f17650a807d8733d69a847baa5df03d2d89197f8
Certificate serial:       09476B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f17650a807d8733d69a847baa5df03d2d89197f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/f17650a807d8733d69a847baa5df03d2d89197f8.mft
Manifest number:          04B0
Signing time:             Mon 15 Apr 2024 02:21:43 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 03:05:29 +0000
Files and hashes:         1: 217c0b7577bec054d7904f4427ff3c895106c0e6.roa (hash: cqqWckEQh9f7nU4jTMNv2/CDfxQCR7yach0PcExFNz4=)
                          2: f17650a807d8733d69a847baa5df03d2d89197f8.crl (hash: EnAonzBdevuuX0zphdXBPDptZOnO1axn2NbXUNRmHoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608107 (0x9476b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f17650a807d8733d69a847baa5df03d2d89197f8
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 03:05:29 2024 GMT
        Subject: CN=21674991f26cd435698ec6fccc68320a0d7f887e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:03:59:be:8a:b1:46:e5:9d:ac:8d:00:ee:
                    c0:22:be:52:b6:73:01:c3:fd:78:f2:eb:d9:0c:a4:
                    ac:7d:71:aa:1d:93:c1:8e:f2:98:c6:2b:0f:7a:5f:
                    fc:03:aa:90:3f:e7:75:5a:ed:bf:15:a6:44:54:e5:
                    21:b9:75:1f:fd:75:a7:ca:3b:80:bc:89:c2:3c:ad:
                    d3:fb:74:65:3f:cd:6a:ff:b5:3a:ee:a6:7b:03:62:
                    36:4d:91:a2:45:4e:6a:17:cd:ac:17:7a:85:e2:81:
                    c7:09:f5:73:8c:47:fc:e2:6f:94:ef:32:de:65:5e:
                    bf:82:ba:e6:bd:08:3e:82:d1:25:27:35:cf:aa:cd:
                    90:2f:35:d0:01:e8:98:7b:a0:f8:58:90:ba:d7:9c:
                    ca:01:bc:7a:1d:e9:19:14:53:75:bb:95:6c:6e:73:
                    a7:f1:ad:39:3f:ce:77:e1:c8:0d:68:83:b7:fe:dd:
                    ca:f7:b2:35:13:0d:16:44:7f:87:66:6b:7f:76:f1:
                    f2:83:f9:24:ff:e9:ba:3d:85:e1:c8:cc:05:7a:43:
                    be:ec:06:c8:07:df:88:81:de:2b:13:37:17:03:f1:
                    12:eb:f2:4e:fa:16:c4:92:e3:54:db:0c:01:45:f2:
                    a3:e3:d3:c6:c1:e9:cb:1d:0b:7a:d2:8e:31:8e:95:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F4:C6:A5:D7:4E:F7:87:40:5E:9A:2B:17:C5:4A:CF:27:23:79:3C
            X509v3 Authority Key Identifier:
                keyid:83:65:08:E4:32:7E:F9:52:BC:B8:0D:AA:FD:C8:68:17:F2:B6:DC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f17650a807d8733d69a847baa5df03d2d89197f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/f17650a807d8733d69a847baa5df03d2d89197f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/f17650a807d8733d69a847baa5df03d2d89197f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:7c:15:ac:7d:50:63:21:9d:ab:08:40:3b:b2:b8:8e:fe:
         62:e8:0f:72:41:47:fd:ba:76:61:1e:46:d6:64:a5:db:d7:21:
         fd:b7:2d:70:ea:4e:5e:bf:fa:aa:e5:0e:7d:b1:7f:9e:15:9a:
         61:23:31:a5:3f:09:a1:16:88:37:d2:a0:99:9f:c4:f7:59:8d:
         35:6e:b6:0d:14:43:cf:c7:ca:e7:f6:70:cc:50:15:70:3c:bc:
         fe:4e:20:00:20:da:8d:7f:4e:b2:8e:9d:ad:cc:51:6b:cd:0d:
         a6:13:9b:42:4f:2b:af:70:31:ba:ef:69:8d:b6:28:6a:2d:07:
         72:4f:54:b6:1a:27:9e:a5:3a:85:b3:9d:0f:14:b0:70:7d:92:
         95:cb:25:c0:6f:0a:3e:a2:7a:85:80:b6:59:1e:8b:43:73:9c:
         0c:91:bb:d1:7d:df:a1:e7:cf:75:ed:8c:c0:dd:08:71:94:ee:
         fb:ee:a6:ea:18:7b:1d:6c:58:d8:78:88:d0:77:5c:71:a6:59:
         ff:3e:21:b8:00:29:ff:8e:b3:e1:22:0f:8b:9d:c6:bd:69:65:
         01:fc:9b:e7:b1:a4:fe:32:08:cb:86:3f:2c:4e:28:59:27:6d:
         93:af:bb:ae:d4:7b:17:4d:79:c9:f8:5e:9a:8e:aa:2f:f4:db:
         f4:a1:7a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----