Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634c2521-2eab-4ebb-b7ec-822c47d0b52a/f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd.mft
File:                     f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd.mft (raw, json)
Hash identifier:          5DiTCFkvIwwZqgEdfS2/pSesLYytc/nvwiUd6F25NkE=
Subject key identifier:   C5:C3:CB:17:9B:93:B0:71:D5:56:F5:9E:28:B7:AF:54:5B:6A:B7:10
Authority key identifier: A0:4D:0B:F9:D2:CD:7F:CE:3B:11:35:EE:9F:EA:B2:10:37:B8:C9:74
Certificate issuer:       /CN=f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd
Certificate serial:       0F6E27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634c2521-2eab-4ebb-b7ec-822c47d0b52a/f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd.mft
Manifest number:          07D2
Signing time:             Mon 15 Apr 2024 07:21:07 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 08:28:17 +0000
Files and hashes:         1: de5ca02e4f2092875a6b2368fd09740177bf499d.roa (hash: C7wzivaToc9KuPkudJM5brYqWPrbZHqj44oxXph83sM=)
                          2: f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd.crl (hash: A6V4OMXele1Hn1raqHDKkSwn9EgEJDZD3YLoj/WkDug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011239 (0xf6e27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 08:28:17 2024 GMT
        Subject: CN=42f71b2d21219a61c62d52dffb5acc9b7da25985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ae:b0:97:af:4d:45:a2:34:ce:94:5a:28:7c:
                    ba:3e:2f:c4:07:9b:2d:df:04:79:95:b2:0e:a7:cd:
                    04:48:65:5d:77:d7:13:1e:d0:06:86:7f:b6:c3:63:
                    57:d4:f5:50:33:65:89:c9:e7:b7:fc:45:14:ff:9a:
                    a4:1e:ad:0f:fc:db:2a:cd:a0:37:d9:db:b2:c3:92:
                    f8:6e:0d:32:56:3a:48:77:07:00:14:13:fc:7e:05:
                    e3:b4:d1:e5:71:f9:61:a4:51:ca:8e:04:18:30:a3:
                    41:9d:ec:b3:1e:39:d2:9b:c3:85:ee:4c:0b:7c:34:
                    aa:33:18:67:12:b9:2d:5b:25:a8:ed:54:66:96:19:
                    1b:aa:40:b9:9c:9f:f5:36:01:05:fc:c9:af:de:47:
                    35:f0:b0:22:ea:57:14:a1:c3:64:44:e5:45:1e:8e:
                    88:e0:98:4d:e7:77:e7:d5:81:0d:f8:87:43:bf:cc:
                    1b:ed:94:da:cf:72:30:55:51:ec:72:95:14:83:13:
                    b7:aa:b6:f7:64:e5:df:e2:bc:e4:99:98:49:d5:6c:
                    2a:83:06:28:04:9d:37:8e:f6:73:ae:81:7a:70:9e:
                    8b:21:f4:db:7b:28:20:86:b1:e6:10:8c:fd:18:e4:
                    ff:9a:ed:45:74:a5:dd:5f:ab:cc:7c:b3:fd:c4:dc:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:CB:17:9B:93:B0:71:D5:56:F5:9E:28:B7:AF:54:5B:6A:B7:10
            X509v3 Authority Key Identifier:
                keyid:A0:4D:0B:F9:D2:CD:7F:CE:3B:11:35:EE:9F:EA:B2:10:37:B8:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634c2521-2eab-4ebb-b7ec-822c47d0b52a/f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634c2521-2eab-4ebb-b7ec-822c47d0b52a/f3f4dd09312135253fb91e5f64fdbdbb0d2e9dcd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:eb:81:02:36:d3:6c:70:5a:f5:da:fc:d3:d2:63:f0:24:1e:
         f1:b1:4c:79:e6:43:78:a9:f4:df:e8:28:1b:91:bd:38:2b:16:
         be:e7:15:67:fb:22:40:2d:ef:91:6c:83:0c:65:49:67:f3:e2:
         6f:03:60:37:f4:fe:64:cf:5d:f9:f7:d3:83:10:34:6a:66:bb:
         da:92:4f:cc:a9:cc:2b:53:a6:15:b8:54:e5:f4:43:ac:47:aa:
         c8:f0:bd:e6:50:12:77:35:22:4f:b4:4d:61:e0:b8:aa:a9:98:
         17:aa:ae:98:da:43:81:66:4e:23:1b:dc:64:04:95:97:d5:b2:
         ae:d0:8c:79:8b:14:ef:57:c3:28:a6:b9:7c:87:a1:b7:e0:cc:
         fa:54:fa:bf:f4:48:80:8d:b0:10:93:e8:08:22:10:de:5a:32:
         cb:c8:52:11:03:1e:99:23:81:24:b5:a8:02:9f:bc:29:0a:21:
         60:b3:2d:96:54:e6:cb:b5:67:b7:eb:fa:3f:5f:e0:d9:18:10:
         f5:5b:8b:37:24:d5:9c:e5:94:2c:73:0d:62:27:e1:45:04:15:
         64:01:1a:44:ac:84:b3:32:ba:76:60:7d:19:3f:11:5b:e8:bf:
         4b:5e:16:ba:e5:2d:c2:da:60:06:3d:6a:a7:07:94:fa:a9:60:
         e7:7b:d3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----