Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/d21229289c57a4e5d9288cb35fdfe657f437216e.mft
File:                     d21229289c57a4e5d9288cb35fdfe657f437216e.mft (raw, json)
Hash identifier:          nbRe8Kv7OEATE/vQB3+sS7i6MJcicYqLLiBqjpLi044=
Subject key identifier:   03:45:12:B9:0E:7D:DE:2D:F5:36:4D:2E:92:FC:94:7D:EE:1E:C0:7E
Authority key identifier: 59:AE:DB:AB:E5:8C:86:79:FA:DE:BA:C7:F4:BA:1A:EB:B3:EE:76:BB
Certificate issuer:       /CN=d21229289c57a4e5d9288cb35fdfe657f437216e
Certificate serial:       0911C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21229289c57a4e5d9288cb35fdfe657f437216e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/d21229289c57a4e5d9288cb35fdfe657f437216e.mft
Manifest number:          049B
Signing time:             Mon 15 Apr 2024 08:21:19 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:51:16 +0000
Files and hashes:         1: 1ed81307d3cccf18ea8ca58cfbe76ccabde6011f.roa (hash: mEz9lJWf+bV0V0LyDz8P3rDMA+upyXjvZ7lr4rw900M=)
                          2: d21229289c57a4e5d9288cb35fdfe657f437216e.crl (hash: KBsKb6SWrfTTgqDb0FZMK+wt4nXSvCZwDwsDESCac9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594374 (0x911c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21229289c57a4e5d9288cb35fdfe657f437216e
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:51:16 2024 GMT
        Subject: CN=bbd94dbb3994381c851881c835a5f447614bb00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:b8:e8:9d:c6:8d:ce:1f:fc:45:9c:2c:ff:
                    5e:89:24:c3:d4:5d:3d:df:ae:2d:53:e8:cd:1d:db:
                    f0:a0:db:82:fd:98:24:72:8f:77:47:ed:4a:62:93:
                    ea:c1:80:dc:f1:9a:68:65:a0:3b:55:41:dc:64:7f:
                    d3:ef:f9:f5:71:ff:4e:ed:cc:fe:40:ec:03:89:c5:
                    6a:4f:17:23:d3:eb:be:c6:77:a2:d4:55:e2:9d:44:
                    9f:90:c1:07:4a:4c:aa:1c:22:76:1d:2a:c4:e0:5e:
                    cf:e5:e9:ef:a6:31:3c:5c:33:41:0f:8e:86:32:67:
                    36:59:c1:9b:1e:72:e0:89:2b:9c:e0:20:86:10:11:
                    ce:64:89:24:f7:18:63:e9:dd:bb:03:ff:92:d1:d8:
                    f2:1a:c2:d1:55:09:7f:ce:e2:4f:1c:e1:fd:4f:3a:
                    4a:fd:ab:ad:b5:01:ef:41:af:97:ba:a7:0e:d5:3e:
                    8e:b4:21:de:12:2a:d6:7d:bd:6b:0e:92:66:e7:eb:
                    c1:36:27:47:d9:5e:fe:c0:b0:8a:0b:b3:e1:89:06:
                    71:78:e9:74:bc:fc:23:a7:14:b9:8b:a3:c0:30:75:
                    c6:8f:d3:db:1c:46:7c:13:fc:f6:83:b6:a4:67:c1:
                    37:41:73:86:9f:74:91:be:6a:01:38:2e:03:ef:01:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:45:12:B9:0E:7D:DE:2D:F5:36:4D:2E:92:FC:94:7D:EE:1E:C0:7E
            X509v3 Authority Key Identifier:
                keyid:59:AE:DB:AB:E5:8C:86:79:FA:DE:BA:C7:F4:BA:1A:EB:B3:EE:76:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21229289c57a4e5d9288cb35fdfe657f437216e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/d21229289c57a4e5d9288cb35fdfe657f437216e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/d21229289c57a4e5d9288cb35fdfe657f437216e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:ca:b7:f6:a1:60:58:6f:4e:2a:e0:b5:93:ca:6a:3f:c5:
         9c:28:76:17:d4:63:dd:c3:d3:ec:c6:63:2e:2c:23:b8:9b:fb:
         e4:1f:2a:67:8f:6b:92:ac:74:51:14:6a:53:82:c6:8c:dc:7b:
         90:c7:5a:8c:2a:ce:80:31:a0:23:47:bc:26:f2:a0:23:6f:ae:
         9f:d4:57:4a:0b:7a:b4:43:90:ca:f0:3d:43:ce:c2:39:17:7e:
         ce:16:ff:2b:8f:75:06:d7:ff:55:75:54:48:9a:1a:aa:09:2d:
         41:ca:4f:e0:5b:b0:7a:ac:51:39:93:ed:40:b9:f6:72:c7:c6:
         f3:06:30:fe:75:03:26:29:44:6c:55:87:56:7f:73:8f:99:99:
         e2:e0:56:dc:23:35:3a:65:9a:a2:02:27:6e:ec:20:2a:0b:b0:
         f8:c1:d7:73:61:58:5d:21:92:54:7f:de:30:5c:7d:00:3b:9f:
         f3:48:66:1a:85:bd:6a:9e:b0:c2:a3:62:2e:28:ff:a9:f0:f8:
         70:b0:ac:cf:ce:2f:63:5c:67:ab:7b:61:4e:fb:50:39:ee:93:
         96:80:a5:b8:b4:76:22:64:26:05:09:1a:a4:18:ad:60:c7:54:
         4f:0c:25:e0:dc:c1:88:15:10:3f:72:32:50:71:a2:a4:7e:3d:
         75:6d:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----