Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/48601251b0ea3b955f4437e7a7e207d8ec473a6d.mft
File:                     48601251b0ea3b955f4437e7a7e207d8ec473a6d.mft (raw, json)
Hash identifier:          UkG37ATNB9QAxx2Yq5Wy6JrynAkMagvGU1iSHJ+tg1c=
Subject key identifier:   E3:67:9A:FB:25:B6:1E:33:0E:5A:D5:D0:9D:73:CE:C8:1F:10:12:E0
Authority key identifier: 33:71:2E:3F:93:E3:92:F2:75:13:84:B9:EE:94:62:42:C8:FC:68:58
Certificate issuer:       /CN=48601251b0ea3b955f4437e7a7e207d8ec473a6d
Certificate serial:       086B48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48601251b0ea3b955f4437e7a7e207d8ec473a6d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/48601251b0ea3b955f4437e7a7e207d8ec473a6d.mft
Manifest number:          043F
Signing time:             Mon 15 Apr 2024 02:20:47 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 02:29:29 +0000
Files and hashes:         1: 48601251b0ea3b955f4437e7a7e207d8ec473a6d.crl (hash: YN1mzng5EbhpzbOquxS0KoFGzVrPZCdsoqEf56FRCgs=)
                          2: f53d064411e74d7e11b46e8ce240025a3ed4128f.roa (hash: Y/Mouis3535Yzt67M04hWtMgfxSQU20QiRswxJF+6jA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551752 (0x86b48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48601251b0ea3b955f4437e7a7e207d8ec473a6d
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 02:29:29 2024 GMT
        Subject: CN=4d2128d520d8f1c1cca53f740622956549351591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:9a:9a:d8:1c:5b:98:32:92:f5:e2:ba:70:
                    c7:df:20:28:ed:ba:df:86:c7:39:49:de:21:e3:70:
                    03:d2:90:dc:28:f5:02:36:6c:14:8a:3f:7b:cd:89:
                    b0:41:2f:28:ab:58:fc:da:70:5a:c0:d6:13:3c:94:
                    a3:ef:d6:94:8f:f8:26:b0:7c:3d:28:cb:c3:82:36:
                    dd:c4:bb:18:a6:db:3d:15:53:03:e5:9b:2f:1c:8c:
                    48:3c:80:04:08:4b:69:eb:96:29:75:95:cc:cd:f1:
                    06:e0:dc:4a:29:7d:d2:bb:ac:ee:49:df:4a:c5:ba:
                    d4:76:79:2c:f4:a7:06:03:8d:80:d5:85:d2:f6:67:
                    23:50:c3:9d:9a:54:cc:ff:df:f4:9d:e2:9b:a8:1f:
                    6c:ca:f2:41:d9:99:a1:14:de:cd:de:f5:a4:00:00:
                    2f:ab:79:9f:c4:0b:d3:74:bf:cf:8e:1e:a9:c1:c1:
                    3d:65:31:12:ac:87:9e:80:0e:9e:56:82:65:40:7d:
                    95:ac:4e:16:0f:da:91:39:2d:fa:b7:fe:4f:96:d1:
                    86:36:45:55:e2:7a:06:ac:31:b7:c0:3a:e6:ee:08:
                    e9:e0:40:9c:c2:8d:65:7c:3f:b4:6b:76:e0:47:7c:
                    d4:39:8e:a8:13:d8:ef:e2:bb:46:be:f1:75:0c:73:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:67:9A:FB:25:B6:1E:33:0E:5A:D5:D0:9D:73:CE:C8:1F:10:12:E0
            X509v3 Authority Key Identifier:
                keyid:33:71:2E:3F:93:E3:92:F2:75:13:84:B9:EE:94:62:42:C8:FC:68:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48601251b0ea3b955f4437e7a7e207d8ec473a6d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/48601251b0ea3b955f4437e7a7e207d8ec473a6d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/48601251b0ea3b955f4437e7a7e207d8ec473a6d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8b:97:74:17:11:43:da:b8:ab:40:e8:ea:bf:08:e5:51:71:
         4b:f4:57:64:1f:1c:09:44:81:99:9c:e9:dd:34:80:60:5e:68:
         1b:c1:97:a9:4b:c5:93:d6:9e:ef:7e:1c:b6:3a:2f:3b:cf:45:
         cf:1f:f6:0e:56:4c:8c:85:43:fe:72:a4:d0:62:74:0a:a5:92:
         f3:46:c2:e7:6e:5f:9e:6d:25:45:4d:e1:d0:9b:f9:ae:ec:bc:
         35:e1:36:ac:27:fd:0d:16:71:3f:1a:15:08:86:03:5c:e6:d7:
         03:e3:b9:74:ee:6b:43:e3:fe:57:bc:69:a8:d2:ef:56:4d:86:
         9e:47:cb:c9:6e:bd:83:83:bb:6e:ed:44:25:80:c9:f6:61:fc:
         ab:ec:dd:8e:32:46:39:6e:50:c7:56:17:6d:e9:d2:d0:9f:b1:
         96:7a:f4:48:0b:30:6c:d9:9c:cb:99:62:ba:e3:1d:aa:36:a9:
         45:0b:40:fb:f4:66:7a:0c:87:e1:59:0f:c6:4b:74:61:82:79:
         0f:03:b7:b3:5e:8c:91:b0:2c:e3:07:b1:48:ca:7e:ad:6e:17:
         e2:60:b8:b5:1b:75:88:29:e0:85:8b:aa:3e:60:c7:bf:cb:3b:
         0d:e1:a5:0f:71:57:db:ba:0c:06:96:b2:bf:2c:8d:da:a7:ef:
         9f:9e:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----