Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/4e59ab85356d25d04ce88952ed51cf85fdedace6.mft
File:                     4e59ab85356d25d04ce88952ed51cf85fdedace6.mft (raw, json)
Hash identifier:          QhcwnQ3SPUzc6AuoDnhKMrUTus76umZ3D8bwfYTE3sc=
Subject key identifier:   62:CC:BA:E6:12:85:A4:60:96:C8:D7:20:34:AC:61:1D:A0:BB:79:91
Authority key identifier: C2:CF:29:05:77:4E:F7:C1:04:16:37:C3:5F:1A:CD:97:1C:CB:55:2A
Certificate issuer:       /CN=4e59ab85356d25d04ce88952ed51cf85fdedace6
Certificate serial:       180625
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e59ab85356d25d04ce88952ed51cf85fdedace6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/4e59ab85356d25d04ce88952ed51cf85fdedace6.mft
Manifest number:          0C2E
Signing time:             Mon 15 Apr 2024 03:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:30:17 +0000
Files and hashes:         1: 4e59ab85356d25d04ce88952ed51cf85fdedace6.crl (hash: +7YB5IJO98oKOgDBHF/eSh7QBFsfoyRvpFm9M4YmG3g=)
                          2: 9e877652a4dbbe13a788bc4c2f56616e771f8b93.roa (hash: F4mlOoPykXgaKZJoPeqhttcNZ6W6K8mu9k2CPJP3gBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1574437 (0x180625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e59ab85356d25d04ce88952ed51cf85fdedace6
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:30:17 2024 GMT
        Subject: CN=bbe4c72d9fe75e371ac3c94267011d22d8c4df06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:2d:59:77:c0:bc:65:11:1c:18:5a:d2:84:
                    ef:0b:4c:cb:17:40:93:95:75:6a:6f:bf:0e:ab:62:
                    31:ec:91:50:72:cd:84:35:91:d9:f5:72:75:09:23:
                    8f:ce:e6:e1:4a:ca:10:5e:fb:48:ba:c9:fc:df:89:
                    dd:33:b5:4b:95:81:9b:8f:87:4b:ff:17:d9:6c:31:
                    d2:6f:88:01:04:02:66:7c:d0:80:29:2c:78:99:3a:
                    a4:bc:bc:b2:ec:ea:ed:ce:7b:6b:0b:92:64:a0:35:
                    50:00:0e:11:64:cf:0b:43:a1:3f:23:3c:b9:47:b6:
                    5b:c3:ea:95:13:8d:67:a6:b8:4d:e1:fe:69:3b:b4:
                    d5:48:2d:e4:0e:1d:95:f8:99:84:2e:a3:41:d8:86:
                    6d:86:41:3a:c5:89:59:a3:a0:4c:bb:e4:16:dc:b3:
                    dc:97:65:7f:af:c9:21:4f:60:66:13:ec:eb:7e:5b:
                    68:b4:5d:4d:13:0d:2d:be:2a:39:61:3a:b0:a9:3c:
                    22:78:b4:91:31:a9:c7:66:31:42:b1:32:8b:ad:fe:
                    6a:a6:90:61:76:7a:ef:ea:75:be:ef:d0:16:7f:c5:
                    5c:41:b7:8a:18:df:52:f7:41:4c:73:ef:04:62:22:
                    fb:8f:b0:dc:1d:0e:1e:cf:f9:28:2a:2f:65:c5:24:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CC:BA:E6:12:85:A4:60:96:C8:D7:20:34:AC:61:1D:A0:BB:79:91
            X509v3 Authority Key Identifier:
                keyid:C2:CF:29:05:77:4E:F7:C1:04:16:37:C3:5F:1A:CD:97:1C:CB:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e59ab85356d25d04ce88952ed51cf85fdedace6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/4e59ab85356d25d04ce88952ed51cf85fdedace6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/4e59ab85356d25d04ce88952ed51cf85fdedace6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:3c:b8:16:4e:0c:22:e1:4a:1f:21:b1:3b:8b:01:45:e0:
         40:14:17:99:9b:a4:da:7b:c5:ea:57:59:af:15:8d:b4:21:7e:
         65:ac:b0:f9:1f:da:f2:27:c4:ea:3f:55:92:d6:29:ad:21:c2:
         87:1a:50:f1:c3:e5:15:c0:3e:99:f9:4c:cc:ef:78:cf:06:77:
         18:07:62:13:5e:c7:70:67:c5:08:66:c4:64:b3:bf:e2:9c:be:
         31:b8:4d:ac:df:37:80:4a:32:ad:af:04:f7:ec:60:7f:77:fd:
         ed:8d:14:b3:b8:8a:83:1f:6c:3e:67:77:a6:e5:01:66:d6:2e:
         8a:0d:55:17:6e:95:d2:89:89:0a:30:46:fc:76:de:4c:b3:d0:
         21:05:41:26:78:b9:e3:71:80:5d:a6:43:82:6a:03:0a:b6:7c:
         83:f8:bf:0a:d8:42:92:97:d7:f3:01:e8:d9:5e:5c:af:9a:4d:
         1b:38:bd:2c:b7:3f:6c:94:b5:b8:3b:fb:2e:46:62:b3:5a:4d:
         1b:55:e5:47:e7:3f:65:36:9a:72:34:c3:cb:3f:88:24:d9:b1:
         e2:b8:59:63:a5:12:2b:c4:e1:db:59:f4:0b:e8:41:84:ee:14:
         bd:05:44:2e:15:59:61:90:72:68:e6:80:a3:1c:16:ab:22:b4:
         77:68:e8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----