Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/d9df42accb42ae0dc974df4ee3b46e48d9105526.mft
File:                     d9df42accb42ae0dc974df4ee3b46e48d9105526.mft (raw, json)
Hash identifier:          DgoQLJ2VRzi4BYxfUxN1q/YwAcUTCzP4BSXmlauGZuU=
Subject key identifier:   22:79:45:3D:DD:BB:E5:62:EF:2F:98:35:0C:2F:2C:83:41:A2:53:AF
Authority key identifier: B7:F5:EE:95:AE:93:AA:01:4C:E3:44:72:B9:C3:58:49:4E:71:CD:A7
Certificate issuer:       /CN=d9df42accb42ae0dc974df4ee3b46e48d9105526
Certificate serial:       20E053
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9df42accb42ae0dc974df4ee3b46e48d9105526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/d9df42accb42ae0dc974df4ee3b46e48d9105526.mft
Manifest number:          0DE4
Signing time:             Mon 15 Apr 2024 08:20:34 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:28:16 +0000
Files and hashes:         1: d9df42accb42ae0dc974df4ee3b46e48d9105526.crl (hash: xb4fktTrV0GFto6OrsbZDPUkmkjRwXTlIrH/RkX/kos=)
                          2: faa4bae04a2705c9a4d0cf23bc18b8c35ea0981e.roa (hash: IEQDqN0x7L+/HQd+PdgUlPY2t8LAXYV236lMxyiEZbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154579 (0x20e053)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9df42accb42ae0dc974df4ee3b46e48d9105526
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:28:16 2024 GMT
        Subject: CN=d7a78f82e1aec4208ac9e306ff6925db56bc9e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:ae:bb:8d:73:c3:4f:65:b7:09:76:d7:0c:
                    8a:54:f2:b8:8a:e9:24:7f:23:08:86:fd:33:15:c5:
                    f1:13:47:23:32:53:b0:7e:eb:e7:ac:7f:18:65:b6:
                    5a:dc:f2:92:81:44:f9:00:18:a4:e0:6f:f6:5b:e6:
                    33:ab:bf:d5:c4:c6:f7:28:eb:4a:f4:d0:fe:2b:45:
                    27:02:07:98:a4:9d:c5:dd:db:1f:89:da:02:51:eb:
                    92:c4:26:4a:b7:60:db:df:67:9d:c1:92:02:62:08:
                    2c:3a:77:86:92:bc:e8:e3:46:4d:84:c5:bc:f1:ba:
                    d1:28:6c:7f:a8:6d:03:06:a7:8c:83:3f:c7:c6:67:
                    5f:81:4e:ad:26:c8:00:01:c3:3d:34:c0:ec:b0:7a:
                    03:c3:7a:f1:17:39:19:3e:a4:82:e7:10:23:40:40:
                    41:7c:06:4d:42:a7:2d:d9:6d:8a:2a:85:b0:9e:97:
                    a3:e1:98:9c:55:0d:eb:34:c9:c1:16:da:38:f6:47:
                    b7:7e:67:eb:2e:6f:e4:d2:ee:9f:a2:ae:7e:95:29:
                    74:18:a8:24:24:2f:20:65:b6:06:6e:23:78:45:e0:
                    d2:fe:cd:26:92:f2:8a:b5:bd:91:eb:23:c6:10:4a:
                    63:d6:d7:84:2b:78:d0:d6:12:f1:77:2e:03:34:2a:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:79:45:3D:DD:BB:E5:62:EF:2F:98:35:0C:2F:2C:83:41:A2:53:AF
            X509v3 Authority Key Identifier:
                keyid:B7:F5:EE:95:AE:93:AA:01:4C:E3:44:72:B9:C3:58:49:4E:71:CD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9df42accb42ae0dc974df4ee3b46e48d9105526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/d9df42accb42ae0dc974df4ee3b46e48d9105526.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8870148c-d4cf-4de1-88d3-27a60e0936e1/d9df42accb42ae0dc974df4ee3b46e48d9105526.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:62:81:d8:75:29:56:54:fb:6c:12:86:81:7f:32:a6:ff:
         39:58:af:a2:01:5e:c5:11:c0:95:61:03:ba:80:f6:bb:5c:22:
         7a:ef:37:3e:b4:cf:0f:59:c1:04:76:ad:b9:1f:39:ff:85:21:
         19:fb:dc:6c:f6:b0:60:31:05:3b:82:f6:4f:64:09:f9:2c:3b:
         1e:67:51:ee:ff:9e:fa:da:d1:4e:4c:22:6d:97:66:86:14:e1:
         e5:e7:8f:40:d6:ab:48:82:e1:34:4d:08:70:a4:c1:60:6f:75:
         32:d6:a6:43:2b:e3:91:78:a2:21:71:12:09:9c:da:76:2d:0b:
         74:a7:e5:76:31:34:84:d9:4f:6d:77:2c:85:b6:89:2e:48:4a:
         d6:df:b4:57:e6:56:67:b3:9f:c5:95:d9:0f:03:b6:2f:bf:3f:
         13:00:be:75:5c:e7:cb:f8:39:c9:86:f3:0f:02:a2:51:60:a0:
         a5:cb:5b:b7:6f:22:d0:74:14:a5:9a:28:36:cc:17:99:33:7e:
         3b:7c:15:d6:43:c2:73:f1:b1:6d:9c:33:72:7f:e2:77:38:7a:
         7d:4b:3a:22:9e:a4:a1:55:33:8f:0f:3b:d3:3d:2b:81:5d:72:
         59:bb:7f:cc:b8:0c:5c:75:db:7d:03:1c:d5:57:97:7e:14:93:
         b0:a9:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----