Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.mft
File:                     010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.mft (raw, json)
Hash identifier:          C4i4bcH5e9rm+uiXMiRPZapPCmS63n7RO0AAC0cEfaM=
Subject key identifier:   BD:22:8B:CE:06:4A:3B:69:38:CC:0B:14:02:1A:29:C4:B4:4F:52:CB
Authority key identifier: 4F:6B:F0:61:5E:B6:D2:E1:33:4E:13:A1:95:B5:87:F0:3C:27:0A:CD
Certificate issuer:       /CN=010b9d9c696fcfc6fcf94f280d1b1174a54c09fe
Certificate serial:       19145D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.mft
Manifest number:          0CEC
Signing time:             Mon 15 Apr 2024 08:20:26 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 10:29:16 +0000
Files and hashes:         1: 010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.crl (hash: Vpx1PrHMTonEmcnbUxL4wT57S67AFf81z01kZ+9odSY=)
                          2: 2b0740b78fff0c79066e2fba1ca691480c735184.roa (hash: 16MSvgRikc+n5lUsVMe9s+9GBvwoOii8insjZU9YJJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643613 (0x19145d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010b9d9c696fcfc6fcf94f280d1b1174a54c09fe
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 10:29:16 2024 GMT
        Subject: CN=483ee5cb9cb879bd517f64a32a6fb265484ef76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:27:64:b3:3f:93:6f:21:3a:cf:05:34:00:
                    df:11:25:05:28:dd:e0:c8:bc:67:f6:93:20:e8:a8:
                    bc:c5:2d:37:81:40:da:68:d4:91:44:7d:ce:ae:85:
                    6f:6b:cf:cf:42:04:58:6a:86:94:a8:78:c7:10:9f:
                    ab:c8:8d:12:b8:67:a5:95:74:24:84:84:a2:26:64:
                    e4:aa:c9:d2:f5:c1:b5:ed:62:3e:4c:94:a3:2b:fc:
                    4c:d8:8c:91:4f:6d:24:db:c3:6e:20:7b:17:24:a6:
                    16:d9:a0:d0:11:19:20:cf:2b:1f:4b:c9:cb:c1:97:
                    6e:ba:b0:15:33:b5:f5:1d:29:4f:a1:e1:b5:5e:7d:
                    6b:a3:2a:50:dd:2e:86:6e:74:9d:01:33:68:79:c2:
                    1a:31:29:1a:e2:25:dd:53:f1:67:b3:a0:ec:fb:cf:
                    6f:0d:e5:6b:0c:96:de:d4:ca:97:ec:be:c8:dd:03:
                    6d:77:bb:2e:a3:eb:17:d7:0b:88:1c:e3:fc:18:ff:
                    9d:fa:cd:3c:a1:4f:81:bc:cd:7c:79:be:f9:4a:78:
                    b5:94:d6:15:fc:dc:3d:83:0b:e6:06:1a:1c:c6:a8:
                    92:b2:dd:77:07:a5:ea:83:34:9b:e6:03:be:44:29:
                    fb:b4:13:e9:15:8e:38:59:66:83:82:56:52:41:63:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:22:8B:CE:06:4A:3B:69:38:CC:0B:14:02:1A:29:C4:B4:4F:52:CB
            X509v3 Authority Key Identifier:
                keyid:4F:6B:F0:61:5E:B6:D2:E1:33:4E:13:A1:95:B5:87:F0:3C:27:0A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:b3:4c:ea:22:95:ca:f7:da:56:83:8f:0a:d4:68:7b:1f:
         4e:27:7f:79:c3:a2:9a:84:fe:29:d2:d5:b6:2b:ff:81:e4:f3:
         ed:3f:70:21:5b:c7:a2:4d:74:5f:68:82:bb:d6:1b:b0:8f:a5:
         85:f1:de:66:70:23:5c:dc:9a:58:49:9d:e8:7b:4a:90:7d:e6:
         1f:97:ba:1e:db:a4:7d:ab:81:7d:fa:c1:ac:5f:de:9d:b1:35:
         b4:6e:90:0e:f4:65:5a:bd:b1:5b:e5:dc:d8:7c:11:03:d8:e4:
         2b:e8:d4:1a:37:ac:e3:37:4d:ff:fa:59:bd:cc:3c:1d:c7:b0:
         d8:5a:e1:1e:77:45:04:05:7a:49:ec:ad:9a:2a:a4:b2:ab:10:
         7b:1d:fa:fd:38:0d:df:54:52:37:dd:bf:92:d0:b1:07:93:9f:
         a6:d1:58:f5:aa:4e:fa:92:ad:3c:80:ff:52:20:c1:25:f5:a1:
         4a:5e:83:cf:e9:3e:a4:03:2e:9a:03:31:ee:7c:3d:2b:41:0d:
         04:2c:ae:1c:10:9b:8f:52:e5:63:98:b7:44:65:b1:2d:f2:6d:
         ea:b5:f7:8c:b0:7f:3c:ab:ee:d2:7a:6b:9b:01:0e:2e:0b:50:
         42:92:da:74:49:33:87:a9:00:1d:fd:a4:9e:03:13:6b:e1:16:
         1c:49:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----