Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.mft
File:                     a89862009d16e2b8523068bf28b5f041800a807f.mft (raw, json)
Hash identifier:          S27f7cKSgwYpwzGmAcGXLDCC23iDEEBUQoNTBEaVSyY=
Subject key identifier:   9D:45:5F:85:70:9F:5A:3E:A8:9A:F8:2F:8A:CE:EA:17:1D:C5:34:BB
Authority key identifier: 97:93:F4:45:99:E6:5A:4B:86:42:C2:DD:13:6D:D1:4C:77:43:54:78
Certificate issuer:       /CN=a89862009d16e2b8523068bf28b5f041800a807f
Certificate serial:       258C43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a89862009d16e2b8523068bf28b5f041800a807f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.mft
Manifest number:          0DEC
Signing time:             Mon 15 Apr 2024 06:20:55 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:06:39 +0000
Files and hashes:         1: a89862009d16e2b8523068bf28b5f041800a807f.crl (hash: r9A9YeCBjFLW0kt6b+VIoaXReEH1LpIVXDYNr/Xqw+s=)
                          2: d6a360d46a4bd5ab0203660b297077e8dbb224bf.roa (hash: eDOOxcPzrA1u/Cpc7cQGZmKykuDHi7i+vZFkI5HQ7vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460739 (0x258c43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a89862009d16e2b8523068bf28b5f041800a807f
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:06:39 2024 GMT
        Subject: CN=c385084b413d5758cf84b1904ea0e217ce46ee24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:5b:95:d3:15:4b:52:35:7b:50:c1:e8:d4:
                    0f:10:4c:86:1e:42:6f:a6:7a:74:0d:c3:c7:8c:99:
                    71:26:4a:07:f6:1c:a0:ab:1b:f6:9a:52:6a:05:5b:
                    78:81:9d:14:f3:e8:04:93:6e:10:6c:20:12:2d:19:
                    e1:9d:80:a2:5e:d5:72:b1:40:0e:37:db:8a:ee:05:
                    34:55:2d:10:f4:04:7b:99:e2:01:54:a9:c9:f3:99:
                    d5:ba:96:1d:18:d4:a0:02:68:ce:78:a8:f6:11:a2:
                    26:6a:38:f5:b9:59:89:69:2a:45:58:36:46:b4:65:
                    f5:dc:c9:bc:f2:5e:10:25:33:8c:99:c1:40:b9:82:
                    2f:58:41:b0:25:14:e7:84:bf:f7:51:3a:0c:39:aa:
                    bb:19:f6:81:e9:55:f0:c5:20:7d:ce:c6:2c:9e:a3:
                    93:20:ee:12:ac:b8:b8:8b:f3:b0:38:a0:d6:29:0a:
                    d8:ee:96:48:c2:85:eb:dd:61:c4:96:01:91:8a:b6:
                    4b:30:9f:aa:ee:ab:6e:9a:f9:ad:a2:09:79:ed:b3:
                    3f:0d:db:c7:2e:b7:a8:5d:92:25:fa:5d:f0:a1:63:
                    95:93:f2:e1:a8:29:44:62:9c:13:10:72:25:f4:95:
                    7a:fd:35:5a:29:5b:59:58:9f:28:4b:2d:aa:65:c3:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:45:5F:85:70:9F:5A:3E:A8:9A:F8:2F:8A:CE:EA:17:1D:C5:34:BB
            X509v3 Authority Key Identifier:
                keyid:97:93:F4:45:99:E6:5A:4B:86:42:C2:DD:13:6D:D1:4C:77:43:54:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a89862009d16e2b8523068bf28b5f041800a807f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/993dfef6-29c3-4ba2-a9a4-fdcb87e96717/a89862009d16e2b8523068bf28b5f041800a807f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:aa:5f:62:97:a0:32:13:11:b2:9e:09:a0:61:c0:e5:33:
         68:0d:a9:74:54:00:22:aa:c8:86:86:33:8c:e0:85:be:e8:d6:
         2a:dd:76:de:69:81:fc:5e:b0:18:5d:57:fc:8a:01:d0:40:88:
         a6:a1:fd:f4:0b:da:1d:fe:15:34:9f:7c:d2:03:d6:57:2b:e0:
         22:28:80:e3:4b:5b:e9:1a:2b:1b:94:69:ca:d7:38:03:e3:20:
         94:2e:10:da:0e:80:fa:e6:4a:88:df:d6:aa:a1:4e:c0:f7:f7:
         25:50:e6:59:95:28:d0:dc:55:7e:3e:86:c8:aa:11:9f:c1:d1:
         e5:b8:93:95:19:cc:5e:f9:91:29:20:6f:eb:94:25:0a:03:36:
         6a:10:8e:69:6c:3b:5b:c6:6a:88:f6:ca:e8:81:9c:2a:6f:5a:
         b5:e8:17:91:20:50:ff:05:4a:f1:3f:a0:eb:08:83:83:08:81:
         b9:7c:83:07:3d:ad:e2:f5:90:19:f5:41:3b:30:6e:ea:32:5d:
         e0:b0:1b:f7:8b:fa:2c:11:b0:7e:b0:ca:7f:2a:3e:19:62:16:
         31:76:10:8f:04:09:41:2c:15:68:e7:6f:2e:99:fb:07:fd:92:
         5e:ba:a7:8f:bf:88:e1:a1:72:6c:cd:51:15:1b:23:fa:42:8b:
         18:6c:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----