Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft
File:                     921db54c016559ed7c8b176132b8f5a6803fa3a0.mft (raw, json)
Hash identifier:          cDB1S0N2IwT0/DvSCIibk+5xg1XmzLi0+YQtfMdg09k=
Subject key identifier:   42:A3:2F:3B:A0:0E:A3:BF:38:8B:C2:72:37:01:3E:88:02:D2:8F:9F
Authority key identifier: 3F:66:B6:1F:C3:A3:A1:BF:43:50:BE:C1:C8:B2:2B:67:18:C4:ED:1C
Certificate issuer:       /CN=921db54c016559ed7c8b176132b8f5a6803fa3a0
Certificate serial:       26F522
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921db54c016559ed7c8b176132b8f5a6803fa3a0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft
Manifest number:          0DFE
Signing time:             Mon 15 Apr 2024 02:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 02:52:29 +0000
Files and hashes:         1: 921db54c016559ed7c8b176132b8f5a6803fa3a0.crl (hash: /lW3UYFGwE4dAIyq7Tfuixtu36puHnmFhPpzomu6BIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553122 (0x26f522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921db54c016559ed7c8b176132b8f5a6803fa3a0
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 02:52:29 2024 GMT
        Subject: CN=fa69f8c7f09a7bdb01df2ad7f0061b94bbfd5ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:05:fd:f3:24:4b:74:1d:db:2e:21:de:d8:
                    0e:6e:d3:c4:1a:f4:8c:ae:b6:58:c1:2d:fc:2c:2b:
                    05:72:9c:99:75:f9:21:06:57:84:86:b8:18:6e:bf:
                    a3:38:5b:bc:25:78:62:30:b4:d1:c3:ff:94:ee:52:
                    c2:e3:1f:f3:8d:41:e5:95:e0:8a:5f:4d:0e:60:1f:
                    5a:10:85:fe:4a:82:61:63:9b:52:6c:ed:e7:af:11:
                    76:3c:af:ab:88:6a:63:4c:7a:68:e2:75:c7:e6:29:
                    82:1b:de:2d:5d:6a:a1:6c:f1:13:e9:c6:d7:1e:a5:
                    33:bc:05:01:1d:22:ee:bf:8a:e3:3e:f3:10:9d:9b:
                    5f:6e:f7:a7:50:78:af:95:fe:6a:09:b1:56:3b:da:
                    7c:f5:3a:bd:73:6c:8f:62:13:45:60:e7:56:29:ef:
                    5d:b7:e4:2e:53:5c:a0:08:95:3a:d8:e5:d3:bb:25:
                    f6:7e:d6:cd:2c:43:12:a6:7d:40:18:6a:df:d9:ac:
                    09:bc:32:f8:54:9f:b6:0f:2e:f8:0d:ec:6d:de:7e:
                    d0:6a:e6:99:c3:20:ff:66:6e:9e:ea:ed:48:2a:7d:
                    bf:a5:e8:74:cf:76:1c:33:f6:85:f8:c0:1b:3e:e4:
                    e3:88:9a:42:a1:41:87:f0:bd:c9:1b:95:ba:24:5b:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A3:2F:3B:A0:0E:A3:BF:38:8B:C2:72:37:01:3E:88:02:D2:8F:9F
            X509v3 Authority Key Identifier:
                keyid:3F:66:B6:1F:C3:A3:A1:BF:43:50:BE:C1:C8:B2:2B:67:18:C4:ED:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921db54c016559ed7c8b176132b8f5a6803fa3a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:8b:62:bb:90:f7:04:db:fc:93:49:39:19:83:75:2f:1f:
         64:e1:26:a4:98:15:35:6c:43:89:fb:c2:31:88:4f:10:52:d6:
         50:ec:d3:04:06:aa:b7:73:03:f1:44:38:a6:db:f1:49:d5:1e:
         ab:30:d0:30:af:89:5b:5c:50:8f:6f:90:7b:e5:3d:01:d5:67:
         40:24:9b:71:fa:f9:d7:24:07:88:98:c5:49:5a:de:c9:83:ca:
         f6:13:b1:c7:4d:7c:78:dc:bb:b6:c5:7a:76:fe:b2:ca:03:73:
         7d:6a:2c:7b:14:d7:8e:05:7e:00:79:4a:0f:52:6d:f9:19:41:
         a6:39:47:0d:95:25:28:19:13:9a:05:ee:45:11:2c:77:19:96:
         73:15:5e:16:8e:33:66:9a:38:41:97:4a:2a:c7:3d:c3:36:ac:
         06:5d:27:f1:8d:04:f6:2a:28:9f:b5:cb:10:38:56:5e:c0:b9:
         bb:50:07:6a:3f:12:e4:04:24:ab:0e:9b:6f:75:d7:6b:64:37:
         33:70:b2:ca:cb:1e:ad:03:0f:5c:e0:35:8a:94:5f:c3:40:0f:
         c4:d6:60:cf:64:ed:f9:9c:d4:81:0e:b9:9a:d5:48:c5:11:6d:
         44:3e:b1:b2:0a:6e:71:c5:2f:80:4e:f3:a7:59:79:4a:6f:7d:
         43:af:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----