Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b957220c-7cec-4f43-92ed-f819af748e0b/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.mft
File:                     4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.mft (raw, json)
Hash identifier:          ocybyJi9016yZtv0QHY+qJkWye6U19mLl0aHhy32eLA=
Subject key identifier:   45:65:A6:F1:53:DA:7F:7F:F5:79:CA:2A:8A:F0:20:0C:29:4C:77:40
Authority key identifier: 5D:D8:34:2B:FF:92:96:38:67:66:D2:36:2B:32:5A:2B:F4:7C:BF:14
Certificate issuer:       /CN=4b7abec4f849963dc643b8a5f832ceabcc5ba2ac
Certificate serial:       288610
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b957220c-7cec-4f43-92ed-f819af748e0b/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.mft
Manifest number:          0E02
Signing time:             Mon 15 Apr 2024 07:20:57 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 10:05:17 +0000
Files and hashes:         1: 2b96863e068d5769f245c811aeed18ee7315ada2.roa (hash: rN9Xc+IbhkdiDwM9xfJwUIf4xXiNjJwO2xWWMghKzBM=)
                          2: 4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.crl (hash: ddb56G+umYR5noR/po+7h1X1N4k/ZL5ZzNe4A1pZGqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2655760 (0x288610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7abec4f849963dc643b8a5f832ceabcc5ba2ac
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 10:05:17 2024 GMT
        Subject: CN=59965cc5e69fc48c7d53d73249d01dba4881ab76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:a7:b2:b7:d2:8c:40:c3:48:85:13:ab:00:
                    b0:ee:e0:9a:7a:a9:fa:5e:88:a7:f6:0e:f3:07:10:
                    3c:59:4a:21:2a:cd:e5:8c:72:f3:f1:de:1e:e9:73:
                    8f:d2:a7:42:8b:a1:42:d2:93:c4:3e:76:1d:f3:b1:
                    6e:0e:ec:5d:85:63:73:64:62:e7:75:82:85:86:d7:
                    a2:20:5a:9f:25:e2:55:0b:21:9b:20:9e:4b:02:3c:
                    a9:44:5d:73:56:82:b1:12:cf:34:33:70:30:e4:e6:
                    6d:13:23:03:98:86:b0:2b:b9:58:d8:21:d0:fc:e5:
                    9b:6a:42:8b:bf:73:0f:98:4d:b2:0b:7b:0f:c5:40:
                    e6:39:87:8f:26:03:73:18:86:bc:72:4a:0b:e9:4b:
                    5e:23:40:8f:9b:6d:04:0d:5f:1f:07:b0:9a:73:6c:
                    42:da:b2:39:08:9d:0c:bf:8c:8a:3e:d5:a1:4c:c9:
                    c6:c3:ad:d1:6d:e5:3e:3e:f4:0f:1b:11:00:48:ae:
                    d9:46:db:d5:ec:b9:66:84:be:01:02:fe:de:09:70:
                    55:88:68:ee:9d:96:b2:d3:64:99:55:58:f2:b5:a5:
                    fe:99:b1:9a:6c:99:d9:76:56:29:a6:0e:aa:4b:a5:
                    f3:30:6d:5f:4d:41:18:b5:89:c2:e0:99:22:f6:d9:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:65:A6:F1:53:DA:7F:7F:F5:79:CA:2A:8A:F0:20:0C:29:4C:77:40
            X509v3 Authority Key Identifier:
                keyid:5D:D8:34:2B:FF:92:96:38:67:66:D2:36:2B:32:5A:2B:F4:7C:BF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b957220c-7cec-4f43-92ed-f819af748e0b/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b957220c-7cec-4f43-92ed-f819af748e0b/4b7abec4f849963dc643b8a5f832ceabcc5ba2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:45:96:ad:e4:a2:66:2b:97:27:5d:27:11:32:b3:9f:0d:68:
         86:5c:19:4f:05:df:28:1b:69:82:7f:73:ec:0d:66:f7:18:ce:
         e2:0a:8d:47:0e:55:9b:82:cb:16:ee:0a:75:7f:66:9f:f2:27:
         6f:59:8f:84:b1:92:95:f3:c6:94:75:81:22:05:92:63:07:fe:
         9a:00:0a:87:99:aa:95:73:af:01:75:8f:56:42:0e:3f:e1:da:
         65:38:d3:3b:bb:2f:11:1f:a1:3d:f7:80:71:06:9f:81:d0:96:
         06:a0:59:ea:03:4d:20:c8:75:4f:53:f3:ae:60:a1:f4:b6:21:
         09:24:42:26:32:14:4f:ad:4f:d9:96:36:2c:94:ec:79:4e:91:
         e7:ed:f8:0b:48:bc:bc:f5:cc:7c:cc:47:6b:5a:21:99:0c:b8:
         87:62:96:8f:d7:76:c3:06:bd:69:c2:d1:96:43:0f:79:aa:7f:
         89:db:86:13:1f:d3:fe:21:e7:9a:8b:cd:c5:83:fe:fd:72:65:
         71:ea:04:c6:23:70:9f:5d:a1:a6:b6:f6:10:8f:2e:22:fe:b7:
         7d:31:e4:2b:c9:3f:84:e8:2e:97:f3:36:af:01:6c:83:c4:9e:
         71:31:e8:67:37:20:d0:f8:ee:2a:e1:fa:7d:bf:33:a8:46:9a:
         bf:3e:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----