Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bdb12a43-100e-4fc4-b7f2-2f4825e8f006/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.mft
File:                     d91aa212f217640428eb6bc488ccbfc4f7bb65a9.mft (raw, json)
Hash identifier:          mcve/htOX7Q636A1WI57MGQm10UHyugHx5+rS4rVp1Q=
Subject key identifier:   2D:EA:43:37:F6:34:1B:81:96:EA:24:FB:59:BE:30:53:89:C9:9B:29
Authority key identifier: BE:60:89:83:49:29:68:6D:2E:F6:8C:F7:0A:29:C4:FE:3B:DC:C6:D6
Certificate issuer:       /CN=d91aa212f217640428eb6bc488ccbfc4f7bb65a9
Certificate serial:       047B3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bdb12a43-100e-4fc4-b7f2-2f4825e8f006/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.mft
Manifest number:          0251
Signing time:             Mon 15 Apr 2024 05:20:51 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:54:17 +0000
Files and hashes:         1: d91aa212f217640428eb6bc488ccbfc4f7bb65a9.crl (hash: X5f4/b3IGPRcz3sOQ853tNVpSx5dmBEh0t4xluZrWcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293690 (0x47b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91aa212f217640428eb6bc488ccbfc4f7bb65a9
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:54:17 2024 GMT
        Subject: CN=c09927e6e1db7a72c3139c5aa8c1086c95254df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:e9:fb:59:bf:45:58:9e:0e:56:b1:29:0c:
                    14:15:ba:4e:89:bf:54:46:98:5f:b8:29:a6:45:ff:
                    15:9b:a5:67:2c:d3:18:60:2c:92:e1:ed:ff:b7:b1:
                    7a:f2:72:61:9f:32:f9:8f:69:8c:56:1a:00:f7:e0:
                    21:30:53:5d:6d:46:6b:10:80:e5:e7:20:9d:76:17:
                    09:9e:4e:61:20:e9:f7:de:0e:eb:84:0d:4c:53:d8:
                    2f:21:70:4a:0f:7f:58:f0:ef:f5:24:d2:cf:7a:9a:
                    24:1f:05:1b:20:fb:ab:13:6d:d8:5c:f8:ad:16:cc:
                    f9:ad:7a:da:84:ff:2d:df:66:16:5a:f7:32:58:a1:
                    02:39:83:49:9b:26:9c:79:2f:ee:91:13:0a:8f:d5:
                    59:b4:9f:1a:ff:a0:6a:e9:8e:ed:e5:b8:b4:77:06:
                    a2:fc:96:68:e2:e3:ea:3d:27:e1:b4:e1:0c:aa:d3:
                    0c:85:59:9c:a4:bc:df:92:f1:23:58:a7:1e:63:c8:
                    c2:54:51:93:18:c9:6c:cc:8d:de:17:ee:09:60:e5:
                    9f:f8:b8:5b:85:97:b6:68:0a:31:20:3d:ba:a0:64:
                    f3:16:3f:21:c6:fa:18:dd:d9:d5:12:fd:2d:65:65:
                    45:02:30:8b:c7:76:7a:4f:6b:44:a3:98:c8:ec:bb:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EA:43:37:F6:34:1B:81:96:EA:24:FB:59:BE:30:53:89:C9:9B:29
            X509v3 Authority Key Identifier:
                keyid:BE:60:89:83:49:29:68:6D:2E:F6:8C:F7:0A:29:C4:FE:3B:DC:C6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bdb12a43-100e-4fc4-b7f2-2f4825e8f006/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bdb12a43-100e-4fc4-b7f2-2f4825e8f006/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:f1:d3:0c:1b:de:7b:43:2d:1e:c1:67:ca:20:0d:2f:2e:
         64:15:f4:19:ae:09:95:b9:1c:73:a3:9c:9a:3e:4b:59:c9:a8:
         af:92:e8:39:93:93:de:8f:66:7e:a8:a0:f1:e7:7b:57:c6:ba:
         47:b1:17:35:e9:72:33:70:82:dc:24:0d:ac:1d:bb:23:93:71:
         53:bf:35:44:6e:d2:85:9f:f7:91:cd:77:68:80:63:08:a1:b8:
         ff:13:ea:39:e3:8b:65:bc:12:75:6e:9f:8a:d3:54:df:91:32:
         fd:18:92:4d:49:52:44:97:32:8e:0e:2c:b6:e1:92:31:8d:66:
         77:f7:4f:ac:aa:1d:c3:99:3d:a7:86:aa:70:da:c2:d7:98:5b:
         53:4d:a4:82:82:ae:e1:0c:ff:ce:2c:ff:fd:00:23:b2:85:ff:
         b6:8a:17:c1:5b:7a:9f:83:f0:43:63:1a:0a:fb:91:b1:16:22:
         c7:ac:4c:de:ea:de:2b:81:0e:e2:7b:bf:22:47:a8:12:e1:f4:
         58:ba:a2:51:10:a2:db:5b:48:e4:81:57:c7:92:4d:23:d0:c6:
         13:8e:27:4a:4d:34:54:ac:fa:36:3e:3f:68:5a:c7:4d:4b:fe:
         1e:1c:44:5a:1c:f5:a0:e6:d6:14:95:3b:1b:bd:df:ac:cc:ea:
         b4:eb:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----