Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/d509a47fb6051758d7bd1a005b513a23a55b4dec.mft
File:                     d509a47fb6051758d7bd1a005b513a23a55b4dec.mft (raw, json)
Hash identifier:          F0l58QauO7iMCGWY3ps1zM3A/OI6t5wkiwrh5mtEPhc=
Subject key identifier:   6C:B8:C4:61:DF:66:99:61:F3:43:5B:D8:6C:09:84:48:2D:9B:D0:36
Authority key identifier: 21:F7:70:A7:0D:F7:7B:80:FE:C1:5B:12:06:05:15:2A:86:C4:97:5C
Certificate issuer:       /CN=d509a47fb6051758d7bd1a005b513a23a55b4dec
Certificate serial:       0DF20D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d509a47fb6051758d7bd1a005b513a23a55b4dec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/d509a47fb6051758d7bd1a005b513a23a55b4dec.mft
Manifest number:          072A
Signing time:             Mon 15 Apr 2024 09:21:08 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:50:18 +0000
Files and hashes:         1: d509a47fb6051758d7bd1a005b513a23a55b4dec.crl (hash: SmgQlS4q+Ouhw7IFI09RXCV3LL8mXUHyldpP1MYyfjU=)
                          2: e708eae99428b3cdc8b791407b5189dfcf52baea.roa (hash: sgJuzzS7cvPUaMse2bVrOk9XOw4OX7FlUmktcWk2MFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913933 (0xdf20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d509a47fb6051758d7bd1a005b513a23a55b4dec
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:50:18 2024 GMT
        Subject: CN=a4041d240472be04718c7e16fc4f9081c6e5ca57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:11:50:c9:7d:35:ae:70:8b:f6:71:c6:09:
                    22:0c:9f:b7:15:4b:78:95:da:c3:53:77:56:81:cf:
                    f9:8d:38:06:6e:5b:c2:6f:ea:a3:51:fb:c7:de:70:
                    e1:f9:c3:82:94:2a:94:e4:90:cf:3b:86:05:58:03:
                    93:7d:ad:81:a6:2a:75:33:2e:ad:ed:75:12:94:f6:
                    2e:bf:e0:49:51:c1:b3:64:b2:61:b7:d2:33:a8:b3:
                    f7:a3:5b:ad:6f:d9:24:63:fe:3a:ad:6d:fa:26:60:
                    26:6c:81:a5:35:ab:72:fa:d6:15:98:bf:b1:d7:1f:
                    17:71:87:ae:2e:37:32:7e:fd:d7:b9:11:de:18:93:
                    5e:ab:ec:8c:ab:91:e0:fa:86:b4:c9:6a:8a:75:07:
                    8d:7d:54:63:8e:8f:e4:24:67:64:96:91:5e:ec:f0:
                    46:41:c1:3d:86:a1:0e:56:d9:75:7a:67:b9:3d:c6:
                    8e:f3:a3:1e:53:cf:08:94:95:db:72:32:3e:88:fa:
                    11:e1:4f:31:a1:4f:02:8f:0a:c2:b7:83:cb:31:75:
                    e5:31:1e:58:39:70:bd:85:58:bc:c6:d0:92:7c:31:
                    12:91:c4:86:f0:c8:23:41:d7:6a:41:4c:ce:93:cc:
                    cc:8c:8f:57:e9:bd:aa:02:1a:e6:e8:4a:d6:86:4d:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B8:C4:61:DF:66:99:61:F3:43:5B:D8:6C:09:84:48:2D:9B:D0:36
            X509v3 Authority Key Identifier:
                keyid:21:F7:70:A7:0D:F7:7B:80:FE:C1:5B:12:06:05:15:2A:86:C4:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d509a47fb6051758d7bd1a005b513a23a55b4dec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/d509a47fb6051758d7bd1a005b513a23a55b4dec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/d509a47fb6051758d7bd1a005b513a23a55b4dec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:25:e4:c4:7d:c8:81:5f:cb:9c:5d:b9:35:0c:c2:5e:85:df:
         83:c2:5c:71:4b:98:8a:e2:85:c6:d2:68:5c:f9:1b:a7:99:62:
         21:46:c8:f8:52:45:56:94:81:de:5a:30:05:ad:1b:d3:ad:63:
         c7:e3:05:32:c3:38:49:fd:e7:db:a2:83:12:70:19:12:cf:bc:
         9b:d3:94:a2:65:a6:54:70:53:15:1a:3f:3f:6c:1f:c9:3b:75:
         b4:06:9d:a3:1b:e6:72:ad:d5:7c:09:5a:ed:ff:9b:ac:f0:d3:
         3a:45:b0:aa:53:ed:f3:5d:d0:4f:b2:04:a9:38:5a:4a:d9:96:
         af:cd:19:86:b4:92:38:8b:9f:df:89:10:92:ca:73:e4:a8:0b:
         70:75:d9:74:1d:17:9e:9c:c4:98:4c:f8:11:6b:23:07:f4:dc:
         15:b9:16:15:54:3e:6a:f8:40:f3:2f:ce:23:69:17:bb:15:3d:
         7d:29:f4:b0:eb:34:09:37:2f:5f:f7:5e:52:f6:e3:3d:8a:12:
         eb:32:f9:38:8d:b0:b7:81:e1:8e:55:a5:83:15:5f:59:ca:a7:
         a5:8e:0f:63:7d:86:7a:6f:95:2d:47:70:0a:38:c0:f9:47:a6:
         3b:4c:0d:0d:d6:81:78:04:58:eb:1d:4b:38:44:43:61:b2:4b:
         3e:6f:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----