Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.mft
File:                     064899b606f78a681c0fd0649043cb728d259f11.mft (raw, json)
Hash identifier:          JLiUsCVNd4y4jfl2HgmnCAfGVH7VimYarMhac0tJNWk=
Subject key identifier:   A6:AE:8D:37:E0:22:26:7D:3B:BE:56:A5:68:09:F4:BC:C3:9E:DB:C6
Authority key identifier: CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8
Certificate issuer:       /CN=064899b606f78a681c0fd0649043cb728d259f11
Certificate serial:       1A7E44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/064899b606f78a681c0fd0649043cb728d259f11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.mft
Manifest number:          0DB3
Signing time:             Mon 15 Apr 2024 09:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:28:18 +0000
Files and hashes:         1: 064899b606f78a681c0fd0649043cb728d259f11.crl (hash: sYIeMrT2hU9456eBCdkvH5F12fTDKkIL9gZOC8SWtqE=)
                          2: 1bf9a7e88090e43cc77dd18d8b8722a5bba8b1b2.roa (hash: gnwdfZk4D+VVxjnfpzaEyj2Iur3ITmJONeriI//Aqg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736260 (0x1a7e44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064899b606f78a681c0fd0649043cb728d259f11
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:28:18 2024 GMT
        Subject: CN=c79441852513cdf4975fac28f5f7be81d84e4fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:a3:54:9c:9f:32:9f:b2:f7:1a:88:df:cf:
                    3d:7b:0a:bf:68:76:16:f3:9a:30:56:4a:30:0d:41:
                    0d:9e:4a:c4:38:e2:bc:4b:88:f5:37:8a:27:bd:88:
                    34:97:04:29:03:a8:b8:bd:80:a7:94:08:33:06:c0:
                    dc:7d:b2:2e:8d:42:32:67:d2:a2:6f:37:d4:c5:65:
                    07:ed:9f:2d:7d:25:f1:2a:f0:4a:5b:11:40:33:c5:
                    c0:b6:ff:ab:48:e3:91:b3:56:49:c4:d0:e0:48:5b:
                    e7:9a:2f:30:ec:65:1d:4a:9c:8c:f7:3b:07:e3:27:
                    7a:4b:0a:15:3b:b0:48:51:32:c1:21:05:75:e1:36:
                    6e:41:3c:fd:45:cb:82:f1:5a:69:22:b4:10:a9:86:
                    29:87:8c:4c:2a:de:95:3e:4b:c8:80:82:e0:a7:66:
                    67:19:30:5e:d7:d8:5e:a3:51:17:40:80:a1:5e:d9:
                    ed:ef:eb:29:78:6b:14:a7:09:f4:08:7f:7e:ed:71:
                    9d:e3:15:18:63:d7:d7:6b:8b:b9:03:42:c3:04:1d:
                    e6:fd:82:69:9d:d9:0b:0b:2a:50:77:c3:5c:08:37:
                    32:55:62:bf:b5:00:c6:d0:1d:ea:9d:94:9c:40:fd:
                    1d:9e:89:fd:9e:a8:39:dc:5c:38:5a:30:cd:31:24:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:8D:37:E0:22:26:7D:3B:BE:56:A5:68:09:F4:BC:C3:9E:DB:C6
            X509v3 Authority Key Identifier:
                keyid:CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/064899b606f78a681c0fd0649043cb728d259f11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c0:25:db:fd:ce:3c:9c:fc:f2:11:fb:4f:aa:de:3c:67:b1:
         f6:2d:b8:e6:fa:89:ad:5f:11:7b:9b:a0:01:cf:93:35:84:a1:
         a9:22:f5:bc:31:ef:0d:b7:e2:06:dd:88:ac:94:36:ac:2a:14:
         d3:f9:fb:c4:24:a8:05:2a:61:88:6d:a4:6a:f5:33:7a:71:85:
         83:e8:07:c4:ec:34:4b:e9:74:f6:44:62:70:d7:a5:5d:c7:fc:
         65:a4:36:f5:bc:76:24:69:80:00:ab:51:ef:5e:65:55:46:23:
         d2:3c:ba:bf:a3:ce:80:ce:93:d3:8a:42:60:a9:dd:2f:1b:8c:
         9c:71:89:45:9a:91:94:b9:91:3c:f0:6f:52:d1:ae:f4:22:ef:
         9e:30:f6:79:73:c9:45:7a:60:6f:8b:99:8e:60:cd:d0:72:2f:
         13:ad:c5:6a:65:2a:c8:27:96:41:a3:b1:87:f5:7f:6b:6a:bb:
         fd:eb:17:48:c3:54:62:3e:97:2c:91:bc:00:fe:ea:1e:0a:39:
         97:ec:ea:fc:b1:31:3b:e3:fd:d1:dd:7e:bf:7b:3b:56:7a:d5:
         29:c6:77:82:2b:f5:cf:89:70:0b:73:f4:97:5e:a8:6f:2b:ba:
         e3:56:73:7b:88:d4:d9:cf:79:a7:4c:cc:15:4e:38:a0:d9:db:
         33:19:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----