Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.mft
File:                     cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.mft (raw, json)
Hash identifier:          p9wzayx1yRsfg6Kqnkc0rFTtsYs06Im0f7NCMkn+2DU=
Subject key identifier:   3C:46:BF:42:0A:FE:76:C6:B1:38:C0:92:28:0D:74:24:C0:61:C7:F4
Authority key identifier: 20:ED:5F:78:2C:4F:78:3A:93:08:89:B1:4F:E6:44:62:27:94:56:8E
Certificate issuer:       /CN=cf32f89c33fc0cfad67adbc1d4a10a3113854f7c
Certificate serial:       093E11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.mft
Manifest number:          04BB
Signing time:             Mon 15 Apr 2024 10:21:44 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:23:25 +0000
Files and hashes:         1: cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.crl (hash: Qt5ODfRqIroUrdW7ybTty+d2IewRoornrbtlnB2ZHMc=)
                          2: f9c864b4c0eed2be65b217dc12c3f4198243bdaf.roa (hash: OLOBI7f5BjZCmNL9I04ITscmuVycAiCyo59WNh3CDuw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605713 (0x93e11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf32f89c33fc0cfad67adbc1d4a10a3113854f7c
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:23:25 2024 GMT
        Subject: CN=02ec0b287aaca1847f9eae097f3aea72d47dc7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:a9:6b:5a:cb:27:ee:15:90:0a:ae:fa:30:
                    c5:90:56:3e:32:dd:af:47:a6:d2:19:11:3c:35:5d:
                    c2:76:47:64:70:3c:aa:5a:9f:01:5d:ce:83:03:d9:
                    5c:53:13:dc:0a:61:59:88:f6:54:f2:59:8f:2d:9e:
                    85:3c:3d:0f:ee:dc:be:6c:02:63:33:e1:7d:0a:8e:
                    7e:11:09:cf:dd:76:c7:95:63:07:a7:0f:d6:e9:36:
                    5e:18:7c:46:94:19:bd:f2:cc:13:02:80:49:ee:f1:
                    3c:2f:9d:aa:8d:33:dc:30:b4:54:5f:d6:d0:58:c0:
                    b9:9b:d1:38:04:31:8f:34:6b:22:27:26:e4:41:11:
                    a5:d5:57:21:aa:2b:63:1a:42:a1:3a:e6:50:00:6a:
                    03:f0:a4:52:e5:88:8f:8e:12:b7:7a:84:7a:d2:c4:
                    79:00:fd:5b:5e:a6:aa:2f:4a:53:30:97:f8:f7:ce:
                    d7:9a:34:8b:fc:0f:97:68:96:fb:5c:45:88:9f:c5:
                    f2:d9:74:27:90:40:1d:2c:8f:92:a3:e8:71:0e:f1:
                    92:2a:a4:67:ad:06:78:1c:00:2b:67:86:a4:7e:9a:
                    d1:59:98:11:a7:28:e1:f1:77:3b:2c:06:0a:ce:cc:
                    17:f0:c8:c0:47:52:d0:3b:1e:70:9d:8e:98:9a:e3:
                    75:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:46:BF:42:0A:FE:76:C6:B1:38:C0:92:28:0D:74:24:C0:61:C7:F4
            X509v3 Authority Key Identifier:
                keyid:20:ED:5F:78:2C:4F:78:3A:93:08:89:B1:4F:E6:44:62:27:94:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:2d:96:de:d2:0a:43:b9:fd:d8:26:c8:65:3a:53:e5:3e:
         1f:1c:f4:cb:f5:fb:64:41:85:d0:da:f2:d0:4e:14:49:4c:43:
         61:1a:8a:1e:69:a1:55:e7:03:a1:84:50:41:d9:9d:19:4c:ce:
         19:a8:38:cc:4c:72:33:72:6c:e4:6d:40:b5:16:9c:f1:56:5c:
         f3:b5:be:03:39:0f:19:37:d8:ba:e4:7c:4f:44:09:51:ad:a1:
         6b:37:53:47:ce:51:c7:bc:9a:c0:2c:98:a4:c2:fb:76:29:49:
         0b:fa:04:01:5d:3b:27:86:24:44:6b:87:4a:ad:0b:db:3d:b7:
         07:58:fb:f9:79:89:35:a1:bc:a3:fc:1a:0b:5e:a0:14:d8:9e:
         99:f1:c1:36:7f:2b:72:4d:0a:7c:45:74:06:5f:0e:23:1a:ac:
         f1:8e:1b:03:4a:f3:69:49:89:30:23:0d:13:0e:0b:7a:fa:a2:
         95:2e:b9:bb:96:91:3b:ad:d4:99:48:98:36:fa:8d:b3:9e:ea:
         e9:05:bf:ae:70:5a:53:99:d3:ff:e7:27:7d:21:29:4f:20:cd:
         a7:5d:8a:f9:41:f5:fb:90:a2:66:e4:92:0d:ab:fa:fd:b3:d0:
         87:62:b6:e1:27:b0:41:78:2d:9e:ba:38:9a:88:2b:73:64:21:
         87:11:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----