Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/daa9606d-9620-4fe4-a59c-95313b9221f2/65ebe859abb146e8c393f2b1cc10dced05a883e1.mft
File:                     65ebe859abb146e8c393f2b1cc10dced05a883e1.mft (raw, json)
Hash identifier:          adNbtyTrYDuhxFcNFimvZiGkR6gJ/Vynnf9TOZyCzl4=
Subject key identifier:   DE:FD:F5:2D:8E:9C:88:78:46:64:FF:D2:FC:1B:8E:79:D8:B8:9D:EC
Authority key identifier: 3E:AE:63:8D:7E:14:60:C2:9F:DF:37:08:A4:C0:1A:B4:82:47:D8:70
Certificate issuer:       /CN=65ebe859abb146e8c393f2b1cc10dced05a883e1
Certificate serial:       08FB2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65ebe859abb146e8c393f2b1cc10dced05a883e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/daa9606d-9620-4fe4-a59c-95313b9221f2/65ebe859abb146e8c393f2b1cc10dced05a883e1.mft
Manifest number:          048D
Signing time:             Mon 15 Apr 2024 08:20:36 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:00:16 +0000
Files and hashes:         1: 65ebe859abb146e8c393f2b1cc10dced05a883e1.crl (hash: JcRk3tdzUsNFt7DOR/svq2l7UWE7NSlOwqyzsYtak+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588586 (0x8fb2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ebe859abb146e8c393f2b1cc10dced05a883e1
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:00:16 2024 GMT
        Subject: CN=c7292625a5cd51923e99e957df32ba26b395ca63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:e1:0e:03:ec:10:85:73:d4:ff:02:3a:55:
                    62:66:74:96:d5:25:28:4d:6f:ff:f3:2b:a2:58:5f:
                    5c:df:83:34:52:49:16:00:74:58:64:49:09:86:f6:
                    76:4e:d4:6a:1b:ae:4f:10:45:7d:f0:28:c1:07:b6:
                    46:99:ac:83:75:c3:ee:d0:51:8d:a0:5f:a6:31:fe:
                    ab:b0:de:07:12:d2:2e:29:57:fb:2b:98:90:8d:3c:
                    b2:4c:e2:23:11:74:da:9a:f3:33:34:89:97:c9:43:
                    d1:10:82:d1:7c:18:e5:bc:aa:ce:14:29:d2:16:a5:
                    a6:c4:8f:bc:0b:73:aa:c4:25:cc:57:73:ec:ce:2a:
                    be:21:9c:1e:18:0c:4d:ad:26:64:4d:21:e7:67:25:
                    27:0b:2f:ab:29:d6:60:db:7c:e4:19:2a:3d:55:ae:
                    d6:cc:85:7b:85:fc:13:de:cb:05:15:9a:a8:18:3e:
                    d8:4f:10:74:17:2f:3e:67:a6:0f:c7:93:47:69:ab:
                    98:50:d1:c5:20:23:26:93:0e:a2:3b:58:db:a5:37:
                    5c:78:78:ef:67:b7:35:e5:92:4d:f7:f6:90:11:9f:
                    53:43:f4:1f:d8:68:d2:cb:9e:3b:5a:0a:21:b5:8e:
                    b4:95:ed:df:ea:75:3a:34:df:74:3a:b7:65:21:42:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FD:F5:2D:8E:9C:88:78:46:64:FF:D2:FC:1B:8E:79:D8:B8:9D:EC
            X509v3 Authority Key Identifier:
                keyid:3E:AE:63:8D:7E:14:60:C2:9F:DF:37:08:A4:C0:1A:B4:82:47:D8:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65ebe859abb146e8c393f2b1cc10dced05a883e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/daa9606d-9620-4fe4-a59c-95313b9221f2/65ebe859abb146e8c393f2b1cc10dced05a883e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/daa9606d-9620-4fe4-a59c-95313b9221f2/65ebe859abb146e8c393f2b1cc10dced05a883e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:47:7c:72:31:b2:0c:ba:62:40:8f:c6:a4:b6:f6:76:64:7d:
         fb:08:8f:74:49:5c:9d:64:bd:d6:bb:d1:c1:6c:c1:38:4f:c8:
         b9:e6:70:91:2e:5c:81:e2:79:c8:09:10:db:13:c5:a0:66:d8:
         d7:e1:eb:57:02:31:9f:05:d1:0d:52:43:d7:28:4c:83:7c:ab:
         2f:7b:a9:46:c9:ec:a5:74:35:ca:bf:9b:c2:58:98:93:46:18:
         53:78:16:30:97:43:d2:70:00:12:83:c5:4b:b0:9c:73:a0:70:
         a6:86:db:aa:f9:21:15:19:e5:5c:90:d5:07:1b:a5:a4:f7:60:
         6c:cb:96:34:3a:ef:87:44:ac:dc:f1:fe:93:f5:be:8f:61:91:
         6c:9a:de:7e:35:b1:31:09:ff:9e:e1:fc:b8:5e:ce:d6:ba:e9:
         ac:4b:8f:45:8f:13:7e:b3:48:f3:42:93:fc:a4:f3:53:d9:a9:
         6f:b2:de:e5:fa:ff:17:98:7d:61:b5:4e:0e:f9:36:4c:55:f6:
         0a:cc:45:aa:ad:89:17:47:2a:4b:6c:60:29:8e:17:2b:49:5c:
         2e:53:d9:13:e1:ce:b0:57:cc:ef:65:cd:d4:75:fd:38:40:4d:
         77:6c:36:e6:5a:62:f0:2e:fc:b9:b9:ae:c2:d9:d6:d4:5b:93:
         53:fd:46:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----