Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.mft
File:                     463cab8887b80a1beafb23f455d7d8458c8c1c5a.mft (raw, json)
Hash identifier:          w8lskj4KNmL9UT8puL6VyHwQS3iQPuR2424Wvcgw5a8=
Subject key identifier:   15:76:B3:8E:1B:27:31:C9:33:B2:F0:DD:A1:F0:97:50:B0:D6:F7:C4
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       10F060
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.mft
Manifest number:          089C
Signing time:             Mon 15 Apr 2024 02:21:20 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 03:52:29 +0000
Files and hashes:         1: 1e4d2912512811ead37c26b8bcd230a09a6b9035.roa (hash: aDXWOzzp7Xil4k+lTQTuf7XTbqKRsTPPnFiKpvDLZPE=)
                          2: 406dfb6a475b882d9962e95243f705eda75ea435.roa (hash: Aq0QmKzKXZIKm5r/dqEW1abpDrUgk0p6m6qMIz/SEvg=)
                          3: 463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl (hash: gbAZB9/ZxCXJrLLIR0RxScrpfh/74NGkQKd9m6sUE70=)
                          4: 52b2a1882b31498f2c13e46f01adfc9382168856.roa (hash: GDHt8Qu214fF0YXgIyAGy1w1WJurhg617T6arV50l2c=)
                          5: 5801f4a876b6490619603e15790e4df77e4f1c7c.roa (hash: XnFlydMCpfjicKIE34CrP361VtdotmtLOcXzjEOIgyo=)
                          6: dac59aa8e1cb2a117ae7b7aeb536596c5d7edf2a.roa (hash: QRrgdviVENIuByhHBm+kx9svQBxcF8wkZM4fq33G9s4=)
                          7: dd16ca7313189e5542491ea0d87a345bc38e2f62.roa (hash: qyC3dkCOp+uBscLXLPY7Da91FoOnBaVqRJXwLrXZc6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110112 (0x10f060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 03:52:29 2024 GMT
        Subject: CN=a43f06dc385a4155a06882f91d4820e354a05b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:c7:80:b3:93:65:ef:40:ec:dc:7d:77:ab:
                    2b:86:e0:83:7d:aa:67:8e:c2:4b:f0:2e:9d:2c:74:
                    c9:08:04:38:c9:dd:34:c8:5f:be:df:ca:1a:cf:62:
                    05:c9:b4:bd:0b:6f:8c:23:0c:ed:38:ff:55:34:38:
                    55:44:1d:d8:01:8b:dd:43:a9:73:71:43:56:7b:0f:
                    3f:0c:c2:b4:7c:eb:dc:73:1b:02:27:91:68:c5:5c:
                    ab:97:da:e6:41:7f:ac:20:c2:96:c2:38:9d:31:5d:
                    b7:2a:cf:98:89:27:b9:da:e4:dc:54:56:14:31:3b:
                    d6:76:fa:48:75:79:02:66:91:49:f7:5a:92:00:6b:
                    d7:4c:77:3a:7e:3c:52:54:ee:22:05:54:a6:93:f1:
                    87:a3:1a:81:31:4f:95:a0:32:ad:ff:84:b8:24:6a:
                    35:a3:ab:fe:2a:31:4a:19:ec:54:37:8d:ad:75:c6:
                    b3:a1:d1:bc:d5:1f:51:70:36:1e:cd:5c:2e:93:73:
                    3b:9a:dd:5b:ff:64:71:50:ca:ae:dc:c6:d9:7f:d4:
                    32:00:87:cd:47:b0:84:0f:2c:fc:79:53:ca:4a:38:
                    b3:26:03:f7:a4:28:4f:71:1a:6e:59:4e:f7:ac:66:
                    6d:91:ff:0f:59:30:37:a8:2e:f6:b4:a8:00:fb:53:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:B3:8E:1B:27:31:C9:33:B2:F0:DD:A1:F0:97:50:B0:D6:F7:C4
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ad:e7:af:07:46:ed:76:0e:57:11:12:e0:99:49:ba:64:4e:
         bf:a0:43:5b:63:98:ce:e0:1c:77:21:f1:49:6d:25:75:4b:69:
         8b:2a:1d:47:75:5a:8c:11:3f:e5:5c:47:f7:04:0b:d4:bf:1b:
         c6:1d:20:74:a8:8c:88:6c:cd:c4:28:6b:9a:4d:2f:8b:d0:22:
         c0:10:e6:ba:8b:b4:9a:89:f5:97:cd:87:ba:95:6f:7e:56:6b:
         dd:38:6a:10:80:d7:66:99:8e:26:bc:4d:14:10:5c:14:ee:b6:
         50:d0:73:a7:06:06:58:e3:53:90:15:38:6c:7f:b7:fa:e1:84:
         c6:90:71:67:e1:b0:e0:64:6e:cd:2f:e7:38:b6:0a:9c:42:a0:
         fe:f0:71:6b:25:95:74:70:50:22:6a:44:71:7d:06:b7:ec:ea:
         82:4f:86:35:c5:32:ed:33:8b:f2:61:b6:a9:6e:5b:b1:c9:06:
         77:48:70:7c:03:8f:ae:64:84:e6:4f:e9:cd:73:02:94:75:c5:
         12:01:1b:29:3a:05:6d:4b:e3:7b:7c:ca:01:84:27:bf:ea:5c:
         bb:4d:57:00:d9:8e:f9:15:2f:ba:8e:a9:32:0d:f2:63:f5:c6:
         46:93:75:63:d2:6f:2b:d3:4e:61:77:35:9a:f1:3a:59:87:4f:
         ae:c3:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----