Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5420f1d-2b24-42ec-9cc9-1518366291d1/457cfb45d8f3fe402bf47955d0dbd1109e072f12.mft
File:                     457cfb45d8f3fe402bf47955d0dbd1109e072f12.mft (raw, json)
Hash identifier:          ToIUkV1JT33YDxBWcuTWbnBcLTQ9J0nkjyuf8O3TW4c=
Subject key identifier:   42:3F:57:94:87:D2:25:8C:36:57:15:FA:CE:45:67:87:A4:EA:56:BB
Authority key identifier: 5C:E6:2F:26:51:B8:11:C8:2E:0A:81:FE:80:79:D0:AB:E9:36:6B:8D
Certificate issuer:       /CN=457cfb45d8f3fe402bf47955d0dbd1109e072f12
Certificate serial:       28BC5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/457cfb45d8f3fe402bf47955d0dbd1109e072f12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5420f1d-2b24-42ec-9cc9-1518366291d1/457cfb45d8f3fe402bf47955d0dbd1109e072f12.mft
Manifest number:          0DF9
Signing time:             Mon 15 Apr 2024 06:21:46 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 06:42:39 +0000
Files and hashes:         1: 457cfb45d8f3fe402bf47955d0dbd1109e072f12.crl (hash: 61tbnozT7cT6ei97ZShhoxzbc4AMv4LTVluaaATPhXQ=)
                          2: ece5726d0e23c45f85340ae3e9a33e87d877c084.roa (hash: CtLhLOgRlBrePbXdvbHRmzLc2bk5ghgTSTQ8cOLfDZ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669662 (0x28bc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457cfb45d8f3fe402bf47955d0dbd1109e072f12
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 06:42:39 2024 GMT
        Subject: CN=3349b416677dd644181624f6d3ad4a09865ad1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6c:11:3f:f4:cb:cb:e5:15:78:d1:77:b9:09:
                    a1:22:f2:af:99:74:29:20:ee:7b:a1:62:e2:ea:f9:
                    08:a0:f2:a0:41:a1:7e:37:a0:9c:3a:c0:74:ed:07:
                    a4:3b:41:3f:88:26:cf:6d:3c:63:05:9f:a1:fe:20:
                    01:16:1e:4a:07:0b:f0:4f:0b:5c:b3:ea:c9:62:b3:
                    f5:50:6c:8a:0b:26:d7:67:4d:99:f4:f6:36:65:96:
                    a1:71:dc:d3:8b:3b:70:8f:e0:06:aa:02:b7:b8:c1:
                    8d:27:79:f7:64:d0:91:6f:37:cf:52:28:d3:6b:f4:
                    d7:ed:39:b9:74:ce:71:d8:81:e7:1b:b5:e3:9d:80:
                    55:5c:98:c1:34:06:9c:4e:77:b5:6e:7b:a8:02:81:
                    59:84:d1:7f:87:26:28:3b:f8:1a:58:93:e1:ac:db:
                    e8:0c:43:9d:47:ae:a8:c6:9d:38:65:f5:ef:ba:84:
                    eb:f7:12:9b:e7:a9:09:41:d4:a2:e7:e5:40:e7:fa:
                    3b:c5:bd:6f:c1:e7:55:4b:57:08:66:f3:ff:ce:13:
                    50:49:85:d4:51:10:f5:94:a8:ab:92:7f:1e:ec:9a:
                    04:7b:2a:12:66:51:f9:b9:7c:b8:97:77:e5:3f:15:
                    58:3b:a3:8b:7a:c3:d0:cf:bf:c6:6e:99:25:b3:29:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3F:57:94:87:D2:25:8C:36:57:15:FA:CE:45:67:87:A4:EA:56:BB
            X509v3 Authority Key Identifier:
                keyid:5C:E6:2F:26:51:B8:11:C8:2E:0A:81:FE:80:79:D0:AB:E9:36:6B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/457cfb45d8f3fe402bf47955d0dbd1109e072f12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5420f1d-2b24-42ec-9cc9-1518366291d1/457cfb45d8f3fe402bf47955d0dbd1109e072f12.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5420f1d-2b24-42ec-9cc9-1518366291d1/457cfb45d8f3fe402bf47955d0dbd1109e072f12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:ac:57:7d:b1:f5:bf:13:4e:1c:69:49:b3:b3:be:03:c4:
         ae:3d:c0:06:fd:f2:49:fb:bf:a4:42:53:5d:ec:11:a0:a5:8b:
         28:e1:96:66:06:9d:c6:04:db:31:67:49:f8:90:7c:e3:d7:f3:
         90:2e:c4:41:8b:13:46:7b:b1:4e:57:2b:b8:63:d5:f2:25:16:
         c5:ce:d2:31:b9:06:f4:c2:80:6e:49:5e:70:e4:cc:52:bf:f8:
         fe:b7:6b:2b:8c:55:a5:24:4f:0e:33:a8:4c:09:04:21:3d:d8:
         0a:eb:cd:df:fe:ee:2f:80:78:86:01:25:8e:3f:69:95:d6:9f:
         00:6f:88:a0:0e:3d:ab:02:6b:b4:0c:f5:77:a1:7b:40:56:32:
         e2:1d:31:bc:22:0d:c6:8e:00:44:8e:36:25:67:2a:5a:b1:b7:
         7f:42:ac:e9:ae:a4:ac:d5:3e:8b:d2:d0:96:c0:e2:bb:1c:3f:
         34:86:b4:79:bd:7d:16:5a:c1:33:fa:4b:72:41:cd:ab:23:71:
         ad:a6:59:7c:a6:f9:6b:5f:c1:95:e5:ef:60:b6:79:c4:d8:73:
         0f:1e:0e:5f:e2:2f:7c:fd:be:ea:a3:77:64:84:10:bf:03:83:
         0c:ca:c1:24:04:b5:86:6d:57:0c:84:02:a2:5e:ba:0f:e2:73:
         81:cc:3a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----