Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/fc45a0da4b9457f1d354f1d490746e5603aea754.mft
File:                     fc45a0da4b9457f1d354f1d490746e5603aea754.mft (raw, json)
Hash identifier:          DrsgUNbEa7mCSsxl++hUgzGpZcLuRjsP9kttHwplxbQ=
Subject key identifier:   23:4D:58:AC:DC:1C:70:28:49:8E:D4:C8:BD:5C:F8:3D:45:60:AF:03
Authority key identifier: 63:49:A9:6A:58:E9:0D:23:CC:54:06:77:E3:EA:EA:32:F3:15:D8:99
Certificate issuer:       /CN=fc45a0da4b9457f1d354f1d490746e5603aea754
Certificate serial:       10BD39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc45a0da4b9457f1d354f1d490746e5603aea754.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/fc45a0da4b9457f1d354f1d490746e5603aea754.mft
Manifest number:          0851
Signing time:             Mon 15 Apr 2024 11:21:40 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:09:18 +0000
Files and hashes:         1: 91c82b54f2f4a0d56a0902a70cb61e50c5298a88.roa (hash: CQw6EZD7RK68Ydhl2QW4BusHHQ/IOJUCUCg3PH1RoMA=)
                          2: fc45a0da4b9457f1d354f1d490746e5603aea754.crl (hash: MQNVxvpeMd2MHvKfuDWfC0EkPHe0qBNp2i3iDFH+V/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097017 (0x10bd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc45a0da4b9457f1d354f1d490746e5603aea754
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:09:18 2024 GMT
        Subject: CN=9deb8b88afd0ff547bb4775337d5d91d4e69ab7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:a5:2b:2d:cb:70:04:65:85:a4:e8:91:66:
                    58:52:f1:c0:9b:44:c3:69:1a:e4:de:3b:89:05:ff:
                    b3:6c:19:b7:7e:59:22:8d:60:72:88:54:b9:36:84:
                    8e:be:8a:13:5c:d6:18:c3:85:52:ba:a4:18:64:55:
                    ad:f3:6b:2f:ba:ca:5b:ea:65:c7:57:2c:43:57:c5:
                    68:e7:9b:9b:61:7e:f6:04:48:b2:f9:6a:35:5a:77:
                    15:7a:2a:d7:93:41:6d:68:ea:cf:57:1b:e5:dc:05:
                    da:51:98:d6:39:e9:14:75:2e:7b:1b:d6:7e:cf:8f:
                    7d:7d:a4:2c:8a:8f:25:b8:3a:70:2a:ad:dc:b8:52:
                    40:e9:1f:41:e8:ff:4d:44:6f:10:c5:7b:b8:78:cf:
                    56:54:ae:fb:2a:76:ba:f8:58:f7:b1:26:ed:e2:85:
                    f8:7b:2f:5c:a2:96:6c:e3:8a:ab:fc:ef:f4:2d:de:
                    62:c9:0c:2c:e2:41:42:39:a7:f6:2d:5e:fd:e6:cb:
                    d5:aa:0b:af:5b:83:3c:e2:7e:e5:b2:f8:3c:b1:17:
                    15:ac:7b:16:5c:ef:61:96:68:48:a2:16:61:23:9c:
                    3d:42:0e:02:79:1e:0a:9f:73:5b:de:14:67:04:4c:
                    73:ef:a2:72:8d:43:7d:a9:79:27:c7:69:51:1c:bb:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4D:58:AC:DC:1C:70:28:49:8E:D4:C8:BD:5C:F8:3D:45:60:AF:03
            X509v3 Authority Key Identifier:
                keyid:63:49:A9:6A:58:E9:0D:23:CC:54:06:77:E3:EA:EA:32:F3:15:D8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc45a0da4b9457f1d354f1d490746e5603aea754.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/fc45a0da4b9457f1d354f1d490746e5603aea754.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/fc45a0da4b9457f1d354f1d490746e5603aea754.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:55:75:52:c9:41:0e:3e:c2:c9:28:4a:9e:23:35:be:11:dd:
         ad:5d:6e:72:4f:33:4b:7a:2c:66:76:20:73:bb:d8:ec:5a:34:
         07:09:f4:46:e9:03:9c:68:fd:03:99:45:a4:b4:98:5c:f1:e4:
         54:02:d8:cd:77:6e:78:47:c9:39:8f:38:7d:8f:14:2b:c6:e1:
         ba:4a:cd:f0:df:93:11:21:db:b3:0b:01:3e:14:e5:cc:9e:c3:
         cd:90:5b:7d:fc:98:19:94:c8:49:05:30:2e:85:30:ec:2c:d3:
         1a:7b:b0:e1:9b:fd:99:04:53:52:a4:03:c6:0c:95:f3:41:35:
         f9:c6:af:40:ba:b3:4f:dc:37:78:c2:a8:fc:7c:40:16:fa:4a:
         68:1e:d4:40:27:45:ae:38:e8:21:6b:fe:01:66:c1:4a:7e:7d:
         03:ca:ea:bf:69:b4:20:fc:6d:99:0b:ef:12:6b:b2:79:62:34:
         c3:dd:06:5c:90:22:d8:33:8c:16:6e:fc:8a:c9:f8:f1:c4:47:
         98:f4:6b:75:e3:8f:71:92:2b:25:c4:a9:37:1b:02:27:ac:6e:
         38:ce:fc:c6:ed:41:5d:00:a7:b0:ec:91:49:62:a0:4d:5a:0c:
         e6:97:cf:54:4e:1d:e6:c7:d6:87:07:e4:25:98:80:af:1a:aa:
         c1:3a:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----