Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f3016615-308f-490e-9f9b-3509e7066c8f/974f10a6b41e1836c4132ece8b484c339fda32da.mft
File:                     974f10a6b41e1836c4132ece8b484c339fda32da.mft (raw, json)
Hash identifier:          p9N6hNo31lq+rUBxVC2z4qhPx40sx0wK9/QQ1tmrCys=
Subject key identifier:   B6:ED:C6:5C:E8:FE:5B:9A:2C:B3:5B:AB:E7:1C:E8:13:30:E2:22:9F
Authority key identifier: 60:0D:6C:0B:A0:68:D2:5A:3C:45:FC:6A:DE:97:5A:A6:02:5B:5B:DE
Certificate issuer:       /CN=974f10a6b41e1836c4132ece8b484c339fda32da
Certificate serial:       1F9BFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/974f10a6b41e1836c4132ece8b484c339fda32da.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f3016615-308f-490e-9f9b-3509e7066c8f/974f10a6b41e1836c4132ece8b484c339fda32da.mft
Manifest number:          0DF7
Signing time:             Mon 15 Apr 2024 11:21:45 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:53:18 +0000
Files and hashes:         1: 509b65bb8faeeca69ba13bb1bf5449ed82d7a48a.roa (hash: 7JkaA1IpuLHOWBrOpuOtTfmOuAEHoHVQk+JuuCo60aY=)
                          2: 974f10a6b41e1836c4132ece8b484c339fda32da.crl (hash: v5zcfyrzJ7CNFJ+BeIBpu7C2sqtEhT1sFWqlf7Q5TFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071551 (0x1f9bff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974f10a6b41e1836c4132ece8b484c339fda32da
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:53:18 2024 GMT
        Subject: CN=87391cfdb58d2a295678dfae97312f1a626c0e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c6:d8:b8:13:a2:0b:fd:81:15:06:42:24:d2:
                    b9:d3:d1:38:17:5f:dc:22:00:5e:42:2b:80:c5:a0:
                    e1:2d:b2:84:06:b5:07:b9:9b:75:f1:08:03:e8:af:
                    1a:87:87:3b:23:0f:d7:da:38:4e:fb:f9:14:09:d1:
                    a0:75:ba:b1:2c:e8:f0:0e:ff:08:a0:5a:0a:27:e0:
                    dc:31:6d:50:74:20:01:f2:50:d0:62:a3:8d:5c:a5:
                    e9:37:40:89:0c:38:91:7b:35:11:c8:4f:2b:1d:e6:
                    13:c3:e2:ba:0b:46:47:12:ab:c9:2c:d5:02:10:61:
                    32:f7:ce:7d:43:65:15:9a:97:d8:06:b1:ad:6c:41:
                    ae:07:a1:ae:d2:e3:fe:bd:45:f8:54:4d:b1:5d:f6:
                    0a:32:b1:81:46:07:3f:1b:9a:f7:8e:46:ce:e7:6c:
                    e6:d8:c6:eb:9e:68:3c:3f:23:38:a3:3e:1d:ea:8e:
                    98:ec:b1:38:7e:bd:fb:84:06:45:6c:82:f3:fd:25:
                    1d:83:cf:d8:3e:24:5d:bd:af:47:06:fa:52:65:a4:
                    3d:b0:8a:84:26:08:fc:2b:4a:1f:90:b9:59:e8:14:
                    c3:05:4a:6d:20:7c:7e:d0:f5:b4:53:8f:ad:35:1b:
                    db:3b:d4:ac:e4:cd:06:ce:09:e5:51:b6:f5:6f:e8:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:C6:5C:E8:FE:5B:9A:2C:B3:5B:AB:E7:1C:E8:13:30:E2:22:9F
            X509v3 Authority Key Identifier:
                keyid:60:0D:6C:0B:A0:68:D2:5A:3C:45:FC:6A:DE:97:5A:A6:02:5B:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/974f10a6b41e1836c4132ece8b484c339fda32da.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f3016615-308f-490e-9f9b-3509e7066c8f/974f10a6b41e1836c4132ece8b484c339fda32da.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f3016615-308f-490e-9f9b-3509e7066c8f/974f10a6b41e1836c4132ece8b484c339fda32da.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:67:72:41:21:22:e3:49:6a:be:22:c5:2b:d3:04:5a:d5:9d:
         13:0c:15:4d:2b:73:87:7e:33:33:62:3c:17:c7:ad:f5:cb:4c:
         54:0c:52:40:41:c0:ae:44:4b:1f:89:34:d9:7f:c9:f9:20:72:
         aa:4f:90:0f:7a:fb:db:76:8b:81:21:46:e0:05:ff:20:fc:2a:
         89:81:83:41:7e:b1:b7:d5:d0:dc:1e:9b:2a:a7:63:81:eb:e5:
         73:c3:a6:c1:39:6f:7d:11:68:85:e9:24:95:2d:21:a6:d0:34:
         26:0a:82:6d:76:a9:2f:7e:ba:c1:b2:c1:44:8a:51:39:f0:00:
         1e:25:fb:8a:12:14:ba:7b:5b:60:a5:18:45:a4:c2:1f:11:11:
         ad:47:db:c6:c3:e1:14:06:f8:e9:d0:4f:f5:16:f1:ce:91:9c:
         d3:48:11:b0:49:7b:43:4a:44:28:6c:6a:e6:60:c4:06:8e:eb:
         83:2a:73:0b:8b:47:b1:7f:86:ed:d2:b1:54:9b:64:a8:d7:30:
         f0:0c:bb:d8:26:57:b9:51:db:08:c8:9b:c5:9f:1e:5c:69:7d:
         e6:bb:c1:7d:b2:5f:40:5f:76:e1:ff:04:1e:8e:c9:39:12:f4:
         69:23:38:45:b1:1a:35:8d:29:35:ef:85:db:b4:ef:e6:5e:29:
         14:1f:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----