Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/f85310cb09e317af1a1a72943ec326837f291fc2.mft
File:                     f85310cb09e317af1a1a72943ec326837f291fc2.mft (raw, json)
Hash identifier:          dQWjzo+fDBz8iHBBZHHzImrtRnl/NCyMLCTke6ovWn8=
Subject key identifier:   31:DF:F7:06:F3:31:15:65:77:D2:85:A8:68:7F:D4:D4:4A:D3:3F:D2
Authority key identifier: 17:15:3C:9F:7C:7C:10:8D:5A:47:5B:8E:17:24:8E:E3:D7:6F:0E:72
Certificate issuer:       /CN=f85310cb09e317af1a1a72943ec326837f291fc2
Certificate serial:       263239
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85310cb09e317af1a1a72943ec326837f291fc2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/f85310cb09e317af1a1a72943ec326837f291fc2.mft
Manifest number:          0DD8
Signing time:             Mon 15 Apr 2024 09:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:06:18 +0000
Files and hashes:         1: f85310cb09e317af1a1a72943ec326837f291fc2.crl (hash: UqgLIUZwNzgiKV/fjwk/6an6P93tMoKGNq8gqUgwsqs=)
                          2: fc20577fc25b7f9c26f8f4b86f211a6cc9c99d74.roa (hash: g3codHKX6HvjtNQKXnieLQEjIWKjwmZa2hm71Ku5yo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503225 (0x263239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85310cb09e317af1a1a72943ec326837f291fc2
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:06:18 2024 GMT
        Subject: CN=241e3b67c038e9421f74d3e6a5dc4e5ea6b4fbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:7a:12:64:c0:84:7d:f2:09:b3:92:3c:ce:
                    9b:f9:9f:0a:43:08:15:13:12:27:29:c7:b2:ca:53:
                    5f:bd:93:ef:fc:7c:c5:88:ad:3f:3d:7a:63:ed:68:
                    a0:fc:27:a8:4e:d2:16:2d:9b:ef:98:f0:20:f6:97:
                    cf:e5:4c:32:09:5d:51:04:e1:b4:f0:8e:02:4f:3b:
                    1d:16:7a:35:02:6e:3b:80:a1:17:ce:02:2f:5f:bc:
                    ec:78:db:5a:5e:d7:3a:77:89:72:6e:04:58:0c:a5:
                    11:46:60:e4:ae:18:a3:9f:28:68:64:3c:27:9c:81:
                    08:15:e8:c6:71:da:f8:20:47:57:ca:02:d9:88:b9:
                    84:dc:81:0d:cd:a0:c2:1e:16:0f:c9:6d:f9:f8:86:
                    90:88:56:58:f4:0c:d5:db:7e:d1:70:63:96:b2:f9:
                    3c:52:09:6c:3c:61:b7:29:49:97:d0:5b:87:39:e1:
                    84:c4:93:e5:04:cb:d4:da:a5:a7:43:89:6b:12:25:
                    b3:9e:72:90:8b:96:96:c5:d3:d0:d4:a8:11:1a:f0:
                    4b:16:3f:a8:11:c5:3b:72:b9:1f:9a:d7:af:94:5b:
                    85:54:04:61:db:24:1d:bc:1d:f5:65:4b:c9:18:4c:
                    8d:77:a7:91:56:e7:41:13:3d:ab:e1:3c:78:90:74:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DF:F7:06:F3:31:15:65:77:D2:85:A8:68:7F:D4:D4:4A:D3:3F:D2
            X509v3 Authority Key Identifier:
                keyid:17:15:3C:9F:7C:7C:10:8D:5A:47:5B:8E:17:24:8E:E3:D7:6F:0E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85310cb09e317af1a1a72943ec326837f291fc2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/f85310cb09e317af1a1a72943ec326837f291fc2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/034a0d64-ef09-484c-b7f8-6be3044a6adf/f85310cb09e317af1a1a72943ec326837f291fc2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:f2:a7:a1:13:5f:9b:fe:a0:63:25:e8:a3:6f:9f:8d:24:
         0e:5b:60:39:f2:42:4d:67:fa:84:56:ad:5d:24:95:c8:e5:71:
         49:a0:7b:69:1a:d6:90:c2:ea:8f:e8:41:d3:67:15:ee:f2:e5:
         a5:46:cf:79:39:cc:a3:56:d2:e6:06:11:38:9e:7a:46:f7:96:
         bc:64:50:8e:f7:d9:24:b3:eb:ec:26:ed:74:0c:fa:42:97:f8:
         c8:05:98:96:b7:47:a7:9f:06:dd:23:1c:ef:9e:99:c9:1d:ec:
         3b:53:d6:57:39:c1:d9:15:3f:c8:88:96:2a:3a:b4:ad:d9:c5:
         eb:46:b6:1a:d3:a1:37:c8:96:c2:6f:0d:4c:49:f3:36:fd:88:
         0d:fd:b7:58:4e:8d:33:c6:b2:58:60:a7:05:6c:e7:32:42:39:
         df:a5:df:7e:29:4b:66:69:a8:ad:59:90:97:23:74:ab:33:03:
         50:08:0f:e0:6e:ef:a2:53:8e:e3:44:70:de:00:7d:9b:70:d3:
         3f:f8:14:2a:c1:35:e5:1c:76:66:64:98:a7:a0:a6:16:06:eb:
         de:ae:61:b1:d0:7f:1a:03:75:30:ba:38:77:f8:61:59:86:45:
         1b:22:a0:2b:b4:e3:87:f5:ba:cc:01:ee:20:95:e4:db:05:a0:
         4c:ea:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----