Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.mft
File:                     98a80d301d847e6c050c408da1b0efe36548fad8.mft (raw, json)
Hash identifier:          IN08u74frZptoZlAuJaQQlgzeT83BN9x3JbY9oCHuQ0=
Subject key identifier:   F3:78:C5:D2:20:2B:05:C7:10:D2:BE:35:EC:FF:DF:8C:F9:24:61:2C
Authority key identifier: 44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
Certificate issuer:       /CN=98a80d301d847e6c050c408da1b0efe36548fad8
Certificate serial:       2885B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.mft
Manifest number:          0E10
Signing time:             Mon 15 Apr 2024 08:21:30 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:22:16 +0000
Files and hashes:         1: 1b7bd73af383fbe36588dccc58a85699b39269c7.roa (hash: gW5dmzUswzPtycHkBmFw16I/dvCqiFWxqEtL6BfaGhI=)
                          2: 98a80d301d847e6c050c408da1b0efe36548fad8.crl (hash: QbvfOKj7TyvRw8zgqF16SRsPp6jd04KxnYMvzvn6AkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2655666 (0x2885b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a80d301d847e6c050c408da1b0efe36548fad8
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:22:16 2024 GMT
        Subject: CN=249a359f4c12e5e535de8f69fc714f7d7978b5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:73:3e:9b:47:94:26:5a:2f:2b:49:c7:33:
                    fc:15:fa:47:64:25:82:2c:29:16:88:b1:39:29:96:
                    a8:21:e6:29:d6:3a:e6:f2:e9:2c:50:b9:3e:35:26:
                    c9:48:12:e5:2e:73:07:d3:1d:52:21:6f:2e:af:af:
                    9d:2a:4f:a3:55:a4:74:98:c0:2a:c2:7c:c4:20:1f:
                    a5:e4:d8:cc:8c:b4:78:17:d1:0a:88:7d:f4:9c:85:
                    fe:47:85:e5:f4:3a:33:9e:8a:ee:55:cd:61:b8:b1:
                    72:6d:73:70:3b:dc:be:55:e1:b7:0c:1c:e8:82:c9:
                    68:9d:40:7a:90:62:0e:92:5a:63:65:79:fe:20:e5:
                    8f:89:90:d6:3e:2d:5b:e9:ad:ba:cd:44:43:9b:5a:
                    13:f4:73:57:e4:fb:d2:94:a1:56:3d:33:89:08:07:
                    6e:01:2c:04:6f:ed:c4:a1:85:2e:da:81:91:82:3a:
                    f8:a8:b9:17:55:e1:c5:d4:4e:2f:f6:53:5c:01:37:
                    20:52:4c:0c:be:26:e9:c2:c9:a8:21:0f:d8:c3:70:
                    9e:77:67:4a:f2:d4:ae:dd:6f:60:05:6d:de:14:dd:
                    9d:66:13:a7:76:68:81:2c:c7:07:89:10:1b:bb:9b:
                    fb:21:5d:bf:81:06:b5:b8:f8:26:3e:84:6d:e3:92:
                    36:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:78:C5:D2:20:2B:05:C7:10:D2:BE:35:EC:FF:DF:8C:F9:24:61:2C
            X509v3 Authority Key Identifier:
                keyid:44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:8b:4c:e3:b8:0e:ef:d2:dd:c1:db:42:bc:a2:3c:8f:4a:
         f6:e3:95:0d:80:d1:b7:92:62:39:59:61:80:e8:18:fc:5a:ad:
         d9:d1:9e:1a:7e:77:da:c2:cb:bc:2a:fe:e9:dc:37:08:15:c8:
         2d:67:e5:2b:59:42:5d:ee:16:94:d6:20:72:d4:d5:82:76:e7:
         00:4b:84:bd:22:c2:7b:a6:77:f8:46:01:c4:c1:57:53:d4:91:
         ff:7b:37:21:d6:88:4d:a3:47:2f:fa:35:7e:4d:63:82:ac:33:
         c5:24:7e:ae:fe:e3:05:df:cd:1a:c9:7d:e5:3a:9d:7a:15:f0:
         3e:f0:ec:43:1e:0b:28:72:68:67:df:f0:ca:c4:2d:4b:a5:00:
         24:96:c4:a8:34:b1:52:bf:55:e5:58:2a:d6:f3:0e:05:4b:1c:
         94:76:62:5d:04:db:1c:e6:5d:4e:63:f3:1b:3b:89:84:c2:07:
         fa:29:8a:e6:5a:04:89:17:19:6c:25:3f:ea:ec:cf:ef:a4:53:
         c5:1c:2b:17:fc:7e:9c:b6:6e:03:34:9b:be:0f:af:73:f1:51:
         88:8b:81:22:87:66:15:a5:53:ae:33:1a:76:4a:50:04:75:25:
         51:d5:6f:f6:a3:01:ce:0d:3a:d1:94:5e:57:c1:59:b2:9f:cc:
         ba:69:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----