Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/249bcc54-d32e-4419-9e7a-cb5fc57e65d5/882c151d64a5abc60260065962ff60f9ff1199f1.mft
File:                     882c151d64a5abc60260065962ff60f9ff1199f1.mft (raw, json)
Hash identifier:          BF+rykzQr0jMMxs9SlCd5o8emwkQUX4mnRn2hCsiQGY=
Subject key identifier:   A3:BC:79:74:05:20:7C:03:79:FF:57:CB:F7:11:73:D9:59:01:5F:EF
Authority key identifier: 66:33:11:11:BF:28:CA:0E:9D:62:A7:D9:BF:1C:6B:57:C3:53:EB:2B
Certificate issuer:       /CN=882c151d64a5abc60260065962ff60f9ff1199f1
Certificate serial:       0AF403
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/882c151d64a5abc60260065962ff60f9ff1199f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/249bcc54-d32e-4419-9e7a-cb5fc57e65d5/882c151d64a5abc60260065962ff60f9ff1199f1.mft
Manifest number:          05AD
Signing time:             Mon 15 Apr 2024 05:21:13 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:14:17 +0000
Files and hashes:         1: 882c151d64a5abc60260065962ff60f9ff1199f1.crl (hash: lKP+bkqUnBnwJOlY0Zo3cfLAM1ZVQXb/FREXWGAUPz4=)
                          2: 9b5ebb8318e856b3eddbe799f9da5806b28896a3.roa (hash: I1VA4wembrSoW58sTgDvmQkQn3OgPqKzoPogdntUlwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717827 (0xaf403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882c151d64a5abc60260065962ff60f9ff1199f1
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:14:17 2024 GMT
        Subject: CN=7c0cd55e877d404d498d10cbab9dd0dbeb68193b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:28:8b:0c:05:cf:84:b3:a9:09:3f:b0:68:
                    bc:b6:ac:89:50:ce:95:5a:bc:82:0f:9f:ab:48:f8:
                    bc:2d:3d:d0:a8:87:88:f7:92:d1:e1:ec:c5:de:a0:
                    81:0c:25:35:74:b9:e0:40:99:fb:bb:a1:df:42:3b:
                    30:23:5b:e1:69:15:fd:56:4b:25:6f:00:e7:bc:e0:
                    8e:60:1b:cc:68:83:46:e9:ef:96:d1:37:86:1a:47:
                    dc:1c:01:7a:f4:cc:f8:86:fc:b3:dd:4f:17:3c:ff:
                    73:52:38:be:94:9d:0d:70:ec:aa:23:09:d3:d4:f4:
                    9b:2d:66:58:2b:d4:98:9f:18:af:bd:48:81:44:2a:
                    ab:02:70:0c:f5:e6:02:3c:2f:e1:25:60:3a:94:2a:
                    26:36:13:01:fb:e6:c4:88:d2:46:cc:a3:f7:3d:6c:
                    44:ce:1c:12:99:11:3a:59:df:11:24:7a:b0:e3:9a:
                    a4:0f:05:00:83:b2:02:ac:7d:f6:6b:90:d2:b5:39:
                    d1:62:eb:14:10:2d:29:94:dd:2d:79:b2:68:ef:3a:
                    da:4b:fe:74:ff:7a:02:73:f6:64:3d:b7:c8:bd:9c:
                    47:d2:dc:f0:19:dc:d1:d1:72:69:03:20:cf:0e:28:
                    18:ec:34:35:42:2f:7b:8c:1a:96:27:5f:d2:2a:c7:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BC:79:74:05:20:7C:03:79:FF:57:CB:F7:11:73:D9:59:01:5F:EF
            X509v3 Authority Key Identifier:
                keyid:66:33:11:11:BF:28:CA:0E:9D:62:A7:D9:BF:1C:6B:57:C3:53:EB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/882c151d64a5abc60260065962ff60f9ff1199f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/249bcc54-d32e-4419-9e7a-cb5fc57e65d5/882c151d64a5abc60260065962ff60f9ff1199f1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/249bcc54-d32e-4419-9e7a-cb5fc57e65d5/882c151d64a5abc60260065962ff60f9ff1199f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:bb:fe:b7:52:34:0c:e9:c3:a2:b5:99:0a:38:b4:59:3e:66:
         f6:cb:af:a2:e6:9d:e1:6c:c6:d7:ed:6e:e8:45:80:c9:e1:e6:
         1c:93:2e:5e:38:e1:97:53:75:ee:0c:8f:d4:e8:97:e5:8b:be:
         e0:1a:fa:b5:e0:a0:17:99:62:2d:ac:84:d3:d1:62:ae:4d:d6:
         2e:82:31:21:f8:71:01:2f:cb:ff:ea:59:c1:0a:8c:db:6a:1c:
         b1:56:7d:a1:fa:4c:54:a0:85:d6:38:31:91:2c:53:dd:66:d8:
         15:d9:bd:fa:c3:74:9d:a0:98:c5:b3:22:74:2e:cd:5d:da:3b:
         53:69:df:25:05:ef:13:7d:0c:98:d5:4a:54:81:28:2a:ec:84:
         db:ab:2f:48:f4:86:64:60:00:54:de:a2:e2:48:29:9b:9f:8e:
         bf:d8:41:b1:60:69:50:a6:8d:62:73:fa:b9:87:69:89:53:00:
         17:55:d8:42:86:d1:9a:a9:b2:c7:ab:26:f3:03:7f:a2:e6:06:
         2c:9d:ea:15:64:60:4b:1b:68:28:c6:f0:62:1d:4a:94:8b:fb:
         98:41:a1:20:66:57:9b:16:c7:69:c5:34:72:b0:32:96:d4:eb:
         d9:51:ac:7d:ce:1d:4a:7c:df:c5:72:44:fb:11:ad:49:da:41:
         96:98:d1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----