Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.mft
File:                     7532aa9172d6c90589b8b3a606a5cf88114d35d8.mft (raw, json)
Hash identifier:          YDK6/dYASpLDyPJ7WFOkc3H4JajgpjU+sxVDhV4SpCE=
Subject key identifier:   40:56:49:CC:52:90:EC:91:E8:27:98:F5:F2:54:29:2C:5D:3F:AF:D4
Authority key identifier: 15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E
Certificate issuer:       /CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
Certificate serial:       21B472
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.mft
Manifest number:          0E23
Signing time:             Mon 15 Apr 2024 04:20:44 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:12:26 +0000
Files and hashes:         1: 7532aa9172d6c90589b8b3a606a5cf88114d35d8.crl (hash: Zins1XQpHjGkira6Ljjijg2vBoGgzdfhcmDla4B2omo=)
                          2: ac0329e78094fc7fc8a5d5d9e9872308c9e34219.roa (hash: 5XHCuymll0uws00btqIfKBefBgEMJv3JR58S28Wht+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208882 (0x21b472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:12:26 2024 GMT
        Subject: CN=094fb4a8b4edd6134bbb02eabcf1c80420ce9e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:38:ac:9f:ec:16:8b:95:56:6e:81:91:d6:
                    dd:10:8b:5c:ea:dc:af:c4:77:52:7b:2a:22:db:cb:
                    2a:dc:cc:39:f1:58:ea:b2:fc:a8:ae:64:e2:52:dc:
                    54:0c:42:8d:89:e0:67:b3:30:80:1b:a8:13:17:18:
                    67:60:12:78:a5:d9:f3:bd:bf:7f:38:01:95:91:65:
                    9f:b6:e0:21:54:96:ea:8b:98:24:6b:8e:d9:cd:d2:
                    61:63:49:76:36:19:fe:90:67:69:e9:d6:9f:2c:a5:
                    b1:5b:49:f1:ea:2c:b4:82:12:db:18:f5:c6:8b:3f:
                    04:90:a3:6d:54:cc:07:97:e4:ee:1a:7e:a1:3f:a0:
                    5d:57:c8:6b:a3:53:94:e4:f7:79:2d:af:27:8b:dc:
                    da:28:34:98:9b:d2:d0:20:75:75:9b:df:68:50:1e:
                    3c:da:92:30:f2:90:c0:12:ec:b4:67:6c:ea:a5:81:
                    5f:a0:2c:30:9f:2d:c6:4f:09:4a:2f:e3:7f:92:fc:
                    94:cb:2c:62:e7:d9:62:f6:6e:5e:86:59:0b:f7:07:
                    48:ec:f8:82:c5:b2:23:a3:1d:44:d8:04:d7:de:30:
                    f5:3e:81:b4:5f:46:12:86:b8:12:19:4b:70:5a:36:
                    96:43:87:95:8c:fc:e4:20:88:a5:55:ab:a7:ea:ee:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:56:49:CC:52:90:EC:91:E8:27:98:F5:F2:54:29:2C:5D:3F:AF:D4
            X509v3 Authority Key Identifier:
                keyid:15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:74:da:68:3f:f0:61:b4:95:52:4f:f1:6e:e2:6b:ac:ea:
         d3:2e:d2:ac:3d:51:d8:b1:47:ad:42:40:bc:42:97:f9:15:58:
         16:29:33:93:94:ad:93:17:5b:62:e0:ca:6e:a9:ba:eb:1a:3c:
         a4:89:fb:54:d5:e6:01:4f:40:80:cb:80:6b:58:f6:22:d7:73:
         ef:41:69:f6:54:4c:cd:37:33:d0:19:bd:91:d2:ef:d7:60:41:
         f2:a0:1e:17:96:2d:43:86:ae:2f:25:0e:96:94:c3:ce:12:26:
         62:6d:6d:39:d4:53:a7:c1:0b:4a:15:30:0a:dc:17:29:67:12:
         48:04:e4:03:c9:a4:69:89:fa:f6:a5:d5:c7:6f:9a:8f:ad:aa:
         be:65:98:ef:a3:55:79:d3:34:ba:3b:ef:7c:60:e3:43:0a:3b:
         9e:b3:ba:f1:f5:3e:dd:0b:6d:dd:76:45:da:f7:23:57:a9:69:
         36:d4:a2:1d:57:e9:66:20:bb:d6:34:e5:c5:9c:c2:1f:d3:41:
         5b:73:9d:af:bc:d2:6e:a3:1b:fc:60:c5:96:88:1a:2d:05:fd:
         4f:78:8c:e6:42:73:a5:1e:cd:27:04:11:33:7d:a5:09:10:b8:
         ef:d5:be:3b:c5:bf:49:ea:1c:48:e5:c2:1e:38:e3:fa:a6:9a:
         3e:f6:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----