Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/aa3e8fff5576f1b88b5449e6857a024801374985.mft
File:                     aa3e8fff5576f1b88b5449e6857a024801374985.mft (raw, json)
Hash identifier:          2Lw6nVaXUWiKgS6/XzcabpMsdYFwnE1+6P4qgjZ//KE=
Subject key identifier:   91:A8:FC:F4:29:15:7D:B4:2D:B9:A6:05:72:34:F5:A7:AB:31:61:E4
Authority key identifier: 78:67:0B:A0:47:C6:A5:81:89:5F:CF:B0:FB:F7:FA:8B:E9:94:A2:69
Certificate issuer:       /CN=aa3e8fff5576f1b88b5449e6857a024801374985
Certificate serial:       20F785
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa3e8fff5576f1b88b5449e6857a024801374985.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/aa3e8fff5576f1b88b5449e6857a024801374985.mft
Manifest number:          0A8A
Signing time:             Wed 12 Jul 2023 12:16:44 +0000
Manifest this update:     Wed 12 Jul 2023 11:16:29 +0000
Manifest next update:     Sat 15 Jul 2023 14:30:29 +0000
Files and hashes:         1: 9f93f94752df17fb247dfd46ccd09691524bf333.roa (hash: f9h08lZhyiAwnx5C+RclzuapbSQ/MXUj/m+4eY1sOds=)
                          2: aa3e8fff5576f1b88b5449e6857a024801374985.crl (hash: XDTZfV5riMCV4pW/IIBabB7hXcJjCukbWPCOP5q6WPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160517 (0x20f785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3e8fff5576f1b88b5449e6857a024801374985
        Validity
            Not Before: Jul 12 11:16:29 2023 GMT
            Not After : Jul 15 14:30:29 2023 GMT
        Subject: CN=8dce7a25e672b6551bd17f03578ab86ebffbd005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:f0:98:c8:e7:fc:a0:2a:81:10:04:0e:bc:
                    f4:87:35:9d:e1:b3:c0:de:a5:e2:e6:96:47:7c:2e:
                    a1:28:3a:bd:77:36:bb:92:40:55:02:03:ae:1e:7d:
                    5b:b5:94:f8:7e:7b:0e:e3:6c:6d:25:46:bb:cc:f7:
                    7e:c8:78:50:0d:49:e8:ab:3b:2f:f6:7e:cc:c1:a4:
                    d3:9c:2f:14:c6:60:78:b5:2d:11:20:00:75:a5:8d:
                    ea:5b:22:df:3e:89:d8:3b:ca:88:7f:e0:70:e2:fa:
                    e5:0b:36:7b:a5:ea:03:8b:20:06:80:4c:b5:5e:b2:
                    1d:c7:57:6c:49:c4:43:39:fb:24:f9:c9:b2:f1:db:
                    14:e5:87:75:2f:c6:80:86:92:fd:de:fb:35:48:41:
                    96:fe:99:35:ca:d2:0f:c0:7a:b7:f4:ab:41:33:17:
                    4e:da:18:02:95:f8:6e:ea:60:96:d8:e6:0b:ea:d9:
                    2c:10:96:8b:ee:af:06:cf:ee:9c:fc:67:27:db:96:
                    84:85:ee:c7:29:95:be:9e:f1:f1:0f:9d:83:a1:56:
                    28:07:9b:0e:e4:84:68:77:4c:6c:4d:a2:ed:15:a8:
                    b6:17:d8:10:d1:01:7e:a4:28:1e:6f:1b:d8:9f:f9:
                    86:a3:5f:14:3a:51:23:36:60:3f:17:44:1c:04:d2:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A8:FC:F4:29:15:7D:B4:2D:B9:A6:05:72:34:F5:A7:AB:31:61:E4
            X509v3 Authority Key Identifier:
                keyid:78:67:0B:A0:47:C6:A5:81:89:5F:CF:B0:FB:F7:FA:8B:E9:94:A2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa3e8fff5576f1b88b5449e6857a024801374985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/aa3e8fff5576f1b88b5449e6857a024801374985.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/356802aa-1e01-419a-9c18-11213bfdb38a/aa3e8fff5576f1b88b5449e6857a024801374985.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f0:ae:18:55:a4:37:34:23:d0:e3:42:d4:6a:13:0d:a4:35:
         97:f6:4b:d6:46:79:02:a6:2f:2d:bc:20:aa:96:b4:22:62:5b:
         42:a8:95:07:0c:0b:da:91:78:1a:94:af:11:60:32:89:d1:ca:
         95:88:98:75:dd:f3:90:c7:99:50:03:fb:40:d8:45:fb:9b:73:
         a9:ad:64:cb:8d:1b:1b:ec:d1:79:84:eb:dc:38:c4:d0:5d:fe:
         76:48:f4:73:dd:45:48:4f:ae:4d:6e:37:a6:05:7a:9f:06:64:
         e8:72:0c:0e:86:04:75:4f:9b:5b:9b:0c:7b:cc:55:a1:e4:f0:
         87:e5:d6:60:1b:30:20:b5:e5:23:a8:ab:5a:35:de:0a:02:d0:
         50:e1:fe:8f:be:75:8e:f8:95:8d:04:16:4f:5a:13:f2:8f:d9:
         e4:99:39:c5:a6:08:d2:9c:96:85:c4:d0:68:01:8b:c7:83:c1:
         83:ca:71:6a:aa:ce:2d:5f:03:22:b1:cf:00:07:50:8d:6a:6a:
         33:08:b0:1a:a9:bd:6b:82:71:d8:3e:18:47:37:13:a4:e9:e5:
         a1:23:5e:c1:18:77:d7:ce:be:27:6a:89:b9:03:e5:96:40:9f:
         da:53:a6:94:1e:c4:cf:14:ee:8c:87:73:20:de:1d:4d:07:46:
         78:7f:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----