Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft
File:                     4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft (raw, json)
Hash identifier:          3v/OqYSqOtyLnBCxBlvslifYYxIQAf4dQ9mgheWLBsQ=
Subject key identifier:   A8:0F:94:A5:5E:80:34:2E:D7:51:A5:C3:27:50:03:CA:AD:9E:74:07
Authority key identifier: 8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9
Certificate issuer:       /CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
Certificate serial:       28FF51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft
Manifest number:          0DFF
Signing time:             Mon 15 Apr 2024 02:21:15 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:11:29 +0000
Files and hashes:         1: 4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.crl (hash: /YHcHsUC+1Vs+aKRqfFiVE9tpCZkLEG/8ZFfVSHLjvs=)
                          2: 500a18f08ac57e47caa13cbc854501fa17230f43.roa (hash: uYFurDeVe5a+YsuH3msZCXjcaRPUexoSprYjFZ6ZrhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2686801 (0x28ff51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:11:29 2024 GMT
        Subject: CN=91e3ac044839d56c0ccc3e07ea40343d686a3e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:05:42:cd:f0:5a:03:28:e8:08:ae:b4:fd:
                    e2:b4:6a:15:11:04:ca:68:ef:5d:f0:fa:32:ae:8d:
                    3e:73:5d:96:ff:b3:08:2d:cf:c7:25:94:18:73:84:
                    43:92:f8:42:bd:8b:d4:35:49:82:0b:33:55:51:8b:
                    37:81:71:29:c0:26:42:0b:e2:8a:91:65:67:1f:8e:
                    31:44:30:cc:34:99:b9:02:66:c6:79:5f:1a:7a:d2:
                    df:a1:22:37:94:a5:f0:84:1e:85:86:e0:bd:01:03:
                    cd:98:b2:b0:15:8a:d3:2c:e0:20:6b:06:19:f7:34:
                    9c:2d:c3:ab:05:c7:68:7c:6a:a0:09:7c:f2:15:c3:
                    70:7b:3a:b5:7b:32:b1:e6:92:a0:e9:ab:29:e5:f6:
                    68:7d:91:86:28:8f:33:eb:7d:fc:0a:ab:e2:55:52:
                    76:de:ef:17:73:91:e0:a0:a5:79:62:bb:04:64:63:
                    4a:1f:0a:c1:8a:b2:12:5e:36:01:a1:4a:15:46:75:
                    87:7c:1f:07:8b:ff:3d:af:a5:f2:c7:b2:b9:38:72:
                    73:1a:95:68:b8:c0:89:e9:18:ba:2c:13:ce:40:bf:
                    09:20:c6:66:aa:97:f8:6a:ee:1a:40:56:e5:ef:8a:
                    41:ef:b5:11:5e:71:41:53:ae:36:6c:b5:55:02:b2:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0F:94:A5:5E:80:34:2E:D7:51:A5:C3:27:50:03:CA:AD:9E:74:07
            X509v3 Authority Key Identifier:
                keyid:8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:45:97:36:02:93:5b:60:b5:56:de:3f:ab:fe:84:ab:ec:
         e5:fe:89:4f:7d:66:74:31:0a:3b:91:2b:8f:7d:92:8c:d7:44:
         83:a2:ed:52:79:04:e0:05:a5:ee:ff:c2:5d:a8:87:f0:07:c7:
         95:50:c7:53:1b:de:11:25:d5:84:61:ed:fc:4b:c2:47:97:65:
         8a:fc:4b:c5:23:74:24:c0:46:0f:c5:0b:9c:e6:29:60:bd:4d:
         9d:19:c4:27:50:b2:9d:d9:87:83:3c:f8:4f:b9:fd:87:c8:09:
         5c:a9:4e:8b:5f:b2:f4:8c:13:81:e7:6e:55:6a:39:96:6c:6d:
         a9:61:bc:68:9c:dc:57:cb:6f:15:e9:a8:db:7e:d7:0a:f1:86:
         2d:b8:94:f0:06:a5:73:76:12:5e:db:e3:56:9c:74:f8:db:7b:
         fe:74:d9:36:2a:6e:c8:64:e4:f2:b2:b9:fb:ff:8b:59:c5:78:
         e2:fa:2b:a3:1a:08:a9:81:57:18:0d:95:a7:9f:9e:e4:e9:cc:
         53:56:1f:e4:8d:5b:a4:7a:07:22:6a:45:e9:73:98:59:eb:b0:
         e7:5c:f4:ae:a8:69:a3:e6:43:87:a7:d9:87:fa:ba:d5:97:53:
         91:92:64:f3:d1:93:20:c0:92:a3:82:45:d7:17:0c:0a:84:1d:
         8e:66:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----