Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/f238f48f9589e438344d7270f591ba9998af2415.mft
File:                     f238f48f9589e438344d7270f591ba9998af2415.mft (raw, json)
Hash identifier:          LQ3NryeYlfZfWEuGDdXlkcLhkGtiieVu0Wkv4318G9s=
Subject key identifier:   37:F7:CA:58:F3:F7:24:27:BA:E3:B3:57:3D:50:E6:8C:DB:56:61:0E
Authority key identifier: E2:3C:66:9C:1D:91:48:43:64:C4:41:B3:E9:9F:36:A3:9A:35:6F:5D
Certificate issuer:       /CN=f238f48f9589e438344d7270f591ba9998af2415
Certificate serial:       053478
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f238f48f9589e438344d7270f591ba9998af2415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/f238f48f9589e438344d7270f591ba9998af2415.mft
Manifest number:          02A5
Signing time:             Mon 15 Apr 2024 03:21:31 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:20:17 +0000
Files and hashes:         1: 490aaf8e099854dab13edbe657a8732386810c49.roa (hash: Zhr2sC/+Klbh+0rsAHKt9R9pHhLwgtB9xogVKZ7ZdKo=)
                          2: f238f48f9589e438344d7270f591ba9998af2415.crl (hash: AxL47MLjIH4qZosOwSHJ5aKpFRQhaXFmdgVAhDJ/Kxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341112 (0x53478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f238f48f9589e438344d7270f591ba9998af2415
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:20:17 2024 GMT
        Subject: CN=79a14df1f557e99e4de661051fe3904b088e8a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:1f:4c:df:d4:dd:e6:4a:4d:4c:5f:e1:3d:
                    0b:6d:1f:78:3c:1d:2c:07:fb:4c:c8:a0:67:53:54:
                    5e:d5:cf:5f:ba:e1:9f:bd:ce:ee:7e:7d:ec:16:d1:
                    a3:b8:3e:e9:b9:49:28:a6:6c:94:aa:0b:ae:8e:22:
                    57:10:2c:fe:9e:5d:7f:06:c5:a5:12:5f:02:1c:ea:
                    3d:84:db:6a:4d:30:a5:5d:0a:23:be:c8:bf:31:a1:
                    69:47:41:83:1a:8d:cc:b5:1d:25:20:ef:10:a4:2a:
                    e1:8f:b9:1c:2b:75:58:3d:68:fb:31:4a:81:15:e1:
                    8b:99:6d:a4:56:15:83:ae:50:d8:f0:97:f4:65:7c:
                    5c:fe:7e:a5:dd:cb:13:39:d7:d1:8f:b1:18:04:1b:
                    85:d7:0e:6c:41:82:6f:31:b1:7d:02:50:26:1a:11:
                    d6:7f:3e:62:43:11:1f:23:bc:45:fe:af:ef:c8:d2:
                    45:1a:3f:a7:75:89:12:c3:49:4a:0e:3a:d1:d2:a3:
                    b1:48:dd:2c:dd:bc:0e:01:47:b0:de:f2:de:d7:9c:
                    dd:a0:60:35:80:77:e2:c8:37:ca:dc:8f:bd:3f:3d:
                    d1:f4:62:6f:8d:48:88:10:cb:7d:94:b3:8f:eb:53:
                    02:3b:4f:d6:7a:c1:f9:04:5a:7c:6e:a4:8d:cb:b6:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F7:CA:58:F3:F7:24:27:BA:E3:B3:57:3D:50:E6:8C:DB:56:61:0E
            X509v3 Authority Key Identifier:
                keyid:E2:3C:66:9C:1D:91:48:43:64:C4:41:B3:E9:9F:36:A3:9A:35:6F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f238f48f9589e438344d7270f591ba9998af2415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/f238f48f9589e438344d7270f591ba9998af2415.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/f238f48f9589e438344d7270f591ba9998af2415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:0a:ab:54:0c:8e:cf:5a:7e:8d:2c:f7:7b:fd:27:04:ce:
         5b:93:72:8b:2d:f1:d1:ba:07:12:73:4b:93:c2:86:ba:bc:10:
         fb:a5:1d:15:43:11:0f:2f:e5:2a:2a:66:00:ae:cd:ed:6b:36:
         b7:b2:d8:4c:85:0b:4d:68:11:e4:34:56:e7:0c:44:4a:44:33:
         ac:af:ef:1b:c7:9c:53:aa:85:1a:1a:03:da:30:f3:86:5e:77:
         13:df:1c:94:08:13:60:c5:7c:46:5f:a1:ae:dd:c5:ad:44:ee:
         87:43:18:15:7c:96:13:d1:cf:4b:ab:f6:d3:d3:95:38:33:89:
         ec:9a:1a:c4:c4:27:d7:c8:14:78:59:5f:02:57:76:1e:b8:8c:
         f9:21:00:ec:e3:f9:54:2e:80:18:e9:bf:03:10:26:8b:37:95:
         82:93:5e:64:10:fb:bc:26:4b:bb:b8:eb:e1:c9:10:50:3f:83:
         17:39:a6:2a:4a:40:fb:75:0b:7a:42:0a:45:25:20:27:65:46:
         c5:2b:b8:ad:5a:19:91:74:34:70:d8:4a:5b:eb:4a:1a:14:9b:
         e2:9b:5f:1e:0a:8f:e6:4e:63:d2:03:53:14:be:42:ff:0d:51:
         d3:c7:07:af:18:7e:0d:91:a2:5c:7b:46:b9:7e:e3:91:fe:5c:
         8e:f5:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----