Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.mft
File:                     aae8cbe9904f103232c002483204f9f2ae04d026.mft (raw, json)
Hash identifier:          okV7NMi4wUwXSqkfsbIUiNnkVEvc1jUgXYU0KITGPuo=
Subject key identifier:   DA:6C:50:EA:40:07:F5:01:CF:AF:97:83:72:30:25:90:D3:A3:8F:00
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       29B7A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.mft
Manifest number:          0C71
Signing time:             Mon 15 Apr 2024 03:21:05 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:03:17 +0000
Files and hashes:         1: 2b792c0e7579f71b823be9913a4d09cac20c0860.roa (hash: NmjuHdwvxL/J8edX+RK7Z6C/dS9PfnSqUBryLcouEQk=)
                          2: 50cf72da3e84326f2f74fde742f58929cfd3f026.roa (hash: lHfaXJvqFfYML/zHlwDZtqx6bTeh8vMNq2ACXUlZmok=)
                          3: a203ee46a8469034d2c19577beae57d09c9c0b82.roa (hash: 2ONi84/wNc+qM7wU59TVFNAiBZ/AnOht40qd0p6NyvQ=)
                          4: aae8cbe9904f103232c002483204f9f2ae04d026.crl (hash: CZtHfUMyzmC8vFRGMwE46q4ZQ0hRUaocFF0FnauTmek=)
                          5: b4d3dddea64ec10ee5ad9fd3ce64e80d4126e598.roa (hash: WS21S0qq2Dm1/ayF4RbAfrupRk2RQ88WSMAxIUK5Pos=)
                          6: bf91598f0898e7389631f518613f3a733866a4c7.roa (hash: TZFOgjJza5piOr7N5gJENhik734zT+i4u4pufnc4S7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2733992 (0x29b7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:03:17 2024 GMT
        Subject: CN=4b2d5a7f509bf5b542a85f0a93ce4ebfc068f937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:08:26:fa:f4:c4:dd:9b:bb:27:24:78:06:
                    f8:4c:4f:87:8a:5d:95:f2:66:73:05:cd:15:4f:c1:
                    eb:7f:7b:f3:f3:5a:6e:96:92:ce:0a:13:bd:51:a4:
                    43:9c:46:b9:e8:d0:1d:77:6c:f1:b9:b6:57:f6:19:
                    22:ce:30:58:de:27:77:02:30:5b:a8:72:8f:1a:33:
                    70:a8:b8:52:af:88:db:66:1c:8b:f5:d2:67:8f:0b:
                    44:80:55:f7:93:4e:db:58:43:e8:69:75:6c:3c:c2:
                    d6:5b:23:ed:95:f5:2e:ee:ef:3d:36:cf:55:45:67:
                    c3:f5:15:f6:a4:63:30:f2:63:d3:92:20:00:0f:9d:
                    6d:b9:d7:2d:65:4d:2b:29:15:45:ad:79:66:80:59:
                    ae:84:6b:0a:e5:62:98:e8:96:2f:ff:97:73:b1:f8:
                    c0:17:e7:1c:a7:53:ab:d7:f5:a7:86:af:75:6a:19:
                    35:c4:d5:fa:b1:fd:69:b4:64:de:6f:96:8a:cd:6d:
                    a9:81:0f:e9:19:b7:fc:6e:ae:ae:b3:b9:b7:bf:d6:
                    d6:26:2c:8e:06:0d:c3:c4:22:11:38:c2:49:35:2c:
                    22:1b:04:75:c3:65:c4:11:36:46:92:96:70:29:f3:
                    e3:b4:a9:8d:6d:27:d2:51:e4:40:d1:7a:bc:fe:8a:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6C:50:EA:40:07:F5:01:CF:AF:97:83:72:30:25:90:D3:A3:8F:00
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:32:46:be:e8:62:d9:48:dc:60:46:f7:a8:8c:ee:de:2c:1d:
         c4:13:6c:03:ec:7f:c9:81:aa:23:b0:56:c5:90:7a:c4:c7:df:
         9e:6f:0d:b1:8c:cc:0a:6d:24:d0:11:4a:e3:5c:f8:29:90:ad:
         b8:63:ce:ed:7f:03:c8:ab:0c:a6:28:22:a8:ec:c6:e6:7e:62:
         77:dc:ea:63:6d:11:87:53:9f:ae:7b:6b:cd:48:d9:71:be:4d:
         4d:e5:ca:9f:dd:ff:8f:31:09:e4:6a:d9:ad:11:4e:14:36:db:
         9d:93:c2:63:39:d2:bd:5b:c2:d9:fd:0a:8c:7e:d0:72:8f:8f:
         4f:b3:37:b6:78:c5:74:25:30:7e:cb:ca:06:e6:99:f8:26:92:
         b0:f7:82:aa:98:94:68:4d:95:70:bd:6f:7d:c9:3f:b8:11:c4:
         c7:43:67:b0:9b:67:8b:db:c2:12:5e:8c:fd:6f:83:5d:89:56:
         ea:f0:bf:09:49:6d:1b:a4:fe:a3:2b:2d:26:3b:32:12:9a:dd:
         b9:eb:04:82:9a:e2:56:66:7c:30:7d:8a:7c:26:d5:0d:1e:23:
         67:36:30:79:87:47:c9:eb:67:e6:b0:80:ca:07:45:af:ce:08:
         65:d5:7e:22:4a:56:26:e0:3e:d8:69:87:f0:69:05:f2:3d:97:
         dc:97:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----