Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50296131-548e-45c0-b2a9-8b6544764602/433a44a4802841d19b4f08fc90e8acbefe06f218.mft
File:                     433a44a4802841d19b4f08fc90e8acbefe06f218.mft (raw, json)
Hash identifier:          VIOuRngX5xU91kfPibGkmxhvdEBY2N1I3T+8+tu4Eu0=
Subject key identifier:   C7:FD:7D:D7:30:0E:AC:9C:F6:56:B7:C1:22:E3:8B:24:0F:64:7C:99
Authority key identifier: 9F:CC:F4:86:C4:3E:A2:08:8C:F0:3C:E3:00:C2:3B:5D:C3:3F:A9:54
Certificate issuer:       /CN=433a44a4802841d19b4f08fc90e8acbefe06f218
Certificate serial:       15338F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/433a44a4802841d19b4f08fc90e8acbefe06f218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50296131-548e-45c0-b2a9-8b6544764602/433a44a4802841d19b4f08fc90e8acbefe06f218.mft
Manifest number:          0AA8
Signing time:             Mon 15 Apr 2024 05:21:30 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:36:17 +0000
Files and hashes:         1: 433a44a4802841d19b4f08fc90e8acbefe06f218.crl (hash: U85KZ71q/8zcI5ExZxtnWXYpUFJzxca4G1OmNPt2OF8=)
                          2: 6d7805b3f89c888da5af4179ee94a99094da68da.roa (hash: wXGq9wHlT0G+LlSPUImeKq3e9bWCVdAanLzlrF/rMpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389455 (0x15338f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433a44a4802841d19b4f08fc90e8acbefe06f218
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:36:17 2024 GMT
        Subject: CN=30b48c08f25ffdbcd04fb52b878d10b3943c62ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:f0:42:79:8d:e4:35:b8:9d:6a:ae:80:be:
                    df:b2:c7:4f:24:5c:1f:da:86:f0:6f:ca:7f:78:b0:
                    27:ca:6d:f4:bd:d5:20:47:16:14:a1:b7:99:ec:53:
                    81:33:16:f8:c8:69:6d:61:71:00:7a:6f:a6:de:f1:
                    dd:34:fe:d3:ce:31:6c:da:bb:62:02:7b:3c:3d:60:
                    a3:43:23:03:8a:f1:79:52:ce:59:36:89:0c:02:40:
                    3a:22:15:f1:1d:45:ae:ff:b3:78:39:58:b5:04:fd:
                    60:c5:0f:e4:bd:05:88:3f:d2:8d:48:22:d1:b2:23:
                    24:6d:47:4b:d6:23:f0:55:39:0e:db:e4:1d:5f:cb:
                    ac:37:55:6c:9c:23:a0:75:42:4c:53:05:23:57:78:
                    db:c1:ce:d7:70:f0:53:c7:b0:b5:6c:1e:79:0b:25:
                    0e:1d:5c:2b:c0:4d:72:0a:c4:a0:6f:1c:4d:15:71:
                    73:63:57:50:69:43:b0:6f:a1:b7:81:e2:cd:4c:9c:
                    3a:40:cd:90:b6:da:a4:bf:b9:da:ab:10:18:f6:1c:
                    2b:fe:b4:06:45:0b:01:9f:bd:df:98:c8:be:c0:a9:
                    90:68:4a:90:d7:5f:43:37:84:cf:03:f1:14:e4:53:
                    08:ef:0c:07:ed:aa:c4:cf:db:5c:d0:1b:39:08:5a:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FD:7D:D7:30:0E:AC:9C:F6:56:B7:C1:22:E3:8B:24:0F:64:7C:99
            X509v3 Authority Key Identifier:
                keyid:9F:CC:F4:86:C4:3E:A2:08:8C:F0:3C:E3:00:C2:3B:5D:C3:3F:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/433a44a4802841d19b4f08fc90e8acbefe06f218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50296131-548e-45c0-b2a9-8b6544764602/433a44a4802841d19b4f08fc90e8acbefe06f218.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50296131-548e-45c0-b2a9-8b6544764602/433a44a4802841d19b4f08fc90e8acbefe06f218.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3c:c5:e7:5c:5c:11:4c:4d:88:8d:86:e0:52:60:3e:c3:ff:
         bf:b0:be:d8:e2:67:2b:f9:27:e3:9e:a1:de:fb:9e:c2:17:73:
         0e:75:34:42:3d:12:64:49:24:08:6d:90:e6:0a:da:6a:de:3d:
         73:5f:1e:8a:0f:ec:14:d9:7b:85:c8:20:80:f3:cb:ae:fd:c7:
         3b:2f:bc:40:7b:63:82:b7:06:b1:2b:c7:00:ea:a6:12:a8:cf:
         21:2c:a7:fb:50:32:55:e4:a7:24:3a:74:96:b1:e2:3c:4f:0e:
         6b:5b:2c:e1:67:93:55:ee:97:81:d3:2c:84:0f:f1:59:bf:51:
         be:63:f7:38:d5:c7:b9:f2:b0:90:c0:85:f8:e0:c8:4a:73:fc:
         0f:d1:ce:5d:23:27:78:8c:ac:e6:c2:7c:27:d4:3d:77:4c:86:
         d8:89:ce:08:20:d0:60:26:5d:bc:40:c8:c5:5a:f4:08:1b:f1:
         65:86:ad:7a:05:32:9a:e2:b2:1d:78:40:33:e8:a4:82:45:d8:
         37:7c:2d:ce:e8:a2:da:da:5f:fe:73:7b:e5:85:67:14:ce:8d:
         b3:b8:26:e1:7d:48:f5:eb:df:19:a7:17:50:38:c8:11:0a:84:
         e0:e5:b5:60:c1:08:32:c7:a7:5a:3a:b5:66:77:4a:e6:f5:fe:
         c8:1e:6e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----