Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft
File:                     fa838a953551009c19f610b9c5f2d235fe909d9f.mft (raw, json)
Hash identifier:          v5LvHjePo796A5+XSHnKQmSwLAzPaQrbXcDmskJgW64=
Subject key identifier:   1E:40:BD:BF:34:0B:38:64:83:52:C5:F9:AA:95:EC:9B:6D:99:92:99
Authority key identifier: A8:AD:8A:2E:54:33:BB:B4:DA:91:3B:AD:7E:38:D2:59:A9:56:4D:F9
Certificate issuer:       /CN=fa838a953551009c19f610b9c5f2d235fe909d9f
Certificate serial:       22E179
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft
Manifest number:          0E16
Signing time:             Mon 15 Apr 2024 11:21:40 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:13:18 +0000
Files and hashes:         1: c4b285286e319f6484a57d2e56b314c25d46267c.roa (hash: NDY9ik3N0/AqGi1DtRT0FvEdevszj4frNqwZs9JFuo4=)
                          2: fa838a953551009c19f610b9c5f2d235fe909d9f.crl (hash: CX07NHv7wiIUai8fc6Nie1ZrqrvDhKWt611ddACCW8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285945 (0x22e179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa838a953551009c19f610b9c5f2d235fe909d9f
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:13:18 2024 GMT
        Subject: CN=1c60cfb90aaa714d07e5aa4e5e38c5abd8df1ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:0a:fb:ab:8e:d3:66:6e:93:09:67:ac:74:
                    92:d5:84:d8:36:46:eb:cf:34:2d:d1:4a:c8:3c:8f:
                    cf:0e:b5:8f:4c:0a:9a:36:b9:6d:b3:b3:5d:04:97:
                    89:e8:04:ea:2b:cd:76:d4:78:5b:74:c7:d2:af:64:
                    ff:02:bb:dc:f7:93:58:99:48:d9:94:ed:e7:a8:e6:
                    1c:3b:60:ee:7c:62:b9:bc:ef:49:61:dd:ad:a6:e6:
                    ab:66:f0:f2:7e:58:dd:66:38:cf:1f:92:3c:90:f3:
                    ec:a3:52:a6:06:1d:a6:2b:03:40:43:5e:cd:1f:b3:
                    6f:64:ea:63:f5:32:f7:02:b7:9d:f7:51:fc:2f:fd:
                    45:77:a1:5c:76:2a:f4:f3:f1:6a:49:5f:ca:5f:85:
                    b6:c4:6f:ae:b6:48:ff:43:3a:4c:bf:9d:75:98:ae:
                    b9:eb:dc:1b:d9:df:33:fe:1f:f6:f4:dc:f6:9e:54:
                    4d:0a:6e:74:5c:13:33:56:c2:22:ed:ba:b5:9a:be:
                    7f:8b:aa:c0:e7:f1:3a:49:49:19:db:22:96:d8:15:
                    be:c8:75:51:44:59:24:38:cb:52:78:25:25:b3:c3:
                    6a:dc:5a:86:b6:03:17:02:05:c9:38:da:8a:04:8e:
                    b9:8c:70:af:08:03:b4:b3:db:af:6d:d0:97:b8:f0:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:40:BD:BF:34:0B:38:64:83:52:C5:F9:AA:95:EC:9B:6D:99:92:99
            X509v3 Authority Key Identifier:
                keyid:A8:AD:8A:2E:54:33:BB:B4:DA:91:3B:AD:7E:38:D2:59:A9:56:4D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fe:d6:79:81:f5:85:ae:00:57:35:51:9e:bb:f2:ba:93:38:
         58:3a:ed:a1:7b:63:ef:93:90:b6:2d:41:c6:3c:19:db:ef:93:
         c4:b5:81:ae:04:30:46:ec:40:5c:18:69:e5:09:41:41:dc:ff:
         3a:39:f4:16:ea:7c:ec:b0:73:68:d7:52:83:d8:5b:d1:d0:e2:
         bc:3b:b6:55:f6:d1:a7:22:a6:33:5c:41:79:21:b5:70:29:6b:
         42:67:22:01:22:7b:9c:29:b1:dc:88:5b:49:c0:8b:5b:d6:70:
         d4:4f:49:cc:26:d4:0a:cf:76:73:37:8f:64:50:85:0f:ba:a5:
         37:52:b8:a0:5b:43:fd:70:bf:e2:7e:a6:e2:00:53:47:e4:94:
         c8:f1:7c:97:e0:5e:4a:ef:0b:e1:c4:cc:48:e8:8d:57:d1:a4:
         b5:0b:fa:10:9f:a2:39:be:1d:79:4a:38:09:3a:7f:ef:c0:e6:
         c7:ae:08:c6:84:15:07:20:6c:04:9a:1b:5f:0e:88:f4:6e:c8:
         6f:4b:f4:4f:0f:52:59:63:63:2b:15:8c:2d:9e:ff:27:68:6a:
         94:fc:58:33:79:c5:b2:b6:8f:7b:60:33:67:ab:91:13:61:83:
         a1:6b:ff:4b:90:27:35:48:06:95:0b:8e:5e:60:14:d2:d5:3f:
         6d:00:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----