Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/a85a48c23c8f35c5b4aa453e1f3b996974053108.mft
File:                     a85a48c23c8f35c5b4aa453e1f3b996974053108.mft (raw, json)
Hash identifier:          DQH8gjz2fOQR4Cdj1rnBdqcijFqzLrqSzcc4He1zEr8=
Subject key identifier:   EF:7D:FB:D7:C1:40:68:60:AB:02:37:69:83:14:51:0E:67:8C:12:5D
Authority key identifier: A4:98:74:3C:96:E1:FE:B4:92:CA:73:A3:63:96:F0:16:C6:16:17:DE
Certificate issuer:       /CN=a85a48c23c8f35c5b4aa453e1f3b996974053108
Certificate serial:       27A402
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a85a48c23c8f35c5b4aa453e1f3b996974053108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/a85a48c23c8f35c5b4aa453e1f3b996974053108.mft
Manifest number:          0E0E
Signing time:             Mon 15 Apr 2024 10:21:19 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:07:25 +0000
Files and hashes:         1: a85a48c23c8f35c5b4aa453e1f3b996974053108.crl (hash: ZfBRsvv0A1VaIXgkjDFoBje2muC2CfKLG6+Gl0SBkxs=)
                          2: fbe6f45429df7d1857af23f461d0a01c58937ea1.roa (hash: FW90+rwhvLpToVgjpXAuEIbTF59PsdUhYqoKenK1oqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597890 (0x27a402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85a48c23c8f35c5b4aa453e1f3b996974053108
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:07:25 2024 GMT
        Subject: CN=1e0673472aeb13d8c7e056ddc7f4aff8660a7635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:7a:8d:ff:23:4c:3a:97:a7:ac:c1:93:9d:
                    b6:e2:88:ba:b0:e7:c1:92:22:98:a2:97:84:db:bf:
                    70:47:58:d2:d4:08:be:82:74:4b:90:45:63:0d:ea:
                    7d:a5:39:9f:c3:02:d8:05:70:5f:f8:da:8f:5d:53:
                    e7:78:c8:6f:fb:5f:45:d3:24:2c:b5:ec:8a:ce:52:
                    09:47:1e:1c:dc:66:56:e4:50:40:46:3a:71:19:78:
                    32:28:ce:ff:6e:66:c7:50:36:7e:ba:0f:c7:3b:7f:
                    cb:90:57:0f:bc:58:d3:16:18:ff:10:6b:39:ed:97:
                    26:a2:90:de:6f:1f:76:a3:c6:cf:e7:28:f1:99:ea:
                    20:ed:d7:fa:37:a3:0f:dd:98:18:0c:aa:d1:12:a3:
                    d8:b4:59:07:f2:f4:50:6e:2d:e1:10:e8:84:64:5f:
                    8c:8d:8b:5b:b0:db:e1:2a:2b:d4:7d:c1:fb:6c:af:
                    76:7b:47:61:b8:90:01:b1:9e:b8:b2:c5:c3:a9:96:
                    95:69:e3:7d:23:11:78:ad:0d:05:f5:06:9f:6e:1a:
                    66:b2:e4:ff:f1:b8:1c:e4:94:9d:f0:4a:ae:cd:32:
                    eb:f8:65:03:a8:4b:73:d0:d4:c8:02:f3:63:df:46:
                    a1:83:5f:a8:75:1e:65:72:fc:7c:f3:37:40:8c:ed:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7D:FB:D7:C1:40:68:60:AB:02:37:69:83:14:51:0E:67:8C:12:5D
            X509v3 Authority Key Identifier:
                keyid:A4:98:74:3C:96:E1:FE:B4:92:CA:73:A3:63:96:F0:16:C6:16:17:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a85a48c23c8f35c5b4aa453e1f3b996974053108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/a85a48c23c8f35c5b4aa453e1f3b996974053108.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5bc3982c-43ca-4aac-8f2a-35895fda0d9f/a85a48c23c8f35c5b4aa453e1f3b996974053108.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:3b:5f:c0:ff:a7:91:48:9b:80:25:85:36:77:ba:a6:73:
         85:1b:02:7d:d3:72:57:f4:66:77:56:f5:7f:58:ee:03:8d:1f:
         11:9c:6b:e3:db:7a:cb:0d:b7:cc:87:8b:0c:4e:55:06:68:74:
         21:f0:45:95:c9:38:6d:2b:25:37:86:14:95:7c:a3:7d:2b:b2:
         2a:31:e0:af:09:4a:a0:1c:2b:ca:89:0c:9b:d0:b5:5e:26:b8:
         c7:7e:2f:45:f3:6c:d4:a4:8b:3c:13:0b:7b:20:15:d8:62:2f:
         fb:3b:3f:37:6b:25:3f:5e:f4:db:9b:0d:0f:b2:93:00:32:4e:
         6a:95:dd:d1:6b:0b:35:ab:8f:8a:d6:f5:01:41:7a:0d:48:64:
         22:39:0a:df:10:d6:24:00:05:2c:40:55:b7:15:f1:78:f5:39:
         d0:8f:21:3d:3b:fe:5c:66:f1:79:14:b4:b0:32:19:d7:81:d4:
         75:26:51:09:7e:38:71:de:c4:fd:7c:c8:db:da:77:f3:2a:12:
         29:30:26:f2:ee:17:c6:3e:86:2b:de:25:8a:7b:7a:59:16:eb:
         87:7e:bf:df:b4:81:88:f2:b3:7f:23:93:a6:5f:74:32:67:3a:
         0b:21:b0:d0:35:e9:ab:6c:13:a1:ad:ed:9d:6c:05:43:85:af:
         d0:9c:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----