Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/598b97879dbe469735c547a94e3b8220402f1cd0.mft
File:                     598b97879dbe469735c547a94e3b8220402f1cd0.mft (raw, json)
Hash identifier:          jIYGV9bnYRu07CKX1fMdxBx3z7Qu/9UjzTcMNiCPwis=
Subject key identifier:   BA:41:EE:A3:48:50:6B:30:41:6D:21:44:03:01:29:9B:F3:E2:92:F8
Authority key identifier: 22:40:AB:32:6C:85:48:AC:B6:46:BB:96:F2:FC:75:C4:B1:07:30:26
Certificate issuer:       /CN=598b97879dbe469735c547a94e3b8220402f1cd0
Certificate serial:       08DB8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598b97879dbe469735c547a94e3b8220402f1cd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/598b97879dbe469735c547a94e3b8220402f1cd0.mft
Manifest number:          0497
Signing time:             Mon 15 Apr 2024 09:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:01:18 +0000
Files and hashes:         1: 598b97879dbe469735c547a94e3b8220402f1cd0.crl (hash: +C1olac6KKExBY+TZQy4kh3cSyroWlNeLlf/hJ5qdPc=)
                          2: e7953a58646b75bfd100b7b13269387d2717e753.roa (hash: ZiJVbo7QtEhfGY49KiECxaMwGwSuhubZXOJ177ZQX5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580491 (0x8db8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598b97879dbe469735c547a94e3b8220402f1cd0
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 12:01:18 2024 GMT
        Subject: CN=4c336c900b6e929f0c1fe1f45ff217d55913493e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:41:72:fc:6f:18:e3:23:98:a0:c8:32:25:
                    c7:dd:de:34:3e:93:c2:b8:e5:b2:7c:a7:55:f0:7a:
                    34:7a:98:49:18:15:76:04:f8:2f:88:72:2b:9f:d4:
                    0a:6b:08:10:32:fe:63:b9:ac:45:f7:f9:a1:81:13:
                    5c:25:48:31:d3:f7:bb:ca:1d:73:66:e7:90:44:fc:
                    66:ce:fe:24:fa:84:f7:32:45:13:8e:c8:1c:9f:96:
                    4e:82:4b:30:1d:fa:be:27:0a:da:98:f6:3c:54:a9:
                    13:91:af:b8:f7:bc:46:a3:b6:59:23:3a:4e:aa:37:
                    45:43:8f:70:4d:4b:11:dc:45:61:68:8f:00:5a:6f:
                    8c:43:37:4d:6f:0e:1f:c3:4f:71:fd:83:77:54:55:
                    47:53:0b:d8:0f:12:e2:09:36:94:86:33:ff:5b:cf:
                    5a:d9:db:a2:b7:e5:66:6e:2d:53:57:45:5a:b6:55:
                    77:59:aa:42:ba:0e:a8:50:73:54:62:55:5a:e1:43:
                    08:4c:eb:8f:bd:a8:56:20:ab:5e:97:f3:0b:5d:a5:
                    93:90:91:74:3e:b7:88:48:51:fd:cc:00:83:2a:82:
                    ba:fb:0d:40:f7:da:87:f6:d8:d9:ad:77:15:30:b5:
                    cb:d2:99:ae:cc:65:a9:92:f9:48:31:5b:91:af:e4:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:41:EE:A3:48:50:6B:30:41:6D:21:44:03:01:29:9B:F3:E2:92:F8
            X509v3 Authority Key Identifier:
                keyid:22:40:AB:32:6C:85:48:AC:B6:46:BB:96:F2:FC:75:C4:B1:07:30:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598b97879dbe469735c547a94e3b8220402f1cd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/598b97879dbe469735c547a94e3b8220402f1cd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/792d3e39-4473-42e2-abbd-d6c50f62207a/598b97879dbe469735c547a94e3b8220402f1cd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ff:eb:7c:d9:3a:df:5c:a9:6a:de:ab:3e:fe:bd:23:b4:a2:
         54:8c:d3:e1:10:aa:54:d2:94:cc:21:5c:0f:a0:11:1c:80:fb:
         2d:f5:4c:bd:a6:ff:9f:ec:6c:3d:96:77:06:83:33:af:bb:49:
         70:f9:e2:db:60:a6:c5:be:9f:8a:69:4e:b0:dc:a3:25:40:6b:
         31:12:ac:26:83:67:2f:67:f5:4d:d7:d2:1e:8f:b2:93:3c:b7:
         59:23:18:81:97:ac:4c:4a:ef:8a:d8:9d:c9:3c:01:4c:a4:b6:
         0b:16:49:c9:0c:a5:9f:04:d1:87:48:0a:90:03:c2:f7:28:db:
         4b:b0:1d:b4:ce:78:41:63:aa:6b:ae:0a:78:28:78:ff:fe:b6:
         ea:20:83:5d:8e:11:d0:9c:98:49:87:e9:f3:99:aa:e6:c9:42:
         76:ff:f5:1b:cc:9a:fa:6c:83:55:60:35:0b:c1:60:61:62:5e:
         70:a4:bc:c8:a5:f3:bc:89:9d:89:32:1e:3d:8a:ac:a3:e0:36:
         a3:98:30:38:6f:cc:0a:3e:1f:35:74:be:67:cf:db:7d:31:98:
         ef:bf:91:53:85:28:1e:ce:d2:76:07:88:ba:59:9c:99:85:0b:
         3f:f9:4b:16:d7:9c:eb:87:33:36:11:b5:78:fb:bd:0a:2f:15:
         28:42:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----