Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/fb91a939f380a4cfa7deb774f44592574b792555.mft
File:                     fb91a939f380a4cfa7deb774f44592574b792555.mft (raw, json)
Hash identifier:          mKnQ0Vt+mbj7fMw0J7DUZr58ziQgn6GMYzyfG4XRn5M=
Subject key identifier:   4D:72:27:C1:87:3A:B5:EC:B2:93:45:1C:7B:11:86:72:6D:83:B6:E3
Authority key identifier: A9:BB:59:61:15:0D:04:00:18:E7:36:D1:71:7A:66:A3:02:79:05:56
Certificate issuer:       /CN=fb91a939f380a4cfa7deb774f44592574b792555
Certificate serial:       0CD468
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91a939f380a4cfa7deb774f44592574b792555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/fb91a939f380a4cfa7deb774f44592574b792555.mft
Manifest number:          06A5
Signing time:             Mon 15 Apr 2024 08:21:10 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:22:16 +0000
Files and hashes:         1: 8b81f130b3a820f4fa9d387f6d98dddb0b727217.roa (hash: +M09AeqjeHlt0bZ9v3eikFb0DUlZQi/WKbsksvu3BxE=)
                          2: fb91a939f380a4cfa7deb774f44592574b792555.crl (hash: jMdRnEa3m0YXVg80p9feJeeZe/+jcuBTQhWv27QWgQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840808 (0xcd468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb91a939f380a4cfa7deb774f44592574b792555
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:22:16 2024 GMT
        Subject: CN=0a873a87b308e892848c96e377df56c1bc0f8990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:2c:a2:82:2b:4e:e0:14:82:6e:33:ec:26:
                    f8:38:62:ec:1f:ec:46:be:c3:aa:0b:d1:43:86:96:
                    7a:61:f5:77:0f:d0:ae:92:3c:39:ad:cb:10:c4:9e:
                    99:86:71:ce:6b:28:74:72:60:18:42:b2:a9:18:3d:
                    11:d3:65:54:53:d4:d1:bf:ca:fe:b7:e4:61:50:94:
                    1b:03:d7:e9:aa:7b:95:4d:5c:76:2f:73:43:aa:96:
                    4b:e2:14:13:0a:9b:29:a6:92:75:9a:4a:55:4a:76:
                    c0:b2:64:ea:27:05:97:7f:43:2d:da:eb:12:27:97:
                    9b:ad:7b:aa:54:ac:a1:c9:c2:9f:37:73:f1:37:e3:
                    de:f5:dc:6d:5a:c0:ed:a8:35:6d:26:7b:60:1f:cd:
                    98:e6:fe:3a:32:73:53:7d:69:9f:a0:a1:5b:fe:2c:
                    ec:47:86:75:31:23:11:ef:c3:02:41:2a:3e:63:e9:
                    dd:7c:45:cc:c5:10:1c:47:4a:f3:6d:55:1e:31:d6:
                    84:b1:55:32:0d:68:1a:dd:64:63:5c:e1:b5:af:3c:
                    70:3c:1a:cb:3e:65:b9:1b:31:a1:44:5e:8f:a3:53:
                    69:2b:43:15:24:31:1c:03:ec:7e:68:8c:e7:a9:6a:
                    bc:a2:c5:99:f0:1a:1c:b7:7e:20:a9:fb:3d:41:bd:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:72:27:C1:87:3A:B5:EC:B2:93:45:1C:7B:11:86:72:6D:83:B6:E3
            X509v3 Authority Key Identifier:
                keyid:A9:BB:59:61:15:0D:04:00:18:E7:36:D1:71:7A:66:A3:02:79:05:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91a939f380a4cfa7deb774f44592574b792555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/fb91a939f380a4cfa7deb774f44592574b792555.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/fb91a939f380a4cfa7deb774f44592574b792555.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:2d:b1:bc:9b:df:55:6e:7f:bd:2f:68:6f:61:ec:9b:da:
         85:8d:ef:1e:5d:e5:fd:07:e5:36:49:62:f2:8c:99:e8:cb:5b:
         33:ef:c0:e9:f1:c7:93:de:d1:8c:64:5c:20:c9:42:be:e9:69:
         72:4f:12:fd:d0:c2:a5:5f:4a:a7:8e:e1:9a:01:ea:1b:5a:0d:
         f9:6c:d6:e9:fd:aa:db:61:df:0f:a2:6b:95:da:be:fa:a3:15:
         9f:9b:3c:97:4f:47:d7:ed:fe:6d:8b:5f:8b:c1:a1:32:c9:31:
         70:00:8f:df:8e:21:88:bf:02:fb:f7:30:77:e8:01:71:1f:b0:
         57:d0:40:a2:0f:24:f6:9d:ca:40:c0:08:f9:9e:84:b3:94:94:
         46:04:b5:36:d6:49:9a:38:d2:78:7b:20:1b:58:3e:e1:8a:48:
         f5:78:9b:ae:05:9e:81:87:9b:49:cb:21:72:63:77:5f:8c:ef:
         be:a8:ab:7d:9c:e2:72:8a:d3:1a:b2:a7:b1:c0:0e:88:e2:94:
         27:92:f6:ab:f6:b7:13:c6:3f:10:87:df:9f:80:b7:09:9d:95:
         d5:22:db:2a:83:d1:99:52:24:8c:37:b2:78:a8:57:00:ba:ac:
         92:bb:77:73:9d:cf:4c:d8:10:ac:15:90:14:46:44:18:8a:26:
         6f:39:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----