Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.mft
File:                     8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.mft (raw, json)
Hash identifier:          T4+bLfdTJjRUb8oRwOf3/8z/lR/9JHT6YUBtCs6p1qY=
Subject key identifier:   35:E2:1B:84:A2:C1:8A:B3:8A:AD:11:AF:01:0E:DE:B4:CB:A2:2F:DC
Authority key identifier: CA:A2:37:45:E3:C8:C6:97:4F:6A:67:C0:B7:6E:0E:3A:B0:69:C4:02
Certificate issuer:       /CN=8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe
Certificate serial:       26D251
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.mft
Manifest number:          0DD2
Signing time:             Mon 15 Apr 2024 04:20:54 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:34:26 +0000
Files and hashes:         1: 8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.crl (hash: +f9iokAmbQbg4FtXycHtRA6Y75qTwWoQ3PfDth5aPjM=)
                          2: ffab051088bfdd0aa81493a6f666c4bacaefefe4.roa (hash: 9M9WbFnRJzSdfrqnMtVo18u26XoDBpTy3scUKDsTyjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544209 (0x26d251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:34:26 2024 GMT
        Subject: CN=43aa023d12d0d5f292b2c07876e3468ba3313d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:54:0a:40:bd:da:05:f4:23:87:03:ad:22:
                    82:64:86:bd:53:3e:01:bb:70:08:58:c4:4e:fb:ca:
                    e2:68:7f:40:3b:8e:71:61:c4:63:b6:64:43:5e:98:
                    96:f0:e5:a2:3d:87:7a:c7:8a:4a:db:c5:e1:6a:18:
                    15:34:09:22:d3:e9:fc:26:bc:67:cf:20:59:b1:58:
                    cd:8e:34:35:df:88:f0:0a:e5:7f:0d:ef:cc:a2:0c:
                    68:75:1a:44:58:75:5a:e2:d0:8b:79:dc:5e:25:98:
                    fd:5d:d5:72:85:38:10:2c:df:a3:e7:38:8a:fe:ad:
                    18:64:73:4f:23:55:27:c9:7f:9b:b8:70:6f:1f:a7:
                    f8:4f:fc:a7:de:64:2f:73:36:92:44:56:fa:0d:99:
                    3d:8d:19:72:b1:38:ea:ad:6b:59:d5:e4:37:1b:e2:
                    f0:19:47:a3:3d:6a:f1:c1:c2:ed:07:67:3a:7a:16:
                    1d:e7:d1:ca:57:cd:0b:77:78:16:18:86:0f:86:0b:
                    44:94:f3:82:30:af:e6:c2:eb:84:24:5e:d4:68:b5:
                    6e:c6:36:b0:d5:5b:6e:68:2d:27:a6:fb:dc:db:0d:
                    09:f6:5c:21:65:5c:24:28:ed:11:23:11:77:fc:c7:
                    0a:fa:d7:b0:9d:61:dd:4d:74:61:dd:37:49:33:5e:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E2:1B:84:A2:C1:8A:B3:8A:AD:11:AF:01:0E:DE:B4:CB:A2:2F:DC
            X509v3 Authority Key Identifier:
                keyid:CA:A2:37:45:E3:C8:C6:97:4F:6A:67:C0:B7:6E:0E:3A:B0:69:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/837ac0c2-f570-437e-9066-d68297fdb874/8c372aeabf439eb0f54ff6f7cfd475033b2cf2fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:3d:c7:75:6d:c9:1c:fc:6c:8a:a7:aa:ac:9d:23:52:79:
         3b:34:d4:1c:a1:7a:6b:38:59:28:16:a5:59:0f:69:19:d4:1c:
         53:23:3b:26:ef:a6:8e:64:5a:75:39:f8:4d:1f:48:51:fb:73:
         3e:b2:22:4f:14:5f:a9:03:7e:03:7e:04:e2:dd:56:29:ad:17:
         4a:48:f4:e9:1e:ce:ad:f5:e8:fa:a0:b7:09:34:36:f2:79:97:
         35:c9:38:62:5b:f9:77:53:10:98:55:2b:3f:15:24:0d:67:21:
         5b:f6:03:59:8b:23:4f:12:2b:59:4c:80:ef:a0:1f:70:e9:e1:
         94:26:ba:cf:c0:a8:b5:d5:e7:e8:10:b2:e3:37:7f:94:9b:46:
         fb:75:52:31:2f:ef:6b:a2:d4:00:f3:be:9b:66:aa:2f:68:d3:
         7d:af:89:92:4e:51:db:20:c9:f7:6a:d2:b0:d7:38:7a:28:2f:
         3f:3f:59:f2:39:a5:e1:f2:18:85:ea:9f:86:37:9f:0b:4b:db:
         cd:55:6b:f1:57:a8:0b:79:9d:35:fd:fe:7b:95:25:3f:5a:18:
         2f:98:d7:cb:b6:b4:fb:7d:55:78:cd:04:27:d3:09:e1:c6:fd:
         32:3c:cf:ea:06:03:8f:a2:77:d4:6f:c8:e5:3d:01:b1:2c:3f:
         c7:e8:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----