Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.mft
File:                     4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.mft (raw, json)
Hash identifier:          Fyxxu4z8cff99VrBQ53ax+mB8zo6K/JBg7/+RH+1fhs=
Subject key identifier:   E5:BB:AF:5A:9F:7A:6F:C8:AD:08:F2:73:61:E8:BA:36:A1:BD:5B:39
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Certificate issuer:       /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial:       07139D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.mft
Manifest number:          037F
Signing time:             Mon 15 Apr 2024 03:20:49 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:53:17 +0000
Files and hashes:         1: 4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl (hash: EzS+QL7evH08Q1GRfF3KnCFNPGmajY4ZOO6Pstz9QZI=)
                          2: 667c9b43720caa3d43820c6cacaab21f92fef393.roa (hash: HlmDCry+IorqSjVlq3EN8q/zA0mha4MLqljDZ7bxxc4=)
                          3: 803bafefd5522fe041376f428b88dc9b340062eb.roa (hash: YIe87+vWOud+fBzpqUlLNL+4HqXvt1ceBtr1v6+yIlc=)
                          4: 8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa (hash: nZpiuqeHBcD/fzrzjQ6xg7D6AwqYEFOvKHxN1pSUAdA=)
                          5: a0f932603eccded3af42d2ddbc71eed8abf1d01d.roa (hash: IMR1te29jsJa4TDPt1L9D6d01xSisj/CRI2labo9g8s=)
                          6: b6cf469f5246a7c643ea5094149731872eac2c1e.roa (hash: Zm/cfybZc9wWIcv6fiEOqhEi0X954YsppDyZ4E+1wDg=)
                          7: be5a56e9cdbe4542b1976c5f0ee354f0793fed2c.roa (hash: 4pSZg2+lYptP3hDZRPMvNkpblOaUPLPXbTVKAJn6tfE=)
                          8: df3023c500cb32c22172e28f34d23e2c332d67fa.roa (hash: SHCTgd6YZ5WGyvaxieO0AQhxVTLv4wddfihw5FHq6YQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463773 (0x7139d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:53:17 2024 GMT
        Subject: CN=4a4e79fe18d893facb1427783afc2056055c0c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:ec:97:96:85:9a:2c:aa:a5:d0:cb:54:59:
                    cb:3f:ea:a6:c8:4e:10:72:2f:19:16:91:d2:af:76:
                    2e:23:3d:52:78:2b:fc:d8:d7:f1:a1:e4:29:71:57:
                    3d:40:c3:8f:94:50:1d:05:73:48:bb:a5:0c:d9:f2:
                    ba:91:b1:fe:7b:41:9a:de:43:72:be:38:cb:2e:37:
                    14:83:52:91:81:81:5f:b0:b1:0d:fa:03:64:f1:48:
                    8c:07:00:fa:26:75:53:3f:40:14:5c:b6:10:1b:8a:
                    b9:33:84:91:90:c3:21:1a:7b:a0:0e:2d:a6:76:5d:
                    e3:9c:f8:bd:2a:c7:48:4c:a2:6e:ae:b7:2b:93:78:
                    d3:38:f7:24:64:a4:07:b4:9a:b3:43:c7:9b:ff:ab:
                    bc:a3:ca:6e:d2:50:82:1b:a1:88:7d:98:32:c8:aa:
                    3a:4d:21:6d:0d:32:56:c7:95:40:0c:ca:6c:3b:0e:
                    3f:c2:e8:bf:75:12:0c:73:aa:c2:25:39:5c:29:04:
                    bf:39:d3:ea:5e:41:a7:14:20:b4:e8:82:1e:90:1d:
                    c8:40:f1:80:2f:d0:dc:49:72:dd:e8:d5:84:6a:37:
                    dd:e2:8d:3a:54:7b:8b:3a:12:df:a0:b4:28:bc:59:
                    20:f5:73:76:19:7b:fe:25:d2:51:15:24:63:60:1e:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BB:AF:5A:9F:7A:6F:C8:AD:08:F2:73:61:E8:BA:36:A1:BD:5B:39
            X509v3 Authority Key Identifier:
                keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f7:ed:35:e8:db:8a:67:c6:d4:17:0e:ba:46:94:23:06:0f:
         48:c7:60:1e:2a:bd:a5:e1:4f:ab:91:f6:5a:b4:d6:13:b8:b5:
         6f:ce:a1:f2:7e:f9:8b:34:03:ba:a1:e7:c9:d9:65:1c:eb:ba:
         20:5b:7f:69:58:c2:08:ad:03:38:6f:05:52:e7:47:90:cc:6e:
         1f:18:cf:7c:d7:ac:96:16:2a:d1:a0:5f:7e:c0:e0:96:2d:23:
         25:70:f0:a9:ca:86:03:29:f3:64:28:be:15:0b:65:c8:37:5c:
         f9:c0:1f:a5:31:df:92:19:41:eb:ea:44:10:fa:88:ce:38:66:
         d4:66:3c:d9:13:77:83:8b:2f:ab:4b:40:77:38:e7:5e:55:de:
         95:3d:53:ca:3c:70:93:ad:2c:a5:a8:ff:b6:23:7d:37:33:28:
         07:94:16:04:bb:ba:10:80:7f:73:b6:f4:4d:61:54:1b:26:30:
         fa:db:60:7e:be:6c:84:ec:fb:4b:8a:ed:41:58:66:39:c0:04:
         9a:4d:b6:6f:64:13:b2:83:c8:f3:3b:f8:12:6e:64:6e:4f:3f:
         33:b4:46:5a:b4:1a:f9:5e:52:fb:70:3d:b7:d0:d0:71:be:39:
         42:bf:2f:05:6e:46:b0:47:83:0a:03:33:e7:3a:d2:d8:03:65:
         6f:77:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----