Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/7220a4031b7bb84d489fc674e48acd93362e2d78.mft
File:                     7220a4031b7bb84d489fc674e48acd93362e2d78.mft (raw, json)
Hash identifier:          D0I16f1yxys9bUkEJXLu5m0+4VQqwWZ5eKhgHBQM62U=
Subject key identifier:   F1:6F:EA:43:DB:94:24:5A:BA:85:59:0C:D4:6A:FB:A0:E4:2D:F3:EB
Authority key identifier: 5E:70:E4:C4:39:BB:F1:5B:79:35:A8:85:FA:8B:8E:8A:64:D0:15:E0
Certificate issuer:       /CN=7220a4031b7bb84d489fc674e48acd93362e2d78
Certificate serial:       1F34C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7220a4031b7bb84d489fc674e48acd93362e2d78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/7220a4031b7bb84d489fc674e48acd93362e2d78.mft
Manifest number:          0E00
Signing time:             Mon 15 Apr 2024 04:21:21 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 06:57:26 +0000
Files and hashes:         1: 34473826316091926d1536bb76526f0231d66b9d.roa (hash: AZRmltSJqR08elePjlsYVGgnIiWpxyy9zVmrvWZS/RE=)
                          2: 622781856f3a1d0ab85430b942e0be98578cb131.roa (hash: q4278jK2g/+JeFUYcTRfsnvjH7MXwhokWlbGnTK+0hc=)
                          3: 7220a4031b7bb84d489fc674e48acd93362e2d78.crl (hash: RUMij8rZktlqMq4Rev4hhO0+WYsSjUrEkPfZEzKY5gs=)
                          4: 979e55e0cf9d7f62d5c898b357898eb0c6dbfbcb.roa (hash: xenTCKAy2jvJqjJx9DYMNJWIGiWoNoD0hH+eiKr7dtw=)
                          5: ae2fddb6294eaf7377c6914a7f72ad1dd8e34b4f.roa (hash: 0CZmK7St2oiOFS+QTzY8gSzLCdnuzg7D0CJuymCnBNM=)
                          6: be9ee5b495004d7fccc18ffe42914e7cf4f93960.roa (hash: +XggvN3ICuhX9c4C4ObU11y0Q+rHFUVIvfD8qXxcqbM=)
                          7: c65a2693b531c83c16ae83b69b6dc60b8b1ae0db.roa (hash: ArLoyszOHAImKTe1OgSZnGP2Y6W68wlu7RnIKaBnXhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2045128 (0x1f34c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7220a4031b7bb84d489fc674e48acd93362e2d78
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 06:57:26 2024 GMT
        Subject: CN=a9df169fd77eb25e13752367eb88e8e1d8703c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:30:a6:ee:d0:b7:8d:42:b8:4a:52:06:db:
                    ce:bb:4e:7d:72:61:96:f9:b5:46:bc:52:57:85:fe:
                    cf:72:a8:85:fa:39:68:df:9b:2e:eb:3f:b3:4a:6a:
                    07:83:b5:ed:f1:a0:cd:83:e9:50:4b:84:cb:d5:43:
                    6b:51:e6:63:a5:7b:37:cf:cb:c5:f1:93:3c:0a:b6:
                    33:e0:40:69:0e:85:a6:78:cb:8b:7c:e0:db:c5:a4:
                    7e:41:67:57:59:75:df:f5:24:7e:9d:23:82:30:7b:
                    fd:01:72:95:83:4b:fe:9a:2e:6a:09:8d:7f:9d:e3:
                    7d:fc:d1:b7:ee:05:4b:ab:02:b6:d3:96:79:bd:58:
                    4c:03:2e:ae:0f:4d:09:cf:fb:7b:48:0c:fd:e4:79:
                    ac:8f:22:46:36:e5:10:90:b1:00:66:61:2f:92:ee:
                    d3:b2:3e:56:bf:d2:83:03:65:98:e5:05:f2:03:51:
                    d0:00:55:59:d4:76:88:4e:66:8e:3d:f0:fd:29:21:
                    3c:4a:27:c0:05:4f:3e:3f:0c:71:1c:0e:66:c1:9a:
                    b6:86:c7:e7:2f:51:f9:ab:94:2a:70:ae:4a:ab:8b:
                    2f:9b:73:91:cd:e8:bf:43:d8:3d:97:6c:75:58:df:
                    ee:76:a7:07:ce:76:aa:a8:ed:3f:ad:6e:8d:c5:96:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6F:EA:43:DB:94:24:5A:BA:85:59:0C:D4:6A:FB:A0:E4:2D:F3:EB
            X509v3 Authority Key Identifier:
                keyid:5E:70:E4:C4:39:BB:F1:5B:79:35:A8:85:FA:8B:8E:8A:64:D0:15:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7220a4031b7bb84d489fc674e48acd93362e2d78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/7220a4031b7bb84d489fc674e48acd93362e2d78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88773bf7-bdc1-469a-9cb8-89a8cb9f1fc8/7220a4031b7bb84d489fc674e48acd93362e2d78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bd:0c:4e:51:be:1a:b2:95:4d:f5:23:bd:db:f0:33:70:58:
         83:1f:05:74:5b:a6:2c:94:9a:db:9a:10:01:fd:cb:d3:25:46:
         62:fa:fa:09:ac:69:04:92:fa:bd:35:78:f0:7e:58:13:bb:0c:
         f7:79:53:41:3f:6c:31:b8:bd:80:37:4a:0b:76:27:3b:41:ee:
         ec:75:a1:a7:82:5f:3f:8d:8d:ec:f7:5a:d8:9b:ac:bd:ca:36:
         14:01:39:18:25:85:a8:83:cf:46:d6:e9:da:77:b8:c0:3c:e3:
         df:22:4c:7f:ed:72:ef:8d:aa:aa:49:57:1e:03:da:ea:a2:19:
         b3:81:ec:f5:40:1f:6c:e2:a6:a4:12:ab:a4:e5:b1:3e:19:6c:
         8c:56:f4:54:60:ab:f8:65:75:86:dc:15:67:73:55:06:6a:95:
         e6:81:8f:c7:41:91:d6:14:05:ca:ad:02:79:0d:ab:76:67:8b:
         1e:3e:1f:73:02:bf:d1:a2:15:e4:13:e8:3c:01:23:65:32:74:
         83:74:0f:50:19:00:32:50:bd:f2:03:c9:70:ef:e2:e3:5c:01:
         78:31:4b:1e:8b:11:23:1b:cf:c2:0d:1e:0d:72:a0:7c:cf:ff:
         50:6c:22:a4:ee:33:93:6d:1f:a7:c4:76:02:a3:8f:f7:7c:dd:
         40:9d:b4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----