Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5a93fb330793d475d283f90d1a40a536c6ec17d3.mft
File:                     5a93fb330793d475d283f90d1a40a536c6ec17d3.mft (raw, json)
Hash identifier:          RVto5ZIcJKXvnYW0qFhbsoCZNcJKm3Rw4u2lWj6oiwQ=
Subject key identifier:   90:5B:A7:C4:A6:80:65:BA:4E:37:21:E8:2D:72:C5:A8:B3:6A:1D:10
Authority key identifier: D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF
Certificate issuer:       /CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
Certificate serial:       1290D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5a93fb330793d475d283f90d1a40a536c6ec17d3.mft
Manifest number:          0989
Signing time:             Mon 15 Apr 2024 05:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:48:17 +0000
Files and hashes:         1: 5a93fb330793d475d283f90d1a40a536c6ec17d3.crl (hash: cvwclSXHvvRCLE0sZIOZNg8h3K6vOW6anG/AH0CZS7U=)
                          2: da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa (hash: Jw4Z5UTJ0n8wFqw15YWi6nad+hg6R9tehfXSrpE9K4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216728 (0x1290d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 06:48:17 2024 GMT
        Subject: CN=06f8bfb0f41c77e20b8bb44f7e814f84c54b8244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:90:8b:19:b8:08:38:b7:ff:c9:75:9b:78:
                    cd:42:89:7e:de:7c:aa:52:e8:3f:2d:04:f7:9b:5d:
                    48:55:c9:96:34:75:81:14:8c:84:77:eb:e0:53:12:
                    85:e2:c0:f9:3d:46:c7:c3:86:cc:e4:30:70:f1:93:
                    2e:68:80:61:fa:b7:2f:a7:6a:67:36:64:83:4c:cf:
                    28:86:db:9d:5c:a1:14:53:d4:f3:48:3b:8a:93:92:
                    a6:eb:41:b1:b0:45:f6:dd:74:d8:16:f7:43:37:f7:
                    f6:47:a5:f0:32:2d:f0:e6:d5:1f:ca:38:27:ea:68:
                    34:50:82:1f:b3:c0:c9:7a:c1:e2:c5:44:53:3c:f1:
                    94:d7:09:20:9d:88:bb:39:fc:62:d6:46:1d:14:fd:
                    84:c3:21:52:ed:c2:fa:67:fd:22:61:48:4d:36:21:
                    81:a7:b6:94:a7:19:64:67:b2:bc:c0:49:a8:f3:29:
                    4e:bf:f9:1b:68:a5:fe:12:79:c5:a7:63:7f:69:ad:
                    35:d8:72:de:c1:15:e7:af:5f:47:af:05:8f:e4:a5:
                    51:03:c4:66:26:3b:04:34:0c:be:5a:4a:cd:f5:b5:
                    a9:ee:12:5c:b0:d2:7f:93:0d:68:8c:c9:91:d2:76:
                    62:84:5f:f7:34:9f:f6:ec:09:f8:92:d8:cc:ed:9a:
                    a0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5B:A7:C4:A6:80:65:BA:4E:37:21:E8:2D:72:C5:A8:B3:6A:1D:10
            X509v3 Authority Key Identifier:
                keyid:D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5a93fb330793d475d283f90d1a40a536c6ec17d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5a93fb330793d475d283f90d1a40a536c6ec17d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:04:e3:64:cf:e6:3b:d1:f1:2f:76:35:b6:ec:9a:15:50:de:
         6a:62:70:9e:ae:43:2f:53:b2:10:45:f2:61:0d:76:81:24:74:
         45:1d:2c:33:df:11:1b:2f:82:25:3b:35:9b:cf:fc:5c:4d:69:
         c2:c2:75:b4:3b:74:4f:47:f7:0c:e4:fb:14:4a:c0:81:91:55:
         db:50:06:84:13:fd:63:8d:05:91:e6:62:9f:ae:78:0e:bb:a0:
         93:a3:a6:f7:f9:98:45:75:50:16:e8:0d:df:46:87:5b:6b:13:
         6b:1d:ad:09:24:7c:15:a2:17:88:22:e2:12:70:d4:e0:78:11:
         e5:6b:55:20:05:14:d7:a9:fd:82:ba:9f:17:c0:77:d0:7a:d8:
         bb:fd:24:21:d8:ec:dd:d8:3f:7f:d3:bd:29:13:8f:bd:bd:a6:
         3d:20:c5:a5:49:6c:40:bb:ec:c2:d6:d1:c5:87:46:18:20:19:
         11:e5:45:0d:57:ef:2e:e2:50:b0:70:9d:68:37:9d:7b:2b:76:
         dc:6c:83:c5:e9:14:d6:52:f4:68:25:fd:ed:bb:46:45:6e:ce:
         95:90:00:cc:d4:a5:a1:15:39:ee:d5:6d:f5:f3:1c:19:f8:25:
         b4:81:00:f6:af:b2:5a:0c:eb:7a:62:55:a5:b0:74:a0:fb:c2:
         70:af:47:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----