Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/40b526ba23ca7ed535f9753dc1684d3cd0025f33.mft
File:                     40b526ba23ca7ed535f9753dc1684d3cd0025f33.mft (raw, json)
Hash identifier:          v1fdLisI0KU5Ab6uoNobI5AJieV/brpdlrbqd/XG17I=
Subject key identifier:   DC:E6:DD:38:69:49:27:57:BB:2A:12:94:28:4F:69:87:84:8A:EE:4E
Authority key identifier: B5:7D:57:4A:A5:E8:B9:E2:28:CB:A8:2D:EC:2F:00:CC:24:B6:F9:7E
Certificate issuer:       /CN=40b526ba23ca7ed535f9753dc1684d3cd0025f33
Certificate serial:       27CEC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b526ba23ca7ed535f9753dc1684d3cd0025f33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/40b526ba23ca7ed535f9753dc1684d3cd0025f33.mft
Manifest number:          0DC4
Signing time:             Mon 15 Apr 2024 01:21:28 +0000
Manifest this update:     Mon 15 Apr 2024 00:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 02:56:17 +0000
Files and hashes:         1: 1d067dfc08ea62768eb4bed843e8f0d7ba521a78.roa (hash: BJ/NrpZ6Bzjk+qMQjUXJL3+8e52LvSK3VoNU8wADqkM=)
                          2: 40b526ba23ca7ed535f9753dc1684d3cd0025f33.crl (hash: UZ7tHdTkmZ8xnCABImRx2WQyJcXviDKqdmPUBzGNRJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2608841 (0x27cec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b526ba23ca7ed535f9753dc1684d3cd0025f33
        Validity
            Not Before: Apr 15 00:20:17 2024 GMT
            Not After : Apr 18 02:56:17 2024 GMT
        Subject: CN=cee3dfadef507d376eff7b2c3d9997120cae1c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:3e:1f:64:0d:48:21:54:9d:21:3e:1a:1a:
                    e4:c3:1a:95:af:9f:ec:4a:de:24:09:20:c6:22:08:
                    8a:f8:c2:15:47:8c:b2:b2:c7:70:74:3b:5a:1b:44:
                    8f:e7:0f:b1:1d:8a:6e:c0:bd:7c:8b:f9:66:3c:a4:
                    2c:fc:79:ed:41:62:ce:19:7b:77:cc:8d:8e:61:47:
                    80:58:2c:fa:28:a4:30:33:1a:75:09:6b:b6:58:29:
                    33:86:ab:c5:cf:5d:7c:1a:98:14:3e:90:85:d5:54:
                    0d:ef:65:57:33:6e:3c:73:9a:11:18:92:3f:06:f0:
                    23:c3:97:5d:65:30:f3:57:61:98:7c:87:fc:c7:a7:
                    7d:fc:a2:59:53:ac:2d:d1:66:19:78:3a:a4:a3:c6:
                    a5:72:33:10:b6:45:9c:86:14:81:c3:89:ed:ba:13:
                    f5:d2:93:f3:da:8e:19:57:65:be:3b:f4:68:46:7b:
                    79:a0:f4:80:20:81:c1:60:48:28:48:7a:24:c5:f7:
                    7a:6d:26:d5:97:37:3c:17:17:8b:ab:1e:d4:31:be:
                    08:d8:02:75:76:ba:31:ef:b5:98:b8:14:a9:07:a7:
                    08:8d:f7:57:c7:08:f1:8a:6c:18:01:6e:17:af:27:
                    7d:c3:3e:cc:dc:59:ef:11:b6:05:66:ca:a6:fd:61:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E6:DD:38:69:49:27:57:BB:2A:12:94:28:4F:69:87:84:8A:EE:4E
            X509v3 Authority Key Identifier:
                keyid:B5:7D:57:4A:A5:E8:B9:E2:28:CB:A8:2D:EC:2F:00:CC:24:B6:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b526ba23ca7ed535f9753dc1684d3cd0025f33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/40b526ba23ca7ed535f9753dc1684d3cd0025f33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/40b526ba23ca7ed535f9753dc1684d3cd0025f33.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:ea:d9:3f:26:a1:b9:50:30:17:fc:d8:0c:84:36:69:2c:
         85:09:40:15:bb:8c:f8:9c:94:30:3f:c8:7a:a4:d2:64:ce:52:
         73:ad:8a:9c:49:96:53:e4:44:03:5e:9e:17:f2:55:45:70:f5:
         02:0d:64:32:be:ff:db:83:e8:24:04:43:da:cd:78:d1:4d:74:
         bf:be:2f:4d:37:f5:67:2d:b2:78:78:04:e8:d0:5b:e7:0b:e8:
         af:78:86:db:8d:4b:8c:32:dc:b3:e8:f3:1b:0b:74:76:34:8a:
         28:0c:e6:87:f1:60:ac:e8:df:1f:21:4d:71:2c:bf:40:87:ae:
         ae:19:cf:3f:94:30:f4:e5:61:06:67:64:24:d2:15:00:88:c6:
         ca:71:eb:dc:d8:02:d1:b4:56:92:61:c6:17:1d:0e:0a:e5:dc:
         b3:79:a7:e3:25:15:a6:cf:f6:b9:5c:98:ec:95:e8:d1:cc:a8:
         5a:48:48:83:09:37:61:32:a8:21:c9:d9:fb:10:0a:27:8c:76:
         02:86:9a:94:eb:34:e6:4f:1d:25:84:5a:c4:ab:91:27:8a:4b:
         b8:56:f7:43:d1:3c:34:ad:75:92:dc:ba:ed:da:aa:09:44:05:
         6f:d7:66:82:f8:84:30:2e:77:86:38:e0:57:68:25:b9:a2:aa:
         d3:fb:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----