Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.mft
File:                     901c0d961f219c9ac4920f36c147c92354e14b00.mft (raw, json)
Hash identifier:          Bpp3hLTuroggX0XS6tflXiEaKEzrGOd+M+rkhTzNOXI=
Subject key identifier:   C5:B1:12:BB:75:0A:F4:DB:37:AB:CF:6E:72:CD:A5:6B:EA:A4:59:63
Authority key identifier: 4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB
Certificate issuer:       /CN=901c0d961f219c9ac4920f36c147c92354e14b00
Certificate serial:       28D10E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.mft
Manifest number:          0E17
Signing time:             Mon 15 Apr 2024 06:21:51 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 09:16:39 +0000
Files and hashes:         1: 901c0d961f219c9ac4920f36c147c92354e14b00.crl (hash: ft4H2bR5fyrUTQSNeG8Kc4mJlqL0rO+jC+zc5v2kroc=)
                          2: ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa (hash: aTWKKkPy0eDbfkQW2F97XKWDnGkOLPDqsw4a9luu5aI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674958 (0x28d10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901c0d961f219c9ac4920f36c147c92354e14b00
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 09:16:39 2024 GMT
        Subject: CN=8038dd2c229ef6a5a6de498ddd903032e5d49dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:ec:f8:9f:29:a3:48:24:7a:3d:bd:e6:9d:
                    1a:8f:c3:f1:67:5b:cf:e0:12:bd:d6:bf:ff:b8:65:
                    c7:0a:0e:08:b3:d2:bc:38:3f:ce:74:7a:72:82:71:
                    52:28:80:a1:c1:ee:a7:43:26:8c:42:d8:74:47:a9:
                    af:8d:00:8f:f3:89:51:46:d3:00:53:34:48:32:70:
                    12:0f:92:1f:8b:a4:36:16:ec:28:91:56:36:06:d6:
                    83:45:2b:7c:e1:0c:76:e4:1c:9e:fd:2a:e4:1b:d8:
                    f8:a4:37:3c:bb:d6:e7:44:a0:b7:59:33:72:00:31:
                    06:4e:cf:32:73:e6:97:d7:e9:86:ef:59:c7:9b:3b:
                    be:23:3d:15:2d:16:1d:5c:c2:0b:a3:bf:b0:9d:2d:
                    7b:ec:88:cf:ac:ab:34:95:78:ed:e7:15:ff:fb:fd:
                    84:9f:59:53:2a:8c:cd:df:8d:94:4c:75:a5:c6:a0:
                    91:05:9e:fe:9f:0e:a5:79:68:3b:ea:d8:1f:ec:2b:
                    07:c7:f8:b3:c6:3e:51:5f:1c:90:59:03:67:fd:20:
                    4e:77:5f:61:c3:64:e6:69:ad:e9:8b:3a:d2:1c:26:
                    61:d4:96:b4:34:4c:31:2e:40:24:87:da:77:16:9f:
                    eb:72:12:ff:2e:c2:71:af:0f:d5:48:7c:ac:df:b2:
                    4e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:12:BB:75:0A:F4:DB:37:AB:CF:6E:72:CD:A5:6B:EA:A4:59:63
            X509v3 Authority Key Identifier:
                keyid:4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:bd:4a:3e:e3:3b:65:c2:62:7f:22:da:91:9d:df:c8:1d:
         66:b4:f8:dd:7a:67:e4:51:12:38:dd:b8:ee:20:a9:ab:55:ae:
         f7:f5:d8:ff:0f:20:27:2d:32:88:ee:1d:4e:d7:39:d6:eb:18:
         6b:bb:e5:ca:db:b7:b5:56:2d:b2:32:6a:69:94:e3:84:d7:ff:
         05:13:21:3b:2e:51:30:1f:b2:01:90:16:8f:ac:db:ef:26:13:
         32:bc:79:23:ff:eb:0c:d2:65:e1:08:13:49:39:73:c4:88:2f:
         ca:40:cf:12:7a:50:1a:0e:8b:98:b5:d6:d8:61:ea:e3:b9:97:
         10:b2:9e:a4:fa:7f:4d:49:28:75:94:21:26:cd:e2:a2:13:b5:
         7c:a8:ce:a3:b3:36:aa:a3:8e:1c:95:76:9d:a5:2a:c7:36:2d:
         b8:c7:89:1c:cc:83:9c:08:c8:e4:55:ed:bb:ae:af:f1:52:cc:
         e3:91:aa:f8:f1:4b:15:d4:7c:67:e8:c3:94:59:10:c9:f9:a3:
         36:ab:a8:5e:a8:5b:a6:64:52:3d:fd:fa:77:3e:eb:ca:f2:25:
         81:0f:85:5c:8d:1f:9c:7a:af:ac:a8:95:95:bd:da:10:c6:19:
         d9:c6:d4:7a:4c:de:aa:72:71:89:a6:71:e4:bd:a7:f0:44:f1:
         c7:76:54:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----