Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a5c8adf6f7bb40c78965ae212032e0e1788ce533.mft
File:                     a5c8adf6f7bb40c78965ae212032e0e1788ce533.mft (raw, json)
Hash identifier:          QpF5Rsq0k3ND5YhvwTf0yodr+R7rb1spBoYjgYlQF18=
Subject key identifier:   3F:75:09:8F:4F:26:F5:1C:55:30:A7:7E:DF:B4:41:5D:F7:D5:92:16
Authority key identifier: 95:FF:B9:81:4C:78:CA:AC:C7:C8:D5:F6:29:18:E4:F2:86:00:59:E7
Certificate issuer:       /CN=a5c8adf6f7bb40c78965ae212032e0e1788ce533
Certificate serial:       171957
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5c8adf6f7bb40c78965ae212032e0e1788ce533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a5c8adf6f7bb40c78965ae212032e0e1788ce533.mft
Manifest number:          0BA5
Signing time:             Mon 15 Apr 2024 07:20:55 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 10:18:17 +0000
Files and hashes:         1: a521de9910d0afde552b045ba12af4f735e1f433.roa (hash: FVc1zG4o23BtcVT6C4k8+KftHSHNQoYMQ42ROM0JMBk=)
                          2: a5c8adf6f7bb40c78965ae212032e0e1788ce533.crl (hash: XLToNb2dUWdIV/o9pNvX39ukfei/t2ERGs/oP/H4lhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513815 (0x171957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c8adf6f7bb40c78965ae212032e0e1788ce533
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 10:18:17 2024 GMT
        Subject: CN=7f150333b0f33019cca32d02873f887c1f04d8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:5f:f8:40:76:9e:b7:b0:eb:8e:97:e4:71:
                    db:29:65:83:a8:bf:8a:b7:5d:d1:51:57:1b:1e:b3:
                    a4:1d:77:5e:5c:a5:ed:38:bf:97:6b:e0:3d:dd:de:
                    4f:19:a4:74:23:76:fc:a7:e8:04:67:59:9d:26:d6:
                    cf:ca:ce:0b:35:5a:77:b0:14:51:a5:73:6a:d8:7a:
                    7e:d1:62:bd:6a:3c:31:9e:16:63:77:c9:15:68:df:
                    91:12:3f:d5:af:95:f3:cd:db:99:1d:7d:25:dd:29:
                    02:79:66:4d:cb:ca:b3:5b:3a:21:80:1e:d6:24:9a:
                    0a:49:55:ce:d6:49:7c:77:2b:f2:a8:ba:2b:88:cf:
                    aa:11:e7:6f:a9:41:67:d0:09:7f:89:82:3b:09:f0:
                    cb:41:7f:51:e4:a6:66:de:da:48:ce:38:1f:55:2a:
                    36:ff:1a:a9:49:73:eb:da:9e:d4:ee:bd:dc:9e:02:
                    19:35:63:c9:fd:94:8f:be:fa:01:a1:98:b6:1e:0d:
                    b6:97:24:fc:0d:f9:1d:05:2d:fd:92:5c:68:10:17:
                    e2:be:7b:92:f1:69:c7:e7:90:d2:43:42:f1:f0:1e:
                    9d:b7:91:92:ad:d8:dc:35:cc:10:4f:ea:b2:12:7a:
                    50:13:8a:df:6b:ba:b4:63:64:6e:25:08:25:ac:b3:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:09:8F:4F:26:F5:1C:55:30:A7:7E:DF:B4:41:5D:F7:D5:92:16
            X509v3 Authority Key Identifier:
                keyid:95:FF:B9:81:4C:78:CA:AC:C7:C8:D5:F6:29:18:E4:F2:86:00:59:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5c8adf6f7bb40c78965ae212032e0e1788ce533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a5c8adf6f7bb40c78965ae212032e0e1788ce533.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a5c8adf6f7bb40c78965ae212032e0e1788ce533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:f7:1e:bd:a0:f6:3b:8a:16:41:6e:3e:9e:0f:4a:30:06:b8:
         e9:62:e8:0b:b2:e6:53:63:a8:6f:ff:47:6d:93:dd:1d:07:56:
         9a:4f:c9:d4:5c:33:41:0b:b6:69:c6:d4:ae:b1:07:10:56:b4:
         a2:22:90:37:a8:34:01:c1:e2:1f:eb:ff:86:12:80:21:77:4a:
         66:3d:a3:49:dc:15:f0:ed:0f:e3:5c:bb:61:bc:ff:86:70:79:
         ee:b9:29:12:14:a5:81:9d:fa:44:32:39:f0:bb:57:6f:c6:54:
         7f:24:28:3b:70:11:59:1b:b7:bc:d0:bb:b2:bd:ae:71:61:01:
         fa:cd:31:d7:71:79:0c:14:ab:ae:ec:14:03:6b:b9:67:e7:10:
         32:3c:79:17:2e:1c:ae:c2:7f:e0:31:b1:b1:81:62:ad:d0:de:
         e6:55:94:01:7b:d8:05:0b:c7:6f:a3:8d:0c:67:a3:75:b9:e6:
         ac:a6:7c:84:5a:fd:ee:71:71:e6:ab:54:ff:2e:0d:e9:e4:66:
         71:dc:8b:68:14:08:08:20:cc:7a:a2:7f:60:4a:34:ac:5a:7f:
         18:6f:5a:cf:66:3a:13:78:59:aa:5f:0a:23:6e:91:fc:e5:aa:
         46:08:de:23:dd:83:fa:8c:94:3a:52:03:5c:f4:c4:51:e0:3a:
         c4:e5:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----