Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba8075b8-262b-4947-95b4-bf5b22cf74f2/a625277ec533e51c672c524464edb0cc29dba9c1.mft
File:                     a625277ec533e51c672c524464edb0cc29dba9c1.mft (raw, json)
Hash identifier:          Vuuqfq32lq8zBK7g6PUaGqlp2SNRtTrPHsbYuevTHGs=
Subject key identifier:   E5:F1:A2:36:C4:24:80:39:57:CB:65:AC:6B:9B:52:32:E8:96:07:31
Authority key identifier: D1:81:49:9D:84:FB:EF:C7:30:CD:E5:5E:61:DC:27:F5:59:EA:BD:49
Certificate issuer:       /CN=a625277ec533e51c672c524464edb0cc29dba9c1
Certificate serial:       190D83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a625277ec533e51c672c524464edb0cc29dba9c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba8075b8-262b-4947-95b4-bf5b22cf74f2/a625277ec533e51c672c524464edb0cc29dba9c1.mft
Manifest number:          0CBE
Signing time:             Mon 15 Apr 2024 09:21:14 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:28:18 +0000
Files and hashes:         1: 44222d317d83c5e236b2a16ac7624cca86149fca.roa (hash: hvp89x95cGPDKV2ELoaQ7G5uvJXX1qfu23DGYL0mQmQ=)
                          2: a625277ec533e51c672c524464edb0cc29dba9c1.crl (hash: n3ucn/ktdNRJLIsK+c1ywWDXyKe09H2hMXR5inbaaH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641859 (0x190d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a625277ec533e51c672c524464edb0cc29dba9c1
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:28:18 2024 GMT
        Subject: CN=121a4cbc68cd5ea9b76ce22cb9ae09bbbc9217be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:a9:c7:bb:eb:65:fc:42:c1:53:87:dc:e7:
                    6c:e7:dd:63:01:39:d0:e2:03:9e:c7:8d:2d:9a:62:
                    ea:eb:78:05:9f:ac:58:a6:1b:1a:69:88:3c:d5:6c:
                    90:2a:c7:af:e3:6b:3d:70:98:16:be:6a:6f:89:76:
                    68:af:f2:d3:c5:10:20:f1:98:3f:8b:4e:2a:a2:98:
                    7c:81:66:79:40:eb:a4:7d:b6:14:9e:9e:36:67:e0:
                    72:8c:aa:b5:3d:5c:bf:35:7e:c5:eb:12:8b:46:93:
                    8d:65:74:20:53:5a:c0:82:71:d0:11:0f:d4:2d:82:
                    e0:75:5f:d7:31:e6:dc:83:83:74:89:ab:7a:0f:ac:
                    d8:65:31:08:03:4a:7c:e1:35:ea:c1:56:18:47:77:
                    7d:ef:98:5f:b7:a3:f6:f8:e3:69:eb:e3:4d:37:96:
                    d1:4f:1c:03:50:cd:e4:01:fe:58:79:1f:c2:2d:0f:
                    01:8c:5c:8a:59:be:1c:48:76:30:45:29:4d:a6:30:
                    1f:4c:1c:62:a0:f3:a2:5b:0a:f5:57:cb:ad:ed:58:
                    b0:9e:14:c8:75:16:d9:43:5d:d9:0f:59:61:56:b1:
                    83:47:1d:61:42:ab:57:fb:30:14:8a:0d:4c:e1:79:
                    cf:95:78:d2:b7:40:d1:1e:a0:d6:10:b6:e0:fa:88:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F1:A2:36:C4:24:80:39:57:CB:65:AC:6B:9B:52:32:E8:96:07:31
            X509v3 Authority Key Identifier:
                keyid:D1:81:49:9D:84:FB:EF:C7:30:CD:E5:5E:61:DC:27:F5:59:EA:BD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a625277ec533e51c672c524464edb0cc29dba9c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba8075b8-262b-4947-95b4-bf5b22cf74f2/a625277ec533e51c672c524464edb0cc29dba9c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba8075b8-262b-4947-95b4-bf5b22cf74f2/a625277ec533e51c672c524464edb0cc29dba9c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a3:7c:44:b5:37:74:b9:8a:9f:41:9a:20:18:bc:27:8c:d1:
         78:80:0a:96:d6:a8:0e:19:eb:b1:f4:25:e4:9a:6a:41:c4:58:
         31:c8:fd:18:0f:0e:8b:ef:24:1b:ca:57:61:b4:f7:85:6f:39:
         1c:55:f8:cf:87:ba:4d:be:13:8b:43:fa:11:91:2b:14:b9:48:
         4f:a3:bc:a0:d2:53:11:26:5e:90:57:1b:ed:1b:03:74:3d:c6:
         87:e1:d9:03:04:a3:af:e3:40:ab:dc:30:16:e1:d6:7d:f6:c9:
         1f:97:81:ab:e0:e3:7c:7f:9f:2a:0c:d2:5b:b2:de:e0:44:d2:
         f4:cd:47:bc:cf:39:4e:03:1a:2a:63:3b:4d:71:d0:81:cf:02:
         b8:2d:25:22:11:1e:75:66:62:ac:e9:dd:75:05:82:fd:20:49:
         a2:43:08:4f:29:cf:27:16:d5:d6:5f:d7:c3:1e:e0:0b:f3:35:
         bd:44:d1:9b:67:97:8e:ad:ac:fc:ba:b3:78:dc:24:4e:62:b5:
         4f:86:bb:04:1a:70:95:0a:a0:6f:81:0d:b0:75:17:6f:3c:b7:
         99:f8:77:a7:37:fb:11:32:5e:5e:2c:3c:25:12:b8:c1:76:e4:
         ab:cb:f7:87:1d:e3:6d:52:c2:eb:c6:33:62:72:91:97:1d:48:
         d2:00:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----