Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e27eec05-4eb4-47d6-9573-b4ccee1ad96c/290aff7d1e492984c44cd91b24e605f06a13914f.mft
File:                     290aff7d1e492984c44cd91b24e605f06a13914f.mft (raw, json)
Hash identifier:          pfXpOyr5PTVcqUjpAzxqQlecZNr8WJOV6x+gQfHlmj0=
Subject key identifier:   C7:68:C5:A4:2F:36:C1:B8:DE:C7:E4:F3:C7:FE:5F:1E:80:A7:33:12
Authority key identifier: 91:76:77:AB:F3:84:E7:20:93:10:32:8D:6B:A1:F9:7A:6E:6E:3B:03
Certificate issuer:       /CN=290aff7d1e492984c44cd91b24e605f06a13914f
Certificate serial:       096901
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/290aff7d1e492984c44cd91b24e605f06a13914f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e27eec05-4eb4-47d6-9573-b4ccee1ad96c/290aff7d1e492984c44cd91b24e605f06a13914f.mft
Manifest number:          04BE
Signing time:             Mon 15 Apr 2024 03:21:10 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:15:17 +0000
Files and hashes:         1: 1e2996c1d3e12c25852efd68c83db33ea4b8784c.roa (hash: z4r9u6D5Ob0ePzP5/4350buNIec0qoc6ewzzdfEIBEQ=)
                          2: 290aff7d1e492984c44cd91b24e605f06a13914f.crl (hash: bHkq1hUwofRgSb5x1mDu3wlkho31KoBPnnSxG98WXc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616705 (0x96901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290aff7d1e492984c44cd91b24e605f06a13914f
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:15:17 2024 GMT
        Subject: CN=296cd15ff189037c5b15e6b5fb8e9e3517e742f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:b8:e8:b4:21:78:ce:87:94:38:53:a8:fd:
                    85:0f:c4:ee:4c:c3:84:dc:2a:44:66:50:04:94:3a:
                    6b:50:7d:26:91:85:e5:fc:68:55:3b:fa:20:eb:07:
                    90:66:fc:30:c1:d8:cb:54:57:f4:8d:27:8c:45:a9:
                    cf:a2:34:54:cd:73:86:5f:fb:47:5b:1a:f9:0f:ba:
                    08:40:64:0b:47:79:d8:87:59:8e:c5:6b:42:01:6c:
                    c0:27:8d:4e:0b:75:35:10:24:30:47:90:b2:b3:7b:
                    02:41:23:28:22:74:b2:6e:5a:16:13:f3:57:0f:35:
                    55:f7:b7:83:9c:95:ef:fd:b9:a1:33:88:e4:bd:b1:
                    33:9a:ab:40:f3:80:59:ef:19:5a:2f:f6:cf:eb:c8:
                    52:1a:07:4e:a9:bd:73:57:7e:a6:44:6e:87:eb:f8:
                    f9:66:11:b4:89:f4:2c:6d:68:f8:18:91:d5:31:54:
                    db:45:3f:d2:84:75:bb:b1:bf:10:74:74:42:46:48:
                    95:7e:54:01:af:12:b5:5b:dd:34:95:2c:6c:a7:59:
                    9e:a9:2f:36:a0:f5:25:02:f8:bb:8a:fb:68:54:ef:
                    b6:a1:04:6b:db:dd:0d:dd:75:15:58:96:af:ec:99:
                    3d:9f:4d:1b:9a:99:3b:6c:fe:5c:88:bc:5d:5a:48:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:68:C5:A4:2F:36:C1:B8:DE:C7:E4:F3:C7:FE:5F:1E:80:A7:33:12
            X509v3 Authority Key Identifier:
                keyid:91:76:77:AB:F3:84:E7:20:93:10:32:8D:6B:A1:F9:7A:6E:6E:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/290aff7d1e492984c44cd91b24e605f06a13914f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e27eec05-4eb4-47d6-9573-b4ccee1ad96c/290aff7d1e492984c44cd91b24e605f06a13914f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e27eec05-4eb4-47d6-9573-b4ccee1ad96c/290aff7d1e492984c44cd91b24e605f06a13914f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:70:25:63:41:1d:9b:5f:64:e3:fb:48:66:9d:29:eb:a6:a3:
         98:3e:e3:cb:d4:a5:a0:70:ff:9c:9f:3c:38:72:50:92:b4:36:
         1c:55:48:16:fa:8a:ae:1d:4f:ae:3b:69:d0:24:51:0a:6a:e8:
         9e:b9:0b:d7:ab:8e:09:ff:c6:0a:8c:2f:05:f8:a7:67:37:dc:
         5f:e4:8c:de:53:2e:6c:3e:53:e4:74:0a:2d:6c:91:88:cc:da:
         3c:f1:a2:ff:f3:93:3c:cb:6a:75:26:6e:d8:5a:54:38:eb:0b:
         92:e7:83:8b:50:3c:88:27:b3:38:db:4f:67:6b:34:51:77:08:
         f4:e9:d1:ba:5f:bc:58:50:fd:a7:5b:88:94:72:d2:c7:4a:e6:
         1d:72:05:8b:58:db:03:9f:a4:70:46:f8:d7:6d:6e:cb:08:19:
         8a:ed:db:14:54:c0:aa:15:30:a4:33:d1:2f:e8:90:93:43:f9:
         b6:30:85:38:06:39:75:b4:aa:a0:28:45:7e:b4:5d:93:8d:e7:
         75:30:3e:5f:7a:82:27:0d:83:6d:50:50:a6:9e:41:6c:e6:20:
         b5:05:94:3d:6c:d0:49:d4:e9:51:0c:bd:f2:af:11:08:75:0f:
         55:53:66:ee:af:65:4f:66:28:ab:33:79:b6:7d:a3:72:50:e7:
         8f:78:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----