Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.mft
File:                     d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.mft (raw, json)
Hash identifier:          3uMy4PBJTNTojZ9toQt9DaBofDPQYoYbWz2GP6EPkDc=
Subject key identifier:   2D:1E:6D:AD:13:C4:DF:8E:1D:E5:17:59:F9:97:E9:DE:9B:88:31:C0
Authority key identifier: D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30
Certificate issuer:       /CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
Certificate serial:       1950EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.mft
Manifest number:          05C6
Signing time:             Fri 24 Jun 2022 14:12:37 +0000
Manifest this update:     Fri 24 Jun 2022 13:12:14 +0000
Manifest next update:     Mon 27 Jun 2022 14:51:14 +0000
Files and hashes:         1: 1157d56de767f53941dbf0b3ef6421aa90796d2f.roa (hash: 3OXxKQ4mh25X0CFyiwVlWHlTxe3k84pKGcA6hVfXycg=)
                          2: 4595ac6b92c0c4ea96334bc671af80fc52f829f0.roa (hash: dhYIqzl9U0J4oXGrj1cxL5gaHzi786iM1CHFpzTbRMI=)
                          3: 4f27c86ae6ffcbee758a060c1fe5047607a8cf12.roa (hash: 3sAHf7vZGYHq+MKbUyypsE3p9WV61DG3RBcSY6HMJ/w=)
                          4: 6dfcfbf2120b048ea0b15bdc3b720a925f8d821f.roa (hash: 0WqN7AzksjgJR/mh7UoxJTDaJy3HUa2FZ4XgUZwpz60=)
                          5: 831707ffd3cb6cd297c4858892e74d54c5a6e035.roa (hash: KGKJYDdnXhgg9BlJgNxIymp6XtBZ1mQ39wSm7Ajfwsk=)
                          6: c71de1cd858e31f7110f452b88ce5affbb7a7bad.roa (hash: EWgNSp714Ha9J+SDTSqA92TQFK7bTI853T5Gr8URdcM=)
                          7: d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.crl (hash: GIFp5HzrO70ky/JmTzlBaFPna5h6YHM/uMcnsqLVjws=)
                          8: fc231c000d2452749400438f28542ade213e6a31.roa (hash: iNRJjrg1d+1UIcIuFK25Q3zQOfjmnCmq5bBe36wd2pM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659115 (0x1950eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
        Validity
            Not Before: Jun 24 13:12:14 2022 GMT
            Not After : Jun 27 14:51:14 2022 GMT
        Subject: CN=890b8a5f46429bb88246cf289d4b5f80ff32f36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:08:9c:e6:da:a7:7e:b3:28:ac:73:2e:66:
                    7c:d5:5b:55:da:6c:7d:18:e0:2c:ca:fb:45:57:30:
                    b8:41:58:a6:5d:f1:24:9f:8e:8b:19:57:8e:fe:fa:
                    1a:6d:a7:a4:92:c2:7b:35:00:ff:12:4a:0f:07:63:
                    eb:be:3d:a0:ab:0a:81:5b:04:25:ce:46:aa:e9:67:
                    fa:63:0b:99:cd:6a:25:f5:db:c3:98:3b:53:70:79:
                    38:3e:e1:83:1e:ef:d4:18:16:38:51:02:a9:60:ee:
                    49:dc:3c:41:15:49:8a:2f:18:39:c6:31:6e:7c:62:
                    26:fc:5b:8d:4f:72:c7:2b:33:40:36:27:3d:3a:31:
                    ec:06:75:fa:ce:c2:67:73:f7:51:1b:ca:c0:0f:3e:
                    39:7e:7a:da:9c:0e:04:74:ad:0f:58:f6:22:e5:60:
                    5e:70:b0:88:6e:50:c6:8f:2b:91:a8:a1:e9:16:a1:
                    d3:d4:b6:b2:04:01:9e:4c:25:46:70:c8:51:7c:dd:
                    25:c1:c9:5e:b5:4d:2d:d8:8b:6a:f5:3a:ab:c0:fb:
                    21:44:94:e3:28:5f:c2:1c:ba:83:4f:46:cb:a9:f4:
                    de:25:76:dc:55:eb:8f:7c:12:88:a3:ed:71:af:ca:
                    f3:aa:f8:09:ea:0d:fc:fd:7e:ed:2d:e3:c2:b1:4e:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:6D:AD:13:C4:DF:8E:1D:E5:17:59:F9:97:E9:DE:9B:88:31:C0
            X509v3 Authority Key Identifier:
                keyid:D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:0e:f3:f6:3b:43:9f:38:b3:ff:c1:98:2b:d1:17:3d:10:
         37:6b:7e:49:45:fc:0e:d1:7e:b5:c4:a1:78:28:88:a5:34:0f:
         b0:8a:81:59:f0:2d:b2:88:e2:d2:33:35:d9:b0:48:a5:17:bc:
         64:46:65:a9:6a:68:a7:5f:23:d1:be:0f:8d:36:c2:b6:f7:24:
         3f:23:0f:90:94:53:19:9f:d4:41:6e:90:66:96:fa:54:d3:4a:
         ec:12:7f:b6:6e:29:0d:b9:ed:22:0c:85:31:39:17:7e:a3:68:
         cf:c0:78:e5:da:c6:3e:78:ed:e4:eb:bd:fa:4e:91:3d:c8:91:
         38:8d:b7:99:c2:dc:0e:e8:84:34:44:a3:dc:37:2b:ae:0d:fd:
         ba:9c:d9:b2:8c:a3:6d:a7:fb:8b:a7:51:1d:d8:16:50:7b:56:
         d3:23:19:7f:c8:94:11:b4:6d:75:91:d0:5a:6a:94:b8:48:fd:
         73:22:cd:78:15:fa:6d:55:fb:e3:11:69:9d:d1:29:f5:f6:3d:
         20:0a:a2:46:e3:4b:c3:73:3c:fb:2c:65:73:f8:f6:93:75:34:
         84:3a:d7:7d:38:55:0a:9f:4c:48:ee:6c:92:d0:71:b0:49:53:
         24:5f:39:f5:f9:d0:f9:b3:f5:8d:74:3e:ff:b1:49:ff:a5:48:
         cf:36:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----