Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/491acfc3caa333c01c36fa039f700188dbc91264.mft
File:                     491acfc3caa333c01c36fa039f700188dbc91264.mft (raw, json)
Hash identifier:          pKy0DdE7ptZCQ6iTSBI6ms1QbUDEvuiefmezUenFK24=
Subject key identifier:   29:4B:E1:EC:8A:21:63:C0:F7:A3:D7:09:3A:F6:CD:D5:ED:EF:62:76
Authority key identifier: 44:3A:16:8A:F5:F7:74:B3:BD:11:73:5A:B5:DA:F9:53:93:A2:1A:F9
Certificate issuer:       /CN=491acfc3caa333c01c36fa039f700188dbc91264
Certificate serial:       08B6C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491acfc3caa333c01c36fa039f700188dbc91264.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/491acfc3caa333c01c36fa039f700188dbc91264.mft
Manifest number:          0480
Signing time:             Mon 15 Apr 2024 07:20:42 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 09:13:17 +0000
Files and hashes:         1: 30838f0287a310c348df869b32c827332bfbe8cb.roa (hash: hJcZLkQ0B4MxHX69eIMIOJAN1SklQF1jb40uVr1XYO0=)
                          2: 491acfc3caa333c01c36fa039f700188dbc91264.crl (hash: q/bcOuMR/a34scslkUF/QeMQEEwQxH9b5BhASxcd9d8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571081 (0x8b6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491acfc3caa333c01c36fa039f700188dbc91264
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 09:13:17 2024 GMT
        Subject: CN=f335f5a0891cb894f8257f7bcfa0ee34629d3bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ad:d5:a5:31:c7:95:ef:87:24:50:af:1a:66:
                    46:36:07:1d:dc:00:13:a8:02:1a:d6:d4:52:c7:e5:
                    0a:4c:01:e1:60:c3:b4:a7:4c:f2:0f:24:e7:ff:64:
                    a9:b2:20:fe:3a:80:26:a8:db:dd:f2:74:35:98:a7:
                    18:be:58:d0:53:d2:27:51:87:18:79:17:65:c8:fd:
                    c2:64:13:50:14:ae:67:6c:44:84:5a:cd:2f:46:20:
                    00:20:21:4d:da:52:ec:18:20:7d:d9:eb:49:6e:76:
                    19:62:07:0b:82:80:a3:4f:1c:6a:73:65:3f:5a:14:
                    67:f4:c1:4d:9c:6a:1a:d7:fe:8c:ac:d3:fe:72:1e:
                    a9:6a:09:a2:ef:c8:47:1d:67:10:b0:b4:30:69:dc:
                    b3:9f:f3:5a:a7:ed:f2:1a:a7:47:d8:a5:2d:aa:54:
                    5b:b0:a2:c5:07:a8:eb:d3:d8:47:75:24:99:0e:1e:
                    33:43:3f:46:53:aa:87:57:1c:a4:64:c0:1d:29:77:
                    3e:67:42:1e:e3:70:5e:69:92:aa:c1:4b:db:70:e8:
                    7e:16:b2:ac:00:4c:11:60:66:fe:ec:05:61:81:4d:
                    d7:f3:a8:9c:16:12:be:98:5a:fd:1d:3d:90:e5:02:
                    c7:59:31:d9:33:30:84:8c:18:c9:3c:cc:b6:eb:c0:
                    99:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4B:E1:EC:8A:21:63:C0:F7:A3:D7:09:3A:F6:CD:D5:ED:EF:62:76
            X509v3 Authority Key Identifier:
                keyid:44:3A:16:8A:F5:F7:74:B3:BD:11:73:5A:B5:DA:F9:53:93:A2:1A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491acfc3caa333c01c36fa039f700188dbc91264.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/491acfc3caa333c01c36fa039f700188dbc91264.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8ef0beb-f843-4b4d-85b8-9ac15b55a299/491acfc3caa333c01c36fa039f700188dbc91264.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:65:d8:ae:a0:69:4f:a6:00:b8:4d:86:28:52:98:e4:cd:90:
         e5:d5:fe:d0:83:aa:63:6c:49:37:85:8a:60:aa:e2:fc:1f:98:
         d3:b1:33:c0:f8:ec:13:ea:6d:24:9c:9c:18:3b:68:34:73:c0:
         a1:2d:9f:88:64:38:b4:76:94:6a:0e:b9:eb:1f:07:e4:e4:ff:
         53:76:8c:d1:97:0d:59:b6:48:b1:4a:0f:56:60:08:df:9c:ff:
         d3:2f:5b:dd:d3:f0:75:7f:27:36:e7:99:a8:c5:45:d9:0b:93:
         55:d4:6f:62:b4:8d:31:53:d6:5f:f8:49:c2:f2:ad:91:ee:45:
         35:07:17:6a:ef:46:fa:30:00:0e:cd:06:0a:43:b4:0c:d6:2d:
         62:8f:3a:f0:b0:1c:dc:9f:49:bc:cf:10:10:11:bf:df:8a:d8:
         7f:5f:4e:fe:22:cb:5a:e4:46:98:72:4e:c8:cb:c8:9d:06:a8:
         f4:64:b2:1e:07:d9:80:e0:fb:34:24:b5:33:34:70:32:ab:ce:
         83:0a:a9:59:75:7b:67:e8:ff:99:41:f5:f8:81:d0:df:06:5a:
         fd:77:24:e3:d7:38:df:ce:32:0e:2b:51:50:98:24:ae:4a:51:
         64:71:66:14:67:39:11:74:72:39:8e:68:19:0b:8d:0f:a4:ed:
         aa:04:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----