Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft
File:                     228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft (raw, json)
Hash identifier:          MFOnE4L8ewmLDgDtp+e2LMJGpNFeV348+jDzYDd/3S8=
Subject key identifier:   64:3A:0C:D4:A4:BD:A9:74:96:3B:56:0A:9D:E3:02:ED:6E:81:B2:5D
Authority key identifier: AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61
Certificate issuer:       /CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
Certificate serial:       19CD81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft
Manifest number:          0D5F
Signing time:             Mon 15 Apr 2024 04:21:35 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:11:26 +0000
Files and hashes:         1: 228f4088c9ec4b56bc838a3499f768d5cf73bab9.crl (hash: juIUmZkRnKYbAgMpiIhKcm+UbI9MiWtyGFuZyNXKydw=)
                          2: bcad812db3357ade25d5fbba3ec501a2079e6a05.roa (hash: ThO8f8HpdTx+8AUuiaaIPncufatiqPd9i79uCaKZs8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691009 (0x19cd81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:11:26 2024 GMT
        Subject: CN=1d844fbd93dfdc3bbcdfa252dd2d99937eddc256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:fb:2c:01:d2:3a:b6:01:04:77:d8:7c:7b:
                    34:82:57:51:3e:d5:75:d2:87:78:cb:45:e2:f4:91:
                    e5:e5:a0:4f:f5:f1:85:d3:b9:dc:89:cd:1b:42:05:
                    cc:67:bb:01:0c:6e:5e:01:72:76:53:5f:19:16:c0:
                    f1:bf:05:7a:2b:e9:f2:cb:6d:2d:6a:ca:82:c4:bc:
                    b8:e8:76:83:6d:24:b1:4c:be:78:be:5a:bb:2e:a7:
                    76:54:40:4b:b4:32:11:33:c1:0f:77:7e:6a:3e:46:
                    27:df:0b:d7:64:ac:10:74:e3:06:5d:25:27:f4:c4:
                    f5:5b:f1:df:3a:79:4f:d5:63:bc:9b:28:9d:67:67:
                    3e:02:4b:be:90:16:0d:a7:8c:40:4c:71:b3:f2:58:
                    f6:49:a9:8b:2b:9b:34:ca:7f:23:d0:af:c4:3d:6a:
                    aa:e1:ad:6a:b4:34:9c:0a:f7:42:f5:9d:89:12:63:
                    be:1e:d5:d8:15:9e:20:95:44:7f:bf:d7:d5:7e:11:
                    6e:aa:61:fb:59:60:f0:79:ba:99:f2:d4:7f:30:3f:
                    20:37:45:b9:e4:71:c6:1b:02:cf:4b:55:a7:70:f0:
                    e6:19:dc:15:e5:b5:98:6b:8b:9f:c0:6b:2d:08:a7:
                    f4:7c:ef:58:2f:68:36:75:d2:45:c8:2e:da:d1:97:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3A:0C:D4:A4:BD:A9:74:96:3B:56:0A:9D:E3:02:ED:6E:81:B2:5D
            X509v3 Authority Key Identifier:
                keyid:AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a6:86:60:c1:59:b2:0a:fc:79:2d:f3:a9:b6:ac:25:dd:ba:
         5b:56:af:69:6c:cd:fb:ad:75:1b:40:c8:28:fe:8e:67:04:03:
         b6:c9:7a:46:2c:3f:4e:7c:1a:ab:d7:92:91:42:f5:f4:ce:e1:
         7c:a3:c6:64:22:ff:d9:75:04:90:62:dc:61:12:b5:45:0b:c8:
         a7:49:3b:54:c9:86:3e:40:47:e3:26:8e:da:1e:2c:cc:f4:b1:
         5f:ad:3e:c8:28:e9:c5:e2:0b:db:b8:08:6b:74:73:c2:ff:36:
         48:aa:9b:39:d2:37:0a:be:e0:4e:b9:27:0d:27:36:57:ea:99:
         95:93:35:fe:c4:ff:7b:eb:de:92:e6:72:b7:ec:54:89:23:87:
         95:c8:ba:a0:dc:09:15:fc:42:e6:62:af:41:8c:fd:7e:44:25:
         b0:70:15:23:53:1d:3a:74:0f:2d:e5:ef:7c:5d:e4:75:69:24:
         ce:7e:fd:37:dd:06:6a:d5:54:dd:13:26:bb:a4:eb:cf:1d:a5:
         e7:35:3a:5a:87:37:b3:44:84:99:e3:11:17:c1:be:45:8a:f7:
         f3:a4:43:45:87:12:9e:92:10:dd:4e:3f:4a:79:ed:65:07:8c:
         64:71:f2:d7:87:cc:6a:ce:a1:f4:0b:9f:c0:f2:ff:bd:92:4c:
         cc:bd:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----