Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.mft
File:                     88c828fbf7c4212619b24a7d12142f15f0f5ffea.mft (raw, json)
Hash identifier:          dMDpr2MCM/P0UiDvmDjsfyWDSEBDPTIc9sWw4kByinY=
Subject key identifier:   D9:0F:95:AC:5F:79:A7:3F:2B:1B:29:C2:01:44:CC:B5:B6:09:4C:3D
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Certificate issuer:       /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial:       0AC46B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.mft
Manifest number:          0553
Signing time:             Mon 15 Apr 2024 08:21:11 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:46:16 +0000
Files and hashes:         1: 88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl (hash: oLOVxbVNWZN1AXmX4ROfuSwccSj4Y2UCUzIpY0+Tmvo=)
                          2: d0af110911f7bec04fd7ac9e9c12456f754b5a9c.roa (hash: bJa0v1fdfov1y1OUcrogvigOnTG/clOsU18913LpD5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705643 (0xac46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:46:16 2024 GMT
        Subject: CN=ec5b16ec8546ee4f8240920c90bbf0e08eb346f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:6a:bc:72:c3:60:0a:25:5f:05:02:33:2b:
                    e7:91:c1:60:ff:9b:77:9a:98:f8:5f:69:6e:f6:fd:
                    19:1b:c6:d6:e5:3b:2d:e6:c6:02:05:44:5f:1d:2e:
                    e3:71:1a:71:9b:b7:c3:9e:cb:7b:35:44:ee:55:c9:
                    54:14:de:84:04:7b:65:35:de:a6:e7:4e:91:a1:cd:
                    66:cf:20:ed:8e:c3:ac:d8:8c:de:b6:f3:c9:e8:92:
                    7e:ea:c7:92:ae:30:b6:f7:1c:8f:98:a5:f8:ac:86:
                    2e:4a:b3:d1:e6:c0:40:20:d8:cf:af:10:72:0c:46:
                    ba:29:d5:15:f5:b0:0c:e0:f4:35:50:dc:83:7b:5c:
                    12:a9:cd:08:73:8b:a5:08:30:a9:57:6f:49:0e:61:
                    9d:f0:e3:59:75:8c:f0:1a:cd:a3:b0:90:54:a6:e0:
                    da:25:d7:03:53:fb:27:b4:39:44:1a:f8:78:85:68:
                    9e:83:5d:ee:13:23:a9:43:3c:33:cc:20:e0:68:e3:
                    f3:45:fb:e6:43:1d:c3:c2:82:7f:29:08:a1:42:58:
                    1c:64:5f:2b:32:e6:39:93:70:ab:ed:7a:62:1f:c3:
                    46:d5:7d:25:d1:a6:f2:33:ae:2a:f3:d0:7c:b9:c2:
                    c8:69:d9:dd:99:bb:b4:61:b9:df:61:32:b8:91:66:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0F:95:AC:5F:79:A7:3F:2B:1B:29:C2:01:44:CC:B5:B6:09:4C:3D
            X509v3 Authority Key Identifier:
                keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2e:29:da:5f:e0:25:e7:41:a6:1d:c0:21:1e:c1:4a:56:c6:
         14:d8:b7:04:3c:52:62:79:de:f4:42:03:16:9d:99:23:4e:ca:
         6a:fa:b5:52:09:d6:fd:1b:ac:d5:0f:4d:9d:b9:bc:fc:ac:2a:
         0c:2c:b5:53:39:92:6a:8d:6a:62:52:1b:16:1b:33:fe:0d:ee:
         eb:6f:3f:d8:33:9a:15:56:3f:ef:1c:a0:18:08:32:22:0a:21:
         c5:e7:b9:74:5a:6e:48:77:ff:71:4a:81:72:87:6b:a3:03:d7:
         e2:c1:78:4d:79:5b:97:87:46:60:fc:8a:3a:70:d1:ac:a1:fc:
         c5:7c:76:fc:d1:b0:63:b0:ba:42:56:b6:0c:8a:dc:a1:67:f7:
         6d:47:3c:8e:09:d5:2a:d3:bc:53:c6:24:4c:e1:b9:55:4f:63:
         ad:6c:8e:ea:08:5e:60:68:7b:bc:e4:50:2c:fb:86:17:1f:f9:
         9f:08:91:b9:16:ae:d3:de:1a:e6:0a:c3:85:92:a0:0d:1b:d5:
         8c:a7:13:bc:74:66:fd:34:34:10:98:0c:1a:fd:61:de:12:7c:
         09:d0:1d:5f:1f:3d:c3:59:f6:ee:8e:f3:2f:61:b3:07:3e:f9:
         d6:c4:38:0d:07:95:cb:89:b4:d0:7b:fd:00:22:56:30:57:2e:
         5b:e6:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----