Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.mft
File:                     faa3f9ed8c16ed5c1a56631f167199f123daf7d1.mft (raw, json)
Hash identifier:          AlBclzBCPy0y3FJ2KsKdTSfXZgrMS29gJEtq8rcwM4E=
Subject key identifier:   CB:D2:25:9D:AA:0D:F2:75:0D:F5:9D:7D:A0:81:B7:D5:E7:00:34:72
Authority key identifier: FA:4E:38:E9:7D:FD:8B:9E:E0:62:7E:99:2F:B3:EF:81:DA:88:19:79
Certificate issuer:       /CN=faa3f9ed8c16ed5c1a56631f167199f123daf7d1
Certificate serial:       02937D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.mft
Manifest number:          0154
Signing time:             Mon 15 Apr 2024 06:22:00 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:26:39 +0000
Files and hashes:         1: 33e54fd9acb81ad7c1356025c3a68acaed3d8258.roa (hash: INDdlKW1s9ffFj8Z9Cp2ZdWkC0k8VqTljMUKpVnsh5I=)
                          2: faa3f9ed8c16ed5c1a56631f167199f123daf7d1.crl (hash: eOeXoMtfPB1a8ECSXdAv2Qw/kK7GS9W6goG8f0eIsHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168829 (0x2937d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa3f9ed8c16ed5c1a56631f167199f123daf7d1
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:26:39 2024 GMT
        Subject: CN=6fe9f7026b76d8e578a6649f15bc41983e786cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:fd:31:81:19:4b:f6:aa:4b:52:b4:b4:e2:
                    a3:b6:ea:0d:e6:98:65:e7:dc:2a:b3:90:17:19:e2:
                    c5:73:22:de:a7:30:8d:cf:1b:f4:0c:35:f5:dc:35:
                    17:70:c3:6d:0f:cb:3d:13:00:54:d6:22:55:99:f6:
                    55:ca:de:c8:2e:c1:38:98:a6:1a:c6:0d:fa:af:16:
                    04:13:96:b2:7a:77:c3:4a:c9:20:27:6a:1c:21:e4:
                    90:82:3f:17:65:42:9d:f7:2e:71:87:f2:a7:0c:e2:
                    79:c3:ed:89:66:96:4c:75:fb:3d:de:09:76:e0:f5:
                    f6:de:ca:ee:16:21:a6:ed:ee:4f:30:93:d7:e7:8b:
                    9d:38:7a:c9:a1:3f:ed:e7:60:07:39:d5:94:1b:bd:
                    73:bd:52:74:30:38:c0:79:b0:51:47:70:dd:29:49:
                    35:fa:d0:32:4d:52:b3:90:7f:5f:21:91:8b:ac:87:
                    58:c2:3f:1c:08:1b:55:bb:e1:ef:3d:bf:ce:f7:f6:
                    d7:ff:58:b1:dc:05:8e:34:87:62:57:7b:aa:bf:4a:
                    6a:da:c4:a0:e2:10:b7:3f:45:b4:ef:5b:c6:82:a3:
                    3f:63:89:21:7a:e7:67:26:f9:87:0c:25:77:43:fc:
                    2a:5d:bf:b6:e9:e4:10:e1:04:9c:01:94:88:47:c6:
                    36:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D2:25:9D:AA:0D:F2:75:0D:F5:9D:7D:A0:81:B7:D5:E7:00:34:72
            X509v3 Authority Key Identifier:
                keyid:FA:4E:38:E9:7D:FD:8B:9E:E0:62:7E:99:2F:B3:EF:81:DA:88:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:47:da:9a:e6:b2:ab:5a:3e:50:20:5e:4d:72:11:8a:fe:d5:
         9e:1f:1a:36:32:e9:ef:fb:65:16:d3:42:8f:49:fd:5b:2b:12:
         a0:f8:cf:2a:a4:21:20:ed:21:d9:bf:0d:9c:d7:90:52:ed:30:
         30:93:2a:20:98:a9:09:1e:b0:a3:ef:a8:0c:00:3b:b6:2a:29:
         f6:ea:1f:b2:77:23:7c:f0:01:80:0f:25:14:fe:1c:59:8f:42:
         11:b9:94:54:ee:7b:b2:59:bb:97:8d:85:61:5c:b7:f0:df:c1:
         78:9d:eb:a6:e3:fd:ca:94:68:bb:b4:29:69:22:71:06:dd:79:
         99:6c:b6:df:df:c8:99:ba:b0:53:a3:86:f6:48:74:9f:f5:5e:
         03:ad:b9:dc:43:0c:1e:dc:a1:4d:92:93:32:cd:23:8e:cb:f8:
         a4:ae:e4:bb:8b:65:2b:15:81:b7:c9:f5:ed:9a:8a:b7:8b:90:
         86:57:fe:0e:d9:e9:58:b6:48:4a:35:95:e8:88:3c:f9:1e:f8:
         9e:ca:ab:54:5f:19:99:5a:1f:f7:6d:c5:cb:23:de:11:87:1c:
         2a:48:b5:76:6b:31:ef:df:f2:06:ab:d1:a6:3b:15:c6:b2:ee:
         53:00:00:db:da:a2:3f:b3:77:8f:0e:51:03:e1:6a:ae:0e:54:
         bc:38:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----