Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft
File:                     b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft (raw, json)
Hash identifier:          099Caz6sZ4KS+3hVcozqoJaeiddOZ4UF7UG0v1vNoSw=
Subject key identifier:   A2:9D:21:2D:97:72:C0:A3:A0:E7:16:4B:D9:7E:A9:48:C5:B0:74:6D
Authority key identifier: 22:CA:9A:30:9C:FC:9B:FB:1A:68:10:92:BF:45:91:AC:6A:02:DC:FC
Certificate issuer:       /CN=b3495e150d297a57bdd9c70a5c6b12197ca76f3c
Certificate serial:       2912F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft
Manifest number:          0DFD
Signing time:             Mon 15 Apr 2024 09:20:52 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:58:18 +0000
Files and hashes:         1: b3495e150d297a57bdd9c70a5c6b12197ca76f3c.crl (hash: t/MY1K73El+hAig7q/bt7uy6p7w1LvOK7/hgMpv9WtQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691832 (0x2912f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3495e150d297a57bdd9c70a5c6b12197ca76f3c
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:58:18 2024 GMT
        Subject: CN=996efbf2e8ec574edbc902ab9e13b456a18b7b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:7a:c7:95:97:d0:d3:8a:b6:66:4f:32:ea:
                    08:07:ce:c6:18:04:6c:7b:d0:ee:e6:d3:7d:fe:0f:
                    ad:91:f6:fd:9d:bc:df:d3:ec:2c:c1:6b:c1:d7:13:
                    94:18:fc:c8:cf:b8:2f:af:1e:14:f6:f3:fe:97:be:
                    20:35:d7:5e:c6:10:91:f3:01:43:0c:03:ef:6f:11:
                    96:5e:dc:40:15:11:b3:ee:6c:ff:f6:36:a4:64:9d:
                    e3:c9:03:38:3f:32:56:71:fe:e9:4a:64:46:42:c9:
                    b1:75:dd:61:68:2a:ad:40:a8:de:86:4f:47:68:71:
                    6d:ce:c1:e3:44:83:7f:d3:eb:1b:74:d8:98:75:9d:
                    20:05:1a:6e:5c:33:a5:1b:ee:d8:d5:72:ac:5f:f9:
                    31:ec:b8:1f:eb:ee:aa:9a:19:5d:21:a0:37:0f:11:
                    45:1e:cb:5e:40:cc:8d:53:a5:d0:86:f2:0f:e7:d9:
                    e2:ef:6a:ab:01:26:f3:12:9c:c9:58:a3:05:f9:72:
                    a7:0c:47:0d:e1:07:a9:62:8e:9b:13:f9:df:10:f8:
                    bc:3a:3b:da:58:26:94:9a:10:4d:f6:7d:46:44:f7:
                    ef:bf:b4:b8:5a:bd:c6:c7:73:84:72:36:87:e5:e6:
                    04:ff:2c:c0:01:02:68:65:01:1a:c5:d5:c0:90:00:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9D:21:2D:97:72:C0:A3:A0:E7:16:4B:D9:7E:A9:48:C5:B0:74:6D
            X509v3 Authority Key Identifier:
                keyid:22:CA:9A:30:9C:FC:9B:FB:1A:68:10:92:BF:45:91:AC:6A:02:DC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:95:a9:8e:05:8c:5d:46:eb:0a:89:72:cf:8b:21:02:5c:
         6c:b5:79:5a:e5:4e:b3:ed:9e:97:cd:1d:e0:d5:56:a8:69:f2:
         cb:94:5a:57:31:ad:39:74:c6:ef:ef:85:18:9d:78:df:1e:2d:
         6e:89:2f:18:a4:e5:68:a8:ad:50:cb:1f:60:5b:a2:83:7e:8e:
         cf:87:2d:af:40:0f:f3:03:10:45:50:12:77:f7:5c:aa:b9:8f:
         eb:e4:d0:41:67:33:fd:4f:68:5a:b8:e7:6e:c2:97:3c:dd:4c:
         0d:89:38:e7:ba:32:5d:ed:4c:e6:c0:74:4a:28:55:fc:bb:cc:
         7d:a1:da:2e:0e:75:72:57:7d:88:e4:71:bc:29:37:b1:4c:30:
         3f:7a:2b:d9:a6:d4:3a:4c:05:60:85:4a:b5:4e:da:94:d7:ae:
         18:92:d2:ce:19:21:f0:73:01:d5:83:81:f8:99:9d:69:fc:58:
         7e:9f:e9:24:43:d5:b8:ef:e6:6f:ca:ef:61:07:44:7c:49:7d:
         ff:82:70:4d:57:84:27:90:b2:c7:c2:c3:3a:02:92:f2:2f:86:
         32:14:d0:0e:74:e4:f9:b1:71:fb:e5:9e:aa:33:5a:74:06:bd:
         a6:c9:88:99:56:49:d1:ff:49:fa:03:d5:90:61:32:5d:26:96:
         b8:ae:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----