Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft
File:                     28887717a8e1f32108301ee3e38a142b28faa4de.mft (raw, json)
Hash identifier:          Yj9bH7HBhswzhQU1L/bcq+hwqPW475iaZxzJJcPWZbs=
Subject key identifier:   84:BB:BE:29:BB:B3:5D:2E:83:85:1D:0B:4E:D2:01:E9:42:F1:94:7B
Authority key identifier: 5E:9D:C3:C6:08:5E:E3:72:2B:21:37:D7:EF:73:AA:E6:2D:DA:00:76
Certificate issuer:       /CN=28887717a8e1f32108301ee3e38a142b28faa4de
Certificate serial:       29180A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28887717a8e1f32108301ee3e38a142b28faa4de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft
Manifest number:          0E36
Signing time:             Mon 15 Apr 2024 10:21:26 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:29:25 +0000
Files and hashes:         1: 28887717a8e1f32108301ee3e38a142b28faa4de.crl (hash: 9PfUtbFxt2c2s8Az1uLr0NPZFMR3Uj7wy8L3UQp1fik=)
                          2: 823aa574bb9edc7ddfa232df4b2429552f6247e5.roa (hash: fG6k59xgs5CYLYtu5wBi1hz5XqlD4Vg+yd1SZ1iVyxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693130 (0x29180a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28887717a8e1f32108301ee3e38a142b28faa4de
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:29:25 2024 GMT
        Subject: CN=fa8b368de6d93135b3af9630cc97e4b3721d10e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:a8:5b:65:c7:7f:c3:6d:c9:80:6d:9e:6f:
                    a5:3b:8a:ff:1f:aa:c2:d8:74:ff:43:3c:a5:d9:76:
                    2e:11:43:9b:04:a6:8f:4b:c9:1e:3d:4e:bf:a5:69:
                    a4:26:17:e0:d9:ae:81:f5:ff:c2:d7:d6:00:b1:7a:
                    ac:59:be:96:6f:b9:b7:c0:6a:cd:df:a5:4e:64:d3:
                    0f:e0:5f:6b:7d:d2:2e:d4:50:f3:b1:6c:cc:79:fb:
                    59:8a:50:e5:4c:d7:90:81:78:57:ab:37:dd:f1:63:
                    7e:0a:8b:d2:61:82:51:c0:10:90:0b:89:f5:c9:c7:
                    fe:0f:33:39:56:e3:55:50:e4:35:bb:e9:ad:43:32:
                    70:26:61:a7:df:ee:ed:62:68:f3:6e:ff:cb:da:73:
                    5e:f9:d5:78:84:82:74:a6:aa:72:a1:67:d8:ea:76:
                    66:f9:d7:58:79:09:5e:3a:54:52:14:f6:74:fd:98:
                    0c:4a:eb:7b:a3:5a:f7:bf:51:b5:30:21:1c:06:05:
                    81:56:09:b6:88:8f:e3:eb:89:e3:99:be:a2:30:8a:
                    88:b9:16:7d:bf:f0:1c:96:c7:01:8a:73:73:e1:4c:
                    23:3c:e2:50:d3:33:ca:ec:4a:8a:e4:cd:16:26:fd:
                    c5:f1:3a:c7:79:60:7e:7b:bc:5f:e6:dc:19:be:a8:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BB:BE:29:BB:B3:5D:2E:83:85:1D:0B:4E:D2:01:E9:42:F1:94:7B
            X509v3 Authority Key Identifier:
                keyid:5E:9D:C3:C6:08:5E:E3:72:2B:21:37:D7:EF:73:AA:E6:2D:DA:00:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28887717a8e1f32108301ee3e38a142b28faa4de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:64:ed:a6:84:f2:fa:a0:f8:6e:13:51:7f:fc:63:d4:f8:e7:
         1f:7a:ac:da:5f:9d:62:46:ba:d8:d2:22:48:75:2a:a5:b4:4c:
         8d:31:ea:91:da:de:66:38:e1:9a:9e:92:cd:01:88:d0:e9:b7:
         db:90:d3:f0:f7:cc:48:33:e4:9b:72:90:7e:50:6e:d9:35:95:
         aa:7c:80:37:78:1b:26:d1:87:5a:8d:51:7c:40:ca:d5:39:97:
         9b:6b:72:fc:b6:62:f8:02:0e:04:b5:89:8a:48:f4:45:a4:cd:
         9f:c7:bc:dc:09:f4:29:79:e0:a0:17:a2:d9:a8:59:c7:60:23:
         9c:42:45:ca:c5:ec:45:d0:8a:cd:ec:b5:0b:84:42:da:32:75:
         0b:fe:92:f2:13:e9:58:52:9e:32:e6:f1:a0:49:52:e6:1a:66:
         c1:60:51:1f:0e:52:56:18:ee:4e:3b:3a:61:4a:83:04:67:02:
         37:7e:63:93:03:0b:a3:5f:45:a9:bf:6a:ac:05:0a:67:6d:b4:
         32:8a:ba:e7:f8:e8:c7:ee:52:8d:38:0c:b2:69:a1:a1:1d:f7:
         2a:2e:8b:33:85:db:25:bb:26:98:a4:8d:4e:22:44:ea:80:b0:
         4d:fb:c6:9b:e2:04:63:3b:83:3b:3e:65:84:30:a2:f2:18:07:
         da:e6:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----