Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a76961c7-b6b1-4747-9f2c-ed9dbdb28df1/c231597aa248659e9e4fedab41e88ad573fbfa17.mft
File:                     c231597aa248659e9e4fedab41e88ad573fbfa17.mft (raw, json)
Hash identifier:          iwWrLADrPgCgStTifb0AfDN3bOtyNe03eAJXwR1CDfY=
Subject key identifier:   06:A4:15:95:9C:11:5F:A1:99:9B:BE:AA:3F:95:15:BD:1D:DD:FA:58
Authority key identifier: 92:C4:51:D3:C1:7B:A1:A8:80:A4:73:D7:E2:20:D1:58:66:3B:EB:EA
Certificate issuer:       /CN=c231597aa248659e9e4fedab41e88ad573fbfa17
Certificate serial:       28991D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c231597aa248659e9e4fedab41e88ad573fbfa17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a76961c7-b6b1-4747-9f2c-ed9dbdb28df1/c231597aa248659e9e4fedab41e88ad573fbfa17.mft
Manifest number:          0E0D
Signing time:             Mon 15 Apr 2024 03:20:50 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:34:17 +0000
Files and hashes:         1: 2b55045490f185707444d36fc5b7f88a8ec5fa20.roa (hash: HFH2dFZvHf7J1xnhC7/hGcImyxGJwdA1MuV2eCuLMgI=)
                          2: c231597aa248659e9e4fedab41e88ad573fbfa17.crl (hash: rFnF8ZVga/aS0BM+ClfdzsBnqNSdVCZ/nUIBDy9qDY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2660637 (0x28991d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c231597aa248659e9e4fedab41e88ad573fbfa17
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:34:17 2024 GMT
        Subject: CN=c1b5a74bab7a55cacfd1c697d5e441be0c7f5e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:72:5a:d3:43:3c:2e:d4:98:00:e9:50:a9:
                    7e:35:0a:de:a6:9c:e2:08:c9:14:8d:aa:5c:99:50:
                    21:d4:25:a0:0c:d2:f7:24:30:7f:c4:0c:b3:66:1f:
                    88:28:16:d1:8b:f9:3a:fa:aa:68:81:e5:b8:88:78:
                    22:9d:29:8a:9d:46:db:85:15:45:6d:50:6d:ff:f3:
                    e3:84:cf:cf:66:22:08:b9:6c:d3:52:3b:b4:8a:7b:
                    39:88:ad:6f:66:e5:3c:20:b9:0c:f5:77:00:29:14:
                    8d:58:c9:c3:4b:2f:e7:f1:98:b4:14:bb:bb:35:95:
                    24:51:1e:b4:b4:14:88:28:82:a5:90:c4:f9:c6:e5:
                    c8:bb:67:0d:6f:e7:d8:6d:0d:d5:1f:73:ab:00:9b:
                    fa:91:b1:bc:b5:a5:34:4b:86:af:e9:38:7b:b1:cf:
                    3c:03:15:1e:42:08:7c:d1:0f:e1:fe:13:f7:27:19:
                    ae:9d:d5:12:4d:2b:af:1d:5e:52:81:06:53:9f:62:
                    dd:df:73:2d:68:f3:46:df:8a:85:bc:1f:49:12:f1:
                    b3:74:3f:ef:bf:85:4f:4d:d9:10:aa:7b:dc:67:76:
                    45:59:af:44:37:a6:dc:b2:09:86:6c:5b:35:f0:8f:
                    53:51:10:55:46:0b:30:80:6b:fd:ea:1a:50:91:fb:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:15:95:9C:11:5F:A1:99:9B:BE:AA:3F:95:15:BD:1D:DD:FA:58
            X509v3 Authority Key Identifier:
                keyid:92:C4:51:D3:C1:7B:A1:A8:80:A4:73:D7:E2:20:D1:58:66:3B:EB:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c231597aa248659e9e4fedab41e88ad573fbfa17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a76961c7-b6b1-4747-9f2c-ed9dbdb28df1/c231597aa248659e9e4fedab41e88ad573fbfa17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a76961c7-b6b1-4747-9f2c-ed9dbdb28df1/c231597aa248659e9e4fedab41e88ad573fbfa17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:a2:0f:a5:6a:21:00:09:41:25:fb:ab:4a:2a:9c:c3:8e:
         62:b9:3e:f5:71:66:b1:d4:cc:ee:88:92:27:14:d5:38:2b:4c:
         58:59:97:64:58:93:00:f5:22:10:03:1d:72:3d:78:2e:84:ee:
         75:74:a6:1b:eb:fe:59:61:00:a7:cd:87:94:1b:bf:18:02:38:
         26:ce:d0:2d:0f:dd:0c:f6:6d:6e:9e:99:dc:bd:56:9e:d9:d8:
         1d:00:7a:42:d0:92:2b:df:5a:80:30:c0:26:ce:31:7c:ff:31:
         f3:8d:ed:57:c4:28:4c:fd:97:42:0b:8e:44:b8:3d:7a:39:b9:
         3a:08:ae:e4:2a:73:5b:57:32:5b:f9:e2:03:06:db:74:85:51:
         4a:d6:fb:d9:f8:5f:f6:f7:5b:94:d9:e7:fa:ea:dd:1a:cf:ea:
         60:b7:04:de:fc:4b:cf:01:77:f1:5f:f6:58:84:93:c9:60:68:
         04:b8:38:94:d1:80:14:df:cc:a9:d3:5c:d1:3a:06:39:f2:d6:
         ed:a6:2b:ab:5c:5c:35:12:fa:d4:a7:75:bc:98:b2:ae:a9:fb:
         95:c0:a3:ae:56:5a:f4:6f:eb:04:d7:c8:ca:3f:ca:1a:ef:db:
         75:c0:75:61:b9:db:a8:18:e1:24:3e:61:71:77:e5:5b:6b:ae:
         6f:9e:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----