Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.mft
File:                     4a1b531b01cd5446453179b34a5c11c87131d8df.mft (raw, json)
Hash identifier:          6uLvdhLxscQolxt/iD9nVfyY36yRtGwoXoOCIcYJf1I=
Subject key identifier:   AB:70:AA:3B:B3:0E:5B:74:4F:47:DA:95:0D:65:35:8E:8E:F5:6B:15
Authority key identifier: E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA
Certificate issuer:       /CN=4a1b531b01cd5446453179b34a5c11c87131d8df
Certificate serial:       28CD33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.mft
Manifest number:          0DF9
Signing time:             Mon 15 Apr 2024 04:21:47 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:08:26 +0000
Files and hashes:         1: 466eba7658b4b559fbdd933270928bf196be944d.roa (hash: UIP4A4be1oXpPet68vPk4N0I1CW7lJ5hJyONZvXnH2U=)
                          2: 4a1b531b01cd5446453179b34a5c11c87131d8df.crl (hash: Gdn1Kd+31/qFxW1KdVaCiyYsUkSEV13zN6w+D84WnUk=)
                          3: 4f79bda9448a5d2994a4820335609611f1c30389.roa (hash: X2aODkU9lhaO5OIL/uwQpeIfaDJMmBsgo0PqsReW1ns=)
                          4: 515ac77ac7d98ae58ecab87d1cca933a568eb914.roa (hash: CefkfYAyh2CPUPtrtGRdk1LP49Kk3yLWEaHqRa/LEM0=)
                          5: 756082dac92ce9914c1a33915e9b6cb0ba1707cb.roa (hash: gHmMBzu4Z8cPzNNQcoaMOdLkH6iDYjm+v1LDbtifVQU=)
                          6: 8e45acbd869897d94d65ebd0bbad666801edee98.roa (hash: LkSq8qL/Qa4pKAAfwPRYbZnUTNGGRGODzXnZ5jDKVME=)
                          7: 95147fdc0c7ea44b2fbcf1046a1633777d168df7.roa (hash: dIACH63E+aIQ7aY7K9cPg0vgMfJ/Mm6L+OP39VC0iBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673971 (0x28cd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1b531b01cd5446453179b34a5c11c87131d8df
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:08:26 2024 GMT
        Subject: CN=60469127f2a584ba135f88d9e09156c883e752b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:b4:6f:dc:b4:88:94:74:b4:05:2f:3c:de:
                    09:cc:15:9e:1a:80:88:8c:a0:1c:fe:8e:80:f3:af:
                    95:11:b1:85:73:20:c6:c2:82:70:c2:70:ef:42:3f:
                    ec:89:fc:04:5a:0a:ef:14:2c:8e:a5:31:c9:76:8b:
                    0b:a9:63:75:d6:1d:4a:a2:0a:b5:f2:41:89:54:7e:
                    a7:68:0a:e0:1d:90:c8:cb:90:26:8f:8b:15:c7:8b:
                    29:27:64:14:d1:c2:1f:33:6f:11:fe:86:40:f3:a7:
                    4b:f6:1e:7d:7f:42:6f:e1:ca:b1:a5:56:78:40:3a:
                    30:8f:00:90:b8:64:28:ad:c9:28:96:2a:cf:93:35:
                    7f:e4:90:ea:0e:e1:ec:61:6b:26:b8:9c:90:91:39:
                    4f:7f:07:53:71:17:5b:80:ea:e7:89:8b:68:d7:0b:
                    c4:a1:66:10:69:37:b5:c7:8b:51:43:6d:6e:36:51:
                    81:32:34:2c:68:6f:ff:4f:70:57:b8:eb:25:03:f1:
                    97:e0:d3:fa:0c:8c:44:30:21:36:3a:51:95:8c:a1:
                    b3:d0:ad:54:76:6d:c4:93:0c:7d:8f:dd:95:c0:56:
                    c6:88:c1:96:c5:5b:20:98:1c:31:e4:37:40:25:81:
                    16:73:10:0b:13:14:c3:c4:af:35:89:48:45:9f:f1:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:70:AA:3B:B3:0E:5B:74:4F:47:DA:95:0D:65:35:8E:8E:F5:6B:15
            X509v3 Authority Key Identifier:
                keyid:E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ac:ba:67:2b:10:61:60:97:db:2b:7f:2c:f9:37:24:8c:56:
         cd:4c:b9:1a:fa:47:77:a5:fb:b9:90:df:d0:2f:8d:0f:55:84:
         26:25:b7:a8:22:d7:1f:32:b8:e6:32:98:1b:f4:cb:d8:e0:91:
         32:1d:f1:e8:0c:e2:c2:ae:56:ce:86:e2:eb:48:ea:f5:c1:b0:
         a0:ef:aa:7a:18:a3:8c:b5:9f:a1:f5:6c:00:98:65:08:56:81:
         b1:f8:6a:f0:ba:99:3a:00:04:1e:8e:58:4f:7f:68:49:42:7e:
         2d:d0:a9:0b:03:0c:24:4c:5d:77:eb:ac:32:5a:82:2e:bc:1e:
         61:56:3c:f7:7a:8a:59:b6:44:00:9c:dd:cf:06:4d:1d:b2:7f:
         9d:bc:d9:20:9a:5f:4a:5f:11:44:5a:fa:31:7c:0d:46:75:57:
         7a:73:95:d8:65:a0:79:f2:94:62:0d:c2:36:63:e9:e0:4a:69:
         f1:a6:b9:2f:f6:8f:a7:36:1a:78:d1:29:1a:bb:cb:e0:a0:42:
         83:0c:7e:f5:fa:b9:f3:47:92:a2:19:a1:87:d0:da:81:07:dc:
         fe:21:ce:86:f0:19:6e:56:65:45:8d:ca:1a:ab:ef:a6:f6:6a:
         d6:c1:14:7f:91:a6:6b:64:c6:96:a6:c4:92:8e:97:d5:d9:e6:
         08:f9:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org