Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4ba8a15-a6ef-4009-8d66-c12cd3bc65ee/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.mft
File:                     3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.mft (raw, json)
Hash identifier:          YHuMJvM5mjTmx6X7JQPmjWv5xesLl7RmL6MYHJB2oUI=
Subject key identifier:   2B:A6:1A:BE:CB:1A:D2:B3:96:F3:31:C6:B7:D0:B8:23:2F:99:BB:5D
Authority key identifier: 1E:CB:AA:3A:C2:C8:9A:3D:73:D9:8B:6B:B6:82:E5:4F:D2:FF:52:5E
Certificate issuer:       /CN=3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd
Certificate serial:       28464B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4ba8a15-a6ef-4009-8d66-c12cd3bc65ee/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.mft
Manifest number:          0DFF
Signing time:             Mon 15 Apr 2024 08:21:10 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:57:16 +0000
Files and hashes:         1: 3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.crl (hash: WbkO4yqbUDyOC/FP8HIJCiNiVf8foY80qBmtWzssq2I=)
                          2: ee1a3fb95cc775a413beefe3f320c38cbbd29a7b.roa (hash: 3zTvWKqnc8CgBc+2lDuHgTwfviycu1TeeeO/RXym5og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2639435 (0x28464b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:57:16 2024 GMT
        Subject: CN=ad41a8247591f85ee700a78c76fc9c821600a6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:18:2c:f7:94:5d:28:19:d2:80:76:db:cd:
                    92:3a:0c:57:f4:88:ec:75:b4:d3:3a:30:83:f8:a8:
                    17:ed:54:99:ca:84:6e:68:98:b5:41:e1:b7:cf:29:
                    45:12:2b:e2:cd:84:2b:ea:50:d1:e4:8f:c0:45:61:
                    22:6d:9e:e4:57:0d:52:6f:4a:b0:80:97:fa:69:50:
                    71:fd:08:d4:43:90:2f:60:f1:93:2c:5c:12:a6:1b:
                    9e:1b:27:8c:24:2f:d1:c0:14:1e:8c:b6:c6:a1:b9:
                    47:69:83:aa:4d:20:91:54:5b:cb:55:be:70:ad:6a:
                    d7:56:29:3a:2d:00:36:16:f2:e6:39:1e:ee:da:04:
                    b8:b4:c6:95:8d:24:99:36:5d:2d:c5:74:69:95:26:
                    cf:46:21:d9:e5:9b:5e:45:46:69:76:75:ee:91:fc:
                    11:a5:28:6c:36:01:e2:2c:87:8f:0e:6e:d9:07:02:
                    1d:23:cc:24:ae:b5:30:ff:53:1d:c8:92:90:32:cc:
                    88:80:bf:cd:85:28:83:99:0b:e8:bf:a9:f9:3e:19:
                    1f:3f:ca:1d:5d:ec:52:af:24:bb:14:f5:27:c5:8a:
                    f4:6c:32:ce:da:bd:de:04:04:eb:e0:65:eb:25:f8:
                    24:0f:5f:12:fc:cb:6f:8f:b7:b7:b5:03:c9:b1:4e:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:1A:BE:CB:1A:D2:B3:96:F3:31:C6:B7:D0:B8:23:2F:99:BB:5D
            X509v3 Authority Key Identifier:
                keyid:1E:CB:AA:3A:C2:C8:9A:3D:73:D9:8B:6B:B6:82:E5:4F:D2:FF:52:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4ba8a15-a6ef-4009-8d66-c12cd3bc65ee/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4ba8a15-a6ef-4009-8d66-c12cd3bc65ee/3f6b31f4ee5c3f815e2a030a2bc88cd5dedadcbd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:58:cd:e7:d3:20:2a:67:22:96:c7:73:8f:d9:73:9b:38:33:
         ac:78:09:fc:66:c8:7f:af:c4:b5:ef:1d:43:d8:3f:98:e2:b0:
         bc:2a:f5:58:02:44:2b:f2:4f:62:3b:1d:87:24:9a:a6:c7:7c:
         09:bc:40:14:e8:2e:9f:3f:0c:71:b0:93:af:ae:d3:be:34:6f:
         d9:c6:59:cb:97:73:eb:2f:18:83:f7:c7:79:c7:49:02:23:7a:
         91:79:e8:91:e4:12:e8:10:58:6f:f9:60:98:12:79:20:cb:b8:
         01:77:e5:8c:97:32:c2:fc:37:0e:8a:f4:78:4c:0f:60:5d:1e:
         4e:0b:8c:3d:c2:7a:da:2c:33:98:09:47:44:a0:1d:24:0c:92:
         64:57:fe:20:76:11:55:64:38:47:37:2c:75:1c:59:41:b1:b3:
         7e:b6:5e:05:01:41:09:e0:1f:6d:19:b0:71:d5:eb:8e:c0:32:
         6e:bb:3f:c6:12:85:63:3a:5b:98:f7:d6:b0:c1:da:1e:bf:0e:
         a0:72:67:10:97:45:ea:d1:a9:68:2a:e6:97:70:f2:9d:66:05:
         9e:f0:81:33:34:33:ae:eb:20:ee:87:5a:e7:52:d8:9d:7a:9d:
         f4:51:57:2c:d6:43:75:ca:3e:3f:f4:cc:60:7d:95:ae:8f:8b:
         d4:21:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----