Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.mft
File:                     0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.mft (raw, json)
Hash identifier:          mkQGIdVm0jUqj0JTFb8tyCOJ5dAnqCIlUxOeK9NK96M=
Subject key identifier:   0D:30:CC:C9:C8:D2:5B:06:00:D3:97:0F:76:8D:39:D5:BC:BF:47:83
Authority key identifier: 0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
Certificate issuer:       /CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
Certificate serial:       0C31A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.mft
Manifest number:          065D
Signing time:             Mon 15 Apr 2024 09:21:21 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:43:18 +0000
Files and hashes:         1: 0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.crl (hash: PUUQpVutOm/a0UAMv0mo56t+0dLAdcwGtzlgpmUYsig=)
                          2: cb34b6cd7178d77734ce5743d4923253957579d6.roa (hash: 5cmNIEyxyc1KlZYtvmXOnYmcBgnJJeV7ioPqnEDC1cs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799141 (0xc31a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:43:18 2024 GMT
        Subject: CN=b85cba776c3d3e747e056abeb1a16b9b8af30708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:d1:b1:c5:a4:95:36:fa:97:7f:bd:6e:40:
                    db:95:ba:8b:6c:a8:19:66:c2:56:ca:f0:b4:2e:da:
                    ca:5a:97:71:4e:ab:b1:0d:f1:04:65:d1:bd:ec:45:
                    7e:66:39:0a:ae:6b:8e:8d:af:68:36:31:73:44:66:
                    15:85:6f:9d:c6:28:26:11:0b:5c:4c:da:ac:ce:a2:
                    8a:3a:3f:94:73:69:d6:e5:f8:c6:96:d1:4b:fd:21:
                    de:38:06:2a:40:e7:5e:9d:4c:fc:98:8f:ae:98:33:
                    fa:1c:ef:5a:11:ba:25:b5:d0:f3:c9:ca:35:21:d5:
                    23:65:b9:d1:f2:5d:d2:65:4f:de:45:2e:3b:df:f2:
                    4f:64:e8:93:9d:77:d0:27:06:c3:a7:35:d5:bb:13:
                    9d:7c:0d:be:e4:0f:a4:17:77:95:51:1c:93:02:37:
                    26:21:22:6c:65:0e:6d:51:9e:1b:ba:97:0b:28:1f:
                    d2:ae:33:62:56:f5:8e:0d:5f:31:d2:ad:9f:a7:2a:
                    d6:5d:39:0e:84:d3:93:a2:78:19:90:7f:82:5e:1f:
                    cb:e9:23:88:ae:04:2e:aa:8d:71:9c:21:e7:59:6b:
                    26:3f:b2:c8:40:5d:05:00:99:d8:35:b8:6a:84:eb:
                    c9:a7:40:98:9b:52:dd:33:be:83:7b:82:ef:9f:e1:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:30:CC:C9:C8:D2:5B:06:00:D3:97:0F:76:8D:39:D5:BC:BF:47:83
            X509v3 Authority Key Identifier:
                keyid:0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:00:0e:df:54:d4:ee:fc:9e:a8:de:30:93:00:9c:02:76:69:
         07:80:ab:d5:bf:66:80:48:bc:49:0d:c2:35:45:01:1d:04:eb:
         42:a9:e2:f4:5c:ad:29:f5:b0:1d:19:19:83:f8:5e:39:cf:b9:
         10:42:60:fd:63:d6:6a:7e:ee:ca:e9:e0:90:12:3d:f8:09:62:
         37:84:76:8e:05:f4:7f:93:88:7a:9c:dc:4e:03:78:a0:6c:ac:
         18:c2:d1:06:0c:10:00:67:5b:46:57:9b:c0:92:2b:73:93:4b:
         ff:7f:69:99:8e:80:5a:18:eb:8c:2e:ee:2b:4d:44:56:25:56:
         84:79:e2:4e:d9:4e:33:5f:c8:b0:f3:b8:05:a7:95:b5:10:80:
         df:0c:86:e4:c1:ab:dc:94:cd:5e:63:b3:1a:eb:3d:37:bc:87:
         e3:1e:0c:1f:04:25:df:5b:ea:b1:20:31:b1:b1:05:00:32:ea:
         15:8d:c7:be:21:f9:77:fb:a8:fc:7b:00:3f:ca:f7:93:f0:c1:
         2d:6f:a2:1e:76:35:13:ea:bc:f9:43:d7:cc:60:ec:34:59:89:
         7b:8d:9a:88:b7:5d:e4:96:69:13:35:ab:88:d0:0a:72:74:ac:
         3a:86:d5:5d:97:0f:9f:d8:f7:90:52:91:03:74:15:5b:6f:87:
         ea:3d:39:68
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDDDGlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
OWFhN2E5NzBlYTk3ZTNhMjhmOGViNGE5N2M4YWQ2MGI2MjlhNzcwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MDk0MzE4WjAzMTEwLwYDVQQDEyhiODVjYmE3NzZjM2Qz
ZTc0N2UwNTZhYmViMWExNmI5YjhhZjMwNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArCDRscWklTb6l3+9bkDblbqLbKgZZsJWyvC0LtrKWpdxTqux
DfEEZdG97EV+ZjkKrmuOja9oNjFzRGYVhW+dxigmEQtcTNqszqKKOj+Uc2nW5fjG
ltFL/SHeOAYqQOdenUz8mI+umDP6HO9aEboltdDzyco1IdUjZbnR8l3SZU/eRS47
3/JPZOiTnXfQJwbDpzXVuxOdfA2+5A+kF3eVURyTAjcmISJsZQ5tUZ4bupcLKB/S
rjNiVvWODV8x0q2fpyrWXTkOhNOTongZkH+CXh/L6SOIrgQuqo1xnCHnWWsmP7LI
QF0FAJnYNbhqhOvJp0CYm1LdM76De4Lvn+HE2wIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFA0wzMnI0lsGANOXD3aNOdW8v0eDMB8GA1UdIwQYMBaAFAyj0n+KWYrKXmLD
Ghne+HT2Hie7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGM5YWE3
YTk3MGVhOTdlM2EyOGY4ZWI0YTk3YzhhZDYwYjYyOWE3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDY3OTllNTgtMGI2NS00ZmU4LTk0NGUtN2JmZGE0
M2Q2NDBmLzBjOWFhN2E5NzBlYTk3ZTNhMjhmOGViNGE5N2M4YWQ2MGI2MjlhNzcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNjc5OWU1OC0wYjY1LTRmZTgtOTQ0ZS03YmZk
YTQzZDY0MGYvMGM5YWE3YTk3MGVhOTdlM2EyOGY4ZWI0YTk3YzhhZDYwYjYyOWE3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBACcADt9U1O78nqjeMJMAnAJ2aQeAq9W/ZoBIvEkNwjVFAR0E
60Kp4vRcrSn1sB0ZGYP4XjnPuRBCYP1j1mp+7srp4JASPfgJYjeEdo4F9H+TiHqc
3E4DeKBsrBjC0QYMEABnW0ZXm8CSK3OTS/9/aZmOgFoY64wu7itNRFYlVoR54k7Z
TjNfyLDzuAWnlbUQgN8MhuTBq9yUzV5jsxrrPTe8h+MeDB8EJd9b6rEgMbGxBQAy
6hWNx74h+Xf7qPx7AD/K95PwwS1voh52NRPqvPlD18xg7DRZiXuNmoi3XeSWaRM1
q4jQCnJ0rDqG1V2XD5/Y95BSkQN0FVtvh+o9OWg=
-----END CERTIFICATE-----