Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/d2ba642acd3effb827907bb587a1c8f62a3e1160.mft
File:                     d2ba642acd3effb827907bb587a1c8f62a3e1160.mft (raw, json)
Hash identifier:          W652eyx4QpU/+6mAMYCm4hD7ZA8hdHCOzl5fC6XO8NE=
Subject key identifier:   3B:8D:8E:57:6B:FD:88:FE:2B:00:A6:3E:6F:21:A8:46:D0:FF:CC:01
Authority key identifier: 43:C2:B8:FB:38:CB:FE:62:07:02:CC:00:9D:36:4C:1F:37:2F:76:23
Certificate issuer:       /CN=d2ba642acd3effb827907bb587a1c8f62a3e1160
Certificate serial:       214297
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2ba642acd3effb827907bb587a1c8f62a3e1160.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/d2ba642acd3effb827907bb587a1c8f62a3e1160.mft
Manifest number:          0DFD
Signing time:             Mon 15 Apr 2024 10:21:30 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:17:25 +0000
Files and hashes:         1: 5e7b65cc8115038eeb0d0f3033c16e2b239cd216.roa (hash: HtJPuuoq2NMPeDtTonUQXyYjLzA9W3WiwsJxHI0wkS0=)
                          2: 95de3434735f6b1bd74eec3e9413de75a7fa70b8.roa (hash: VxKLDkdlckdzZ/VDHJkdrjThlqu22lvf9+sw9uHtV5I=)
                          3: cf3411084092e742e671b4e7d28e3456c0e239c8.roa (hash: 8I9n6Lw4olaU0zmpfAcBybGU2MDpcm62/Nt7ldUFBAk=)
                          4: d2ba642acd3effb827907bb587a1c8f62a3e1160.crl (hash: zdPDm9AOHy5AFSzZbjQLoQP4nx+Mj2IF6jfF1WW4rgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179735 (0x214297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ba642acd3effb827907bb587a1c8f62a3e1160
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:17:25 2024 GMT
        Subject: CN=f0d205d3e8a9db331c864f9550c693627bca3aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:68:03:09:f1:c5:a8:b4:6a:fe:2f:cf:c9:39:
                    61:3b:85:32:fc:1b:1e:26:67:a4:7c:d5:a7:c2:d1:
                    6d:4f:44:77:d9:9f:10:01:fc:87:cb:f8:f5:43:15:
                    f3:05:2e:e2:a0:7c:8a:a9:54:c2:d4:4b:0a:9a:fb:
                    38:0a:2b:e0:29:65:49:b0:c8:f2:3f:32:1f:17:c9:
                    ab:d7:ba:53:40:20:24:0d:2a:6a:af:3f:6f:ac:2a:
                    c4:c9:19:de:d5:01:33:e4:38:7a:8d:22:b3:20:24:
                    09:eb:68:74:67:86:e0:e3:f9:9b:ff:30:64:df:58:
                    b5:c9:e5:76:21:df:39:db:b6:4d:47:33:c1:ee:e4:
                    17:8e:35:b1:95:41:c6:f2:a4:a6:70:bb:33:66:cd:
                    a2:73:f4:fd:46:96:00:a9:82:4e:ac:2d:69:a0:b3:
                    09:88:8e:00:df:fe:20:51:d4:a0:1c:a2:c9:a2:44:
                    d5:e7:b8:24:52:fa:75:ce:94:d7:5f:6a:81:5b:e5:
                    8f:bb:16:0c:af:4e:b2:fe:08:c8:99:87:2f:6e:5c:
                    5c:b5:a3:24:d1:1f:79:ec:ff:f8:15:5e:95:ae:2b:
                    a8:77:26:3e:ba:e7:6a:77:12:78:5c:9e:90:8a:33:
                    7b:6c:dd:3b:77:ed:74:f8:fa:9f:66:7c:63:2f:c2:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8D:8E:57:6B:FD:88:FE:2B:00:A6:3E:6F:21:A8:46:D0:FF:CC:01
            X509v3 Authority Key Identifier:
                keyid:43:C2:B8:FB:38:CB:FE:62:07:02:CC:00:9D:36:4C:1F:37:2F:76:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2ba642acd3effb827907bb587a1c8f62a3e1160.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/d2ba642acd3effb827907bb587a1c8f62a3e1160.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da1cc7d0-3753-465c-9128-0a4d1a25aaa3/d2ba642acd3effb827907bb587a1c8f62a3e1160.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:b8:3a:29:f2:93:22:62:8b:43:9b:f9:1b:48:23:91:16:
         69:02:01:f6:b4:da:8c:3d:e7:fc:36:a6:a5:87:17:c5:7d:d7:
         21:d2:c5:19:10:69:d7:8e:ed:3c:65:1a:41:2a:96:86:53:5d:
         6c:93:54:29:32:20:bc:e9:18:a3:78:2c:4c:d5:e6:72:f9:f2:
         76:86:af:42:21:13:1a:24:08:e4:7d:0e:37:27:23:5b:95:bb:
         d7:2a:19:d1:9a:81:ce:0a:6a:48:30:60:97:ad:2d:45:ad:61:
         2e:39:69:9d:49:e9:a6:5f:0b:55:5e:1b:9f:68:89:f0:27:33:
         8e:f9:17:5c:08:01:6b:3b:e2:67:37:b6:16:14:d8:18:d8:25:
         7e:ad:6d:9d:13:c5:93:8d:84:3c:7b:6e:e6:42:42:23:a2:91:
         01:73:7a:d8:bd:64:40:f0:b5:5c:43:52:c5:6a:67:84:4d:1e:
         ea:2c:3b:15:cf:e2:23:27:fa:14:45:50:72:7e:b1:32:57:e8:
         32:56:8d:3c:98:b0:dd:29:57:0e:e4:0a:9d:ce:f0:6a:88:92:
         6c:56:6b:ae:3a:9b:3a:aa:a3:50:eb:e0:a5:4c:a6:b8:4c:85:
         c4:43:f4:69:2e:8a:ed:74:b1:20:6a:c3:2b:61:c8:48:09:e8:
         83:0d:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org