Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft
File:                     68daa985947750b9a7aa4090e0e120abbd088f1b.mft (raw, json)
Hash identifier:          g7wAiK/Gmoe+qaqKICLVGtQQckweugxEmXh3L25o3rE=
Subject key identifier:   F1:5C:10:5B:F5:97:13:83:89:87:14:60:FA:15:EF:DA:71:42:D6:6F
Authority key identifier: 79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F
Certificate issuer:       /CN=68daa985947750b9a7aa4090e0e120abbd088f1b
Certificate serial:       16EAE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft
Manifest number:          0B98
Signing time:             Mon 15 Apr 2024 10:21:26 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:24:25 +0000
Files and hashes:         1: 68daa985947750b9a7aa4090e0e120abbd088f1b.crl (hash: 1W3EdfOUPO6eghLjHXSHfehEhWhKCAH2zEkb+AdAlZk=)
                          2: 71fec9b1c23594aa816be97a1742c5f81d99c021.roa (hash: wLnzvOfxxGA93kftswElxwqa01LdccFcC+Rh/OTUKKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501926 (0x16eae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68daa985947750b9a7aa4090e0e120abbd088f1b
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:24:25 2024 GMT
        Subject: CN=6df8cd3490dbdf8d5c7ca945238ac5365c8e32ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:60:ed:fb:61:5f:cc:c9:b2:3b:45:ce:d9:a0:
                    c5:97:fd:0c:d6:75:fa:18:fa:d4:7a:28:fb:cd:b0:
                    6c:6a:aa:6a:a0:b1:8b:82:fe:f0:1b:3b:b4:a5:1d:
                    79:d2:69:78:84:ee:56:25:2d:20:7d:3f:cf:43:fe:
                    d2:d6:82:0b:52:de:84:3d:19:7c:3f:63:86:f8:24:
                    78:c8:c7:dc:25:0e:94:94:1f:50:5d:dc:09:da:df:
                    aa:23:97:fa:04:b5:30:ea:5a:4c:32:d5:c1:14:0c:
                    53:6e:b5:97:09:36:ab:da:3a:04:96:d8:2a:45:1d:
                    d2:06:bd:f8:20:d0:be:a1:a8:fb:1c:94:6a:f0:9b:
                    b2:e2:a7:1e:6f:32:7d:9a:71:98:20:7b:d3:51:f9:
                    98:9a:a6:21:98:a8:61:3f:62:7f:f9:75:e7:ed:48:
                    1c:27:da:ae:56:3d:c3:a2:1c:f9:a3:93:71:ce:20:
                    fa:89:7f:ca:26:ac:33:d9:ff:c4:08:0a:95:27:07:
                    7f:b4:c6:b4:4a:c3:55:d7:c4:eb:bb:3e:82:42:e4:
                    ec:5d:4e:bb:d1:e8:8c:f9:5f:5d:4e:22:47:0e:ee:
                    15:12:bd:4b:af:96:ff:8d:ad:ec:6d:2d:f2:28:e6:
                    0a:8e:31:86:36:78:36:17:c0:29:09:3f:c8:89:d9:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:10:5B:F5:97:13:83:89:87:14:60:FA:15:EF:DA:71:42:D6:6F
            X509v3 Authority Key Identifier:
                keyid:79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:e1:62:7f:72:b0:6a:56:70:a9:fb:6d:6e:62:3d:ea:3a:
         51:05:84:38:21:5d:ef:9e:bb:fa:cb:28:82:85:33:b8:0f:4a:
         78:5e:64:c8:2b:9b:3d:ac:0c:22:32:a8:09:d5:c9:e1:43:b7:
         55:16:45:ab:c9:e4:f2:00:05:68:93:e0:8b:af:52:21:7c:12:
         27:dc:68:99:66:18:cd:3d:55:11:a1:71:44:47:0f:56:29:ed:
         bf:46:b1:7a:a8:ab:3a:70:46:e1:e0:22:75:23:80:ef:94:25:
         25:99:a9:8a:93:9e:0b:fc:e5:2c:50:77:8b:60:19:07:02:4f:
         14:58:fa:05:fd:48:6d:14:7d:54:47:1f:43:96:63:e1:95:41:
         7f:a1:e6:30:33:11:da:54:7d:6c:06:a8:c1:5f:67:0e:4e:47:
         46:36:cb:a9:6d:00:62:06:02:ef:35:04:92:41:40:00:6f:69:
         f8:46:21:c3:74:a5:56:7b:87:c9:95:9c:eb:7d:26:4a:42:86:
         28:24:4f:5f:23:6d:58:16:b3:5f:4c:55:e3:0b:bc:1a:0b:ac:
         3d:c6:18:87:2c:b5:38:25:16:bd:91:1a:20:0e:ba:43:30:c9:
         cc:12:2c:e0:b3:db:50:86:c2:c1:dd:29:4f:d0:03:b2:47:73:
         90:8f:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----