Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac05844-b47f-474c-a20e-17d6494442c2/f24706c6cd9122d2a06a6a77178f060017882428.mft
File:                     f24706c6cd9122d2a06a6a77178f060017882428.mft (raw, json)
Hash identifier:          2bL6pPlmGpqVABH5ScAYPsWp08/B9mFQeWqTAUmut6I=
Subject key identifier:   F3:7A:27:4B:CA:65:81:53:43:1E:FC:F9:85:FC:D4:E1:37:02:01:96
Authority key identifier: C2:6A:70:2A:76:11:25:96:47:AD:F3:BB:17:A7:C6:3B:D3:71:58:97
Certificate issuer:       /CN=f24706c6cd9122d2a06a6a77178f060017882428
Certificate serial:       28A4DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f24706c6cd9122d2a06a6a77178f060017882428.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ac05844-b47f-474c-a20e-17d6494442c2/f24706c6cd9122d2a06a6a77178f060017882428.mft
Manifest number:          0E08
Signing time:             Mon 15 Apr 2024 03:21:21 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:20:17 +0000
Files and hashes:         1: b5e017b33788972c7102eb987e5992b0c8d01961.roa (hash: DOVSbTcMRQVjGoUdFCsnsZIIC8d3WrZr4I3Z4u7B8uY=)
                          2: f24706c6cd9122d2a06a6a77178f060017882428.crl (hash: atRxbpQzxJ/AaidaO9MggBg6s2EPDnGGe40JsyLfVYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2663646 (0x28a4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f24706c6cd9122d2a06a6a77178f060017882428
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:20:17 2024 GMT
        Subject: CN=a29a3fe46f7cfdf66cc521e7ab318b7174cc0519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:3c:b2:95:13:d6:35:7a:f8:c7:5b:80:87:
                    35:c4:1c:00:28:c3:20:d0:8c:99:f7:51:65:ed:e0:
                    c7:d3:09:dd:42:9f:62:7a:c5:c9:26:9c:43:68:c4:
                    9b:c3:11:05:a4:bd:ca:be:92:ab:8e:ac:73:3c:af:
                    3e:c3:2d:c4:49:ff:4d:4c:a0:43:6c:f8:44:16:6f:
                    41:ae:64:d7:d5:b7:9e:37:da:f2:3d:ee:f4:ff:36:
                    d3:20:96:d8:93:71:85:bc:ba:30:7a:63:3c:b7:bc:
                    5e:f3:2a:95:59:f5:81:ad:af:2e:2d:52:ed:e6:67:
                    64:3f:2f:02:9e:0e:01:e3:41:39:70:ff:b1:d2:65:
                    40:fe:b6:37:e0:97:c7:ee:29:df:68:1c:b3:81:ab:
                    7d:e0:8e:c5:e5:47:dc:cc:6a:72:2f:59:a3:27:10:
                    26:b7:1c:2d:cf:9e:de:5b:d3:90:f4:b2:a4:5e:a7:
                    14:4c:3d:c2:b7:11:dd:2f:23:d9:4a:df:6e:8c:62:
                    db:d7:89:74:f8:ee:69:ef:ba:16:d5:eb:02:0c:fd:
                    9a:fa:df:52:04:1f:fb:75:d7:40:a8:82:0c:a2:de:
                    5e:38:df:2f:02:01:a7:75:b6:bd:be:8f:eb:07:25:
                    cf:b2:33:2d:ad:b4:d4:17:3e:54:b5:e8:3b:91:02:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7A:27:4B:CA:65:81:53:43:1E:FC:F9:85:FC:D4:E1:37:02:01:96
            X509v3 Authority Key Identifier:
                keyid:C2:6A:70:2A:76:11:25:96:47:AD:F3:BB:17:A7:C6:3B:D3:71:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f24706c6cd9122d2a06a6a77178f060017882428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac05844-b47f-474c-a20e-17d6494442c2/f24706c6cd9122d2a06a6a77178f060017882428.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ac05844-b47f-474c-a20e-17d6494442c2/f24706c6cd9122d2a06a6a77178f060017882428.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:41:cf:40:bf:c2:5c:ee:09:be:02:fc:85:75:d1:0e:2c:60:
         4c:40:fd:d7:7e:39:54:c7:01:fe:77:5a:e8:d6:85:6b:f5:59:
         24:79:ef:48:a5:a3:28:95:97:64:f0:a7:d2:b0:de:0d:18:a9:
         da:0d:22:6a:78:8a:da:1c:b4:80:0a:11:dc:b9:49:be:ec:0a:
         fd:91:5e:04:ff:fb:a8:6a:5e:1f:ba:96:90:6c:32:8c:4d:96:
         ea:69:55:91:57:85:0f:ae:42:94:65:f0:9c:d2:a4:c1:81:29:
         76:cc:22:9d:ec:c3:6a:39:cd:d7:28:42:6d:4c:2e:28:64:35:
         75:55:dc:ac:b1:28:25:d9:ab:b5:43:2f:3d:76:b9:42:51:e6:
         8a:e3:9d:d4:1d:dc:68:76:e4:3d:74:89:b0:f4:16:da:aa:b7:
         8f:03:d6:15:23:ea:47:72:ba:f2:18:23:53:fe:f1:4c:e6:ea:
         b3:11:35:aa:8c:2d:29:0c:ea:c9:69:bd:7f:49:94:01:f2:ce:
         25:71:4a:ad:33:ab:3d:90:c8:42:5c:de:c1:a6:8f:f1:6f:52:
         b4:75:64:88:aa:18:fc:6b:0d:ba:35:d3:cb:ac:93:31:3e:c0:
         11:1a:f0:7b:df:09:60:33:1a:72:69:7a:6f:e7:1c:ae:31:94:
         08:31:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----