Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/cea096c2db4a37e1678f7710dfe180e6b1a3062e.mft
File:                     cea096c2db4a37e1678f7710dfe180e6b1a3062e.mft (raw, json)
Hash identifier:          54NTyyQXbyc0bkKUy6nRYOZsHnNDzUxfNAv5lf2KmN8=
Subject key identifier:   2B:EF:25:29:73:FD:48:D7:01:77:04:88:D0:D5:E3:4D:CD:7E:83:21
Authority key identifier: 36:98:82:97:FA:AF:4F:A7:03:12:69:AA:52:CB:60:1A:80:DA:9A:44
Certificate issuer:       /CN=cea096c2db4a37e1678f7710dfe180e6b1a3062e
Certificate serial:       011409
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cea096c2db4a37e1678f7710dfe180e6b1a3062e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/cea096c2db4a37e1678f7710dfe180e6b1a3062e.mft
Manifest number:          02
Signing time:             Tue 21 Nov 2023 14:01:38 +0000
Manifest this update:     Tue 21 Nov 2023 13:01:38 +0000
Manifest next update:     Fri 24 Nov 2023 16:19:38 +0000
Files and hashes:         1: 98e084a732e8bb15d9e73ae0e05425bdca9426c6.roa (hash: GQQfepS7ZGg7o5mWGXxKZi70LJTc8tTPBzZwS1Fjbe0=)
                          2: cea096c2db4a37e1678f7710dfe180e6b1a3062e.crl (hash: V8S0lqgSfntMXZCHHWceRhixxxtmIiK+iKjhcAQFIXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70665 (0x11409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea096c2db4a37e1678f7710dfe180e6b1a3062e
        Validity
            Not Before: Nov 21 13:01:38 2023 GMT
            Not After : Nov 24 16:19:38 2023 GMT
        Subject: CN=afae191a6a386d01a6a225fbf3a2cd33e524e2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:50:65:88:3d:e5:83:9a:25:f9:f6:49:e6:
                    ee:34:ed:95:d4:87:b5:23:57:35:7b:60:05:97:a6:
                    84:cf:98:b6:3d:be:9d:72:cd:13:0e:73:48:fd:83:
                    b7:9c:9e:01:df:74:07:5a:4c:19:4d:73:ef:a5:2d:
                    8c:fa:59:d8:81:9b:fd:89:bf:ba:dc:c7:12:13:f4:
                    f1:2b:49:fc:4d:ef:c1:94:85:9d:bb:69:43:d6:50:
                    12:d7:35:46:9a:88:e3:db:1b:07:b6:89:40:44:af:
                    66:b0:5c:4b:1b:a3:01:cd:40:79:97:12:0f:e4:7f:
                    8d:b5:75:c3:4e:36:e4:44:23:87:9f:a2:e0:9a:46:
                    0d:3f:cc:0f:12:80:18:5f:37:f9:f2:e0:a1:1a:04:
                    98:cd:a1:9c:45:0c:f5:bd:28:b5:e2:ef:4b:a8:bc:
                    e2:94:2c:02:48:c9:2f:f6:70:ca:67:f3:8c:9c:83:
                    a8:ab:5c:ce:ee:54:86:a6:38:b1:44:29:2b:12:71:
                    88:16:2c:4e:7b:9b:a8:0a:1a:ce:9a:74:7d:2b:c7:
                    6f:b5:60:dd:a5:63:5d:15:63:4f:e0:18:e7:f6:dc:
                    32:41:0e:a9:db:e7:ca:37:4a:ea:60:fe:82:14:54:
                    65:c1:6f:38:25:31:c5:5a:60:11:69:90:27:81:23:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:25:29:73:FD:48:D7:01:77:04:88:D0:D5:E3:4D:CD:7E:83:21
            X509v3 Authority Key Identifier:
                keyid:36:98:82:97:FA:AF:4F:A7:03:12:69:AA:52:CB:60:1A:80:DA:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cea096c2db4a37e1678f7710dfe180e6b1a3062e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/cea096c2db4a37e1678f7710dfe180e6b1a3062e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/cea096c2db4a37e1678f7710dfe180e6b1a3062e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:41:95:bf:20:23:de:f4:25:52:df:07:52:4d:e2:52:cd:
         b4:f7:73:88:a2:14:e0:0e:97:52:f0:81:f9:e8:73:53:f5:f5:
         25:39:e8:13:8d:8b:7f:2a:7c:78:da:60:69:a3:e1:19:73:a9:
         c3:5c:fb:64:31:2b:00:72:71:35:90:d0:4c:86:4b:e8:31:df:
         34:73:74:36:6e:6a:db:84:72:9c:f9:d4:a5:bf:48:fe:d9:af:
         c5:2b:44:56:a2:d7:a9:9d:7c:d6:19:1f:72:5d:57:97:80:cd:
         89:5b:33:34:27:5f:9c:4d:d4:3c:02:0f:d4:8c:6e:a0:fe:91:
         18:0f:cc:2c:84:54:09:ed:c4:8f:17:04:66:99:4e:62:d3:ae:
         cc:05:e9:c6:f4:5c:97:ff:d3:81:ca:2a:cd:cc:8a:f5:b1:42:
         68:f2:ec:4b:88:96:85:95:ab:76:fe:9b:17:87:68:f6:64:c0:
         5e:b0:93:5b:95:32:f9:84:d5:de:4e:e6:6e:79:ce:bc:54:d8:
         fe:ad:bc:fb:1d:db:4a:3e:c6:90:b1:59:1a:a7:4f:9b:a5:ee:
         3e:36:bc:31:cf:c1:97:6b:3c:0a:69:49:17:18:82:cb:34:67:
         1d:ba:5a:e0:0e:e4:6c:8e:25:75:6a:a5:3c:43:f0:8d:07:ef:
         d0:9f:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----