Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/151939fc96650e9ed90e8be5070013a08273ea09.mft
File:                     151939fc96650e9ed90e8be5070013a08273ea09.mft (raw, json)
Hash identifier:          HQXw3tI/Dje64JKWRt2/2+I1l06TqD0R0arAPVLSC9g=
Subject key identifier:   99:D9:31:9B:C9:0A:CA:00:3C:86:5A:49:26:99:67:44:26:18:E5:4E
Authority key identifier: F0:6A:90:B8:97:2B:5C:D8:DF:FE:38:96:C6:00:E1:3A:89:C6:D5:25
Certificate issuer:       /CN=151939fc96650e9ed90e8be5070013a08273ea09
Certificate serial:       1100C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/151939fc96650e9ed90e8be5070013a08273ea09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/151939fc96650e9ed90e8be5070013a08273ea09.mft
Manifest number:          087D
Signing time:             Mon 15 Apr 2024 02:21:19 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 03:37:29 +0000
Files and hashes:         1: 151939fc96650e9ed90e8be5070013a08273ea09.crl (hash: WUT2xj2HQlVes9ZC62SAqmdVAFfPyKfjdjUPb5GQ2c0=)
                          2: 60b76a3c0e40e7a84c6449ed2b4b9d9ed1f01f6b.roa (hash: uXnEkKYM+pGuiozGSjXE1EZORTJ/L3MJmt/GYpyxM6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114308 (0x1100c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151939fc96650e9ed90e8be5070013a08273ea09
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 03:37:29 2024 GMT
        Subject: CN=285f7e6d027bc34df9db0ddb26a0542fd28f7b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:2b:78:c2:ab:29:f2:42:e6:22:24:92:56:
                    3e:03:80:ab:ec:e9:ed:b0:9f:5d:cf:fc:05:69:1a:
                    ca:bd:c5:37:a7:26:88:70:0b:cb:b7:9c:3d:70:79:
                    40:45:00:c5:22:51:e1:66:83:f7:b1:87:af:0a:1a:
                    fd:d9:76:61:6f:9d:74:91:56:55:2e:7c:ca:8a:39:
                    64:95:06:2a:cf:d3:82:ff:37:0e:42:51:4b:d9:bb:
                    3a:83:6c:0c:50:6e:61:ad:43:f6:7f:15:3a:7b:80:
                    94:af:ca:13:fe:9e:90:c4:fd:6f:40:ca:f1:fb:0a:
                    6c:91:e7:0a:4f:66:7f:ec:8c:cc:c9:ea:27:dd:48:
                    79:6a:b6:75:28:3f:e1:04:54:8e:90:50:40:de:1d:
                    5f:4c:1e:fe:32:d7:8b:ae:36:80:cc:ed:8a:56:57:
                    95:0b:72:4b:d8:6e:5c:51:78:49:00:1d:88:96:4a:
                    6e:01:09:db:d5:18:92:34:03:74:28:8a:3e:37:19:
                    dd:71:49:d0:d2:1a:e9:c0:92:18:83:e2:07:d8:16:
                    c4:bd:1b:c9:38:b0:c6:56:56:1b:a8:ae:d6:49:59:
                    17:ef:5d:f4:cf:5c:7d:01:1f:b0:58:03:3c:02:d6:
                    dd:7a:bc:f1:55:a2:e3:18:d8:e7:70:8f:cc:fa:2e:
                    3a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:31:9B:C9:0A:CA:00:3C:86:5A:49:26:99:67:44:26:18:E5:4E
            X509v3 Authority Key Identifier:
                keyid:F0:6A:90:B8:97:2B:5C:D8:DF:FE:38:96:C6:00:E1:3A:89:C6:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/151939fc96650e9ed90e8be5070013a08273ea09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/151939fc96650e9ed90e8be5070013a08273ea09.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/120848bc-a118-471f-ae28-159229787d31/151939fc96650e9ed90e8be5070013a08273ea09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:73:cd:1f:2d:c2:16:3f:09:a6:a5:7c:58:99:b5:20:bf:9f:
         71:fc:62:61:b1:3d:75:20:a5:d1:6f:59:6e:6b:8a:a4:b4:f3:
         ce:72:be:a3:66:63:94:21:c1:e8:5b:b6:06:df:53:a9:bd:e4:
         47:13:89:c9:7e:8d:d9:e7:8f:61:49:15:da:96:00:12:26:c9:
         87:0b:65:ee:af:e6:ec:1b:03:b0:15:bc:ab:4a:a6:71:8f:aa:
         da:86:72:85:ea:f4:e5:8e:e6:72:7b:35:a4:aa:da:fe:d9:c3:
         10:42:c3:8b:f2:38:48:e3:d5:4d:85:70:f0:eb:bd:72:78:62:
         6d:08:27:41:6d:9a:f5:d7:9a:99:41:85:8c:34:8c:8c:96:1b:
         9f:00:4c:35:49:f4:4a:e9:dc:88:b0:6d:16:a6:85:6e:1c:48:
         00:90:d5:4b:91:89:9c:12:89:a7:91:6a:36:65:1e:6e:33:a2:
         ea:0b:49:e4:72:e2:91:d3:66:4d:b5:38:57:0f:0c:50:ef:f5:
         a3:ec:e5:cd:64:31:d5:96:47:03:1f:b1:bc:65:9f:2f:74:92:
         e2:41:51:c0:99:ba:58:5f:af:f1:7a:8f:71:37:23:1c:53:4a:
         e3:8e:dd:96:cc:c1:72:3a:41:f1:17:05:0e:82:93:31:fb:da:
         3b:ca:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----