Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.mft
File:                     cbafd64b264ae3fec9533d2c8d059b180e2685c0.mft (raw, json)
Hash identifier:          njbST2N4cl9LZ0EdvmdFLwMCH5OrK3hSsrC+vGYxqLk=
Subject key identifier:   82:63:42:2F:55:8B:57:44:3D:12:E4:4B:2A:60:FC:4A:57:25:D3:7F
Authority key identifier: AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64
Certificate issuer:       /CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
Certificate serial:       08F5DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.mft
Manifest number:          048B
Signing time:             Mon 15 Apr 2024 09:21:05 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:24:18 +0000
Files and hashes:         1: 0e982ca945bc0d8d2c1206d497389a9398f0fe87.roa (hash: oAHuNFCHKRX2cNCZiJi4zb0Icf4odsxkrc+UeY2eg+A=)
                          2: 244135967c92b850c86dce0d5be8f0aa3cacdce3.roa (hash: tTR0yDpqwVzGLO6bZSlXsVa0OVRqgoREisdc7m9DaII=)
                          3: 368025102d84c781b72fed5831190feed3fca11e.roa (hash: wOkqdajUSQVnbbZjWmr/pVCgWG/dm5JtvEG+dkhhnjM=)
                          4: 5e87a7500a176f86a062f81275c275c0b5c214e0.roa (hash: wR6hvn226F8+Xx5BUfJVJnBsOyRh72JLtIox5//iCrE=)
                          5: adc9352e41d7112f2a34cefe51dfca90e58b506d.roa (hash: 98X7hSf4a3VLPe1x6jMz1ddEXGosszHqozN37nDDN+0=)
                          6: cbafd64b264ae3fec9533d2c8d059b180e2685c0.crl (hash: jirH2mMj/n7y0Jq9kqHI2MlK42bLZBf3su9jccDjUGc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587226 (0x8f5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:24:18 2024 GMT
        Subject: CN=d8026474893fe51a0677f1cfd8756af54d7d8170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:61:83:de:2e:b5:be:60:d8:ed:65:a1:ae:
                    f2:f9:74:99:91:64:86:75:53:b8:e7:eb:43:83:3c:
                    50:3c:43:c1:c4:9f:e3:20:8c:25:f1:87:99:d6:80:
                    21:d0:d3:ac:dc:bd:9c:d7:24:59:c4:65:78:eb:77:
                    51:0c:b1:3c:3c:d1:f2:d1:ca:ea:28:07:a0:78:84:
                    b1:d0:0a:ba:3c:d8:97:ac:8d:7d:6f:87:9a:26:05:
                    09:03:13:31:3b:81:99:38:ad:da:ca:55:bf:54:5b:
                    75:f4:f1:b1:ec:d2:e1:af:54:a7:56:c9:d8:5b:89:
                    1b:8d:91:dc:e2:56:44:46:6d:06:8d:8a:25:c6:30:
                    7a:cf:58:c4:a6:13:6d:dd:84:cb:e9:d9:b1:f7:52:
                    2c:fc:f8:76:da:c1:97:c2:09:94:21:61:c3:c3:e8:
                    e2:b4:3a:00:57:ef:34:af:a4:e3:a8:c2:a7:aa:a0:
                    e9:96:3d:da:f7:4e:47:43:33:61:01:bd:bb:71:12:
                    c1:5e:99:7d:55:15:2a:1c:41:e4:44:91:e7:87:e9:
                    b3:b5:c8:2f:fe:b2:72:19:df:40:71:87:a2:d8:a0:
                    4c:27:b2:ef:f3:04:f2:ed:3b:88:fe:5a:1f:ac:15:
                    91:6b:ad:ed:dc:14:15:e2:9e:a1:38:4c:c0:11:37:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:63:42:2F:55:8B:57:44:3D:12:E4:4B:2A:60:FC:4A:57:25:D3:7F
            X509v3 Authority Key Identifier:
                keyid:AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:dd:9f:4e:52:f1:e6:6e:a8:e5:df:b4:1d:ab:d6:18:99:
         2a:0d:2c:c7:05:3b:1d:8a:c9:57:5c:92:e8:31:71:51:5b:24:
         c8:90:48:70:27:a7:6f:b2:fd:47:c8:da:05:56:50:26:74:b4:
         fb:e1:32:f8:aa:5d:64:51:c9:22:71:64:a7:81:11:4d:eb:b7:
         58:42:74:a5:5c:67:82:ff:ee:e7:27:aa:f1:89:a0:ac:cc:ec:
         04:31:a3:d0:ff:7f:b3:f9:8b:71:de:b5:6c:7d:e5:35:e9:be:
         7f:16:af:da:d1:cf:7f:c7:45:d6:a3:33:b8:8f:2e:0c:60:a5:
         00:5a:ec:82:c7:fe:24:be:de:2e:a9:ee:11:6c:42:31:62:02:
         d6:c7:b6:88:15:7d:ec:c9:84:c1:77:02:05:78:ee:95:fe:0d:
         57:c5:19:c2:73:4f:be:7c:d8:f1:73:6c:93:80:f3:40:69:5b:
         84:0e:35:df:ec:fe:5e:8e:c9:54:06:ec:61:74:61:d0:9b:ad:
         7e:83:fa:05:ae:63:b3:5e:e8:08:61:49:83:68:5f:00:91:2b:
         34:47:03:82:3c:2d:49:ba:56:21:74:1c:f4:2b:78:80:83:9b:
         bc:4d:df:08:26:ca:94:bb:f3:83:b2:af:d3:a8:2c:b3:4f:6f:
         4c:91:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----