Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.mft
File:                     4452c063f42ef0ca8b3cf935d619efd87649c998.mft (raw, json)
Hash identifier:          hBmvUwF0naMPKdbtBRbGBSYGUkL/P19x4nIhtWgz5wI=
Subject key identifier:   69:A9:BC:A2:E7:D7:CB:0F:F9:AD:A4:E7:CB:3D:5B:F9:16:94:B8:21
Authority key identifier: 6C:C1:91:0F:E6:13:20:5F:A0:FC:C5:D5:97:3B:3F:B5:5B:C9:3B:7F
Certificate issuer:       /CN=4452c063f42ef0ca8b3cf935d619efd87649c998
Certificate serial:       25B2CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4452c063f42ef0ca8b3cf935d619efd87649c998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.mft
Manifest number:          0E00
Signing time:             Mon 15 Apr 2024 03:21:19 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:28:17 +0000
Files and hashes:         1: 4452c063f42ef0ca8b3cf935d619efd87649c998.crl (hash: 87vxjmsiXmmXlkTkEtjav834RWmsomyDzQSlx5qHGUY=)
                          2: 6560afd8b4212fb67bcd127682e453b33a512bbf.roa (hash: uZE4AJun3yIvsEXCBwE55Ff1vxU6B22w5moCNNxRp1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470603 (0x25b2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452c063f42ef0ca8b3cf935d619efd87649c998
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:28:17 2024 GMT
        Subject: CN=f9bd0bdfd4c742938cede8404ea21a171e5d57d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4e:b9:61:64:92:71:1c:1e:c2:a5:d6:c4:a4:
                    ba:2e:eb:25:0d:1b:8a:c7:31:8c:fd:bf:05:de:36:
                    db:68:e2:c9:70:42:ef:cb:b9:14:95:97:a7:7a:b0:
                    f1:de:de:57:6d:3f:99:cb:70:c8:bb:0d:18:5f:d5:
                    fc:11:db:95:03:4a:c4:17:de:27:cd:78:b6:8c:0d:
                    dd:56:4f:22:b9:74:d2:22:fb:10:1b:d1:a2:0f:e9:
                    8a:16:46:9c:e6:9a:d0:66:a4:6a:95:48:71:8c:63:
                    6a:61:ad:c0:e9:e4:c5:ce:a9:ed:3d:52:79:44:25:
                    53:df:81:71:cc:9b:bb:b2:d2:90:aa:b6:88:e0:81:
                    ad:06:19:c1:de:60:8d:24:4f:2e:cd:e6:b3:a7:2c:
                    88:58:43:37:47:3a:b0:0f:3d:f1:b1:ea:58:13:4e:
                    ff:67:2b:ab:ec:a8:56:68:09:ef:2c:28:0d:20:e9:
                    61:58:7a:50:60:5c:b6:c4:c5:cd:09:cd:42:38:b0:
                    64:fa:3b:86:29:98:e7:57:98:80:f1:1f:07:d0:e6:
                    fa:65:88:4f:93:99:1b:a0:72:a4:59:fa:2c:89:b5:
                    c1:bf:b4:7e:6d:91:66:91:c9:04:9d:50:0f:59:da:
                    48:b1:9d:9f:29:42:b8:60:cf:48:44:20:5a:d9:1e:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:BC:A2:E7:D7:CB:0F:F9:AD:A4:E7:CB:3D:5B:F9:16:94:B8:21
            X509v3 Authority Key Identifier:
                keyid:6C:C1:91:0F:E6:13:20:5F:A0:FC:C5:D5:97:3B:3F:B5:5B:C9:3B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4452c063f42ef0ca8b3cf935d619efd87649c998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:25:6f:08:76:2f:0b:33:db:51:f4:aa:45:81:c1:81:73:79:
         30:11:70:d9:08:30:03:0a:9e:32:00:68:f8:4f:59:08:45:15:
         7d:d7:9f:76:d8:df:87:31:ef:35:04:52:f4:49:c2:ab:9e:8f:
         3a:b3:6a:79:1f:79:16:21:cc:56:fc:84:16:46:3c:54:16:bf:
         59:38:01:20:a7:ac:21:f6:68:a9:40:8f:21:ad:59:3d:58:9c:
         a3:80:40:36:7a:e5:58:56:56:00:a6:23:0f:a3:75:a1:31:c9:
         29:59:4c:6b:a4:c7:94:0f:d6:e9:6c:b1:bd:90:90:49:09:a9:
         7a:ac:70:01:69:dd:17:ba:8f:6c:5c:cb:5b:be:5c:11:ba:ab:
         f5:ca:a7:e0:d3:7e:bb:a5:b6:d0:fb:8e:ff:5e:96:08:1a:c7:
         82:6a:48:8b:d0:85:d9:7f:7c:8b:99:ab:c7:a0:97:fe:87:db:
         64:68:60:f2:29:7d:3a:09:4a:83:24:39:6c:c0:c5:40:73:49:
         2f:12:44:0e:e7:3b:80:a1:89:e2:7e:f4:84:5c:08:89:5d:0a:
         07:4b:64:56:0a:78:66:65:df:5e:97:a0:8f:2c:4e:8b:8b:17:
         f7:d4:bc:fc:a9:cf:d3:57:72:93:79:d5:99:3c:94:78:6c:ba:
         73:1a:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----