Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/08c1026e4a85490be0a491c7fc23850086ed1cb0.mft
File:                     08c1026e4a85490be0a491c7fc23850086ed1cb0.mft (raw, json)
Hash identifier:          toNyuF71FKviOHMwxKjaw3MBrKhs7vnTDvT9JLcha/k=
Subject key identifier:   87:0C:50:09:F3:23:4C:73:71:42:AB:D7:02:C4:E9:01:02:6C:DF:51
Authority key identifier: 89:7A:AF:2E:2D:D9:5A:42:1E:07:72:7D:5D:B9:FD:B8:05:FB:9E:DB
Certificate issuer:       /CN=08c1026e4a85490be0a491c7fc23850086ed1cb0
Certificate serial:       28E3AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08c1026e4a85490be0a491c7fc23850086ed1cb0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/08c1026e4a85490be0a491c7fc23850086ed1cb0.mft
Manifest number:          0DEB
Signing time:             Mon 15 Apr 2024 02:21:09 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 02:26:29 +0000
Files and hashes:         1: 08c1026e4a85490be0a491c7fc23850086ed1cb0.crl (hash: 5iRmZdt+f8XUXpAQpJU+4tek5tHZDPgynBgR6eaHRwA=)
                          2: 876ad4c9c614d129345c559cec56d84d54898c73.roa (hash: ZhUTJpcMvQFelykA1broyVlVI0Lb+VUxWWLrd+G5ym4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679722 (0x28e3aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c1026e4a85490be0a491c7fc23850086ed1cb0
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 02:26:29 2024 GMT
        Subject: CN=2a50fc8c6bf435ebbd695927f7b640a125705f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:8c:8f:cf:e0:06:02:fb:99:e2:d3:17:6e:
                    ca:1b:5b:3d:fc:17:95:3e:ff:0a:15:23:3d:ee:60:
                    44:75:8e:91:e4:7c:f8:84:61:57:38:03:de:94:69:
                    ed:27:eb:c3:92:56:d9:f0:d9:41:e4:40:de:36:3e:
                    d3:a3:f6:79:63:99:19:85:d1:79:66:ae:75:75:38:
                    d1:35:ce:6a:4e:af:ee:c2:74:24:10:86:64:78:17:
                    a9:6f:fc:f3:d9:d5:f1:14:42:26:0c:85:d5:99:e0:
                    5c:dc:92:29:62:26:f5:e9:d2:b7:33:6d:34:b7:37:
                    9c:19:04:fd:5f:68:55:47:0e:70:53:8b:aa:94:32:
                    7c:bb:a0:5f:8e:10:3f:d9:5e:3e:30:ef:43:69:52:
                    b6:55:18:7c:fa:14:0f:3a:d2:94:94:f5:73:d3:92:
                    3d:23:55:15:eb:68:ca:11:68:9d:74:a7:9b:b9:82:
                    19:c4:8e:82:3c:49:47:9e:6a:4e:8d:8f:e0:d9:fb:
                    80:71:ff:a3:80:5e:98:47:a2:88:5d:ae:78:ec:c9:
                    20:c2:98:7a:bd:e5:f5:f4:ef:91:25:60:4a:57:1b:
                    0b:dd:5e:c9:cf:d6:c2:27:60:49:53:97:e1:58:2c:
                    67:6f:3c:6c:64:1a:82:04:ae:c8:a9:be:77:62:a1:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0C:50:09:F3:23:4C:73:71:42:AB:D7:02:C4:E9:01:02:6C:DF:51
            X509v3 Authority Key Identifier:
                keyid:89:7A:AF:2E:2D:D9:5A:42:1E:07:72:7D:5D:B9:FD:B8:05:FB:9E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08c1026e4a85490be0a491c7fc23850086ed1cb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/08c1026e4a85490be0a491c7fc23850086ed1cb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21246b6e-6d27-49c2-83fc-699554556ccc/08c1026e4a85490be0a491c7fc23850086ed1cb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:33:dd:e6:1b:64:3a:cd:1d:d4:4b:cc:d2:93:bb:aa:67:
         9d:b9:93:9e:4e:83:49:7a:e8:82:6e:97:de:65:e2:06:49:06:
         b2:54:5b:27:19:8c:d3:7f:32:72:45:6b:ea:84:24:05:d4:95:
         47:23:85:66:83:b4:b2:5a:33:ee:ff:60:58:c6:a0:5b:cd:f6:
         16:e0:6a:83:5f:f7:f2:e6:5d:c4:a0:53:5d:1b:b8:9e:15:83:
         11:a3:bb:98:76:30:81:a5:2c:14:95:e3:56:5c:06:83:a8:09:
         9b:03:58:2c:80:21:f2:cb:1f:58:88:d0:af:66:be:b2:a6:19:
         7a:a5:a2:47:3f:65:69:76:0f:6b:69:3b:e1:92:db:90:27:22:
         54:9b:04:a0:1e:93:f5:42:78:5a:62:a4:f5:c8:47:4f:44:6e:
         6f:5c:bb:db:0b:ee:9a:51:c0:23:bc:3e:01:f7:a5:8e:fd:79:
         ac:dc:6e:30:db:89:0f:9b:b9:f4:28:21:c9:4c:88:f5:1d:75:
         53:61:65:22:a5:1a:10:38:ed:20:f4:45:0c:6f:01:1b:98:9e:
         25:7d:15:01:ad:59:20:49:a2:aa:86:3d:98:38:ca:7b:0f:77:
         e7:e6:4f:0f:c6:04:90:0c:9d:e4:0f:91:b0:39:f1:e5:e5:be:
         2f:08:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----