Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.mft
File:                     889d3b2e14dc61b15dd5e3645ba57c11455f9876.mft (raw, json)
Hash identifier:          w/Jd0G/p5kMaDeWzBLJogy1I2xDQI8fUNCxbRPNrdVI=
Subject key identifier:   EC:1D:85:64:91:36:58:E6:4C:72:74:CF:0D:A5:26:CC:AD:C8:D9:61
Authority key identifier: 29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC
Certificate issuer:       /CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876
Certificate serial:       202745
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.mft
Manifest number:          0A58
Signing time:             Tue 20 Jun 2023 17:02:33 +0000
Manifest this update:     Tue 20 Jun 2023 16:02:33 +0000
Manifest next update:     Fri 23 Jun 2023 19:27:33 +0000
Files and hashes:         1: 5bc73ac86e3d4c41bf813facc468662981e31a6f.roa (hash: RpTDRooGJ/MMnzYaMWC0IM/mP7iwExIoPtgGY5K9kL0=)
                          2: 889d3b2e14dc61b15dd5e3645ba57c11455f9876.crl (hash: +OI4i0NQ2JHc/MPlIBU8nKthjf/+ZQ0ChEwiJD2fvJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107205 (0x202745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876
        Validity
            Not Before: Jun 20 16:02:33 2023 GMT
            Not After : Jun 23 19:27:33 2023 GMT
        Subject: CN=b74451e0f0c23a612e9b3d9e52de74bc782a16b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:91:d0:3f:ce:f8:2e:d7:d3:ea:4c:7a:f0:
                    4a:c1:39:99:29:0a:58:8f:2f:44:d1:b3:ad:6c:c7:
                    87:eb:da:5f:5b:c4:45:a1:9b:1e:fb:f5:dd:08:07:
                    c1:d4:9b:67:02:d5:a5:8a:06:3e:fb:c6:ef:6f:a6:
                    2d:b2:6c:5a:f9:17:4b:a1:4b:b1:29:93:92:5f:bf:
                    98:d5:37:f2:ec:95:48:6d:de:cf:63:8c:ac:60:3b:
                    b2:10:7b:82:de:79:08:c5:9b:23:60:1e:21:9f:d7:
                    d8:14:76:29:b0:c2:9c:ae:ce:39:ab:ab:1b:b2:99:
                    af:d7:27:a3:c4:78:13:a3:84:93:c2:b6:2f:a2:ee:
                    b9:67:66:ba:f5:b6:00:e7:d1:a3:42:a4:e2:56:56:
                    77:78:6b:33:c5:a6:4a:55:34:ef:4c:56:74:4d:83:
                    96:88:cb:25:8c:d7:9b:89:ee:36:fa:86:9a:f9:b2:
                    a4:7a:74:6e:7a:f0:cb:98:0b:d2:b2:27:0c:71:22:
                    11:8f:bb:72:08:e3:01:24:4f:65:ef:a2:6f:d6:6c:
                    04:98:1b:fc:50:d0:6e:e8:08:3c:dd:6a:22:c6:6e:
                    be:cc:ab:43:44:66:07:c5:39:36:00:e8:1c:a1:51:
                    c8:c8:3c:2b:45:26:20:a4:94:f1:7a:ec:22:f7:b3:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1D:85:64:91:36:58:E6:4C:72:74:CF:0D:A5:26:CC:AD:C8:D9:61
            X509v3 Authority Key Identifier:
                keyid:29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:48:a0:d8:77:05:72:fe:c2:98:df:81:9a:ba:70:ec:de:f5:
         51:dd:82:aa:ad:70:34:05:72:29:2d:c6:34:6c:7d:2d:68:27:
         e3:c0:46:1c:8a:89:18:9e:c4:aa:5b:d0:76:d7:fc:20:c4:6d:
         b5:e0:f0:41:ca:a3:7d:23:1c:12:7b:e5:fb:c2:fe:27:85:ff:
         27:15:c7:2a:b7:68:14:72:42:93:de:b7:3f:de:cd:41:73:26:
         17:58:f4:cc:62:2e:35:b8:3c:af:1f:0a:8a:28:9e:a7:52:af:
         77:75:f4:3f:93:87:ca:ae:8b:91:03:8d:0d:c2:52:d5:64:1b:
         e2:1e:71:a8:0b:9a:4a:19:91:9b:db:9f:a6:6c:59:07:7d:29:
         50:28:4e:98:8e:f7:9f:f4:ab:3d:ff:0f:c0:e0:3d:a7:40:ec:
         9c:2d:94:38:10:21:9c:d6:cf:3c:10:b7:43:5f:07:ae:95:99:
         0b:5b:15:29:12:dd:dd:56:22:75:22:91:07:04:90:81:f9:11:
         a9:4a:d8:9b:f9:b4:be:9d:99:9d:9e:7b:28:e4:d1:92:5e:07:
         c6:69:c1:38:db:0a:5a:5b:87:14:5f:b9:37:40:92:7a:03:4a:
         61:c2:37:dd:29:1c:4c:22:39:8b:1c:16:ff:f2:d4:d4:14:bb:
         6a:84:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----