Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/4401fc25e43099f6b87907ff9f75ca409f7afb10.mft
File:                     4401fc25e43099f6b87907ff9f75ca409f7afb10.mft (raw, json)
Hash identifier:          JnvMbMX699s/oIwSbpcELijYUPJ7i3Z+qktjJlxH1nA=
Subject key identifier:   8A:65:54:83:F4:BC:CC:ED:08:3C:1E:82:49:55:95:18:15:E5:62:5C
Authority key identifier: 2B:33:BA:46:26:89:A0:FB:6D:68:1B:AD:E2:49:4B:53:7D:0E:5D:8D
Certificate issuer:       /CN=4401fc25e43099f6b87907ff9f75ca409f7afb10
Certificate serial:       2858C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4401fc25e43099f6b87907ff9f75ca409f7afb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/4401fc25e43099f6b87907ff9f75ca409f7afb10.mft
Manifest number:          0DFC
Signing time:             Mon 15 Apr 2024 03:20:25 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:20:17 +0000
Files and hashes:         1: 4401fc25e43099f6b87907ff9f75ca409f7afb10.crl (hash: l4ezvjkf0IdWklIXPLPnpyfSjdQzbO+76eEjipOcb0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644169 (0x2858c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4401fc25e43099f6b87907ff9f75ca409f7afb10
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:20:17 2024 GMT
        Subject: CN=d94707394c381334ac03a08ee2610db4981b9926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:c5:37:d0:29:10:e1:c9:04:1f:fc:ca:1c:
                    4e:31:4b:db:01:82:23:64:b8:24:d9:d2:61:22:f7:
                    93:9b:9b:ec:f9:c4:31:14:ae:11:9c:80:8a:08:5b:
                    50:63:f3:61:68:c4:aa:7b:8f:a3:f2:4e:d7:cd:ed:
                    9a:f6:5b:7c:6d:74:e1:17:ef:6d:76:62:b5:b5:37:
                    22:e1:14:3d:6b:35:1d:9e:01:9d:81:9e:b5:07:13:
                    4b:1d:91:e1:fc:08:3c:32:7c:f4:43:7e:3d:5d:48:
                    43:f8:8d:84:80:89:71:be:9c:0e:2f:0d:82:f3:15:
                    2b:80:43:1b:57:c1:5e:f8:74:34:a6:ef:d8:7d:a1:
                    79:11:d8:52:64:18:1a:ff:0d:a1:e2:be:40:9c:00:
                    31:eb:4e:68:ce:f8:e4:07:bc:77:5a:15:e0:dd:7e:
                    f4:e4:09:6a:59:0e:86:d6:fb:18:2e:aa:42:b1:a8:
                    06:4e:e7:aa:c6:20:87:32:18:f4:41:e8:f4:48:3a:
                    a7:1c:f6:71:bd:0e:c8:73:74:0c:b9:05:74:dd:80:
                    2f:8b:04:4b:8c:50:0d:c9:31:3b:20:03:a2:dc:5f:
                    ce:fd:18:7e:71:90:f2:8d:93:e1:49:ae:1c:af:b3:
                    da:03:26:47:a7:e7:0c:e3:78:31:33:22:b9:08:ca:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:65:54:83:F4:BC:CC:ED:08:3C:1E:82:49:55:95:18:15:E5:62:5C
            X509v3 Authority Key Identifier:
                keyid:2B:33:BA:46:26:89:A0:FB:6D:68:1B:AD:E2:49:4B:53:7D:0E:5D:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4401fc25e43099f6b87907ff9f75ca409f7afb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/4401fc25e43099f6b87907ff9f75ca409f7afb10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25581c2b-fd23-46b5-9ab7-b8f43d756e6b/4401fc25e43099f6b87907ff9f75ca409f7afb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:f5:0a:36:10:dc:4b:0c:a1:0e:c2:ba:14:57:d9:4f:c8:
         4b:ec:76:fc:24:87:bb:28:eb:c1:06:9a:3a:7b:0b:e3:0a:c6:
         99:9e:97:07:b3:27:e3:30:c4:2a:9a:df:e5:6f:7d:db:9b:d1:
         98:4a:26:44:97:57:58:19:af:f1:9b:d9:c5:c4:88:d2:a0:4e:
         aa:98:80:e2:9b:16:75:61:0b:88:28:93:88:ac:7f:a7:1c:c6:
         d5:34:53:e9:d3:71:28:c6:5f:57:1c:19:b6:21:c5:5f:0d:cc:
         7d:9b:2b:e7:fc:ab:33:cc:b0:8c:ae:cf:21:ea:09:de:b1:f9:
         6f:99:32:59:de:dd:6a:69:b9:e5:c7:88:05:ef:bd:25:4c:9d:
         70:42:1f:d1:2c:b4:51:bc:18:d1:30:63:17:f2:54:7e:d2:a0:
         16:bb:e7:bb:87:ad:ad:0e:6a:e0:89:31:ff:47:8a:47:9b:af:
         d4:21:cf:7c:39:06:4e:98:ad:dc:13:14:02:f6:69:8f:fc:a2:
         b4:7f:a9:f6:f2:f8:23:a5:71:e2:86:be:f9:c9:1a:d8:88:42:
         f5:bd:c5:0c:75:83:ce:36:1e:a4:1c:8a:aa:17:d2:f3:57:02:
         71:be:86:73:78:ce:2d:ac:72:81:b5:cf:d1:33:63:00:f5:32:
         e7:a0:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org