Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9f017755dc576b13bf12304bec79a25621b0e009.mft
File:                     9f017755dc576b13bf12304bec79a25621b0e009.mft (raw, json)
Hash identifier:          PqwnNDhm9dSsuhpbYvFklZAMuJkUGq0SnHh211ggbFk=
Subject key identifier:   70:A2:5F:11:E7:6C:8C:17:DE:86:D1:32:73:26:DC:4E:12:23:53:B2
Authority key identifier: F0:13:43:75:14:36:A1:26:E8:05:A7:25:7E:14:20:51:04:C7:EE:5F
Certificate issuer:       /CN=9f017755dc576b13bf12304bec79a25621b0e009
Certificate serial:       21670A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f017755dc576b13bf12304bec79a25621b0e009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9f017755dc576b13bf12304bec79a25621b0e009.mft
Manifest number:          0DCC
Signing time:             Mon 15 Apr 2024 10:20:56 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:23:25 +0000
Files and hashes:         1: 582adddb75f8cc1efb788c0520e4f84d7b022783.roa (hash: 5WGX2MxU4znxyM9kW4wALac7z+F+VJ9E8QOW/2NXVJw=)
                          2: 9f017755dc576b13bf12304bec79a25621b0e009.crl (hash: yDgIJdf7dzFrn+I5NSNRv6yQwii9QTTcDKqTXtgTjGI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189066 (0x21670a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f017755dc576b13bf12304bec79a25621b0e009
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:23:25 2024 GMT
        Subject: CN=0214dca2a7c05f7c14bd672c255ae6302048b45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:59:11:47:b7:74:fe:45:5e:39:94:de:1c:74:
                    38:7f:36:a7:d0:64:09:a7:63:98:a4:4b:9a:42:0f:
                    ab:07:81:c7:9a:b1:d0:df:54:b8:b7:75:fd:57:a3:
                    90:0a:0a:ed:7d:7f:18:94:0f:f7:0f:cd:0f:84:91:
                    0c:61:37:ff:eb:06:ff:37:60:d7:97:92:3c:09:85:
                    a1:0f:1c:66:1a:09:3d:b6:ef:4b:5b:d0:61:27:b6:
                    d0:d3:82:7f:49:b3:5e:e2:93:75:ab:a9:ca:24:20:
                    9d:02:bb:c4:1d:c4:2b:1c:66:73:5b:69:71:7a:07:
                    99:ce:cc:f1:d0:53:34:7d:cd:0c:23:32:b5:df:f5:
                    e8:0f:aa:31:3c:e9:e0:9f:b2:21:49:a2:98:b5:ca:
                    05:01:af:1e:d5:3e:30:61:59:e4:dc:d0:26:37:ea:
                    c0:00:c6:74:f7:95:d0:d2:ce:69:8d:8f:58:99:5a:
                    7d:e4:b1:28:ee:00:06:83:59:b7:12:bd:3d:f9:63:
                    74:62:b0:7e:e8:03:fe:f0:86:d5:5f:3b:57:ee:65:
                    fd:8e:fd:16:c5:85:d8:25:0f:2a:36:5a:8c:48:60:
                    e7:ff:05:21:48:57:d4:d4:73:f8:68:68:21:cd:64:
                    0c:87:5d:78:3f:e0:87:91:ee:81:f2:b1:78:fa:20:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A2:5F:11:E7:6C:8C:17:DE:86:D1:32:73:26:DC:4E:12:23:53:B2
            X509v3 Authority Key Identifier:
                keyid:F0:13:43:75:14:36:A1:26:E8:05:A7:25:7E:14:20:51:04:C7:EE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f017755dc576b13bf12304bec79a25621b0e009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9f017755dc576b13bf12304bec79a25621b0e009.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9f017755dc576b13bf12304bec79a25621b0e009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:d4:cc:8a:8b:fa:3e:4d:f4:38:06:a0:5a:39:b3:50:19:
         78:8d:c3:87:f4:26:6c:1a:51:8b:76:81:ec:3f:bc:26:75:da:
         b7:1d:e9:01:1f:88:00:05:d8:62:c7:23:50:bd:c8:76:c4:a9:
         2e:6a:ad:ab:70:51:16:c7:bc:a2:ce:09:18:b7:9d:39:03:46:
         8b:a7:f7:5e:c4:9e:1a:ac:1d:15:8d:e9:b0:cf:14:5b:e8:4e:
         c0:9e:28:bf:5b:67:ca:04:13:63:95:e9:99:fe:16:f0:2a:5c:
         13:94:f4:00:5b:94:67:f4:a4:18:9a:d3:e2:e9:0f:a9:45:1a:
         f7:43:af:6c:25:b7:51:8e:cb:2f:60:31:ed:51:63:67:54:e1:
         d5:76:76:66:22:47:f4:1b:8a:1b:8c:e9:72:dd:98:a6:ec:de:
         0d:5b:aa:0e:98:13:7f:ee:ca:f8:67:0f:dd:05:1a:4b:2a:cc:
         52:1e:f9:aa:c3:12:95:84:39:c0:54:c2:0f:b9:6e:da:a4:26:
         9f:2d:b1:46:cf:4b:00:63:73:3b:c7:88:6b:f0:68:76:8d:35:
         96:d9:e0:08:f6:7d:ee:f1:6d:a7:89:5a:3f:b8:4f:5a:6c:96:
         d7:26:7e:42:6e:d8:98:95:3f:d9:8c:64:bd:82:84:37:cd:91:
         5d:8a:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----