Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft
File:                     d31e9a71271a98fb6f60776ee08cb771f256bb33.mft (raw, json)
Hash identifier:          +LNnHmlRIDjXIgqDPrNph7NfmrStbO1ayDe0WrUSU0U=
Subject key identifier:   B3:3D:52:87:31:3A:1D:2C:B3:B6:0C:6A:F2:7C:1F:50:93:79:85:1E
Authority key identifier: A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3
Certificate issuer:       /CN=d31e9a71271a98fb6f60776ee08cb771f256bb33
Certificate serial:       28E7F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft
Manifest number:          0E0E
Signing time:             Mon 15 Apr 2024 09:21:38 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:51:18 +0000
Files and hashes:         1: b4035237e0f90319b76de4d3a5e216d9f1bacef1.roa (hash: ZiZ9FUZhnPCcoBaSdEf4jgOLscjnsK32gy1UCPz6KVM=)
                          2: d31e9a71271a98fb6f60776ee08cb771f256bb33.crl (hash: zSPtWTzwVuteFn/15Lru+qhkiE3svVhuchWkNH48Df4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680822 (0x28e7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31e9a71271a98fb6f60776ee08cb771f256bb33
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:51:18 2024 GMT
        Subject: CN=4d36e2f638b3cc8ccce58bf755b16a11024563ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:8f:5b:d7:6f:98:34:46:7d:01:80:ae:9b:
                    34:cf:85:f8:b9:0a:04:ee:6c:96:99:31:0b:55:d0:
                    64:9b:7a:6a:fc:b0:13:1f:48:c8:3a:c4:ec:27:02:
                    b4:a4:c1:04:6b:a1:a9:fc:c5:1c:d0:98:4e:45:de:
                    9a:5a:d3:80:5b:f0:ba:4f:6d:08:e3:2e:5f:24:40:
                    09:41:be:3d:97:ad:5f:dd:08:42:60:70:b6:15:42:
                    71:d8:3e:fe:bd:7c:57:d1:8c:ea:e1:92:97:96:8d:
                    4c:a2:43:d0:46:8f:99:63:30:60:8a:c0:34:c7:a2:
                    dd:6e:84:a9:f3:66:47:f5:cb:44:04:30:cf:d1:d2:
                    a7:60:4e:de:04:b0:aa:e0:da:6f:de:57:06:97:3b:
                    30:9a:c5:85:a9:b1:b7:b0:a6:84:85:2c:7d:e6:cf:
                    f8:8a:ec:51:f0:f2:2f:44:e1:43:66:9f:0a:a1:89:
                    7f:bb:6e:d3:89:34:8c:54:24:02:83:8e:17:3e:82:
                    56:d4:19:ae:7b:92:72:b3:68:48:6e:8b:b4:69:e0:
                    00:3e:3a:c5:bc:83:bf:15:59:60:34:06:ba:f6:ac:
                    14:7e:b9:c9:2e:b7:42:63:68:77:da:82:00:97:44:
                    bb:ae:b8:9f:56:a2:bd:2e:94:eb:a9:fb:76:2d:0d:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3D:52:87:31:3A:1D:2C:B3:B6:0C:6A:F2:7C:1F:50:93:79:85:1E
            X509v3 Authority Key Identifier:
                keyid:A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8f:31:d0:34:2a:be:34:9a:c8:ab:ad:04:09:a2:49:c4:7c:
         f6:ab:db:87:00:b6:bb:ba:2f:0e:34:47:ca:f8:df:bc:11:3d:
         6e:c1:f2:0c:62:8e:db:69:6f:f1:41:a2:30:32:bb:2a:46:8c:
         8b:a6:1c:83:9a:33:71:d6:e0:d6:80:58:7d:e2:58:33:32:68:
         31:ef:ca:45:3e:65:73:81:9a:44:0c:f9:15:21:ab:2a:2e:56:
         aa:a1:3a:f5:1b:91:30:4f:35:d2:b1:9a:da:d2:35:32:29:a7:
         c5:0b:5f:33:2e:80:31:89:f9:22:06:86:39:d8:4c:31:74:c4:
         69:8c:9b:ff:c4:dc:09:ab:a6:63:8c:de:ea:d6:e4:d7:36:5f:
         ed:4f:26:ab:34:96:10:da:7e:d0:b8:a8:9c:5b:5f:08:71:22:
         12:b5:0c:86:5c:f0:0c:c5:99:77:dc:2a:31:de:be:b4:11:37:
         0d:df:cd:3f:5e:76:c7:33:86:11:36:89:7f:70:ae:e2:b1:41:
         38:0c:5f:fc:34:46:b6:e0:db:fc:bd:70:8d:da:ef:5c:12:84:
         f3:d3:71:9c:d6:a9:6c:53:15:20:0e:03:3d:91:10:20:28:bf:
         13:f4:a3:52:fa:86:31:0c:6c:e1:38:a9:50:8b:c6:ce:d5:65:
         3f:7a:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----