Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.mft
File:                     f2cbbb792ff42fa718619507a50663798055643b.mft (raw, json)
Hash identifier:          Rbcowte/vAC56tgT041unvpKXXO6801T+x6MWZkWvso=
Subject key identifier:   B5:44:CE:75:9D:27:58:3E:36:29:14:CD:A1:FF:68:88:70:0D:20:E1
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Certificate issuer:       /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial:       291DD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.mft
Manifest number:          0E13
Signing time:             Mon 15 Apr 2024 09:20:59 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:35:18 +0000
Files and hashes:         1: a8f270a4f617b2404c7ae0217e763d850570c018.roa (hash: pvA+CXnltmaZWHj0mj7UVt9m37HbPMIIkqSlA9xB6So=)
                          2: f2cbbb792ff42fa718619507a50663798055643b.crl (hash: jdNnV2vrdvWTsUhGjAr2icD+V3B43Hye/glEb33idv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2694610 (0x291dd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:35:18 2024 GMT
        Subject: CN=e91733eb15d88b0ab2844c2b4638f2b5a1f7c153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:ad:d4:ac:e8:da:90:26:d3:63:dd:d4:cc:
                    0d:f8:9a:e1:d7:52:29:a2:ee:46:cf:3d:2f:03:60:
                    8d:22:fd:dc:8b:b5:98:76:8f:73:6b:d6:bb:4d:72:
                    5f:01:11:41:5d:11:76:65:b3:b1:95:d6:24:b2:1e:
                    50:95:3e:1d:94:be:00:29:53:a4:63:c8:4a:87:d0:
                    ea:d4:44:6c:34:d9:8d:5f:ff:15:4c:d3:fe:64:d6:
                    e1:de:f2:2c:cf:8a:79:66:49:cb:8e:4f:e6:e9:99:
                    66:87:5d:61:6d:c1:65:4c:91:49:aa:2d:16:37:d5:
                    68:66:6e:58:0d:f8:b3:8c:e3:08:d5:86:6d:40:20:
                    23:a0:1f:0c:e4:44:47:94:c8:69:41:45:46:70:a0:
                    3f:66:8d:4a:45:b3:40:4f:fa:59:82:71:e9:47:42:
                    f2:e2:22:f9:56:f3:89:88:d1:bf:8c:de:c6:71:e5:
                    33:d8:ea:79:d6:86:2b:21:db:4b:7f:8a:a2:4f:32:
                    be:df:a0:b6:07:81:72:31:76:66:e0:7f:e7:fb:be:
                    e6:38:7b:d7:2c:e0:14:43:b4:91:90:c5:5c:c6:0d:
                    5c:16:cc:7b:91:17:e3:ae:b6:42:af:41:df:10:fe:
                    b5:6e:11:f8:cf:39:44:70:17:95:ef:11:f9:d8:af:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:CE:75:9D:27:58:3E:36:29:14:CD:A1:FF:68:88:70:0D:20:E1
            X509v3 Authority Key Identifier:
                keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:bd:1d:96:e4:12:5e:58:c4:c6:9b:aa:ee:2e:51:2d:c2:c9:
         7b:16:88:14:1d:82:75:91:06:e0:66:3d:a5:45:25:5d:0b:62:
         4e:21:d2:36:3a:68:8e:f2:b4:6b:94:a1:c4:02:72:45:0a:7a:
         49:9c:15:e4:d6:d0:37:b8:ea:55:f3:1d:86:06:0e:bd:4d:d0:
         e3:8e:9f:b4:30:b0:c5:30:05:01:b8:bc:b2:00:34:22:cc:3a:
         43:11:90:75:51:30:58:fe:77:71:f5:26:fa:44:68:a5:78:df:
         93:6b:15:55:c5:47:bc:42:4e:03:07:bd:62:9f:b3:5c:be:cd:
         ca:4a:ed:b9:f7:da:fe:9c:00:05:fd:0f:40:aa:2f:72:aa:b1:
         29:e9:ec:bd:64:eb:9b:d1:c4:26:65:ed:be:24:73:0d:39:ae:
         28:78:62:43:da:ad:4a:4a:ed:16:5c:4f:50:b9:f8:0e:6d:fb:
         9c:c9:3f:12:a3:73:f5:01:2d:c7:1f:9e:1c:f6:64:25:8a:0a:
         65:90:6f:f9:14:ff:29:2d:e8:2f:d9:50:4c:92:96:eb:21:99:
         55:5c:e3:cb:91:b8:06:43:fe:8b:04:43:ae:2a:17:3b:bc:73:
         82:b3:26:4d:4f:6e:01:bf:d5:6e:c9:b4:f7:a4:fb:d0:e5:d0:
         23:60:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----