Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.mft
File:                     53fe257dcf8bca4ea5c613680400a9cf495caccb.mft (raw, json)
Hash identifier:          7nElxa025GbIBuONWdRG9ZCx8B1diO2q1cwrckkk4as=
Subject key identifier:   6B:AF:8D:3D:1E:E5:1D:E9:E2:98:47:B5:3C:5E:2A:0E:A4:67:02:78
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Certificate issuer:       /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial:       28A938
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.mft
Manifest number:          0E05
Signing time:             Mon 15 Apr 2024 08:20:47 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 11:01:16 +0000
Files and hashes:         1: 3b93abdec5229a9d6e43829969f369e8fc05bace.roa (hash: RjMbJPJDo6lqNewIpfETfgow0eUuqan/JQZcT8bufAE=)
                          2: 4e6866b64c7ab3df9535d530979027d1eddcf3c0.roa (hash: Qna2Ov5Nzuo6HcpOSY85Wk+ZlonjDYXiQ6PIUoFya0k=)
                          3: 53fe257dcf8bca4ea5c613680400a9cf495caccb.crl (hash: Kx8tIw9Tc89rWzpgtzSpVers6dfVXDP7UiEKkxck+SQ=)
                          4: 9a6fc76f0a59237f521da104c98a75d673ad8357.roa (hash: SbQiBlgfU5FfhcHiwc2I+BmbkF5e0VlS8BJMr6cF2bg=)
                          5: f14c5832f9e4877b984138f2d745c54e996e8cf5.roa (hash: jsGYUGrcODFit0aZgCQ1sOmeEjZlz/I1HOU0xRU4mEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664760 (0x28a938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 11:01:16 2024 GMT
        Subject: CN=f5250d5a5dd3f21ae498c86420504f1ad4dbf003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:4c:95:2f:f5:18:5a:01:5d:56:29:62:76:
                    3f:bd:cb:66:ca:ac:41:b5:6d:1c:0b:40:21:f8:93:
                    00:08:a2:53:60:0c:08:a0:9a:42:79:19:8c:a8:87:
                    d0:56:cf:34:55:18:47:44:dd:01:40:2c:a6:ec:38:
                    b4:d7:67:8b:da:ed:ab:21:75:fa:6f:db:99:51:14:
                    2f:a9:b3:58:50:82:25:a1:19:0d:ef:1c:f8:b3:49:
                    44:0c:81:03:4b:4f:ba:21:5a:c8:62:ae:44:48:9a:
                    d9:75:7d:c0:7b:f4:0f:01:15:82:0a:5d:56:15:04:
                    e9:71:cf:ed:1f:13:c1:2c:97:a6:79:40:8d:44:49:
                    eb:f3:a2:11:ef:f0:04:d4:d0:86:8e:9b:33:1b:79:
                    c5:32:7d:34:ce:be:7f:33:fc:63:b6:aa:f3:c7:44:
                    96:1d:c5:d0:3b:54:87:56:e5:c8:fe:51:8c:8c:dd:
                    38:9d:ab:38:e4:77:d6:9e:3a:38:93:df:dd:2e:08:
                    24:0b:9c:6d:dd:84:01:55:dc:91:d2:fc:b2:59:30:
                    c2:02:e9:17:84:3d:1e:19:08:a2:6d:72:6e:5a:fa:
                    4d:65:19:95:ab:01:15:16:58:ae:1c:d0:75:46:2f:
                    03:b7:8e:64:c3:ee:7f:40:04:ca:45:65:4c:b0:09:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AF:8D:3D:1E:E5:1D:E9:E2:98:47:B5:3C:5E:2A:0E:A4:67:02:78
            X509v3 Authority Key Identifier:
                keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:80:59:b5:ed:94:18:55:92:41:16:f7:ca:60:91:c5:36:5a:
         07:f5:7e:54:8a:74:e5:d6:91:fe:65:91:92:cf:d0:21:8c:6c:
         de:de:ee:d4:f1:9c:d8:a7:cb:52:01:78:b7:9a:e4:1c:37:9b:
         5d:b6:27:55:c6:66:c0:4f:5c:a9:bf:9d:33:cf:b0:b0:a5:fe:
         0b:83:ed:08:49:38:14:a0:54:01:47:ec:ba:f6:88:e8:1c:57:
         61:37:fe:4a:d1:0b:d4:ab:b3:30:25:3d:e9:b7:91:8c:ff:ea:
         91:a3:7e:18:51:8a:cf:2c:b6:66:57:8c:0e:60:dd:77:3b:fd:
         19:c0:4c:99:94:e7:e5:bd:da:a6:7c:b5:f2:6a:83:56:d2:2f:
         89:3a:92:1c:fa:70:23:26:7d:1e:ea:97:4e:3d:e6:43:8b:f4:
         d8:cc:db:23:93:8f:f2:6f:33:7f:47:d6:c1:d9:ac:eb:bf:3f:
         89:fa:88:84:ac:9b:93:cc:83:7b:14:93:f8:88:73:e1:af:0a:
         90:47:c0:8f:25:84:9e:68:1f:93:09:d3:58:c6:1a:d3:5c:88:
         66:b4:a1:f2:c3:ff:32:3d:0f:6d:64:5d:22:da:5f:c6:00:d3:
         98:e2:c0:8e:15:97:42:6f:ff:d4:f4:f2:c4:c1:46:31:eb:63:
         61:df:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----