Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.mft
File:                     cab6fb04adee0738d3e5a3d1bade4f4643eebb77.mft (raw, json)
Hash identifier:          nh4LS+luRKRj461khMCOsBtRD+M1POFXeilQQuqFoV0=
Subject key identifier:   34:8A:BB:F2:6C:FE:C0:1D:5D:33:C0:DD:4F:F6:AD:98:41:20:78:93
Authority key identifier: 0D:7B:30:57:A4:93:ED:06:D8:BF:63:8B:CE:60:B9:0A:ED:41:E1:DB
Certificate issuer:       /CN=cab6fb04adee0738d3e5a3d1bade4f4643eebb77
Certificate serial:       29ABD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.mft
Manifest number:          0E09
Signing time:             Mon 15 Apr 2024 07:21:37 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:50:17 +0000
Files and hashes:         1: 8708267e25b56b6cfcb4cabe20a352abdbb0d958.roa (hash: 88v5Brk8ojcMVpGuNkl/M/iy6EiKcmKOx9Ev/uGcPGg=)
                          2: cab6fb04adee0738d3e5a3d1bade4f4643eebb77.crl (hash: geevLek7D+ClfM4Lfl2juUOOVmjNPgZBOfeuuOFzTfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2730969 (0x29abd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab6fb04adee0738d3e5a3d1bade4f4643eebb77
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 07:50:17 2024 GMT
        Subject: CN=f9ad273de0161ad1cbe3940f7386bb89d23095e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:1d:43:5f:b0:b1:99:c1:50:6e:e0:d6:ef:
                    58:f6:11:47:db:00:ef:72:5f:b6:c7:16:ea:96:ab:
                    03:ef:c4:09:e9:5b:7d:34:77:75:cc:97:f5:63:f5:
                    eb:d9:87:6d:3e:c5:b3:b2:2a:7b:3a:41:d8:bc:fa:
                    15:8d:08:b1:4f:eb:61:c1:c2:34:37:1a:e4:1c:58:
                    12:67:36:2c:00:ea:00:62:17:ad:31:5f:e6:9d:d7:
                    27:e5:6f:99:b6:52:14:74:96:ef:38:a2:2f:08:8a:
                    a3:6d:1d:30:60:91:80:2a:28:da:b8:19:1f:ab:1d:
                    60:34:78:65:d1:92:2a:f4:19:03:0d:c1:fa:59:45:
                    86:4b:83:49:9c:14:a2:23:34:95:04:13:35:93:e4:
                    17:8f:62:b4:c9:09:98:e3:8e:b3:f2:e9:2c:a0:34:
                    8a:41:17:80:be:3c:c3:18:25:a9:f9:f1:f4:ab:6e:
                    79:3b:a5:6b:9f:bd:be:a1:c7:6e:79:84:f9:c0:4b:
                    df:6d:c8:80:a3:62:4b:cf:7c:b9:43:ff:fa:bc:87:
                    47:c0:c9:11:18:a9:20:ca:0d:2e:25:7b:5b:a2:a4:
                    8e:60:42:24:21:ae:20:66:04:49:b0:3a:8c:0e:17:
                    2d:22:02:88:eb:87:f3:19:2b:55:6a:e6:d5:3a:68:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8A:BB:F2:6C:FE:C0:1D:5D:33:C0:DD:4F:F6:AD:98:41:20:78:93
            X509v3 Authority Key Identifier:
                keyid:0D:7B:30:57:A4:93:ED:06:D8:BF:63:8B:CE:60:B9:0A:ED:41:E1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2c158c3a-6b20-48ae-bd4f-de3260213708/cab6fb04adee0738d3e5a3d1bade4f4643eebb77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:73:2e:c6:fc:dc:8f:41:c4:53:f5:2b:45:fb:0b:96:4d:84:
         ed:e7:fc:da:aa:3b:d4:f9:70:0d:20:93:3a:ce:b3:22:5d:c0:
         e8:51:51:a7:9a:34:97:62:4c:56:76:d7:99:89:54:4d:3c:d9:
         0e:a1:96:78:1a:6e:5b:ed:74:d5:5a:d2:0a:a9:e0:83:46:f9:
         f1:de:fe:0b:bb:80:66:9f:b5:11:c0:28:de:bb:79:44:63:dc:
         1b:5a:84:85:51:67:ee:4d:c3:4d:98:1d:a4:69:a5:67:da:e7:
         83:8a:73:92:a7:90:de:f5:76:d0:30:ed:3a:c5:b8:c4:65:7b:
         4f:18:9a:f8:ae:ad:ce:8c:52:86:c4:aa:9a:7b:69:2a:6a:9d:
         46:e8:ad:3b:88:ef:de:9b:38:af:2b:93:ea:55:dc:c3:7e:a2:
         23:a9:e9:90:51:42:69:eb:53:d5:2d:13:b5:ec:1e:7b:82:1a:
         49:75:20:a5:a3:d8:9a:20:09:f5:5c:c5:21:24:a5:2e:25:1b:
         84:60:cb:d1:84:8c:93:16:9e:89:4b:0e:69:9f:6f:70:75:2c:
         58:ff:2d:65:90:ec:f1:42:88:8a:cf:73:05:ad:3c:b5:c4:2c:
         f7:9b:54:77:a8:14:e5:40:57:da:e5:f9:e9:ae:c0:20:4f:11:
         af:e4:94:ca
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKavZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
YjZmYjA0YWRlZTA3MzhkM2U1YTNkMWJhZGU0ZjQ2NDNlZWJiNzcwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MDc1MDE3WjAzMTEwLwYDVQQDEyhmOWFkMjczZGUwMTYx
YWQxY2JlMzk0MGY3Mzg2YmI4OWQyMzA5NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAu0sdQ1+wsZnBUG7g1u9Y9hFH2wDvcl+2xxbqlqsD78QJ6Vt9
NHd1zJf1Y/Xr2YdtPsWzsip7OkHYvPoVjQixT+thwcI0NxrkHFgSZzYsAOoAYhet
MV/mndcn5W+ZtlIUdJbvOKIvCIqjbR0wYJGAKijauBkfqx1gNHhl0ZIq9BkDDcH6
WUWGS4NJnBSiIzSVBBM1k+QXj2K0yQmY446z8uksoDSKQReAvjzDGCWp+fH0q255
O6Vrn72+ocdueYT5wEvfbciAo2JLz3y5Q//6vIdHwMkRGKkgyg0uJXtboqSOYEIk
Ia4gZgRJsDqMDhctIgKI64fzGStVaubVOmg1DQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDSKu/Js/sAdXTPA3U/2rZhBIHiTMB8GA1UdIwQYMBaAFA17MFekk+0G2L9j
i85guQrtQeHbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2FiNmZi
MDRhZGVlMDczOGQzZTVhM2QxYmFkZTRmNDY0M2VlYmI3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmMxNThjM2EtNmIyMC00OGFlLWJkNGYtZGUzMjYw
MjEzNzA4L2NhYjZmYjA0YWRlZTA3MzhkM2U1YTNkMWJhZGU0ZjQ2NDNlZWJiNzcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yYzE1OGMzYS02YjIwLTQ4YWUtYmQ0Zi1kZTMy
NjAyMTM3MDgvY2FiNmZiMDRhZGVlMDczOGQzZTVhM2QxYmFkZTRmNDY0M2VlYmI3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBACNzLsb83I9BxFP1K0X7C5ZNhO3n/NqqO9T5cA0gkzrOsyJd
wOhRUaeaNJdiTFZ215mJVE082Q6hlngablvtdNVa0gqp4ING+fHe/gu7gGaftRHA
KN67eURj3BtahIVRZ+5Nw02YHaRppWfa54OKc5KnkN71dtAw7TrFuMRle08Ymviu
rc6MUobEqpp7aSpqnUborTuI796bOK8rk+pV3MN+oiOp6ZBRQmnrU9UtE7XsHnuC
Gkl1IKWj2JogCfVcxSEkpS4lG4Rgy9GEjJMWnolLDmmfb3B1LFj/LWWQ7PFCiIrP
cwWtPLXELPebVHeoFOVAV9rl+emuwCBPEa/klMo=
-----END CERTIFICATE-----