Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2cb371a5-b6b5-4842-a653-3f6ad26b30e1/a03159183524bc5f2ca01a2d5b8e5b12f2050168.mft
File:                     a03159183524bc5f2ca01a2d5b8e5b12f2050168.mft (raw, json)
Hash identifier:          gb/9V/n/x483i8vRFtDyAYnxNN952q9en+414nnyDR8=
Subject key identifier:   FF:C5:CE:41:B8:35:6D:8F:E9:46:91:B6:EE:41:5E:1C:22:5A:F7:88
Authority key identifier: A6:5C:A5:89:67:01:91:98:3B:C3:DE:04:3C:E2:93:DE:71:B6:D7:BF
Certificate issuer:       /CN=a03159183524bc5f2ca01a2d5b8e5b12f2050168
Certificate serial:       2399FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03159183524bc5f2ca01a2d5b8e5b12f2050168.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2cb371a5-b6b5-4842-a653-3f6ad26b30e1/a03159183524bc5f2ca01a2d5b8e5b12f2050168.mft
Manifest number:          0DF7
Signing time:             Mon 15 Apr 2024 02:21:51 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 05:10:29 +0000
Files and hashes:         1: 23bc3e0399f9f83e8d5d613f99db72f8e6328a23.roa (hash: 4fiQM8o9hJ5b8fzeIGEdXwbBWEVGeXBb5JmvRhrGD/E=)
                          2: a03159183524bc5f2ca01a2d5b8e5b12f2050168.crl (hash: mtDWY23dZ2AXZnR2HVqkkEjSVH7EjUFb1KErlrbpY64=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333179 (0x2399fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a03159183524bc5f2ca01a2d5b8e5b12f2050168
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 05:10:29 2024 GMT
        Subject: CN=2d0249a9c502f655d0be39d8263bc237f3cf52b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:50:4e:d5:a8:50:d8:47:3c:f5:98:8e:51:10:
                    d1:2a:9e:ec:2f:9d:53:6a:c9:4e:2c:c2:a5:c2:1a:
                    d6:54:ac:36:0e:44:84:c4:2e:1a:7a:d2:2d:be:f5:
                    fd:e7:b7:88:58:42:eb:87:8b:cc:c7:66:dc:96:9f:
                    1e:1c:f4:95:a7:16:06:0d:18:57:6b:05:1b:8b:c5:
                    01:89:5b:d9:e8:3d:b6:95:89:0c:af:1c:0a:c5:69:
                    e4:e7:5a:04:d1:60:bb:a2:56:ff:39:26:5e:e3:b9:
                    c8:e3:71:09:83:e2:4e:93:68:01:f5:70:9a:e1:a2:
                    42:19:60:fd:1b:67:46:14:dc:5b:89:9d:36:53:f9:
                    cb:8f:10:e4:c6:a5:db:3c:78:5b:a8:b4:6c:d6:1d:
                    a0:71:c5:10:05:c1:12:00:00:8e:c6:19:ed:4b:f8:
                    eb:83:46:6a:55:ba:cf:5a:b1:cd:ce:bb:58:2a:c3:
                    0c:2b:4b:f9:2a:35:ca:cc:8c:48:14:d4:1b:21:51:
                    8d:5b:25:ad:9b:ea:43:af:7d:10:65:a5:4a:3a:1f:
                    ea:2a:37:06:34:02:cf:51:0c:1e:a9:11:d1:05:89:
                    b7:08:43:ce:35:ab:45:dc:8b:9e:13:74:11:22:c7:
                    3d:a9:ca:91:64:3d:15:e8:53:c2:2b:59:c6:8a:11:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C5:CE:41:B8:35:6D:8F:E9:46:91:B6:EE:41:5E:1C:22:5A:F7:88
            X509v3 Authority Key Identifier:
                keyid:A6:5C:A5:89:67:01:91:98:3B:C3:DE:04:3C:E2:93:DE:71:B6:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03159183524bc5f2ca01a2d5b8e5b12f2050168.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2cb371a5-b6b5-4842-a653-3f6ad26b30e1/a03159183524bc5f2ca01a2d5b8e5b12f2050168.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2cb371a5-b6b5-4842-a653-3f6ad26b30e1/a03159183524bc5f2ca01a2d5b8e5b12f2050168.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:27:53:0a:a5:1a:67:80:75:1c:41:45:ff:0c:70:92:f8:
         a8:de:b3:36:e1:60:1a:f0:cd:f4:96:2f:10:3c:d2:d5:21:80:
         41:4a:e1:48:c2:6e:24:7b:1d:c1:be:d6:e5:33:77:5e:1f:b1:
         e7:16:0f:dd:d6:30:2c:1a:ea:64:1c:2b:2c:cb:d3:02:8e:3d:
         43:c6:09:9a:ed:00:95:f4:2a:ac:e4:a3:4f:b3:dc:e7:6b:25:
         4b:2f:4a:72:85:54:a5:3c:c1:f3:6e:d9:b6:5a:9c:e1:49:74:
         95:47:2a:31:71:26:d4:5c:7a:55:ea:74:b3:b6:01:a2:3e:a9:
         c7:11:ed:cf:ee:08:4c:0a:a3:68:56:b5:e7:44:d2:4e:a6:8a:
         14:69:df:7d:a5:83:f5:e6:99:04:0b:97:20:6c:e4:7e:63:1d:
         16:bb:76:3e:10:6e:5e:d4:25:31:2b:7a:d8:b0:4a:f7:4c:cc:
         e3:f8:0f:66:dc:e5:26:1d:4c:ef:9d:74:d1:18:f0:b9:bb:26:
         22:ef:6a:1c:d2:64:72:1f:60:7e:49:42:4a:30:cd:c7:c0:43:
         81:18:1d:3f:23:b5:98:3c:26:91:15:08:4a:89:02:52:df:69:
         79:fa:c9:f9:e5:f7:a9:5d:d7:ca:36:9e:b7:ff:55:e8:ac:db:
         64:de:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----