Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2cdf0e7a-484f-4a67-93f7-c8dc1c918920/972a4f5b52574437a3dc7a10774c52406e630539.mft
File:                     972a4f5b52574437a3dc7a10774c52406e630539.mft (raw, json)
Hash identifier:          5m4F1P//NKb3ILFqY1fopbfEF+mQ96L2FTc9nHKoBVo=
Subject key identifier:   09:D8:A5:AE:C4:71:66:C0:8B:50:DE:79:AB:1C:D1:63:92:FF:C1:59
Authority key identifier: 93:CA:6A:00:61:87:4D:25:D6:BA:17:C5:0D:BD:84:E0:5B:19:68:69
Certificate issuer:       /CN=972a4f5b52574437a3dc7a10774c52406e630539
Certificate serial:       0834A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/972a4f5b52574437a3dc7a10774c52406e630539.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2cdf0e7a-484f-4a67-93f7-c8dc1c918920/972a4f5b52574437a3dc7a10774c52406e630539.mft
Manifest number:          0425
Signing time:             Mon 15 Apr 2024 11:20:55 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:37:18 +0000
Files and hashes:         1: 972a4f5b52574437a3dc7a10774c52406e630539.crl (hash: PGCfiQ/SLcKSAkc9AAZ6sGSXGH+DpKHRDvw8MkHtWqM=)
                          2: aa8adff7d9ddfbe3b171ad426f190858f9e6f0fe.roa (hash: kYBrfK4q6sPr3forsK5bU7g1vLabem/5coCv4mdt7m8=)
                          3: c1b77804cddc3b407112215a5cf103f16f3f2831.roa (hash: UleHELy6RKRTlwKfcrhKBszAYUiMjKVCjylxS0MFl94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537768 (0x834a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972a4f5b52574437a3dc7a10774c52406e630539
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:37:18 2024 GMT
        Subject: CN=59c50ffa806b308acfe95dbc65fea1a1694bc429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:eb:f9:21:2c:45:29:cc:46:87:f3:1b:27:
                    56:bd:f3:17:13:91:d0:07:2e:aa:38:a2:f7:b5:da:
                    79:36:94:17:31:69:6e:a0:f7:11:54:fa:26:06:fc:
                    84:d8:79:5f:b9:7d:7c:8d:44:50:63:74:37:45:d4:
                    da:40:8f:88:45:6a:56:aa:fb:12:38:a2:dc:c5:47:
                    89:0f:fe:be:7c:a3:3e:7e:8c:c4:ff:27:bb:58:20:
                    82:d4:9e:04:d1:48:bb:f1:69:fb:8a:69:5b:c2:ad:
                    34:98:06:7e:1d:c3:4b:aa:06:59:d7:75:a7:a7:16:
                    0c:d5:15:e6:21:ff:7c:e8:f1:a8:54:02:8a:bb:cc:
                    bb:16:b6:c2:d7:3f:68:f1:29:6e:24:91:54:de:3f:
                    7a:a4:9e:81:38:74:16:11:00:d6:87:66:2c:78:5d:
                    03:2a:66:d7:31:30:db:a7:30:88:b9:17:7e:8c:c9:
                    0c:55:33:b5:12:6a:ee:ec:51:e4:70:54:80:f2:a9:
                    bb:98:c2:7f:22:b4:86:18:67:50:07:22:8d:d8:fb:
                    e2:b0:ce:98:b9:42:06:28:16:dc:7d:88:3d:36:f6:
                    12:72:9e:56:2c:97:5e:6a:46:8d:3b:38:72:62:c2:
                    32:fe:64:ee:4c:c1:d6:6d:15:dc:97:41:97:9d:1c:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D8:A5:AE:C4:71:66:C0:8B:50:DE:79:AB:1C:D1:63:92:FF:C1:59
            X509v3 Authority Key Identifier:
                keyid:93:CA:6A:00:61:87:4D:25:D6:BA:17:C5:0D:BD:84:E0:5B:19:68:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/972a4f5b52574437a3dc7a10774c52406e630539.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2cdf0e7a-484f-4a67-93f7-c8dc1c918920/972a4f5b52574437a3dc7a10774c52406e630539.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2cdf0e7a-484f-4a67-93f7-c8dc1c918920/972a4f5b52574437a3dc7a10774c52406e630539.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:24:6b:33:f4:b4:a6:35:60:fe:10:38:59:2a:b1:f3:e9:
         cd:f9:67:ad:fc:2b:ae:b0:da:d4:c9:61:04:86:52:bc:3e:46:
         42:1e:b0:e7:c8:63:a4:ac:b7:71:77:78:94:ec:d7:5a:e3:01:
         a5:34:a3:6b:42:9d:d6:00:92:47:e0:60:1c:ab:87:8b:8e:9f:
         e9:e7:a9:b5:eb:e2:4c:4b:a6:c8:2e:82:bf:3c:ee:f8:25:69:
         c5:48:40:66:b7:49:15:19:15:09:a9:99:66:ad:14:63:36:3c:
         15:fc:4a:8a:53:0f:ec:aa:31:e9:7f:71:52:6e:48:85:87:c7:
         a8:da:fd:11:89:bd:ed:0d:0e:3f:07:6c:03:af:11:b8:91:b7:
         db:6d:75:ee:b5:32:21:1c:e6:7a:49:98:67:69:76:35:8e:98:
         07:01:8d:66:ee:f9:c0:7e:45:9a:4d:d3:03:86:b6:3d:72:76:
         25:78:63:cd:21:f3:0f:e1:74:78:ca:50:e5:fa:26:c0:4a:3b:
         73:d6:d2:19:d2:8f:89:ed:84:80:7f:2e:7a:38:a2:67:aa:4a:
         47:48:34:3d:a8:f4:a3:0e:2d:29:1a:5e:1b:27:82:62:7c:80:
         45:86:4c:65:fd:2e:b2:67:ca:bc:a1:dc:b7:21:fc:88:cd:a4:
         27:5d:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----