Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft
File:                     2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft (raw, json)
Hash identifier:          Jk6h2DPj8xmGgQceqBck6psRYXTdPDZ3btguTtFSuV4=
Subject key identifier:   CF:2E:93:31:BB:64:E4:BD:89:57:81:9E:63:FF:54:1E:87:D2:1C:C3
Authority key identifier: DD:1C:DF:C9:2E:45:94:EE:5B:BE:55:DA:0B:1C:49:17:E3:86:96:46
Certificate issuer:       /CN=2ab3c7cf52a8ce275e026127c8b74ae7b577cab0
Certificate serial:       1FEA61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft
Manifest number:          0DFC
Signing time:             Mon 15 Apr 2024 11:20:49 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:19:18 +0000
Files and hashes:         1: 2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.crl (hash: 8qYdKftNzBwWy9uYzQNMrRh4vz0ELbUvXX4ERd8K09I=)
                          2: 81ef616194e51bc6098309498c5b95dac58deb8e.roa (hash: XlizdxhJrBUCpsuxzui5fnwGAZwIcBJwGES4T29chHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091617 (0x1fea61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab3c7cf52a8ce275e026127c8b74ae7b577cab0
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:19:18 2024 GMT
        Subject: CN=1a85f34b388be6cf8d9177a267ca72c11f0d0d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:d0:39:d2:5e:c3:04:c7:0b:4b:96:f5:d0:
                    74:12:e1:29:3e:6c:62:25:86:c2:38:5e:5f:58:42:
                    76:5b:97:67:4f:0b:13:bd:27:21:b2:d2:bb:63:fb:
                    2f:e6:2d:96:2b:37:2d:bf:bf:f9:b5:d2:6d:7e:70:
                    e3:0b:4e:de:c8:15:f8:c1:75:6a:38:54:8e:3d:12:
                    aa:e6:f9:c4:a6:8b:7c:9f:93:25:ef:76:1f:45:97:
                    e5:fd:bd:09:6a:85:89:19:fa:47:67:5e:99:df:08:
                    b0:2b:00:a6:2a:90:57:19:76:00:aa:7b:38:38:f7:
                    55:99:d4:b2:a9:cc:a6:8d:1e:20:22:74:84:75:09:
                    50:62:cf:ce:80:4f:7d:93:73:09:c3:7b:a5:80:7c:
                    91:75:e5:25:12:28:2e:4c:22:c2:1d:a1:7c:81:59:
                    b7:02:0c:be:21:87:67:6e:01:fb:fa:43:45:f0:43:
                    f7:35:67:2f:d9:02:cb:1e:80:d2:a9:ff:af:ea:25:
                    e9:95:e5:28:fa:42:3f:4c:e0:5a:e7:cf:2a:46:13:
                    c9:42:d9:9a:cb:55:f5:bd:ec:17:4a:17:9c:1f:06:
                    65:75:0e:85:47:b4:a3:37:5b:62:ee:59:cd:3a:2f:
                    25:32:80:ba:62:cc:0a:0b:02:29:b4:99:b9:bf:35:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:93:31:BB:64:E4:BD:89:57:81:9E:63:FF:54:1E:87:D2:1C:C3
            X509v3 Authority Key Identifier:
                keyid:DD:1C:DF:C9:2E:45:94:EE:5B:BE:55:DA:0B:1C:49:17:E3:86:96:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dde13d1-a0c9-4391-87df-bb9f35c7cf96/2ab3c7cf52a8ce275e026127c8b74ae7b577cab0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:08:a1:86:0b:4b:08:9f:bb:77:d5:ea:9c:41:1f:81:a1:69:
         c4:fc:96:5d:4c:63:e0:5a:ed:fe:33:c0:90:21:ea:35:46:8e:
         32:5c:54:c2:1a:c7:22:ce:49:98:3c:9f:51:8d:10:28:ab:be:
         67:91:19:c3:88:e6:07:ec:74:e0:ed:11:60:9f:1a:c6:50:bb:
         c3:44:ce:e5:de:84:0f:f9:2b:51:64:0a:6d:f0:80:e4:d0:c8:
         0d:0e:92:25:27:55:13:f4:6b:e9:8e:9c:c2:f9:17:08:e8:02:
         bb:7a:86:fc:e1:c7:69:24:40:3d:b8:63:18:a4:c0:fe:1f:21:
         41:2e:49:7e:8e:8b:b8:17:5c:af:5d:fb:a8:3a:9c:03:a9:ff:
         3f:4a:09:7e:ba:72:8a:18:f6:47:2e:02:25:cf:9d:6c:87:fd:
         ab:e2:72:ac:47:08:70:bd:6d:48:bc:dc:b6:c2:b6:47:03:de:
         81:93:fe:43:cb:c4:3c:ca:af:27:c9:ac:1b:d1:aa:fe:18:8e:
         7c:ff:84:bd:f8:eb:6a:f9:51:f1:29:48:a6:9a:f4:8f:0c:56:
         c3:29:d5:ca:8d:e7:20:af:e0:90:da:7f:32:3d:8f:61:f9:f7:
         0f:4e:d7:9d:f1:0e:3c:9c:67:2a:8f:56:6f:79:3b:39:ec:21:
         90:0a:b1:e0
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDH+phMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
YjNjN2NmNTJhOGNlMjc1ZTAyNjEyN2M4Yjc0YWU3YjU3N2NhYjAwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTMxOTE4WjAzMTEwLwYDVQQDEygxYTg1ZjM0YjM4OGJl
NmNmOGQ5MTc3YTI2N2NhNzJjMTFmMGQwZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgqfQOdJewwTHC0uW9dB0EuEpPmxiJYbCOF5fWEJ2W5dnTwsT
vSchstK7Y/sv5i2WKzctv7/5tdJtfnDjC07eyBX4wXVqOFSOPRKq5vnEpot8n5Ml
73YfRZfl/b0JaoWJGfpHZ16Z3wiwKwCmKpBXGXYAqns4OPdVmdSyqcymjR4gInSE
dQlQYs/OgE99k3MJw3ulgHyRdeUlEiguTCLCHaF8gVm3Agy+IYdnbgH7+kNF8EP3
NWcv2QLLHoDSqf+v6iXpleUo+kI/TOBa588qRhPJQtmay1X1vewXShecHwZldQ6F
R7SjN1ti7lnNOi8lMoC6YswKCwIptJm5vzU9qQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFM8ukzG7ZOS9iVeBnmP/VB6H0hzDMB8GA1UdIwQYMBaAFN0c38kuRZTuW75V
2gscSRfjhpZGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmFiM2M3
Y2Y1MmE4Y2UyNzVlMDI2MTI3YzhiNzRhZTdiNTc3Y2FiMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmRkZTEzZDEtYTBjOS00MzkxLTg3ZGYtYmI5ZjM1
YzdjZjk2LzJhYjNjN2NmNTJhOGNlMjc1ZTAyNjEyN2M4Yjc0YWU3YjU3N2NhYjAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZGRlMTNkMS1hMGM5LTQzOTEtODdkZi1iYjlm
MzVjN2NmOTYvMmFiM2M3Y2Y1MmE4Y2UyNzVlMDI2MTI3YzhiNzRhZTdiNTc3Y2Fi
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAMsIoYYLSwifu3fV6pxBH4GhacT8ll1MY+Ba7f4zwJAh6jVG
jjJcVMIaxyLOSZg8n1GNECirvmeRGcOI5gfsdODtEWCfGsZQu8NEzuXehA/5K1Fk
Cm3wgOTQyA0OkiUnVRP0a+mOnML5FwjoArt6hvzhx2kkQD24YxikwP4fIUEuSX6O
i7gXXK9d+6g6nAOp/z9KCX66cooY9kcuAiXPnWyH/avicqxHCHC9bUi83LbCtkcD
3oGT/kPLxDzKryfJrBvRqv4Yjnz/hL3462r5UfEpSKaa9I8MVsMp1cqN5yCv4JDa
fzI9j2H59w9O153xDjycZyqPVm95OznsIZAKseA=
-----END CERTIFICATE-----