Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/14972a169d27abbbc1d8a239ac2b44de8608deaf.mft
File:                     14972a169d27abbbc1d8a239ac2b44de8608deaf.mft (raw, json)
Hash identifier:          Q1m5kzlV55lyHcYLaUwdTGY40NdIyz1NgpSHTzhP6VI=
Subject key identifier:   A0:90:B4:D3:95:69:EF:2B:66:4B:72:68:28:5A:AB:D7:E2:72:06:C7
Authority key identifier: D0:95:FE:EA:57:78:6C:4B:ED:26:2B:97:BF:BF:0A:B3:43:97:5C:4A
Certificate issuer:       /CN=14972a169d27abbbc1d8a239ac2b44de8608deaf
Certificate serial:       0A60D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14972a169d27abbbc1d8a239ac2b44de8608deaf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/14972a169d27abbbc1d8a239ac2b44de8608deaf.mft
Manifest number:          053B
Signing time:             Mon 15 Apr 2024 02:21:08 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 02:43:29 +0000
Files and hashes:         1: 14972a169d27abbbc1d8a239ac2b44de8608deaf.crl (hash: L46XBWw/Tct8fKBK1ENzVVBAyp7uYAG2vUgTBg9XsiE=)
                          2: a204af1f341b8f9687de8594e9193e4b0a7c2c98.roa (hash: sH7ReD7cQYwaYiXQ+GTR0yZhJvkNzYBOxarEvZo9FX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680147 (0xa60d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14972a169d27abbbc1d8a239ac2b44de8608deaf
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 02:43:29 2024 GMT
        Subject: CN=a1329830b3a78725afbc6bd00bfd65f39e2a023d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:a9:b1:dd:d7:3d:4b:d3:f4:38:fb:fd:02:
                    dd:29:4d:07:61:0d:88:e7:d2:f4:a6:5d:ee:61:6e:
                    19:18:cc:e9:24:be:15:67:0e:b0:a4:66:b6:74:dc:
                    d8:63:da:3e:7d:89:dc:93:fc:7a:39:dd:df:a9:0e:
                    4a:26:16:38:40:23:e4:86:9b:4f:fe:7c:34:2b:8b:
                    eb:a1:86:23:9a:8a:8b:ef:1b:de:17:6b:2f:16:f7:
                    55:5b:1b:7a:d0:69:f8:5c:e5:ac:47:cb:64:a6:d6:
                    3b:72:5e:5f:cc:bd:02:2d:33:0c:0c:d1:71:68:9e:
                    e7:fe:16:39:c3:c0:fd:f5:a3:55:78:31:79:5e:6d:
                    88:db:09:4e:dd:ce:5e:2d:5d:f6:6d:a0:43:7f:20:
                    2a:2c:97:6b:1c:44:64:03:da:49:2c:b7:86:e3:8d:
                    60:f0:03:35:6f:27:75:24:58:d0:7c:98:74:19:a9:
                    8f:16:25:16:c1:c9:be:0e:11:c2:a0:48:50:6e:3f:
                    af:e0:af:bb:5e:22:3a:a9:6f:cb:91:52:0d:90:ec:
                    e1:3f:fe:f1:f0:76:b5:0d:86:eb:f9:73:6a:66:63:
                    65:7b:d1:cc:cc:c6:f4:e1:4c:59:27:1e:cb:f4:6b:
                    78:99:03:09:68:25:71:b5:35:1c:59:c3:0e:24:07:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:90:B4:D3:95:69:EF:2B:66:4B:72:68:28:5A:AB:D7:E2:72:06:C7
            X509v3 Authority Key Identifier:
                keyid:D0:95:FE:EA:57:78:6C:4B:ED:26:2B:97:BF:BF:0A:B3:43:97:5C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14972a169d27abbbc1d8a239ac2b44de8608deaf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/14972a169d27abbbc1d8a239ac2b44de8608deaf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/14972a169d27abbbc1d8a239ac2b44de8608deaf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f9:74:a7:bc:14:e3:28:ef:47:fc:84:33:dc:f9:9d:33:8f:
         a4:e7:92:fd:fa:53:a0:de:e7:39:04:a2:39:ef:4d:d4:e8:d1:
         61:b1:7e:d3:46:7d:0e:4f:e3:6e:82:28:96:e5:08:4b:dc:cc:
         c3:bc:88:d8:0a:08:5c:be:fe:5c:6b:31:e9:a8:d0:cb:4c:e5:
         ce:2c:c2:cc:63:a1:4b:61:f8:47:f2:b9:a4:15:9f:de:df:28:
         a3:3d:43:1b:78:c1:ad:2b:3e:18:fe:3c:95:cf:ab:5b:31:91:
         57:a0:c2:4c:6f:f8:f3:32:b8:63:24:12:3a:e2:91:4c:71:23:
         bd:35:29:8d:c8:16:9f:91:b3:d4:21:0d:0f:d2:f6:ff:8a:f7:
         4a:60:14:c8:e6:b2:af:1f:6b:a6:29:a3:11:7d:59:3e:44:33:
         ec:b7:a2:cc:77:73:72:a5:8e:61:55:00:5f:ab:52:76:c7:8f:
         d8:68:cd:4c:0b:82:56:95:21:aa:7b:22:57:24:45:5a:12:c2:
         9e:e7:e2:74:2f:3f:00:aa:d5:81:98:29:f0:29:7f:10:95:d0:
         2d:7d:82:0d:46:ed:eb:c6:f2:77:6d:b8:e3:94:82:7b:68:d7:
         37:47:9d:00:5f:9f:8b:63:98:63:bb:14:07:4e:e7:6b:03:13:
         15:60:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----