Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft
File:                     c421a24623084ac56fd5acff08e76a5dd734e47f.mft (raw, json)
Hash identifier:          kfr2kGmyoujBE7EcdMXmHK2mgR2loOXVJbcms//y8T4=
Subject key identifier:   0D:0A:06:9F:20:EE:67:9F:D3:5B:00:4D:19:95:66:37:9D:7A:EA:69
Authority key identifier: 39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30
Certificate issuer:       /CN=c421a24623084ac56fd5acff08e76a5dd734e47f
Certificate serial:       138045
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft
Manifest number:          09CC
Signing time:             Mon 15 Apr 2024 05:20:44 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:18:17 +0000
Files and hashes:         1: 91fde135e1642059b3ab6893f49768ede7f40a22.roa (hash: zAIo59c7EnAPMLD/Tc8Fi517M7x2nbAJkuhqKeEXGfk=)
                          2: c421a24623084ac56fd5acff08e76a5dd734e47f.crl (hash: 6QoFQi42ozJ9wCGFhRRP9kDpqfMpY28FKXeLDHba+44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278021 (0x138045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c421a24623084ac56fd5acff08e76a5dd734e47f
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:18:17 2024 GMT
        Subject: CN=85155b3b57f06f8e1acdf1a447733ed7c86f19fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:ed:ed:c1:24:31:c7:9a:9a:7f:08:a9:8d:
                    72:d6:36:57:fc:69:03:62:e8:9f:a0:ca:72:83:16:
                    38:10:5c:28:ef:cb:1b:cd:17:78:10:4e:cc:59:eb:
                    fb:a3:f9:16:b8:2b:a5:72:53:18:65:52:fb:ca:8f:
                    e4:31:1d:1c:7f:0a:91:1d:50:e4:c8:cc:c4:30:a1:
                    f9:d2:c9:d9:ee:72:7f:8b:d1:ec:d3:ba:28:1a:8a:
                    af:e9:5f:0b:59:6b:30:e4:4c:da:e1:19:c8:5f:c9:
                    1b:70:19:30:4d:f4:93:40:06:35:72:f4:79:d5:c9:
                    0d:b0:3e:f3:62:3f:fd:f1:c5:24:82:69:2b:97:d7:
                    c9:d4:33:3c:9a:7b:25:74:17:02:56:d8:ea:36:18:
                    64:b6:a2:54:b1:24:77:d3:62:f6:aa:7f:c0:a6:78:
                    c9:33:59:16:01:bc:5d:ac:05:c6:56:63:60:01:a6:
                    20:1d:5d:6e:3c:a1:44:a9:6a:2b:ec:70:fc:1c:d7:
                    3f:bc:ef:34:5a:34:cb:f9:7a:0b:85:05:51:d9:da:
                    e7:05:5e:7c:c9:08:82:b9:e2:a8:a5:6c:bb:b8:96:
                    38:08:d3:f2:bc:e6:49:51:c3:03:6f:2f:25:3b:92:
                    15:2c:f8:9d:2e:69:94:c1:22:44:62:4c:a2:2f:a4:
                    fb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0A:06:9F:20:EE:67:9F:D3:5B:00:4D:19:95:66:37:9D:7A:EA:69
            X509v3 Authority Key Identifier:
                keyid:39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:9f:c3:aa:eb:aa:3e:5f:65:9b:08:8b:40:5c:52:cc:cd:
         11:88:d1:f5:ce:c8:ea:05:ba:0f:02:23:fa:e3:f4:cd:97:e4:
         eb:8f:63:1e:b7:ad:6d:b1:44:e9:e5:40:43:d4:f5:b1:f5:51:
         98:9e:66:ad:48:12:bc:1b:53:6d:59:ca:40:1e:e4:31:4d:7d:
         9a:46:0d:bc:08:18:5c:50:8a:e4:3b:81:86:b4:ee:02:ce:ef:
         90:0d:6f:fa:39:16:b6:42:3c:34:48:a9:f6:4d:5d:ba:a3:24:
         3c:20:1f:a1:df:ba:3e:53:cc:bc:d7:35:49:53:55:3c:ed:e9:
         65:e3:7c:30:54:de:1b:cd:ca:4b:40:51:2e:b9:57:40:d4:6c:
         ae:5d:a8:45:c6:88:d8:f1:eb:97:bc:98:7c:b3:26:5e:4e:62:
         80:aa:f6:e8:70:55:ac:f1:b5:13:a4:48:b0:58:ce:72:c5:42:
         eb:94:90:61:20:d8:02:d0:7c:97:51:99:e6:0f:51:0c:b0:8b:
         79:6a:ef:fd:fb:ae:f0:60:58:23:10:20:58:b3:a2:96:8a:51:
         2e:4b:99:2f:99:50:00:f9:32:ad:1a:1c:ee:d4:2d:08:1f:4a:
         c8:1a:ae:1d:55:d3:f8:5c:58:72:6e:8e:e7:1f:03:05:7d:ae:
         7a:c5:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----