Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dff3448-56cf-42ed-83db-9c10894e603d/4d443cdcf611aff39dda7197ae4147f459cbe9c4.mft
File:                     4d443cdcf611aff39dda7197ae4147f459cbe9c4.mft (raw, json)
Hash identifier:          s+3P4qnLMs7OfIoJVhnF/r+zQG7QYmEx1CeO5GTBe9E=
Subject key identifier:   27:50:2A:1B:ED:A6:91:BF:5C:FA:66:82:F8:C0:7A:B8:DF:7A:E0:95
Authority key identifier: 79:9C:D7:98:9E:9D:46:31:DD:44:20:EF:F1:76:72:02:B1:96:BC:2D
Certificate issuer:       /CN=4d443cdcf611aff39dda7197ae4147f459cbe9c4
Certificate serial:       073241
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d443cdcf611aff39dda7197ae4147f459cbe9c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dff3448-56cf-42ed-83db-9c10894e603d/4d443cdcf611aff39dda7197ae4147f459cbe9c4.mft
Manifest number:          03B5
Signing time:             Mon 15 Apr 2024 09:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:58:18 +0000
Files and hashes:         1: 4d443cdcf611aff39dda7197ae4147f459cbe9c4.crl (hash: z+symhfNbjmXdmUoizVPZicrN48KtRPanJHW0YJbiN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471617 (0x73241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d443cdcf611aff39dda7197ae4147f459cbe9c4
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:58:18 2024 GMT
        Subject: CN=28f937e0db09968fc11dcd16cec1ea23ab160e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:87:81:48:30:a9:db:4c:88:b2:52:92:c0:
                    46:27:34:b8:6a:08:f1:2a:71:6a:ab:52:f9:2b:c7:
                    d5:6e:a5:2a:3a:2d:75:97:09:31:c0:17:b4:bb:91:
                    c4:14:52:9f:18:ce:fa:70:4f:7d:01:94:fc:47:6d:
                    d6:bf:97:96:32:89:2e:01:1e:66:19:44:9b:10:3d:
                    15:75:45:66:97:9e:d1:e0:87:f8:f4:65:31:51:d1:
                    4e:55:a7:cf:02:09:f5:26:9c:56:d2:cc:d0:d1:b3:
                    ed:21:8b:24:9f:59:42:c4:ed:a4:40:d4:9b:14:7b:
                    78:36:15:06:9d:d3:2a:8e:8c:a5:8b:d9:6d:e4:48:
                    4a:96:99:07:0d:e2:85:b3:c7:a0:94:de:64:81:4f:
                    00:b8:70:1f:02:45:aa:f8:ac:3f:52:bd:17:56:b6:
                    ac:86:0f:0f:36:74:0c:e1:12:71:f5:c0:33:14:02:
                    80:a1:7d:be:ed:54:20:0a:20:5d:f0:38:e9:ba:ce:
                    7d:95:a0:76:30:c3:ce:47:7f:d9:08:eb:b1:1e:43:
                    e3:cd:fe:f5:50:72:ac:97:1b:2b:b5:16:6d:6b:6f:
                    dd:84:1e:47:cd:2c:e2:1a:81:e7:a8:87:68:ea:00:
                    4a:d3:98:5f:65:96:0f:d5:85:2e:eb:13:dd:e6:9b:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:50:2A:1B:ED:A6:91:BF:5C:FA:66:82:F8:C0:7A:B8:DF:7A:E0:95
            X509v3 Authority Key Identifier:
                keyid:79:9C:D7:98:9E:9D:46:31:DD:44:20:EF:F1:76:72:02:B1:96:BC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d443cdcf611aff39dda7197ae4147f459cbe9c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dff3448-56cf-42ed-83db-9c10894e603d/4d443cdcf611aff39dda7197ae4147f459cbe9c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dff3448-56cf-42ed-83db-9c10894e603d/4d443cdcf611aff39dda7197ae4147f459cbe9c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2f:84:89:59:08:c5:9b:02:25:ae:87:9f:4a:18:2b:b5:b1:
         01:9f:91:36:fe:2b:9b:d7:95:c0:11:52:3b:43:49:8e:ef:ea:
         df:2a:d6:d2:62:d0:46:35:77:bf:1d:79:b8:51:ed:fa:13:56:
         65:9b:19:86:6b:56:fc:ed:09:a0:91:80:94:f4:fa:9e:6a:51:
         fe:f2:c3:38:06:69:e3:fa:bf:4e:09:1b:45:a0:05:af:90:21:
         e5:4d:e2:4f:60:3b:54:f3:cc:09:b3:bf:a9:58:38:7d:3f:c7:
         8f:71:4b:0a:1b:28:bf:0f:a1:96:8e:e9:35:b8:93:d7:c1:33:
         11:88:18:e7:77:7c:7d:5d:ef:49:a7:b5:eb:c2:85:a4:b5:e8:
         0e:ac:f8:e7:49:2d:18:bf:f3:fd:1c:52:43:99:56:4a:1a:eb:
         0b:c8:48:d3:33:c0:91:51:67:85:c7:2d:1e:47:ef:fa:b7:c6:
         7d:cf:7e:a2:8c:e7:8d:d9:b7:52:0a:72:ff:e1:75:34:be:5b:
         d3:db:64:ee:7f:b0:47:d1:b7:18:c2:65:cc:5f:b9:d3:f6:33:
         8a:92:da:34:d0:2b:f1:a8:67:03:70:ef:13:f8:a2:c8:f2:21:
         29:2f:5e:72:ed:eb:11:ab:e9:e2:1f:d8:c9:13:49:8e:3b:d4:
         21:8d:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----