Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/1ec5ed55fab0f69b190a1b4095b040503dca3b82.mft
File:                     1ec5ed55fab0f69b190a1b4095b040503dca3b82.mft (raw, json)
Hash identifier:          DQBMqYsHLlr8OXaDGoPf469oEPGbsBLwtR+JAMX9rAo=
Subject key identifier:   E5:2C:96:3F:1F:6C:3C:76:ED:DB:70:07:69:22:82:B6:E9:01:70:DF
Authority key identifier: 64:F2:FC:EA:F9:87:CF:69:25:A6:46:E4:EB:EA:1B:6C:C8:FA:A1:5B
Certificate issuer:       /CN=1ec5ed55fab0f69b190a1b4095b040503dca3b82
Certificate serial:       0ABF40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ec5ed55fab0f69b190a1b4095b040503dca3b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/1ec5ed55fab0f69b190a1b4095b040503dca3b82.mft
Manifest number:          0581
Signing time:             Mon 15 Apr 2024 09:21:23 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:51:18 +0000
Files and hashes:         1: 07c41108f01f00973a041e001b4e1b14ac1085f1.roa (hash: j6b/mv31SW1AzmHlhBjGA8pVg4JqXFbcnzRT32t5wgM=)
                          2: 1ec5ed55fab0f69b190a1b4095b040503dca3b82.crl (hash: V2gdxHuH3UMoPMkr1HzFeGarY1Hf/CHu7nHfNQzgQMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704320 (0xabf40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec5ed55fab0f69b190a1b4095b040503dca3b82
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:51:18 2024 GMT
        Subject: CN=33a5ddf7b4496d043ae5b8649d85a5f7df22439a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:68:16:cb:4b:34:23:27:a4:89:c7:7d:03:79:
                    a0:0a:ba:95:b7:c8:c5:aa:c5:20:b0:64:11:88:58:
                    49:a9:6c:bc:0d:31:55:64:0b:31:d5:1b:1e:82:a1:
                    f8:1f:e6:2f:30:83:9e:6e:fe:2c:b6:87:cb:cc:7d:
                    77:7a:de:0d:d4:86:c4:df:01:ff:c6:2a:b6:62:65:
                    b5:96:1d:b8:14:c8:34:1c:a7:4d:58:08:98:32:c0:
                    ae:f7:90:01:30:b0:07:3f:68:c8:17:4f:32:b7:9d:
                    e8:35:e1:c0:ac:bf:30:69:75:0d:48:60:2a:e1:73:
                    d4:c0:32:c2:0b:26:1b:67:e3:03:d5:4b:6e:47:cd:
                    4a:97:8b:f9:cb:f2:af:81:a4:7a:2b:63:21:35:27:
                    b1:b1:c6:f6:47:aa:75:c2:d8:26:96:64:47:78:8b:
                    bb:31:bd:b0:bd:c9:84:f1:c6:87:8b:38:a7:b0:03:
                    db:31:fc:94:2c:65:14:22:99:06:41:67:85:cc:91:
                    4e:2b:21:da:dd:a2:64:cf:61:8b:b9:ec:5b:79:13:
                    4d:b4:a2:61:2b:86:7d:9e:6e:a2:09:c2:92:dd:d4:
                    b9:60:7f:76:8f:d8:f4:cf:ad:a6:24:23:2f:d3:06:
                    78:cb:d9:0b:8e:6c:56:d4:05:ff:02:de:11:d2:59:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2C:96:3F:1F:6C:3C:76:ED:DB:70:07:69:22:82:B6:E9:01:70:DF
            X509v3 Authority Key Identifier:
                keyid:64:F2:FC:EA:F9:87:CF:69:25:A6:46:E4:EB:EA:1B:6C:C8:FA:A1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ec5ed55fab0f69b190a1b4095b040503dca3b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/1ec5ed55fab0f69b190a1b4095b040503dca3b82.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/1ec5ed55fab0f69b190a1b4095b040503dca3b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:75:2e:b3:f2:7f:2b:9e:9d:24:8f:59:6f:05:44:ce:b7:
         cd:d6:ff:e0:33:ff:31:98:36:f6:8a:e9:6a:69:24:73:64:14:
         64:cc:d4:fe:78:f6:37:18:1e:52:76:06:22:ef:5d:57:24:be:
         3e:ec:11:7f:46:c2:46:41:27:44:e1:de:0e:16:e9:4f:e8:df:
         e9:14:8f:6b:db:de:9e:bf:01:f4:80:88:62:b4:98:e0:4f:11:
         66:37:10:8c:24:6b:2a:97:0c:e4:46:5b:f8:49:57:98:64:7b:
         98:03:a6:ae:9a:df:a5:12:c3:c5:b8:e8:88:8f:81:a2:2a:a7:
         56:ad:e4:94:3b:97:0e:94:76:8d:2d:88:93:76:d6:46:da:f0:
         fb:ea:1e:ec:e8:3a:b6:47:93:ff:09:1b:16:af:e6:3a:09:3c:
         da:b2:44:ab:db:72:02:2e:24:e3:ec:d0:e8:83:cc:27:43:91:
         8e:61:d3:22:3c:5b:98:8e:e6:06:69:92:19:af:70:7c:f7:0c:
         07:4c:5f:2e:f1:98:f7:76:ab:d1:90:4a:12:1a:c0:78:da:f5:
         08:c2:c5:39:d7:10:47:8b:40:b7:fb:b5:75:93:a6:87:02:18:
         65:6d:95:fc:b8:3d:53:4c:d6:5b:20:e1:8d:35:2f:19:49:07:
         76:93:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----