Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft
File:                     bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft (raw, json)
Hash identifier:          VBDBZ226/klGBUAZFwLAVIp4wgaRMNmK8fba80S9VtQ=
Subject key identifier:   E7:B7:56:C8:1F:13:32:F4:8D:4E:C0:00:32:E1:E7:4D:8F:02:77:CC
Authority key identifier: D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90
Certificate issuer:       /CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
Certificate serial:       0F2BB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft
Manifest number:          07CE
Signing time:             Mon 15 Apr 2024 05:20:43 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:55:17 +0000
Files and hashes:         1: 4786bfe9ac1356a671e3817f3a16f369c5277e1a.roa (hash: 3Gmx7/ox7ZfLM2nOCQZWnlrtFPh7ZyXD22HkuK+xxd4=)
                          2: bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl (hash: nCH8hiQBNjebvv1Vgma4K/GEOdkLYj1v/kaxtB57AmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994233 (0xf2bb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 05:55:17 2024 GMT
        Subject: CN=f65d7c3d82a347629b3f48808d3e4ab1337146d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:b5:3b:24:55:3d:d6:b4:c8:93:5c:c2:84:
                    22:79:e1:6e:74:33:e0:c8:02:9b:a7:54:34:96:af:
                    b3:b9:78:4a:20:ca:f7:1e:f4:8b:16:d6:35:26:fc:
                    e3:7f:b6:5e:8b:d0:80:42:9b:d7:8e:eb:5c:82:0c:
                    c3:fa:a6:05:3d:f7:d9:2e:27:83:05:7b:e1:54:98:
                    6b:74:46:2e:9c:7e:58:99:37:5e:db:b6:ab:a4:d8:
                    4c:15:89:63:89:72:76:68:28:cd:37:69:63:d1:48:
                    d7:0e:4f:d6:3c:67:c7:da:2b:eb:f5:a9:a5:77:ca:
                    54:fc:d4:56:6c:99:a1:ef:e2:e4:76:a9:f2:d8:5f:
                    9e:dd:4d:63:32:c8:29:dd:81:aa:cb:31:34:0d:fb:
                    b7:b3:b0:80:68:bc:5c:9a:db:5d:84:6d:cb:57:64:
                    d1:1e:6e:2e:f6:45:4f:5a:2f:41:8c:f7:fd:40:35:
                    65:27:c4:33:f5:5b:4d:d2:7c:03:99:5a:8b:5b:f4:
                    26:f3:31:2f:93:c1:ad:d4:8c:ef:1c:fa:e9:ed:b3:
                    1d:ae:2d:80:a6:39:80:19:c4:44:fa:c5:5b:d5:00:
                    8f:48:67:73:4e:f3:ff:20:72:7c:83:da:97:9b:38:
                    8c:73:47:70:7a:e0:75:a3:22:b8:ed:f6:ef:b0:49:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B7:56:C8:1F:13:32:F4:8D:4E:C0:00:32:E1:E7:4D:8F:02:77:CC
            X509v3 Authority Key Identifier:
                keyid:D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fd:a2:2e:0e:c7:a7:60:5f:63:61:c0:2d:56:04:a6:44:62:
         36:54:f2:75:15:50:29:1c:16:92:20:5e:6d:f7:91:f9:6c:68:
         f2:42:50:da:5f:04:19:f1:c6:fa:5f:ea:d0:59:b6:5c:f4:da:
         9f:6d:8f:fb:b4:34:7c:d8:41:d1:ca:4c:1d:51:e9:9b:c2:e2:
         8e:a5:55:86:11:17:31:48:6b:b7:77:76:72:92:7b:e4:d3:74:
         97:77:e8:87:1e:32:0e:82:1b:f4:33:04:3f:54:b2:3f:46:97:
         28:dc:7f:27:56:a8:83:61:34:8f:5e:01:68:4b:92:70:85:50:
         cd:40:7e:c3:2c:c0:8a:68:a3:63:2b:c2:a9:37:06:1d:3d:ad:
         57:c6:13:d4:08:c5:b1:7d:13:5e:b0:c7:a2:d1:11:5a:eb:87:
         81:ab:36:98:5b:54:0d:c0:7a:e4:4f:77:51:6c:8d:34:a3:44:
         80:33:11:09:99:1e:b1:24:6e:32:f2:49:c2:49:78:9a:a9:87:
         b7:b5:41:bf:4a:bb:50:d6:3b:d6:c9:89:e7:60:41:67:9d:67:
         40:d5:b1:e4:cd:1b:e4:1a:9f:eb:3c:30:ea:3e:13:c8:c0:8a:
         62:6f:72:74:59:69:b5:48:45:87:83:3b:ca:7a:2f:f9:e9:63:
         c8:bb:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----