Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.mft
File:                     89b43ca0a70451881fc86586450001a0c3042bd0.mft (raw, json)
Hash identifier:          nuJjxBStyGdb3H15+Lr5f9yvXCGKz8efNWo8d8nsma4=
Subject key identifier:   37:9E:A0:BE:FA:07:42:C8:8A:2B:B1:16:15:BB:36:58:05:4B:68:CB
Authority key identifier: 62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31
Certificate issuer:       /CN=89b43ca0a70451881fc86586450001a0c3042bd0
Certificate serial:       16A98E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.mft
Manifest number:          0B85
Signing time:             Mon 15 Apr 2024 02:20:51 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 03:04:29 +0000
Files and hashes:         1: 3a2c0a9a14be66a5ddd19149de317845f01f5e29.roa (hash: Z8bsAHiTUpzhohfgrsKmQeJ+hJYtfINaFoP9qTqGB2w=)
                          2: 89b43ca0a70451881fc86586450001a0c3042bd0.crl (hash: RgNFWkcDf5c9BhL48bkvEvXwo1YtgubAbYpUmSBosu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485198 (0x16a98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b43ca0a70451881fc86586450001a0c3042bd0
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 03:04:29 2024 GMT
        Subject: CN=26ca6f29f9b49cea220eb28629ed36d3caa29cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:04:bf:43:37:b4:ac:8f:bb:b8:f8:da:6e:
                    b8:dc:f1:15:af:dd:6f:1a:85:f9:fc:7c:95:10:15:
                    10:9c:8f:71:ed:93:a3:90:79:f4:91:3c:67:77:20:
                    05:7b:52:91:22:54:7d:0a:3f:d4:52:34:7c:6b:95:
                    51:0b:62:f1:17:c2:a2:bf:15:07:0c:40:12:bf:88:
                    70:92:2d:e5:78:94:dc:d6:05:e9:2d:88:c8:83:96:
                    a1:9e:8d:5e:f6:5a:cd:61:fc:3a:67:96:bb:2d:13:
                    37:a8:ec:9c:cb:1b:54:c3:28:9b:b8:9a:40:cd:f0:
                    0c:4a:f0:a0:d7:fb:d9:fc:a0:7c:9c:56:dd:9d:9d:
                    30:57:48:57:7f:71:d9:1f:ab:92:77:51:1f:14:68:
                    7f:6e:55:1c:af:42:22:2b:a4:54:8d:54:2c:6d:29:
                    5d:ea:53:66:77:aa:1c:46:ab:84:bf:8a:92:cc:a1:
                    2c:38:fd:2a:bb:5c:13:8d:eb:c2:31:ec:35:0b:98:
                    48:f3:4d:ab:1b:4b:27:8f:ee:07:6e:60:01:02:7c:
                    5c:e7:36:09:0d:8f:f2:25:bf:4a:83:83:55:f1:d4:
                    f4:0c:0f:6e:1b:33:81:06:8c:86:eb:36:e5:1d:d9:
                    b5:30:24:ed:99:b1:a3:c8:ff:c6:50:b8:08:59:9d:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9E:A0:BE:FA:07:42:C8:8A:2B:B1:16:15:BB:36:58:05:4B:68:CB
            X509v3 Authority Key Identifier:
                keyid:62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:2a:8b:da:31:fa:59:97:84:05:c9:4a:d6:62:83:c8:32:
         14:78:3c:6d:d5:8c:92:61:0c:09:56:b5:e8:da:8f:cc:57:b0:
         1a:be:67:b0:1f:49:c1:e3:b9:14:c9:c4:71:05:79:39:ac:15:
         a0:3c:98:1b:aa:54:2a:32:d1:55:4a:86:b0:97:50:b3:b7:73:
         98:dd:c3:29:c3:72:77:9c:31:fe:d2:6a:a1:18:e0:c1:85:3d:
         b0:b9:52:d3:d4:dc:a8:df:74:e6:75:a6:fb:34:37:84:44:ab:
         c9:df:a5:d6:18:90:77:ed:36:7f:8c:3c:5e:ed:68:b1:84:32:
         cb:77:48:9f:e9:a9:b0:71:ae:64:22:24:ef:a4:48:b5:75:61:
         fc:c6:e1:3a:02:42:56:84:81:fa:fd:f8:3f:5e:1d:a6:08:e8:
         52:dc:9e:cc:45:3d:e0:b1:dd:68:c4:20:ce:58:dc:53:ee:44:
         b9:52:7a:bf:5b:f7:e0:c7:c2:cb:30:f6:db:f1:02:7f:12:3a:
         ba:b4:4c:f4:24:d4:04:ca:e0:93:c1:35:1c:54:73:c6:7f:e6:
         21:ef:39:07:7b:9b:34:45:57:46:7e:c5:3e:2d:bf:2b:dc:41:
         06:44:b8:29:33:fc:62:a2:59:4b:29:b9:a5:0e:46:38:63:ef:
         27:ce:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----