Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46011afb-db30-4ace-88fd-e960c83ba1bd/08e9d01990e098cff41050acf137c8e5045f6724.mft
File:                     08e9d01990e098cff41050acf137c8e5045f6724.mft (raw, json)
Hash identifier:          YNrlnViBx0W5zp7wnouAa3m9d9zMm/oWiy8y0FyoFWg=
Subject key identifier:   13:63:49:50:EA:CB:FB:41:C0:2D:44:79:F4:56:80:47:5D:F2:2C:41
Authority key identifier: AC:29:28:6D:22:D4:6D:32:A9:FE:EA:85:CA:21:0B:AE:96:E2:55:89
Certificate issuer:       /CN=08e9d01990e098cff41050acf137c8e5045f6724
Certificate serial:       28935D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e9d01990e098cff41050acf137c8e5045f6724.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46011afb-db30-4ace-88fd-e960c83ba1bd/08e9d01990e098cff41050acf137c8e5045f6724.mft
Manifest number:          0DE1
Signing time:             Mon 15 Apr 2024 10:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:01:25 +0000
Files and hashes:         1: 08e9d01990e098cff41050acf137c8e5045f6724.crl (hash: pVA54O0IBdXhQLxg+iVW737IzQw+EV3kIz5/X4G+me8=)
                          2: 0e03d74b6ae74ff6cbb7c2fb2f48fafe154880f8.roa (hash: XZiIiuS42+p/DRSyXTUibptFgAAvq4cKgoBOY1JrWQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659165 (0x28935d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e9d01990e098cff41050acf137c8e5045f6724
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:01:25 2024 GMT
        Subject: CN=087c0cca3ca02d962847c3c426e490d834c65fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:1f:e1:e0:30:a3:b3:54:10:40:c2:0c:ef:
                    23:c9:66:4e:ef:b9:5f:4a:21:7e:aa:4e:a9:32:07:
                    fe:27:3e:68:34:14:17:57:71:0c:e4:59:21:2c:48:
                    dc:44:2d:da:1f:2e:ed:7f:ab:72:b9:bc:08:68:0b:
                    71:f8:94:93:3a:6e:42:9b:a5:da:7f:51:62:6f:f2:
                    cd:6f:f0:a7:a3:a9:3b:22:81:0f:5d:b1:e6:5d:8d:
                    aa:58:f6:e9:22:26:71:00:ca:e7:cd:83:40:13:3b:
                    74:1b:19:a2:41:17:b8:45:91:e5:b7:87:5c:d1:9c:
                    2b:de:83:02:38:cb:db:98:cf:ec:21:9c:17:9a:fa:
                    a0:19:62:71:09:6b:99:02:88:1d:9a:d9:12:9e:b8:
                    e6:cb:2a:26:42:c7:b2:7a:84:a3:64:54:2e:d7:33:
                    6a:f9:60:a9:0f:2f:d6:1d:bc:93:c3:13:b4:4a:2e:
                    cb:b1:bd:14:c4:d4:ab:81:c8:5d:8d:5e:57:b2:d4:
                    31:76:bc:df:97:9a:b5:f1:42:b4:89:9c:54:eb:00:
                    76:c7:57:5c:89:31:56:88:08:e0:d6:2e:10:28:9a:
                    e2:ab:c8:38:ac:a9:0f:99:5e:4c:9c:e2:3f:2a:70:
                    7a:96:76:02:33:05:cf:6f:b7:e5:e5:71:75:65:ef:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:63:49:50:EA:CB:FB:41:C0:2D:44:79:F4:56:80:47:5D:F2:2C:41
            X509v3 Authority Key Identifier:
                keyid:AC:29:28:6D:22:D4:6D:32:A9:FE:EA:85:CA:21:0B:AE:96:E2:55:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e9d01990e098cff41050acf137c8e5045f6724.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46011afb-db30-4ace-88fd-e960c83ba1bd/08e9d01990e098cff41050acf137c8e5045f6724.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46011afb-db30-4ace-88fd-e960c83ba1bd/08e9d01990e098cff41050acf137c8e5045f6724.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:34:97:81:23:93:89:3d:cf:36:ff:e6:bb:33:be:07:7b:55:
         ce:a1:6c:3e:9b:7d:3f:37:69:72:48:69:b2:21:6d:05:29:0d:
         57:07:df:d6:4b:c3:b6:3d:13:ff:c1:c2:d7:42:d9:bf:d4:c5:
         36:54:38:d7:c9:6c:c0:00:a0:5e:2a:4e:f0:5e:fd:d4:7e:d9:
         6d:2b:d5:96:69:e6:87:4f:4d:b3:55:02:00:99:fc:fd:56:b8:
         6e:5b:54:12:ab:d7:e8:92:f4:72:99:c0:13:12:3b:a6:c2:63:
         e6:5e:ab:77:09:40:8c:7e:d0:d8:cf:9d:1c:5f:a3:9e:cc:bd:
         68:df:65:1a:c7:59:e6:08:a1:67:a5:cc:58:9f:fa:10:25:4b:
         ae:b9:1f:cd:25:26:46:f2:91:cf:b6:54:f9:79:49:76:5a:d2:
         28:63:17:bd:86:d1:b9:c1:9f:ce:59:ff:fd:97:ce:63:68:43:
         eb:96:4c:6f:ef:52:3c:3f:9f:2f:28:33:6e:f7:9b:c8:bd:0e:
         6b:0c:bb:f5:89:56:4e:2d:7f:39:5c:4e:e6:1f:24:e8:8a:70:
         98:37:26:f9:c5:b9:c3:f3:37:66:ca:c9:78:d9:2c:e6:93:30:
         91:de:b0:66:27:a1:24:63:c6:1d:0f:2d:af:7c:04:c9:76:29:
         65:50:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----