Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/44d1fb45b2ba74749f3b3780a0a39138e86370e1.mft
File:                     44d1fb45b2ba74749f3b3780a0a39138e86370e1.mft (raw, json)
Hash identifier:          R2RLdFIJyfonsz0RHUn6A8fa8NbjM19eJ9GpuU7R0VY=
Subject key identifier:   3B:0A:6A:32:90:70:94:1B:55:77:23:B4:BC:67:38:5C:61:0E:23:EA
Authority key identifier: C8:A1:58:9A:F5:F4:0C:D2:32:13:33:72:36:B0:DF:84:AE:F8:2E:89
Certificate issuer:       /CN=44d1fb45b2ba74749f3b3780a0a39138e86370e1
Certificate serial:       295FF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44d1fb45b2ba74749f3b3780a0a39138e86370e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/44d1fb45b2ba74749f3b3780a0a39138e86370e1.mft
Manifest number:          0DD7
Signing time:             Mon 15 Apr 2024 11:21:48 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:15:18 +0000
Files and hashes:         1: 44d1fb45b2ba74749f3b3780a0a39138e86370e1.crl (hash: mHBxB7F6QPl3sipIoQ+cPovpDbVun1Qmhhz2oB2Nu0s=)
                          2: 6b39053934c23f52370cb17498043f565f9ec71f.roa (hash: eiHVSyIRJQIbXIl/RxPZvhKqDjm1c0pN8zhsrGyGhy0=)
                          3: 6cc274389107221ed5672ec32c8d7eed7f893096.roa (hash: C4YzwFaqfgoO5jq1hrYaFGGME7q/Lmr3i5wjmsYWYnY=)
                          4: 7dba9e96df2509d284917a71f369d75f5eefe26b.roa (hash: 3bgGgmLKgGlxxovWa9G4A6cE4ZTvJ8vLA82T7PjoZRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711543 (0x295ff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d1fb45b2ba74749f3b3780a0a39138e86370e1
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:15:18 2024 GMT
        Subject: CN=bfce9b205f65361e4245e5d60b2d0559abc69914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:f2:5b:f3:03:b1:37:e5:6e:5e:84:85:9c:
                    ac:07:de:5c:fd:40:ce:55:e5:2c:7f:d7:a4:5a:50:
                    6c:5e:e4:e8:a0:47:0b:39:cc:79:cf:6f:d7:6e:84:
                    3a:0e:16:44:0d:10:3b:1b:85:a1:28:9c:2f:c8:75:
                    a9:58:fa:43:56:4f:b5:56:3c:b7:35:9a:01:f7:d6:
                    08:47:9f:75:a7:12:90:e8:26:dc:8e:8a:25:80:3c:
                    ba:a6:4b:2c:76:09:cf:43:e9:f1:70:6d:e5:0a:a8:
                    4e:a8:d2:89:ba:e5:df:7d:7f:61:36:b4:43:64:7e:
                    02:13:27:4f:3f:a4:92:a4:e6:63:9f:f7:5e:35:3f:
                    a2:d7:46:18:7f:d3:23:68:a8:81:e3:82:04:ed:f1:
                    9f:04:c5:77:a7:f6:3d:76:dd:7a:80:5d:4d:1f:46:
                    64:73:61:a7:b3:cd:e5:1a:d9:72:53:dd:97:02:8c:
                    c2:be:f7:07:9b:f7:8d:de:7b:53:fe:37:b8:da:fa:
                    25:5b:ae:41:30:89:95:57:cb:a5:d5:2e:9b:7c:66:
                    68:d1:d5:ee:93:21:73:8d:b3:d0:26:f3:75:ce:53:
                    c9:f1:c4:dd:60:a3:a5:80:3f:57:29:57:71:a6:f0:
                    71:3a:25:75:77:0d:2d:6f:91:7f:2f:1b:d5:d9:ab:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0A:6A:32:90:70:94:1B:55:77:23:B4:BC:67:38:5C:61:0E:23:EA
            X509v3 Authority Key Identifier:
                keyid:C8:A1:58:9A:F5:F4:0C:D2:32:13:33:72:36:B0:DF:84:AE:F8:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44d1fb45b2ba74749f3b3780a0a39138e86370e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/44d1fb45b2ba74749f3b3780a0a39138e86370e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/44d1fb45b2ba74749f3b3780a0a39138e86370e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a3:d8:40:1f:a0:f8:0a:bf:ae:ea:af:7b:84:d3:bd:29:2a:
         8a:34:24:f2:04:0f:3b:e1:47:72:57:92:9e:dd:2d:9f:ba:a2:
         89:71:a2:5b:54:3a:eb:6e:58:7d:d7:8c:44:4b:e2:5e:28:cc:
         e7:13:84:13:33:29:00:8a:70:36:cf:79:d4:7a:a8:df:7d:f9:
         e1:3b:06:a5:c9:c8:90:a2:54:54:33:3b:ec:b0:51:65:00:79:
         6f:b9:4a:ef:b4:c3:7c:9c:d2:1b:76:ec:5f:24:9c:ac:56:42:
         77:c4:38:42:c9:2a:74:30:c7:2d:04:b0:12:95:15:eb:60:0c:
         b7:15:73:db:9e:96:71:4d:da:55:dd:5f:59:b3:df:8b:65:1a:
         ee:2e:09:cc:95:62:9a:da:9e:3a:12:f9:64:ae:d5:06:57:ad:
         72:78:9a:2a:6a:33:69:21:cb:17:c8:12:b6:91:62:d5:9b:73:
         ca:ed:a1:83:7b:7d:99:20:2d:76:be:36:49:ab:a7:bc:50:a2:
         bc:dd:3f:e1:cd:b6:6b:00:05:60:78:f6:83:ac:3c:12:d1:26:
         30:73:d3:57:33:99:dd:78:02:bb:d2:a9:e4:2a:99:f3:38:a7:
         7c:11:d1:03:31:a6:a2:3b:cf:7a:01:5e:13:cc:da:3f:95:c3:
         84:28:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----