Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8a1fb2a948dd0ade62e316b2f9231b002d40088e.mft
File:                     8a1fb2a948dd0ade62e316b2f9231b002d40088e.mft (raw, json)
Hash identifier:          rLkLQx20FperpOlSeqHqs9u5ZbmMto8CqhTY8qXhZQc=
Subject key identifier:   29:D8:69:67:70:DA:FA:32:F8:AD:31:FF:17:0C:75:5C:57:DA:9C:90
Authority key identifier: 40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9
Certificate issuer:       /CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
Certificate serial:       2508BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8a1fb2a948dd0ade62e316b2f9231b002d40088e.mft
Manifest number:          0E0B
Signing time:             Mon 15 Apr 2024 06:22:00 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:51:39 +0000
Files and hashes:         1: 8a1fb2a948dd0ade62e316b2f9231b002d40088e.crl (hash: 4HC7q/g1ZVfjqqIte4OE+AZ2n/kD/2bn0vgQboCENes=)
                          2: c597ad154f756ce498781e30281ddf5eb5eeef40.roa (hash: NulJt72XAuQCfyl6rMTkNdxLjdSOTBc84c+/Q4Crk0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427068 (0x2508bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:51:39 2024 GMT
        Subject: CN=012fae9c80fa9f1f73e4266b18e57f76680e0a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:d1:c1:08:77:0e:99:2e:3a:5d:e4:51:93:
                    5c:ed:90:3f:a1:5c:e2:7e:76:8f:d1:8f:e1:99:ea:
                    10:4d:1e:ef:d9:32:2a:04:17:6d:32:18:9c:30:0c:
                    0e:de:38:29:97:41:36:7f:b6:5d:cf:c2:70:0e:a4:
                    99:fb:1e:4d:41:f9:24:0f:49:bf:a6:f1:5e:ce:82:
                    22:30:29:48:9a:0e:21:c2:7f:74:3b:35:5d:fc:68:
                    7c:96:75:2e:83:c9:a5:7a:92:d6:7a:42:48:e4:45:
                    dd:42:5e:d9:03:9e:06:33:ba:87:d4:a2:15:28:b7:
                    3a:c4:56:8b:0b:4f:53:c7:dd:45:20:da:b3:c6:76:
                    5a:e9:4b:43:1d:cf:f6:e8:45:c4:e1:0a:9d:93:0e:
                    67:4c:6d:57:d2:cc:30:4a:7f:9b:82:2b:a8:90:c8:
                    9b:23:07:71:a4:4c:dc:71:fd:7e:07:86:41:6a:63:
                    68:a1:a3:5d:be:57:79:1a:39:b7:63:7e:f3:70:20:
                    fe:8f:e2:bd:0f:d2:f0:06:6e:99:97:d6:f8:29:87:
                    81:ce:a8:63:ce:ef:1c:18:08:8c:4b:4d:31:54:a2:
                    78:6c:f8:34:1a:9b:ed:6d:85:d0:69:54:30:f4:4a:
                    61:6a:c3:d9:3a:63:e6:32:5b:cb:ea:c8:0f:40:57:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D8:69:67:70:DA:FA:32:F8:AD:31:FF:17:0C:75:5C:57:DA:9C:90
            X509v3 Authority Key Identifier:
                keyid:40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8a1fb2a948dd0ade62e316b2f9231b002d40088e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8a1fb2a948dd0ade62e316b2f9231b002d40088e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0e:07:e8:65:55:bc:e9:89:07:2f:b6:23:ea:07:e6:60:ba:
         fa:f0:80:bf:43:4a:1f:1e:72:44:b4:62:0d:ef:d8:09:b5:54:
         21:5b:9b:5b:a6:59:bd:5d:fb:43:96:57:92:d9:e7:88:61:2c:
         e8:6a:47:d8:5b:06:51:42:f4:3c:3c:2b:68:f7:26:8d:44:7f:
         52:55:64:89:0e:33:05:be:43:e7:6c:ad:fc:e5:02:98:61:fe:
         3f:b9:b9:62:dd:43:8d:44:43:42:43:90:aa:7f:ec:cd:fd:d0:
         ae:da:a7:e8:71:08:be:78:01:00:c9:69:ee:a3:35:3d:0e:eb:
         f5:db:9b:54:25:3f:89:93:15:74:1e:28:88:24:e3:ca:52:ee:
         17:42:cc:52:28:ff:9b:ad:9d:d1:ce:2f:23:d6:f7:7c:78:93:
         c3:4f:e8:57:db:d7:e0:4b:1c:63:10:d5:5f:b0:89:9c:43:0b:
         e2:49:c6:c6:68:a3:9c:e1:1d:16:85:3e:dc:29:6a:05:f1:80:
         b2:8e:90:60:12:04:37:01:f1:a2:08:99:19:85:4d:7b:04:5f:
         b7:ee:cd:aa:0c:f3:50:24:d0:5a:88:1d:43:ba:65:58:43:de:
         b9:ec:59:54:52:a7:41:fa:a8:e8:22:29:92:18:70:94:a6:05:
         42:72:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----