Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/bee92c51e9c67fe64edca7f74df96052de7a6d98.mft
File:                     bee92c51e9c67fe64edca7f74df96052de7a6d98.mft (raw, json)
Hash identifier:          AvQfDxf3wrbD70HIDT03doiagp20YeegvmrPdV0RxIU=
Subject key identifier:   CB:11:2B:4E:50:40:41:51:8A:95:82:EF:D8:1A:92:93:89:2A:FE:81
Authority key identifier: B7:A2:D8:12:B4:F3:C7:E9:D8:94:C9:59:BE:EB:B3:50:E3:39:90:96
Certificate issuer:       /CN=bee92c51e9c67fe64edca7f74df96052de7a6d98
Certificate serial:       28C154
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bee92c51e9c67fe64edca7f74df96052de7a6d98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/bee92c51e9c67fe64edca7f74df96052de7a6d98.mft
Manifest number:          0DE6
Signing time:             Mon 15 Apr 2024 03:21:34 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:29:17 +0000
Files and hashes:         1: 016e7f37a34fb64f7de7a25f2911fcb2cee5ba98.roa (hash: aSjolsa4SspYM+kVV+NZ/lXA/wP0WJFA9CKS8eU6wig=)
                          2: a25e29d11a6c22c71272e7c9ccf6092d0f5ef313.roa (hash: GXDOIxppV7Q35aoDG5UjwineXY4yyx/ugkm4g3cM3Xs=)
                          3: a7bda699427774a0821212c0be4a4b9ceb02b4d1.roa (hash: 80EDDgTvoGPVYhcSp/bFbTOrZDHaSmZn+YNcl4XFMn0=)
                          4: bee92c51e9c67fe64edca7f74df96052de7a6d98.crl (hash: bw5FLYSkCg0mzViBO2e7q43D8LXkHrj2CgJzbXRHgkU=)
                          5: f5dea8a9f2589df430ffaa6887b3d579abd6ff2e.roa (hash: jCInBHPftwqM3cFnE1iK+xoLGdRGx1d1n00C4i1UzVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2670932 (0x28c154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee92c51e9c67fe64edca7f74df96052de7a6d98
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:29:17 2024 GMT
        Subject: CN=607164b86c7e22929f09c45fca8c3b72b07b7c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:16:da:36:ac:07:d0:6e:9f:d4:2d:26:16:ca:
                    39:7a:13:1d:3d:ab:91:cc:26:51:d2:ea:96:5c:3e:
                    a1:9d:3b:f3:96:8c:a9:83:df:da:d8:72:a2:4f:b7:
                    7d:17:e8:df:27:a6:69:f4:a9:01:ec:5b:7e:c8:84:
                    bc:26:b4:1b:72:87:98:f3:9e:7d:13:17:bf:bd:df:
                    24:41:3f:22:54:28:8a:b2:2f:59:3e:ea:aa:d9:ea:
                    67:fd:39:39:bd:c9:05:a6:04:ad:a3:d1:25:e3:00:
                    82:c7:b7:a3:1a:6e:b8:49:80:63:97:94:32:6c:eb:
                    a4:9a:e6:7e:61:85:ba:18:c3:39:23:78:82:12:80:
                    8b:b0:da:20:7c:26:0d:d4:a8:e7:2c:9b:47:b9:c5:
                    9f:90:1b:53:e5:a3:0a:af:52:3d:45:b3:54:b7:ce:
                    d9:4b:47:84:ed:1d:74:ee:99:6f:fa:36:ff:0f:c0:
                    33:7a:2a:a0:4f:f5:ab:35:ee:de:88:6c:78:94:47:
                    5b:9b:7e:6d:f0:3b:d1:76:0e:07:60:b6:4a:80:03:
                    ab:75:56:ae:2a:b6:7e:cb:5d:d3:65:ea:d7:d3:4a:
                    a4:12:68:3a:99:47:30:14:66:ae:4f:21:73:7d:3b:
                    c7:c2:0d:6f:75:ce:f4:40:da:a3:9e:ab:1d:71:59:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:11:2B:4E:50:40:41:51:8A:95:82:EF:D8:1A:92:93:89:2A:FE:81
            X509v3 Authority Key Identifier:
                keyid:B7:A2:D8:12:B4:F3:C7:E9:D8:94:C9:59:BE:EB:B3:50:E3:39:90:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bee92c51e9c67fe64edca7f74df96052de7a6d98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/bee92c51e9c67fe64edca7f74df96052de7a6d98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/bee92c51e9c67fe64edca7f74df96052de7a6d98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:0b:0a:b5:16:d5:e8:29:f5:e4:58:7d:2e:e3:7c:5b:b1:
         c3:03:bc:0c:7e:1f:5a:26:23:3c:f2:5a:ce:49:d5:8c:e2:b1:
         b6:0c:e7:36:a1:89:f0:01:17:e6:86:8c:e3:59:b8:42:67:43:
         7a:b3:7c:48:fa:33:79:dd:0d:b6:62:0c:d6:27:ca:ec:34:87:
         50:63:a2:63:90:71:77:72:c8:34:6b:e7:f5:93:0d:04:91:e7:
         8e:cb:a2:6e:12:a3:ae:ff:d4:b6:2a:20:b5:24:b2:bc:2d:c9:
         f9:67:69:8b:88:6f:80:57:3b:68:76:9f:b6:3d:a3:85:5d:95:
         af:91:87:64:36:64:b5:53:dd:45:84:e3:8d:ac:40:b9:1c:1a:
         9a:d5:4b:75:96:e3:8f:5d:08:4a:4e:13:25:96:a5:c3:50:ed:
         2f:0a:52:f8:95:65:c7:f9:63:0a:41:67:6f:fe:5e:aa:b6:4c:
         a9:74:16:d6:45:48:3f:88:45:02:5a:7d:a9:f7:1c:47:e5:30:
         52:47:3f:54:9a:6d:05:ed:50:3c:ce:99:50:3b:4a:95:33:4f:
         f5:4d:36:49:44:af:b4:ab:20:4d:8a:eb:61:f6:6f:01:fa:c8:
         4c:af:b0:28:8d:a7:d2:55:4a:1f:b1:43:1b:5b:eb:1c:1c:2c:
         f4:ce:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----