Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.mft
File:                     d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.mft (raw, json)
Hash identifier:          ZG0EK4yMGva7+Z/WKogDG8IoW8jV+OngnzL0gu5Q7DQ=
Subject key identifier:   A3:F0:67:84:EC:5E:F6:E7:CC:49:08:7D:B4:2E:23:60:4A:30:6D:CC
Authority key identifier: 65:CA:6C:4F:D1:55:D0:04:51:3F:3A:E8:82:DE:75:E0:C6:6C:34:7D
Certificate issuer:       /CN=d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f
Certificate serial:       2133C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.mft
Manifest number:          0E29
Signing time:             Mon 15 Apr 2024 02:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 02:28:29 +0000
Files and hashes:         1: d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.crl (hash: rCqIZq1TM5GrRrxbtGzJRrOWg3g1z+DP/u1PAKigMK8=)
                          2: e39f0bd5a15630dbaba9dd2b4abfd1916d9ef066.roa (hash: zkWNKAabPs5Hkif1JAbwDlIKAjk/Uk2XXk6hb+QcKMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175940 (0x2133c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 02:28:29 2024 GMT
        Subject: CN=461b79bf45cd3769b634a93337d2311141cf5095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:88:0c:d8:ca:3e:41:ec:f6:72:02:6e:9c:
                    98:67:a2:28:2f:b3:61:21:c5:df:ec:b6:0d:1f:97:
                    5d:59:75:9a:5d:4d:92:f7:a6:46:11:86:8e:ef:8e:
                    36:2d:af:ac:da:0d:e8:1c:d1:c6:df:59:9c:0a:cc:
                    c5:38:50:44:f9:1c:bd:4e:30:80:30:89:a7:f0:d3:
                    9c:19:a9:b8:0f:1f:b9:23:ee:c8:52:84:5c:28:ce:
                    93:63:89:ff:a7:61:d7:31:53:b4:d4:b4:e5:f5:34:
                    0d:bf:f9:9e:44:df:ba:9b:54:65:7d:85:60:58:25:
                    07:18:bc:2b:f5:e5:6e:6b:4d:fe:66:5c:b6:1e:df:
                    ef:f7:f3:e3:34:7e:45:1e:a5:ea:31:e3:1b:d6:88:
                    1a:42:be:e8:fa:35:02:29:7c:09:b3:57:99:44:a4:
                    55:df:12:d8:76:bb:df:11:46:16:6f:dd:29:2d:05:
                    41:c8:09:15:c6:f2:94:06:cc:cd:00:1b:01:5e:1c:
                    28:a8:25:cd:06:3d:08:99:be:3c:24:f2:eb:73:4c:
                    3e:18:68:f8:ea:b8:d6:63:9e:f9:14:e0:c9:e9:92:
                    cb:05:cc:9d:d8:06:7d:e2:2e:c9:2a:17:f9:65:15:
                    40:fb:f3:25:a9:08:b8:92:be:2c:c1:16:0f:c4:3f:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F0:67:84:EC:5E:F6:E7:CC:49:08:7D:B4:2E:23:60:4A:30:6D:CC
            X509v3 Authority Key Identifier:
                keyid:65:CA:6C:4F:D1:55:D0:04:51:3F:3A:E8:82:DE:75:E0:C6:6C:34:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/566a23ea-27cb-443a-9dcc-19ebf3aac68c/d9ac9a7feee39accc7e1dfb5485bc1dcf333d37f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:24:f1:a5:78:17:06:39:c1:7d:e7:a2:0a:b2:f4:26:eb:f7:
         0a:fe:a5:8e:f1:04:19:95:a7:c3:14:75:14:42:81:99:87:7c:
         b0:e7:3a:b2:ea:0c:53:6d:59:16:b3:e2:a6:d8:9d:a5:de:3f:
         58:ef:5e:11:05:93:90:fa:90:02:5d:88:12:96:6c:28:75:fc:
         16:8a:7c:3b:11:0d:11:aa:da:88:b1:f2:48:64:4d:75:25:32:
         da:51:3c:07:73:28:78:01:f5:2d:e9:f8:a9:02:70:e5:39:6c:
         21:f1:3c:8f:4c:f6:1d:37:37:59:17:69:f6:35:cd:be:13:8a:
         96:06:5f:5b:f0:16:67:81:51:2f:25:05:cb:88:c2:f6:86:dd:
         98:95:2d:29:c4:a3:8e:10:7c:7d:f3:15:3e:b5:23:25:c4:e8:
         aa:42:cf:ed:7b:76:93:64:19:72:57:bb:cc:03:20:d0:22:fc:
         d4:9a:b3:30:5e:9a:ca:f7:21:c2:b0:f8:2c:0e:17:e9:06:a7:
         ef:db:2c:2f:61:5e:95:ad:1a:ac:03:d5:3f:17:e6:f2:c4:fa:
         c6:70:1a:05:ba:e3:e8:16:45:57:1d:27:24:80:79:3c:81:b3:
         13:ec:2e:3e:5a:ac:28:7c:e1:c0:75:8b:4a:87:39:a5:47:ad:
         36:6c:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----