Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.mft
File:                     788f9306f5a8edd8721d2c4a293e3450783cdd56.mft (raw, json)
Hash identifier:          cBMcTZe89NS0nOp62rE+aNZL1rjxKwwziht+mbdITqM=
Subject key identifier:   C4:3B:21:22:E9:A0:04:C4:90:A9:9A:00:C5:A5:C5:83:35:51:DF:08
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Certificate issuer:       /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial:       091F9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.mft
Manifest number:          0498
Signing time:             Mon 15 Apr 2024 03:21:34 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:50:17 +0000
Files and hashes:         1: 16b898c6124c0a8e6bd48ca8c7a170d6b691870b.roa (hash: myii+TF1Q0HF517PPqkXwsZ9NmqO+I7nRV4BQ3oSQto=)
                          2: 3ebd8c1ccd18926af718252c24a557a83a237824.roa (hash: oRcerRhYDXrB12poogG684lyED2g5MxPBdEqYlGNgvo=)
                          3: 7371daab853ed9d2d6ddd8ed3b9b07aadaf6c293.roa (hash: XEr8467gzx2Nh4OiTXFnMGYFUW7uhs10RQK1pnnGK6A=)
                          4: 788f9306f5a8edd8721d2c4a293e3450783cdd56.crl (hash: C1ZYoosCLp3j3XKCVAdvgxErgYT7UwaNTOLomIHU5Gw=)
                          5: 85858a238d79150a3baea9899511105b308277de.roa (hash: W2l4Lk7aR/96jl7nkJZ+a6+tUh65uRjepVcFtv8cYQg=)
                          6: 90eb580a2379a9a4b65c67a2acb8f2b52207b2a2.roa (hash: lvOCD724We/FcJ8TSB+WMGM4S9fHsL3E/4AyXlT3G1o=)
                          7: 9375533551c78bea606728fd4d9bcb39a5845e77.roa (hash: R5ogCN+VEgNF675bpFc26JeG5X+oxyPdUV+JRSHDBkA=)
                          8: 953beb779e616315f178c3879f1bd30d17e97ece.roa (hash: AJvmneNpu5Ot4/3vfIhPV9N15lh3cvFAxg5yCISCTg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597914 (0x91f9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:50:17 2024 GMT
        Subject: CN=810e4c88916fdfedf3486f67b949971711dae21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:f4:5b:60:4a:03:c9:bd:8a:0a:69:fe:9b:
                    6d:f2:dd:fe:72:c6:75:3d:7f:07:24:fc:45:b8:1f:
                    ba:9f:9d:5c:5b:d7:fd:d7:65:dc:70:b0:6a:7f:a0:
                    fa:12:39:bd:54:93:d0:66:8a:08:54:45:8f:56:58:
                    57:d5:ba:a3:04:69:aa:9b:00:dd:c5:5c:6b:ad:e3:
                    4b:d4:19:b9:eb:ef:aa:62:5f:07:ee:54:74:7e:3f:
                    6c:b7:24:ff:87:d6:b9:53:89:fd:77:b6:94:8e:d5:
                    76:50:d0:fa:11:ad:47:b6:43:2a:78:1a:f9:aa:e3:
                    2f:ac:9c:55:e7:31:d8:87:ff:ef:16:50:ed:31:87:
                    08:ce:d0:ab:95:2b:d8:f7:d6:ad:13:78:90:df:43:
                    5f:6a:c2:33:e0:d9:bb:8e:c5:7b:8b:b3:48:d5:35:
                    43:bb:6f:ee:7d:2b:d0:2c:a8:80:b6:4b:d2:9a:73:
                    ff:0b:9c:92:98:f2:00:18:9c:f5:cb:20:2e:85:0a:
                    84:4d:40:90:6e:92:06:98:8b:9b:a1:ef:b8:16:5f:
                    ad:99:10:4e:17:18:cc:d0:6f:87:2a:38:93:78:c4:
                    45:13:57:93:6e:df:fa:05:94:8c:83:7e:ef:7c:6a:
                    f2:fe:24:ff:c7:90:af:e1:e7:bc:bb:1a:15:d7:a2:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3B:21:22:E9:A0:04:C4:90:A9:9A:00:C5:A5:C5:83:35:51:DF:08
            X509v3 Authority Key Identifier:
                keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:58:d6:da:cf:27:49:50:7d:76:61:55:f8:9f:67:36:83:b8:
         c7:5d:3a:3b:29:6d:79:24:3f:4c:65:f2:a0:06:27:2f:e5:bf:
         35:b2:fa:52:32:ca:37:2d:90:a5:6b:b1:21:60:89:9b:07:ed:
         51:33:bc:8a:2f:af:61:41:38:09:7e:cf:de:88:3d:48:47:c5:
         d7:5a:41:21:d2:ae:36:ea:54:eb:0d:f4:7e:71:6c:41:09:d9:
         9b:05:d5:28:ea:96:e6:99:ef:ae:f0:28:7b:66:9c:96:46:05:
         ab:55:b2:35:f1:ad:de:81:cb:e8:8f:d0:21:c1:f9:8c:a8:cc:
         29:9a:ae:a2:97:34:14:23:f0:d9:8e:33:82:3e:ec:ab:20:e1:
         19:9a:77:33:a2:59:ba:54:7b:87:cb:cc:fc:98:e9:2c:2e:fa:
         6d:ac:62:a1:cc:7d:2a:67:f0:08:d1:df:50:ff:1a:b6:15:e9:
         10:57:e7:17:6c:0c:e3:9d:f8:1a:36:c5:c8:2c:6c:f5:e2:50:
         8f:cb:2d:5d:0d:b2:20:e0:20:f8:24:9a:3c:7b:48:d8:82:3d:
         cb:ef:27:3b:5c:cd:0a:9b:29:2a:59:83:cc:a1:cb:3a:8c:48:
         f9:ba:f6:ad:4f:b5:6d:59:6e:5a:ff:a0:a0:02:3b:73:b2:28:
         60:ed:c3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----