Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.mft
File:                     790cd68fd041d01c15b1368a3b5f2d42f13ca563.mft (raw, json)
Hash identifier:          D5ycPC8mwpH+wfz2abFCQRfQrEgnENxqRuBM+LKXvcY=
Subject key identifier:   80:64:16:82:40:3E:67:AB:40:61:C6:4C:73:AE:A8:FF:6F:03:42:E5
Authority key identifier: 0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24
Certificate issuer:       /CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
Certificate serial:       298842
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.mft
Manifest number:          0E0A
Signing time:             Mon 15 Apr 2024 09:21:05 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:46:18 +0000
Files and hashes:         1: 790cd68fd041d01c15b1368a3b5f2d42f13ca563.crl (hash: g5eo24PLWv9CRpYVP31b1NZ+ZOu0+LSwPilw7wK0xcg=)
                          2: 9da2d155c324b6e467d043700cd46694c128a7fe.roa (hash: sKcXip1pT+15cwbKmmeZkslMFPoHTtrCKTpyehuyxfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2721858 (0x298842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:46:18 2024 GMT
        Subject: CN=f2c093d1c45727b5e42276bdee31daf6570798fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:00:82:5a:6c:14:47:94:6f:80:c8:fd:6d:30:
                    c3:2e:b6:7c:4a:2e:88:a2:6b:27:dd:07:61:3f:96:
                    80:d4:a7:7a:b5:4e:03:b4:a7:34:30:39:6a:83:ec:
                    6c:49:c7:a8:7d:df:b9:83:1e:0c:06:48:a5:79:9e:
                    e6:f1:db:40:88:8b:b1:10:59:14:b4:02:ba:c4:d4:
                    6e:8e:c5:03:c7:a4:2c:35:3d:10:9a:d9:87:da:39:
                    d6:ba:c1:0f:4b:d9:1f:89:65:56:0a:13:96:28:ef:
                    fb:42:fc:a3:fc:2d:ea:c4:cf:78:68:c8:df:6f:67:
                    17:5c:23:47:4f:c6:9c:eb:66:03:4c:32:19:ef:a0:
                    85:34:41:0c:50:92:d4:a3:04:af:1f:94:31:ed:11:
                    ea:e7:5d:17:81:7d:b6:e9:cf:fb:ff:ec:6a:0f:51:
                    ff:ab:8e:a9:a3:79:74:0e:cf:cc:52:d5:c9:80:d1:
                    25:05:3c:08:ac:66:ee:e6:ea:dc:4d:47:b7:b3:4d:
                    89:16:8e:c1:23:fc:a2:9a:fc:69:58:f4:b4:1b:f0:
                    cf:5c:76:1a:26:84:5f:b9:0b:1a:f1:2c:be:07:e5:
                    90:e7:99:71:a4:23:fe:98:76:0a:99:1f:b9:62:2b:
                    34:50:c9:55:a8:13:7d:f9:e4:25:1c:bc:b7:4b:b9:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:16:82:40:3E:67:AB:40:61:C6:4C:73:AE:A8:FF:6F:03:42:E5
            X509v3 Authority Key Identifier:
                keyid:0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:f7:dd:62:ad:72:a1:b4:8f:f8:d9:72:07:ba:62:fb:00:
         a4:ef:cd:4e:0c:55:98:b7:87:d7:fe:5e:92:b2:bb:58:dd:d2:
         5f:dd:0c:d1:2c:97:bf:c0:ad:6d:b0:f4:0b:78:60:a4:57:74:
         48:bf:e8:d6:11:34:ae:18:07:f8:df:4c:e7:e1:3d:e8:84:ef:
         b7:c8:6f:94:a7:0e:d9:0c:ba:cd:bb:08:63:15:4b:52:20:f1:
         af:1e:c9:ee:92:44:96:5a:ae:a9:63:5f:ad:80:1c:98:28:ef:
         38:e7:38:c1:25:d1:73:d5:69:cb:26:fe:35:66:df:7c:4c:ce:
         62:1c:f6:0c:66:1a:ea:e1:aa:46:64:b2:80:02:86:4e:0a:95:
         8e:f7:63:69:18:74:40:bf:ad:be:62:ee:db:99:80:07:d4:f4:
         da:d6:a2:5e:29:9e:3d:95:19:45:33:f1:fe:de:2b:28:55:75:
         ea:ee:27:af:ec:b1:8c:75:48:ac:0f:8f:15:2e:36:1a:91:30:
         97:0e:2a:9b:26:5f:c9:7f:9f:c6:1b:fd:db:52:cf:32:e4:ca:
         58:47:1c:3d:4e:db:51:9e:c7:84:a4:6e:92:e6:8f:77:10:e9:
         ab:c6:03:73:37:cd:7e:55:29:bb:b3:d3:f2:4b:1e:02:33:27:
         8d:f4:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----