Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/628922650fa5a87787a3f72fc142195f570c8c4e.mft
File:                     628922650fa5a87787a3f72fc142195f570c8c4e.mft (raw, json)
Hash identifier:          LdmLoElEoIeRnvr5nWbSkGLmYzs82CuVR6XpmMUlC7U=
Subject key identifier:   3C:D8:26:4F:D0:A8:31:52:DB:8F:7E:6B:8E:93:84:53:BA:4D:90:67
Authority key identifier: 6B:2E:CD:E6:51:56:11:2C:9B:B6:B1:CA:91:BE:86:77:52:1D:40:ED
Certificate issuer:       /CN=628922650fa5a87787a3f72fc142195f570c8c4e
Certificate serial:       275310
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/628922650fa5a87787a3f72fc142195f570c8c4e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/628922650fa5a87787a3f72fc142195f570c8c4e.mft
Manifest number:          0CEF
Signing time:             Mon 15 Apr 2024 11:21:31 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:42:18 +0000
Files and hashes:         1: 0d729882bec4909936d04bd6f30011d9f2e6b003.roa (hash: dhdHaFszvJyOYWDNpevmeFyI6bKUZJDBbYp09KOe8d8=)
                          2: 628922650fa5a87787a3f72fc142195f570c8c4e.crl (hash: wz+TF9HaDon/0SUFA4MFWwHSM/+fUFNaiCFRqnBZuT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2577168 (0x275310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628922650fa5a87787a3f72fc142195f570c8c4e
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:42:18 2024 GMT
        Subject: CN=8f1be1e19b826c85bc3b37f11d2c1463dc1f26f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:ac:35:7a:d0:ac:bb:5e:f9:f3:52:56:69:
                    e6:20:fe:bb:e9:4d:51:b6:5c:e6:1b:d5:e2:eb:60:
                    47:55:d8:82:24:66:37:68:58:c8:35:e1:9d:96:37:
                    cc:46:11:d5:81:3d:28:f6:b4:3d:d6:ed:67:d1:d9:
                    2e:9d:8d:f9:e4:5c:45:bf:08:88:85:1e:e4:24:4b:
                    a8:01:af:2e:67:99:41:12:08:dc:38:19:67:3a:ed:
                    20:3c:a7:3d:6b:81:b4:b8:86:0b:b6:32:b1:bf:2e:
                    2a:8f:c5:cc:46:82:85:69:df:4c:5e:e1:2f:6a:4a:
                    17:f3:bc:2a:aa:77:ad:f3:58:97:33:8f:fc:06:80:
                    16:5e:94:e5:9b:c5:7f:13:d2:d9:52:1d:ab:6a:e9:
                    36:46:a0:f4:91:0b:41:0f:1b:44:9e:81:64:b6:e7:
                    a3:e0:2a:b6:2a:c0:9a:00:90:2e:bf:ed:94:94:ad:
                    39:06:7b:f8:35:86:05:ad:43:3e:b2:90:5a:04:f7:
                    ee:0e:e2:13:08:73:b5:37:6c:f9:ce:51:5f:96:0a:
                    16:40:0e:09:3e:e4:5e:49:d6:d3:77:1a:46:9f:28:
                    20:39:14:78:63:2b:f3:c4:af:52:fd:bc:b0:2e:b2:
                    e5:d2:78:00:2a:9d:c9:73:3f:a0:98:87:91:c2:dc:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D8:26:4F:D0:A8:31:52:DB:8F:7E:6B:8E:93:84:53:BA:4D:90:67
            X509v3 Authority Key Identifier:
                keyid:6B:2E:CD:E6:51:56:11:2C:9B:B6:B1:CA:91:BE:86:77:52:1D:40:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/628922650fa5a87787a3f72fc142195f570c8c4e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/628922650fa5a87787a3f72fc142195f570c8c4e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59f23f3f-8c04-48df-adec-0093f1746f61/628922650fa5a87787a3f72fc142195f570c8c4e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:19:ed:13:3a:2e:a8:99:bb:ad:51:eb:0a:ec:cf:e3:41:
         a5:e7:62:4a:1d:e4:85:d1:16:ef:9d:c4:a6:c0:56:35:56:22:
         3d:da:39:03:94:85:f2:68:70:6f:f4:99:89:9d:ac:38:c4:77:
         63:ac:2d:aa:cf:0f:4d:3a:1e:0a:1c:c6:a5:18:f7:55:2d:a5:
         cb:24:36:e1:bd:f1:a0:43:8e:de:7d:af:fe:31:f1:df:70:8c:
         d9:d5:7b:47:5f:69:6f:4a:a5:f5:aa:a5:53:41:06:73:95:04:
         be:e9:26:cd:b2:6a:39:ff:19:1a:cd:f5:20:2f:ba:83:01:08:
         da:9a:07:81:1d:cb:ad:9a:4b:19:02:bb:e2:9c:e2:1c:ef:9e:
         9d:d5:cb:a6:b9:2c:dd:c8:dc:97:7a:67:2c:6c:f1:f0:10:1d:
         c7:5b:2b:cf:4d:8b:90:59:16:b1:6c:a7:99:fd:01:3f:36:cf:
         ac:cc:89:cd:0f:98:35:91:34:fa:64:e7:03:7d:a6:b8:f3:fd:
         72:6d:d7:ef:55:c6:b2:78:b9:1e:48:60:f7:10:30:55:d0:ef:
         e0:80:02:a5:02:68:66:75:33:ea:a8:b2:80:b7:2e:70:2c:3d:
         8b:54:76:1d:fc:6d:60:d5:3f:a1:dc:0e:4d:2c:f6:45:bd:5d:
         a2:e9:a2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----