Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a34f11c-b562-46b1-938f-440615f57d50/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.mft
File:                     cb16c0c5aa0a219fb67e0c841c70540f72b09db0.mft (raw, json)
Hash identifier:          aN//m/Mu4aHK6tRbCF33+UWcLjoyO68GZLy27cALvH0=
Subject key identifier:   3C:E6:25:87:3E:D3:AE:05:1A:89:39:4E:DA:F1:32:4B:21:50:AA:3C
Authority key identifier: 11:38:CA:6D:A7:8A:A7:F5:FD:FF:13:A6:9A:CA:59:6D:2C:F1:6D:29
Certificate issuer:       /CN=cb16c0c5aa0a219fb67e0c841c70540f72b09db0
Certificate serial:       070671
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a34f11c-b562-46b1-938f-440615f57d50/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.mft
Manifest number:          03A0
Signing time:             Mon 15 Apr 2024 10:20:33 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 10:34:25 +0000
Files and hashes:         1: cb16c0c5aa0a219fb67e0c841c70540f72b09db0.crl (hash: naoGJ33aU3ByH29p9CL3siaB2ebdPEJQ0sdujZ+V17k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460401 (0x70671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb16c0c5aa0a219fb67e0c841c70540f72b09db0
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 10:34:25 2024 GMT
        Subject: CN=28f30024e15ae53a032d7e1f403ce2e81a527208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:9f:70:76:c0:f3:c5:a4:a5:a7:8f:cd:59:
                    62:19:2b:04:22:93:e8:87:82:70:03:80:50:1f:92:
                    fc:3f:6e:ce:9c:8a:79:2f:b2:dc:e2:21:46:e7:7a:
                    6a:48:be:13:2c:2b:a9:87:73:cc:39:7f:e6:89:09:
                    4d:c0:9a:1f:ef:8a:c4:9c:12:eb:fa:02:76:35:19:
                    02:c3:d0:1a:6b:fe:f4:64:e4:e3:b5:08:50:2c:0b:
                    ae:9d:e0:1f:7d:0d:99:4a:d6:5b:c8:de:67:fc:65:
                    08:4e:ca:42:64:95:bc:88:2e:f4:3c:3a:9f:52:a8:
                    11:94:81:83:5b:d8:82:a6:a0:41:8e:91:c3:2f:c2:
                    ad:a1:a3:3b:fe:13:46:34:14:e4:16:5a:70:f5:22:
                    bd:4c:fa:6b:f9:32:04:c8:70:e8:e2:c6:ad:3a:12:
                    88:45:93:47:6d:8c:58:d3:da:1c:89:31:1e:90:02:
                    bb:bb:09:f6:7f:d5:80:82:9e:70:b7:b5:ee:92:7f:
                    a0:ea:12:05:6b:5e:d4:c0:e2:a9:33:24:91:11:d3:
                    96:31:99:21:7a:59:fb:21:91:9b:cb:0a:00:a4:96:
                    77:34:c2:2d:13:97:33:8c:57:81:7a:6a:d2:ad:eb:
                    a7:71:83:7a:e6:a1:c0:9f:2f:82:b7:41:27:ce:07:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E6:25:87:3E:D3:AE:05:1A:89:39:4E:DA:F1:32:4B:21:50:AA:3C
            X509v3 Authority Key Identifier:
                keyid:11:38:CA:6D:A7:8A:A7:F5:FD:FF:13:A6:9A:CA:59:6D:2C:F1:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a34f11c-b562-46b1-938f-440615f57d50/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a34f11c-b562-46b1-938f-440615f57d50/cb16c0c5aa0a219fb67e0c841c70540f72b09db0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dc:bc:ad:f8:2a:d4:76:24:2e:fc:41:94:c8:b2:6d:8e:0c:
         95:61:f7:06:81:f2:76:a4:03:a5:fb:e9:e0:2c:ed:42:9c:d4:
         7f:d7:ef:b8:32:c8:c5:e0:f0:c9:e5:5e:28:89:06:ce:18:6c:
         5d:19:02:45:da:13:21:a6:d2:5f:7a:71:38:7d:aa:d0:47:64:
         8d:31:fa:96:00:ab:20:06:48:e0:81:69:da:14:3f:4c:24:a3:
         d8:4f:c2:ff:f0:da:64:b9:3e:7f:86:7d:17:fc:aa:a4:b1:00:
         76:be:d1:74:0b:c7:bd:48:d8:89:14:2e:e9:e2:2c:24:78:f8:
         ae:7e:2f:51:a3:a1:63:1f:61:9a:b8:49:5c:28:7b:ad:c9:b3:
         24:3a:20:51:b9:82:7b:6f:6c:0a:ff:b9:dd:23:74:3b:a8:d0:
         50:f8:fd:82:d2:96:7c:f9:30:fc:7d:82:07:a5:96:21:d9:84:
         98:8a:06:11:26:61:6d:db:68:03:2f:0a:d7:f1:81:04:43:1e:
         6e:6d:6e:9c:db:9c:b6:dd:0d:73:b2:43:c8:ba:9f:b9:bf:57:
         a8:49:a2:ce:67:e2:58:70:00:66:20:f5:4b:7f:31:d7:c1:57:
         41:47:15:67:e9:c2:60:e4:e9:b5:62:2c:26:ad:de:6f:64:ec:
         73:a1:52:2a
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDBwZxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi
MTZjMGM1YWEwYTIxOWZiNjdlMGM4NDFjNzA1NDBmNzJiMDlkYjAwHhcNMjQwNDE1
MDkyMDI1WhcNMjQwNDE4MTAzNDI1WjAzMTEwLwYDVQQDEygyOGYzMDAyNGUxNWFl
NTNhMDMyZDdlMWY0MDNjZTJlODFhNTI3MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxoOfcHbA88WkpaePzVliGSsEIpPoh4JwA4BQH5L8P27OnIp5
L7Lc4iFG53pqSL4TLCuph3PMOX/miQlNwJof74rEnBLr+gJ2NRkCw9Aaa/70ZOTj
tQhQLAuuneAffQ2ZStZbyN5n/GUITspCZJW8iC70PDqfUqgRlIGDW9iCpqBBjpHD
L8KtoaM7/hNGNBTkFlpw9SK9TPpr+TIEyHDo4satOhKIRZNHbYxY09ociTEekAK7
uwn2f9WAgp5wt7Xukn+g6hIFa17UwOKpMySREdOWMZkheln7IZGbywoApJZ3NMIt
E5czjFeBemrSreuncYN65qHAny+Ct0EnzgcMYQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDzmJYc+064FGok5TtrxMkshUKo8MB8GA1UdIwQYMBaAFBE4ym2niqf1/f8T
pprKWW0s8W0pMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2IxNmMw
YzVhYTBhMjE5ZmI2N2UwYzg0MWM3MDU0MGY3MmIwOWRiMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWEzNGYxMWMtYjU2Mi00NmIxLTkzOGYtNDQwNjE1
ZjU3ZDUwL2NiMTZjMGM1YWEwYTIxOWZiNjdlMGM4NDFjNzA1NDBmNzJiMDlkYjAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YTM0ZjExYy1iNTYyLTQ2YjEtOTM4Zi00NDA2
MTVmNTdkNTAvY2IxNmMwYzVhYTBhMjE5ZmI2N2UwYzg0MWM3MDU0MGY3MmIwOWRi
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAELcvK34KtR2JC78QZTIsm2ODJVh9waB8nakA6X76eAs7UKc
1H/X77gyyMXg8MnlXiiJBs4YbF0ZAkXaEyGm0l96cTh9qtBHZI0x+pYAqyAGSOCB
adoUP0wko9hPwv/w2mS5Pn+GfRf8qqSxAHa+0XQLx71I2IkULuniLCR4+K5+L1Gj
oWMfYZq4SVwoe63JsyQ6IFG5gntvbAr/ud0jdDuo0FD4/YLSlnz5MPx9ggelliHZ
hJiKBhEmYW3baAMvCtfxgQRDHm5tbpzbnLbdDXOyQ8i6n7m/V6hJos5n4lhwAGYg
9Ut/MdfBV0FHFWfpwmDk6bViLCat3m9k7HOhUio=
-----END CERTIFICATE-----