Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.mft
File:                     b4cd293c91ec205157dbfa9b56d9881f8f695255.mft (raw, json)
Hash identifier:          nK3rzdxVfScuPtFohSSTlBPuFxLNyYEfg3wqKrfTERc=
Subject key identifier:   71:3A:0D:AB:ED:22:C2:3F:9A:7D:59:4D:3C:6A:BF:B5:BC:CE:D5:45
Authority key identifier: 9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Certificate issuer:       /CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Certificate serial:       21D3B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.mft
Manifest number:          0DED
Signing time:             Mon 15 Apr 2024 03:21:45 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:10:17 +0000
Files and hashes:         1: 27c8b8d56de39578f4785f2ddb638a0f9929cd38.roa (hash: mzvaoAKxvZXuyKqr+iGtiOuzDm4dRpul/YB3E5qTCsQ=)
                          2: b4cd293c91ec205157dbfa9b56d9881f8f695255.crl (hash: PUwxzjQf2N4V0M5q0vAmPRpgE8yNp9JxiC0F3+cwdTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216886 (0x21d3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 06:10:17 2024 GMT
        Subject: CN=7523eee5d965116f199994509d117ca7c36081e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:66:3f:a9:08:b3:2c:dc:18:0a:cd:48:b4:
                    7a:e3:20:37:63:56:c6:27:bf:08:ca:e7:67:50:8b:
                    93:00:08:7b:68:28:37:a9:a8:7a:92:53:bd:14:84:
                    6e:18:97:78:2e:57:c2:a8:f3:ab:6f:6d:7c:a9:f4:
                    34:dc:a7:22:1f:05:88:18:65:73:b6:75:01:06:ae:
                    6a:01:50:f0:05:43:73:66:07:b1:48:f8:46:b4:6d:
                    1b:65:3c:e5:cc:23:25:0b:9d:d9:2e:2c:04:05:c0:
                    7f:ed:be:29:86:c0:44:3d:66:72:89:7c:9a:58:b3:
                    d0:e2:11:ca:a9:b7:79:9b:a6:82:a3:61:96:42:3f:
                    a3:d5:bb:ae:bb:d3:f7:6a:43:f6:99:96:67:31:9d:
                    65:c1:14:4e:f7:5b:61:9c:14:17:d7:1e:46:25:60:
                    46:5c:61:d1:2b:eb:9f:5c:3a:a1:b6:a6:69:cc:70:
                    02:94:69:cd:0c:a3:41:ef:9d:d6:06:78:57:41:68:
                    9e:b7:79:75:3d:df:fd:f1:13:a8:66:41:fa:0b:bf:
                    99:fe:01:bf:b4:63:90:dd:ec:0b:c4:98:f3:2a:06:
                    b6:bb:88:03:43:3d:41:b1:7f:e7:35:fa:c2:84:93:
                    f5:d1:8c:5b:8b:31:cd:90:5b:b8:e9:8f:23:00:23:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3A:0D:AB:ED:22:C2:3F:9A:7D:59:4D:3C:6A:BF:B5:BC:CE:D5:45
            X509v3 Authority Key Identifier:
                keyid:9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:8c:b1:b7:2e:08:90:44:19:3d:cc:2a:3e:61:f3:27:b6:
         bb:a3:c9:b7:6c:2d:a1:d5:e8:1d:0a:5d:d6:a9:15:21:b1:04:
         51:5b:6d:1e:de:5b:c3:75:6e:61:22:88:9f:55:36:6c:cb:ec:
         22:ac:98:93:d9:34:12:2f:9c:97:d7:e9:12:ec:be:5c:a2:36:
         cd:43:fc:90:9f:fd:84:6d:7b:02:1e:0a:b4:e8:f7:e5:26:db:
         67:c5:01:49:d3:85:17:79:6e:66:e4:e6:80:6e:02:aa:66:3e:
         71:91:07:21:45:99:e0:fd:d9:54:5b:87:23:09:ca:fa:15:8e:
         3a:0d:f0:c0:93:d2:28:5f:8f:df:cc:25:85:b3:a5:87:55:b1:
         e2:d2:d4:2d:4c:b4:f4:cc:45:64:e4:81:6b:bb:84:cb:5b:7f:
         80:60:eb:b8:ab:27:1b:e4:2e:98:53:78:ee:d0:71:26:d6:ea:
         a6:13:94:88:c3:85:4e:4b:4f:4c:97:8b:b5:f0:6d:ca:18:8d:
         02:e2:e6:ac:02:de:6f:e9:3d:3a:ef:1b:67:03:df:23:9b:3f:
         e5:2c:2c:98:8d:6e:af:2c:a3:a7:0a:e2:93:9e:dc:52:9e:7f:
         df:d3:2c:3e:62:7e:5a:79:83:f3:cc:da:a1:86:62:d0:f1:4d:
         d9:14:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----