Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.mft
File:                     bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.mft (raw, json)
Hash identifier:          0CA2k0KwL981K3KjcHCOG9f05bO40MqrSydgLKcCLyo=
Subject key identifier:   8C:07:07:2A:7E:86:25:57:E2:61:33:BA:BA:46:7E:23:2D:BA:B3:5E
Authority key identifier: AE:9E:EC:1F:99:E0:2B:A2:C6:29:B6:30:2B:64:53:48:51:64:3C:DF
Certificate issuer:       /CN=bd9cc6efd7eedf3240948db53c9cc6f0a17bad04
Certificate serial:       284A92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.mft
Manifest number:          0DE4
Signing time:             Mon 15 Apr 2024 05:21:33 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 08:19:17 +0000
Files and hashes:         1: bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.crl (hash: 9Op379qQnv6ulOh/JbDL3DdeEeP+eFEkn/85k8c+9RI=)
                          2: de1d66601f0ffc93fa638aa633434d2f3155f764.roa (hash: 4BAUDHBuimWAODnFBH2Ce56x/unYkfMRE/0euPLw7SA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640530 (0x284a92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9cc6efd7eedf3240948db53c9cc6f0a17bad04
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 08:19:17 2024 GMT
        Subject: CN=edfb57e36f73b461ab648986dcd3a72c5563cfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:17:5f:e7:ad:fe:a0:9b:1c:b7:7f:27:38:
                    14:1b:b8:e1:bf:10:fa:5e:0e:b9:8f:70:82:da:de:
                    c2:7a:80:2b:ba:cc:06:55:46:22:8f:45:33:18:1d:
                    0a:3d:bf:3d:0e:6b:ea:5d:76:71:37:ba:ea:6d:94:
                    62:a4:dd:87:bc:97:c6:39:08:e5:92:09:7f:7c:ab:
                    75:3c:ae:0b:3c:ab:b8:89:b1:7e:26:f6:0d:f6:2b:
                    8f:25:dc:c7:5e:81:f9:40:8c:b7:fe:9d:f0:0a:fc:
                    2b:09:7e:c7:e7:09:0c:eb:08:dc:1a:3e:54:66:af:
                    6d:00:1b:e6:2b:e8:f5:fb:e6:57:46:68:2b:50:a3:
                    96:41:85:d2:ae:c5:f0:1c:fe:b2:5d:ab:43:17:81:
                    d7:7c:fb:55:eb:70:36:35:60:48:ec:05:06:b6:9b:
                    b6:1c:2c:05:24:12:ad:58:4d:cd:22:4b:4f:38:45:
                    7d:9e:38:c6:8c:58:a0:0d:c2:ed:dc:c5:73:e8:ab:
                    6d:07:6f:d8:61:7a:1a:9f:bd:1b:9f:4e:1d:09:77:
                    a5:f0:72:93:26:fb:7d:23:6b:61:57:41:1d:12:e5:
                    40:4c:36:8c:42:bb:c6:06:1e:56:44:97:51:9c:cc:
                    10:e2:0c:32:c2:17:98:e3:96:2a:81:b7:8c:da:cb:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:07:2A:7E:86:25:57:E2:61:33:BA:BA:46:7E:23:2D:BA:B3:5E
            X509v3 Authority Key Identifier:
                keyid:AE:9E:EC:1F:99:E0:2B:A2:C6:29:B6:30:2B:64:53:48:51:64:3C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66437d42-1b8f-464c-8edc-1e6564e618a8/bd9cc6efd7eedf3240948db53c9cc6f0a17bad04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:09:e5:d1:a2:8d:75:49:92:55:0e:55:a2:0b:4a:25:6f:76:
         36:12:79:02:72:e3:48:8a:1a:d7:d8:5d:87:1c:a3:5b:08:dd:
         cd:f9:a0:33:c3:2b:28:65:a2:ad:ef:55:d7:89:79:f2:09:7f:
         66:2a:c0:5d:28:03:0a:76:6a:62:ac:89:30:07:23:5a:7d:4d:
         97:d1:c9:6d:bf:14:79:2d:6d:47:7f:a7:36:4c:a3:17:ed:bf:
         10:e7:81:73:8c:c6:3a:e1:7d:23:30:20:f5:d4:01:73:f0:9e:
         c5:d3:b6:a3:0e:af:56:bf:12:b7:ec:83:cc:fa:ed:35:39:05:
         fe:79:c3:e2:39:26:91:9c:77:63:7a:d3:be:88:73:1a:3c:72:
         c9:b4:90:0a:84:10:75:76:69:b0:f4:26:a9:9f:3f:04:52:49:
         c4:17:e2:81:98:90:75:9f:6d:3b:ba:08:a1:68:de:79:17:2a:
         d0:19:f8:fb:92:59:d0:44:2e:31:1d:b6:7c:88:95:27:45:8b:
         ca:c9:b3:41:90:df:57:32:c6:ca:e7:85:44:b7:1f:54:27:83:
         08:22:6f:fa:21:c7:fb:10:96:a1:0f:54:d5:ff:ac:f3:3b:84:
         01:68:9f:c9:34:8f:7d:b1:c3:aa:72:fe:68:a9:86:49:02:0f:
         06:02:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----