Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.mft
File:                     1bbd0b26e28ec0e225838e2cda93e25e122b332a.mft (raw, json)
Hash identifier:          Xl4dfluHcQWTt+CdCTAQpm0p9ibRyh41p91Sg4LmR28=
Subject key identifier:   74:4A:85:64:C9:93:1E:CA:40:81:B4:68:EF:00:91:80:89:CB:08:8E
Authority key identifier: 62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05
Certificate issuer:       /CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
Certificate serial:       27C6F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.mft
Manifest number:          0E04
Signing time:             Mon 15 Apr 2024 10:21:45 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 10:44:25 +0000
Files and hashes:         1: 1244c3118865d1b9ac17c9752d2ae3858fecdf55.roa (hash: MDI24dIkk2FnQ+UcAbiRyLFEohLEbaGcBnT4sAqV92I=)
                          2: 1bbd0b26e28ec0e225838e2cda93e25e122b332a.crl (hash: oUvOSFHwSCqtfglk+mcj0WFWZ0s8JkOnZDo0kkh7xMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2606835 (0x27c6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 10:44:25 2024 GMT
        Subject: CN=abf303b2a37eccf2980edbc3aa393f010e17a4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:34:d6:be:5c:6b:8f:f4:a6:b0:ba:32:de:
                    6a:aa:e3:ce:57:0c:e8:8d:6a:1c:d1:6c:f4:9e:65:
                    e7:da:b7:16:12:3e:a5:30:a3:97:72:4d:36:41:c1:
                    b4:16:03:6f:ad:14:ec:b6:86:76:c9:9a:a1:36:10:
                    0e:69:9b:dc:b3:72:8a:27:5d:32:11:ca:3e:69:c9:
                    22:c8:2e:66:58:9a:f3:59:b7:7a:e4:83:73:10:2d:
                    35:16:46:45:b3:55:a6:ce:d5:bb:71:9b:cc:87:a3:
                    6b:27:5d:6b:29:a3:8b:7f:fd:97:aa:c0:22:f7:5e:
                    7f:4c:da:99:93:35:52:ca:95:c8:65:2c:49:99:63:
                    b5:6d:cd:08:13:3b:5c:2b:02:e7:94:5f:13:2b:a6:
                    b1:1f:3a:4f:b2:9f:05:45:ed:f2:6b:18:18:1e:b8:
                    24:e8:50:6d:3f:df:bf:03:c1:1a:be:21:33:e7:d6:
                    a1:de:36:3e:51:54:c9:a3:2e:a5:93:cf:72:4c:09:
                    48:4d:3d:36:99:da:d5:15:5c:9c:70:d4:67:1f:66:
                    31:c9:aa:38:ae:64:14:52:ee:96:6c:a6:c2:91:a0:
                    d3:8d:c7:bf:4e:43:60:80:ab:7f:ab:5e:15:a7:3b:
                    3d:04:1f:5b:bc:ec:81:83:fe:fb:49:0d:44:0f:63:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4A:85:64:C9:93:1E:CA:40:81:B4:68:EF:00:91:80:89:CB:08:8E
            X509v3 Authority Key Identifier:
                keyid:62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:31:15:f4:7c:0a:a4:4c:45:5b:11:40:b5:eb:d1:2f:a5:
         12:b6:d6:b2:06:73:34:db:3d:51:68:db:e0:aa:76:62:4c:23:
         7d:cd:f1:58:df:09:6d:f6:e3:8b:5a:db:43:3f:fc:3b:6e:6d:
         dc:e7:11:fb:4d:27:82:1c:75:65:4d:61:54:ef:07:89:e8:1b:
         75:9a:72:fe:62:2f:c0:b5:8f:f6:fd:b6:3b:5c:5a:f3:4c:e6:
         6b:c5:f4:9d:b4:57:18:49:c9:cc:6a:70:2a:35:90:7a:7e:f0:
         60:25:98:75:ed:ff:23:1e:96:11:1e:66:b7:9e:88:23:7f:e6:
         ea:9e:af:77:bc:af:41:eb:14:1d:aa:b1:27:8a:63:4f:c8:5b:
         78:3e:15:72:05:b0:35:3e:ec:0c:a2:3c:66:49:6a:61:80:63:
         dd:f7:10:3e:21:a9:ce:97:6f:96:d1:87:7a:10:98:71:c9:bf:
         40:4b:99:ea:89:c7:ac:59:43:1b:8f:ea:89:59:fb:b4:eb:52:
         aa:f3:c3:60:4f:97:ac:1f:1e:72:9e:67:1c:b5:75:ba:6e:79:
         14:98:2a:ac:26:b5:e9:d8:f5:a8:a9:af:84:9b:2b:1c:30:94:
         c0:fc:94:0c:8b:2a:cf:d5:1f:af:62:46:b5:97:f0:14:bd:4c:
         72:86:27:9d
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJ8bzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi
YmQwYjI2ZTI4ZWMwZTIyNTgzOGUyY2RhOTNlMjVlMTIyYjMzMmEwHhcNMjQwNDE1
MDkyMDI1WhcNMjQwNDE4MTA0NDI1WjAzMTEwLwYDVQQDEyhhYmYzMDNiMmEzN2Vj
Y2YyOTgwZWRiYzNhYTM5M2YwMTBlMTdhNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyAc01r5ca4/0prC6Mt5qquPOVwzojWoc0Wz0nmXn2rcWEj6l
MKOXck02QcG0FgNvrRTstoZ2yZqhNhAOaZvcs3KKJ10yEco+ackiyC5mWJrzWbd6
5INzEC01FkZFs1WmztW7cZvMh6NrJ11rKaOLf/2XqsAi915/TNqZkzVSypXIZSxJ
mWO1bc0IEztcKwLnlF8TK6axHzpPsp8FRe3yaxgYHrgk6FBtP9+/A8EaviEz59ah
3jY+UVTJoy6lk89yTAlITT02mdrVFVyccNRnH2Yxyao4rmQUUu6WbKbCkaDTjce/
TkNggKt/q14Vpzs9BB9bvOyBg/77SQ1ED2NLSQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFHRKhWTJkx7KQIG0aO8AkYCJywiOMB8GA1UdIwQYMBaAFGLL7Rshoa0v5fWy
Y7OQDZDq4cQFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWJiZDBi
MjZlMjhlYzBlMjI1ODM4ZTJjZGE5M2UyNWUxMjJiMzMyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjg1YjY1OGMtODNjMy00NTQyLTkyOTktYWY1Y2Fj
NWIyZWZlLzFiYmQwYjI2ZTI4ZWMwZTIyNTgzOGUyY2RhOTNlMjVlMTIyYjMzMmEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ODViNjU4Yy04M2MzLTQ1NDItOTI5OS1hZjVj
YWM1YjJlZmUvMWJiZDBiMjZlMjhlYzBlMjI1ODM4ZTJjZGE5M2UyNWUxMjJiMzMy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBACpMMRX0fAqkTEVbEUC169EvpRK21rIGczTbPVFo2+CqdmJM
I33N8VjfCW3244ta20M//DtubdznEftNJ4IcdWVNYVTvB4noG3Wacv5iL8C1j/b9
tjtcWvNM5mvF9J20VxhJycxqcCo1kHp+8GAlmHXt/yMelhEeZreeiCN/5uqer3e8
r0HrFB2qsSeKY0/IW3g+FXIFsDU+7AyiPGZJamGAY933ED4hqc6Xb5bRh3oQmHHJ
v0BLmeqJx6xZQxuP6olZ+7TrUqrzw2BPl6wfHnKeZxy1dbpueRSYKqwmtenY9aip
r4SbKxwwlMD8lAyLKs/VH69iRrWX8BS9THKGJ50=
-----END CERTIFICATE-----