Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685c948a-4560-402e-9d7b-5296445a8e5e/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.mft
File:                     b21ee0ea85ed3c058fccf65e0f50e134186cadc9.mft (raw, json)
Hash identifier:          kxL8A9ghJZr1gDimfmjy/roTKvpRoaf/ZahmsoEK9Kw=
Subject key identifier:   3A:67:94:8C:1E:09:F4:46:07:A5:17:E7:B2:20:A1:83:95:18:59:6E
Authority key identifier: 6A:C5:CB:7D:9D:0A:1A:BD:DE:55:0D:3A:18:2E:05:DD:8B:4C:71:BE
Certificate issuer:       /CN=b21ee0ea85ed3c058fccf65e0f50e134186cadc9
Certificate serial:       1FAB61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685c948a-4560-402e-9d7b-5296445a8e5e/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.mft
Manifest number:          0E03
Signing time:             Mon 15 Apr 2024 03:21:28 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:31:17 +0000
Files and hashes:         1: 72d0baf45610036bd6297c648692544a79db361d.roa (hash: lSoHvkExeBKaUO7Dv+dWs9wHapCJiGk3dYc5qdd7H70=)
                          2: b21ee0ea85ed3c058fccf65e0f50e134186cadc9.crl (hash: I37WL3tWynSZapvvHLwNqBS59veETCKsbFtF/GPkHzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075489 (0x1fab61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b21ee0ea85ed3c058fccf65e0f50e134186cadc9
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:31:17 2024 GMT
        Subject: CN=c04f0c5211d09d6a78f82c6aea4c100ed92e0ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0d:dc:ee:d1:90:31:f5:55:c3:63:32:48:98:
                    fb:03:79:38:4b:2c:f6:80:28:b9:5c:6b:a7:28:c0:
                    27:ba:42:19:33:5c:cf:91:1f:c2:98:7e:9b:7f:1b:
                    7a:33:eb:ec:1e:f6:00:38:2e:0f:67:7c:df:0a:bd:
                    30:31:2d:c2:a0:40:ea:55:68:f7:5f:dc:ae:7a:5a:
                    01:bc:fe:28:ef:78:4d:85:db:ca:c8:21:e1:f6:8c:
                    66:bd:72:fb:bd:6d:de:e4:1e:68:9a:09:21:27:f4:
                    e8:bb:b8:97:3b:fa:cb:b1:db:3e:90:7d:8f:ce:26:
                    b4:dc:22:a8:91:b8:49:ef:7f:39:b2:26:a1:b3:6e:
                    2f:6b:77:1b:d5:62:01:12:64:6d:0d:d9:c8:6a:fe:
                    25:1a:7b:2a:81:fe:eb:03:71:c2:f3:93:0b:a1:19:
                    83:1d:c4:55:93:0b:81:11:81:9a:1c:e6:cd:59:13:
                    3b:84:45:a4:d4:99:c9:67:f8:be:9e:bc:a9:1f:0c:
                    2c:47:15:f3:28:5e:1d:c2:ec:a1:c8:48:21:ae:fb:
                    86:e3:b4:fa:53:07:b9:1a:26:3a:70:4f:b5:b5:d8:
                    6e:29:b9:5e:07:3c:93:a8:a2:e2:4e:75:37:81:69:
                    3c:df:8b:66:e3:57:a1:64:91:2e:4b:f9:82:90:ef:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:67:94:8C:1E:09:F4:46:07:A5:17:E7:B2:20:A1:83:95:18:59:6E
            X509v3 Authority Key Identifier:
                keyid:6A:C5:CB:7D:9D:0A:1A:BD:DE:55:0D:3A:18:2E:05:DD:8B:4C:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685c948a-4560-402e-9d7b-5296445a8e5e/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685c948a-4560-402e-9d7b-5296445a8e5e/b21ee0ea85ed3c058fccf65e0f50e134186cadc9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:96:30:1b:69:27:51:4b:45:75:c9:35:b2:b1:ec:dd:d6:c3:
         de:24:0b:e1:7a:01:5c:a2:43:ba:2e:7b:a6:d5:ca:42:92:d4:
         ea:ac:0f:59:9e:4d:ae:ca:52:e9:2b:95:e6:9a:cb:aa:18:b0:
         79:b3:50:15:1c:6a:a4:fd:ef:a1:43:e6:7b:bb:13:30:63:14:
         36:b0:82:35:1d:ab:27:71:a6:c3:ea:a7:10:a3:5d:af:30:b8:
         08:5a:0b:5b:3e:44:7d:ef:96:63:e7:92:94:71:ad:3b:8b:ba:
         28:a6:48:3f:bb:5a:7b:b7:f4:0a:f1:d2:1f:95:b3:a2:0d:8f:
         ed:8d:a0:76:37:12:8f:0a:16:2f:43:a4:19:07:c0:54:a6:96:
         75:a2:9d:a7:f4:cd:cd:7e:50:45:6b:1c:28:d9:98:74:12:cd:
         35:dd:7e:93:2c:3d:e3:a6:a5:f2:9d:78:95:3a:95:c4:66:14:
         bb:9c:a6:b3:d6:b3:43:ba:c0:6a:57:82:a8:5c:65:d1:48:57:
         cc:14:65:e0:69:23:75:51:64:dd:fe:ff:1b:4f:f4:94:d0:92:
         ed:35:10:ee:69:05:11:62:f7:7a:46:56:83:e1:4f:71:7e:05:
         bf:7e:bc:ce:aa:88:0a:26:61:3a:f1:a6:6a:6b:1e:27:73:d3:
         35:f6:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----