Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.mft
File:                     3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.mft (raw, json)
Hash identifier:          VZ+E3mnk+eQ6fbZz5gLvcsz/BowdGGtBhTd1fIF6Ago=
Subject key identifier:   6D:E3:17:98:03:28:42:30:B4:E2:3B:AD:7E:5C:8E:25:7E:B7:AC:C9
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       287720
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.mft
Manifest number:          0E09
Signing time:             Mon 15 Apr 2024 01:21:21 +0000
Manifest this update:     Mon 15 Apr 2024 00:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 03:37:17 +0000
Files and hashes:         1: 15b4dffd39581370b7d44c4fd8235c5bacfe4136.roa (hash: EtIM5VLnW2issyJ6TXlEAs/mp9dZEp+krWRSXpubyTw=)
                          2: 1f4224982fa3593d9bed239b29c171fb90549a37.roa (hash: KGTAcCFSws7fO8sIXmJX/CzuMpEEJ8WmSvv5HPtm2es=)
                          3: 2433b027f6a7274d8d1ccc01904550cb6b5413d2.roa (hash: GzIIeTtt9E8QyVp9d7kMJr5TFRVcnhczRybrO1xWBlE=)
                          4: 3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl (hash: 3lXl8w6kEuxpMx4ocZr0j+NJaF1mFubk9t1xqVEiDUc=)
                          5: e501442e35776b2623bd03eb361b5ef6a6d5650e.roa (hash: 9hNq3trl8ZAo9NGvt3UvWkqf8H+pECGet7DkYW1mCUk=)
                          6: fd6cd16a5594a835a81335385d6a23e2497110f1.roa (hash: iBxwBEiHBmTTb9lItKDTzuBIbb8s2Nc6iIqhR7YAtsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651936 (0x287720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Apr 15 00:20:17 2024 GMT
            Not After : Apr 18 03:37:17 2024 GMT
        Subject: CN=856ce25228573ace46b14e315938578bfaa123da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:c5:4a:6c:23:9a:10:b0:72:4d:95:64:c9:
                    e4:ed:47:0d:46:0e:5d:ee:4f:fb:38:58:e0:c0:71:
                    6d:b4:38:b8:79:eb:c8:8a:65:35:98:f0:7b:1b:7c:
                    28:30:58:91:53:b9:d5:e4:cb:a5:e7:9f:ce:e5:77:
                    39:f1:c2:04:47:11:99:87:36:54:b4:b1:d1:8c:76:
                    84:32:ef:6f:9f:e1:ba:5b:70:94:49:5b:6e:b0:fc:
                    8f:f4:7d:58:02:af:55:32:8a:c7:e7:fe:81:f2:79:
                    25:79:ec:fc:d7:08:c4:80:6e:e8:c0:82:1d:f0:81:
                    5d:10:a8:92:35:01:04:c9:f3:ae:73:9c:14:82:9e:
                    2f:e9:f5:a7:93:ff:45:67:fe:db:cc:46:be:3a:b8:
                    a6:f1:3e:e6:38:d5:fd:a9:36:60:31:00:2c:1f:1d:
                    0e:18:b4:c5:d4:b2:72:cd:a6:0d:1a:21:78:20:14:
                    44:71:1c:fd:69:ae:c3:82:d6:b3:bf:e6:52:61:da:
                    2e:6d:9b:80:8e:61:93:e1:0c:b5:9a:13:29:a7:91:
                    cc:8a:d7:f1:d8:71:ca:bc:67:ee:9a:71:d5:ce:90:
                    43:15:14:c4:9d:10:61:4c:29:1b:f6:f8:d3:70:03:
                    13:a3:c5:c0:d0:6c:ae:25:28:6e:b1:58:b3:03:51:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E3:17:98:03:28:42:30:B4:E2:3B:AD:7E:5C:8E:25:7E:B7:AC:C9
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:55:76:a7:c2:ce:34:69:28:e2:03:ef:e1:30:72:e2:e9:
         64:af:17:96:cd:c9:c3:78:97:5a:b0:92:36:5c:04:51:2c:c0:
         cd:82:bf:30:b0:d3:55:65:e2:4e:48:3f:3a:e9:fc:1e:09:1f:
         f1:69:35:5d:db:c3:d7:50:72:51:d6:1d:92:9a:54:10:ea:f5:
         fc:f8:0a:51:a0:19:53:e3:3d:76:58:f4:a6:bf:b8:60:ef:00:
         23:0d:d3:57:05:34:61:1d:dc:be:12:68:be:f7:eb:15:06:15:
         91:d8:5d:9f:1d:f0:8f:94:6f:d4:38:1c:da:1a:15:62:c7:02:
         f3:1b:b3:9c:4a:10:8a:b7:8e:b4:25:86:10:f8:2d:f5:5a:07:
         3a:47:fd:75:0b:8f:c0:2a:1e:f5:af:5f:43:97:50:66:85:52:
         3e:14:13:35:7d:f7:b1:3d:26:c1:e3:a0:1a:37:7a:a3:5d:aa:
         2f:23:8a:28:1e:e3:fa:16:40:db:09:7b:a3:8d:b2:a8:50:d2:
         ac:ea:cc:ae:d4:0a:c4:fb:f1:1e:88:dd:24:9c:eb:81:68:e7:
         72:2b:c2:49:68:60:c9:18:8a:a1:03:cf:84:ea:55:d5:56:6e:
         f4:68:31:a2:ad:ba:4c:a5:8b:4b:93:15:76:ab:53:c6:76:13:
         e1:0c:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----