Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f831b1a-26f9-4dd4-8509-455fcfd8768d/dfca89703c0988a82ca303cfa33eb77e44a31714.mft
File:                     dfca89703c0988a82ca303cfa33eb77e44a31714.mft (raw, json)
Hash identifier:          RrcegnFRs4lratAnsw2T20+e1BUXpQnO8EM+T6ig5ZI=
Subject key identifier:   D7:5A:36:07:3F:28:5B:FF:A0:CE:78:54:1A:2B:3E:3E:6D:07:E0:7A
Authority key identifier: A5:FE:89:6F:11:B7:8F:FD:C7:01:E4:F0:2A:9E:9B:76:52:E6:AD:F1
Certificate issuer:       /CN=dfca89703c0988a82ca303cfa33eb77e44a31714
Certificate serial:       1A9730
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfca89703c0988a82ca303cfa33eb77e44a31714.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f831b1a-26f9-4dd4-8509-455fcfd8768d/dfca89703c0988a82ca303cfa33eb77e44a31714.mft
Manifest number:          0D6C
Signing time:             Mon 15 Apr 2024 08:21:27 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:50:16 +0000
Files and hashes:         1: dfca89703c0988a82ca303cfa33eb77e44a31714.crl (hash: age6H3iKqUcoDehU7ORK9DZvkFmpDapGtYhylVzfnSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742640 (0x1a9730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfca89703c0988a82ca303cfa33eb77e44a31714
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:50:16 2024 GMT
        Subject: CN=7a20e3074ed9806f997a7035c7a3975a102667ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:e0:b3:c4:76:f3:a4:ee:fc:5a:ff:ae:25:
                    4d:c9:79:05:13:ef:15:80:c6:f7:22:89:d5:65:88:
                    e5:4d:58:58:07:3e:20:4a:c8:a7:56:bd:a8:be:20:
                    20:a3:20:f2:e5:f8:c5:e4:02:0f:0d:e2:bd:98:9a:
                    d2:f4:28:08:03:89:9d:cd:b8:75:72:22:39:4a:f7:
                    70:03:ef:c5:48:8a:a3:f7:69:0e:5c:16:af:24:af:
                    78:31:a1:8a:05:06:a2:09:ed:8b:97:eb:1d:54:5b:
                    b2:d8:c4:8b:1b:31:82:42:78:70:c6:ef:48:36:b0:
                    ff:a1:85:79:41:c2:06:aa:1d:f7:68:73:d6:1a:1c:
                    c6:f0:04:1c:1e:d4:16:e3:b9:67:6d:f6:2f:5e:c2:
                    f3:cd:05:85:a0:14:ae:1c:1d:10:69:0d:59:a3:d8:
                    e2:f6:e8:65:5a:4e:2f:03:e6:2a:50:98:fd:0b:d0:
                    38:81:7a:a0:45:bf:54:8a:15:81:95:3d:8b:ae:d2:
                    25:31:e5:74:a4:f8:ef:69:e5:39:78:44:fa:a8:42:
                    d8:7a:cb:d4:ae:00:67:41:8f:7c:1c:de:3e:c9:10:
                    0b:21:2b:be:67:a7:e7:42:d7:74:21:37:60:02:cb:
                    94:9b:78:38:08:ca:6c:0d:8a:03:a2:56:15:e7:e6:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5A:36:07:3F:28:5B:FF:A0:CE:78:54:1A:2B:3E:3E:6D:07:E0:7A
            X509v3 Authority Key Identifier:
                keyid:A5:FE:89:6F:11:B7:8F:FD:C7:01:E4:F0:2A:9E:9B:76:52:E6:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfca89703c0988a82ca303cfa33eb77e44a31714.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f831b1a-26f9-4dd4-8509-455fcfd8768d/dfca89703c0988a82ca303cfa33eb77e44a31714.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f831b1a-26f9-4dd4-8509-455fcfd8768d/dfca89703c0988a82ca303cfa33eb77e44a31714.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:5d:33:35:82:90:f7:25:11:2d:8b:de:b6:7b:39:6b:2f:
         2e:bd:c2:30:b1:96:fe:1b:ee:87:fe:dd:5d:da:b5:59:df:d9:
         95:b2:ed:0f:fd:39:2e:f8:cc:e2:79:a9:9c:f2:9e:49:9f:ae:
         f4:38:5e:7c:fe:ff:fd:72:c7:d0:fb:f5:98:59:89:c4:f6:15:
         0d:68:fc:c1:4b:71:16:2d:b0:8d:6d:25:29:14:a1:43:ea:bb:
         00:d3:38:57:a4:a6:38:2c:b0:63:dd:bc:f1:96:64:29:17:83:
         84:78:ca:85:74:27:3f:87:2b:d3:68:4a:2d:ed:0e:2f:3e:f2:
         e1:b0:1b:3e:b1:4b:d9:fd:5e:ff:6b:25:c3:a0:32:b7:28:9f:
         f7:ed:78:02:57:fc:9d:42:8a:a7:d7:68:ec:70:b9:40:de:46:
         fa:9c:df:fc:0c:95:6e:01:7e:d6:9e:23:da:f2:85:9d:be:96:
         7a:10:7a:2d:ca:c6:83:16:ef:58:7d:f1:8e:5f:c7:49:48:4f:
         d7:cd:f2:1b:6c:86:f9:ec:f0:8a:a3:1c:a5:54:a5:60:05:76:
         c2:6b:b7:5e:8f:15:14:cb:8a:bd:b7:2f:f4:62:51:68:74:57:
         6a:d2:1c:77:82:b5:33:fa:a8:a7:ba:ad:ff:fb:16:2c:23:2e:
         bd:fd:af:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----