Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7223f488-adde-466f-9ad1-b9fe3253c263/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.mft
File:                     f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.mft (raw, json)
Hash identifier:          EAPJa/geVOI9L3bS8ZBstdu8NYtLZSRZ9ZaEGMrm+qQ=
Subject key identifier:   8B:6D:E8:11:E1:49:43:08:AE:8B:1B:D0:37:75:17:37:B7:C5:C1:F9
Authority key identifier: C4:2F:78:89:94:8D:6D:72:61:BA:A2:15:98:4D:A1:B2:32:C3:88:B8
Certificate issuer:       /CN=f2cf0606b59dec8fe8f9da677d4580c7944c9f9d
Certificate serial:       03EE66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7223f488-adde-466f-9ad1-b9fe3253c263/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.mft
Manifest number:          020C
Signing time:             Mon 15 Apr 2024 06:21:05 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 09:11:39 +0000
Files and hashes:         1: f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.crl (hash: 4/KLZZf6HBnglOGka3Q+0OvzbEC1+wQFVRi0uhMm/5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257638 (0x3ee66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2cf0606b59dec8fe8f9da677d4580c7944c9f9d
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 09:11:39 2024 GMT
        Subject: CN=17d9df824abb9a7c26e270d6a776cad151e26e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fd:27:ee:6b:9d:b1:4a:02:93:09:15:af:a3:
                    c8:1c:08:37:8d:de:bf:e7:63:61:60:01:be:10:b8:
                    70:03:22:a4:06:29:ea:f3:5f:f2:f8:24:60:29:03:
                    34:67:3f:cf:f1:28:4e:0f:af:fc:67:03:fe:27:ee:
                    3d:e7:1f:69:99:78:e2:b7:0a:93:d9:62:f5:65:d0:
                    56:a2:71:b5:1c:da:4c:87:56:ba:bf:90:ef:23:ad:
                    fd:3c:09:4c:40:ac:af:6f:81:36:e2:1a:77:4d:e7:
                    3b:b2:93:11:fa:50:ef:3e:03:63:6b:e8:c4:e6:f2:
                    ff:3f:6f:bb:54:9d:0b:dc:f7:b9:ee:ad:71:78:36:
                    33:4e:34:63:a0:6c:a4:07:ca:4c:96:6d:d3:bb:f1:
                    ee:dc:ad:eb:40:87:c8:a6:ed:fc:97:73:53:42:4c:
                    39:a7:44:4e:e9:6c:ff:17:49:54:7a:2d:65:65:63:
                    62:48:da:01:04:90:d1:85:fd:68:5f:f0:d0:2b:e5:
                    0d:42:94:21:c0:1d:ab:52:42:94:30:bc:68:52:16:
                    f7:95:69:dc:3b:e2:e6:98:4e:79:94:3d:e0:51:47:
                    24:4c:10:ae:cc:6a:d8:a8:b6:96:a4:54:ba:4e:ee:
                    55:0e:6f:c1:28:19:88:21:c4:b6:73:23:bf:80:d5:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6D:E8:11:E1:49:43:08:AE:8B:1B:D0:37:75:17:37:B7:C5:C1:F9
            X509v3 Authority Key Identifier:
                keyid:C4:2F:78:89:94:8D:6D:72:61:BA:A2:15:98:4D:A1:B2:32:C3:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7223f488-adde-466f-9ad1-b9fe3253c263/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7223f488-adde-466f-9ad1-b9fe3253c263/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:04:8c:f7:4b:e4:31:b9:ed:e9:be:67:ed:43:60:7d:5b:
         40:9e:81:6e:ff:37:0d:91:eb:00:76:09:eb:87:28:38:9a:e5:
         a4:b9:c7:7a:88:81:3a:e0:23:78:15:ec:8b:d5:fd:a4:e0:a8:
         df:d9:18:e4:2e:32:20:11:bf:c1:00:76:4d:75:33:4c:35:e1:
         ef:aa:c8:1e:54:e8:1c:f3:06:93:3b:3c:4e:0b:ab:18:de:9b:
         df:b0:89:4c:77:e2:58:3a:b7:12:d6:42:d2:3a:92:f2:58:b4:
         48:56:32:3d:12:58:22:fe:e7:46:74:52:43:4b:09:cc:0d:a3:
         5f:d4:19:9b:e3:d7:9e:a9:3e:69:03:16:36:b2:03:43:44:83:
         22:90:ae:fc:7c:ff:ef:29:2a:ff:fe:6e:6a:ac:fa:72:43:36:
         67:3a:f4:ab:91:29:aa:0a:1a:ec:87:89:f5:0b:ec:84:63:ef:
         fe:aa:e6:e9:c1:91:6d:08:49:c8:ff:53:8e:5f:9d:44:d1:bc:
         e1:8e:fe:de:20:da:40:bc:75:d4:73:eb:b2:80:c8:ab:d8:61:
         c2:43:df:e6:85:d3:27:21:ee:5b:3e:e0:e2:4c:3f:5f:0e:47:
         1b:05:e3:00:9a:b6:b6:1e:54:9c:7c:05:95:b3:c3:64:fc:f6:
         fd:5a:d0:70
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDA+5mMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYy
Y2YwNjA2YjU5ZGVjOGZlOGY5ZGE2NzdkNDU4MGM3OTQ0YzlmOWQwHhcNMjQwNDE1
MDUyMDM5WhcNMjQwNDE4MDkxMTM5WjAzMTEwLwYDVQQDEygxN2Q5ZGY4MjRhYmI5
YTdjMjZlMjcwZDZhNzc2Y2FkMTUxZTI2ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4/0n7mudsUoCkwkVr6PIHAg3jd6/52NhYAG+ELhwAyKkBinq
81/y+CRgKQM0Zz/P8ShOD6/8ZwP+J+495x9pmXjitwqT2WL1ZdBWonG1HNpMh1a6
v5DvI639PAlMQKyvb4E24hp3Tec7spMR+lDvPgNja+jE5vL/P2+7VJ0L3Pe57q1x
eDYzTjRjoGykB8pMlm3Tu/Hu3K3rQIfIpu38l3NTQkw5p0RO6Wz/F0lUei1lZWNi
SNoBBJDRhf1oX/DQK+UNQpQhwB2rUkKUMLxoUhb3lWncO+LmmE55lD3gUUckTBCu
zGrYqLaWpFS6Tu5VDm/BKBmIIcS2cyO/gNWB0wIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFItt6BHhSUMIrosb0Dd1Fze3xcH5MB8GA1UdIwQYMBaAFMQveImUjW1yYbqi
FZhNobIyw4i4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjJjZjA2
MDZiNTlkZWM4ZmU4ZjlkYTY3N2Q0NTgwYzc5NDRjOWY5ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzIyM2Y0ODgtYWRkZS00NjZmLTlhZDEtYjlmZTMy
NTNjMjYzL2YyY2YwNjA2YjU5ZGVjOGZlOGY5ZGE2NzdkNDU4MGM3OTQ0YzlmOWQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MjIzZjQ4OC1hZGRlLTQ2NmYtOWFkMS1iOWZl
MzI1M2MyNjMvZjJjZjA2MDZiNTlkZWM4ZmU4ZjlkYTY3N2Q0NTgwYzc5NDRjOWY5
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBADuXBIz3S+Qxue3pvmftQ2B9W0CegW7/Nw2R6wB2CeuHKDia
5aS5x3qIgTrgI3gV7IvV/aTgqN/ZGOQuMiARv8EAdk11M0w14e+qyB5U6BzzBpM7
PE4Lqxjem9+wiUx34lg6txLWQtI6kvJYtEhWMj0SWCL+50Z0UkNLCcwNo1/UGZvj
156pPmkDFjayA0NEgyKQrvx8/+8pKv/+bmqs+nJDNmc69KuRKaoKGuyHifUL7IRj
7/6q5unBkW0IScj/U45fnUTRvOGO/t4g2kC8ddRz67KAyKvYYcJD3+aF0ych7ls+
4OJMP18ORxsF4wCatrYeVJx8BZWzw2T89v1a0HA=
-----END CERTIFICATE-----