Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft
File:                     bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft (raw, json)
Hash identifier:          88sm1HjyAq0bWiR+duRTU/BkPgsbO+vdKiUZXRJwtpM=
Subject key identifier:   EE:CA:BB:88:36:FF:51:B0:BB:90:BE:07:D1:D4:46:E5:25:FD:FF:EB
Authority key identifier: C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB
Certificate issuer:       /CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
Certificate serial:       284175
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft
Manifest number:          0DFC
Signing time:             Mon 15 Apr 2024 06:21:41 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 09:18:39 +0000
Files and hashes:         1: ae26b22127d1456115845337980547dc295ea554.roa (hash: b48MZKz74QPInBCl6TjZwlhEPKXzCiAc6s+PmosA0j4=)
                          2: bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.crl (hash: MU/49ldQpbT1PYMC+07blfjGLEgcxU/o+YxZ0k9qr84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2638197 (0x284175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 09:18:39 2024 GMT
        Subject: CN=6a2c3414f761f9d38c7a1402ba773dc9c12f5196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:c7:40:d9:c6:bc:b5:9b:fb:01:27:8c:32:a3:
                    a0:6f:1d:41:84:a7:65:df:da:44:44:e2:c5:98:13:
                    91:5f:d2:ce:20:df:8d:27:dc:f9:e2:62:52:be:fa:
                    9e:75:0e:59:6a:f0:36:50:53:a7:90:57:9a:9a:bd:
                    be:6f:03:25:90:4d:6c:0e:8b:8e:34:03:69:1d:e2:
                    17:fe:c5:f3:84:83:7c:c2:21:66:86:7f:ac:c4:fa:
                    16:43:ba:88:0f:25:73:63:1b:62:c8:df:18:d1:18:
                    20:41:67:0e:49:27:9e:6c:c1:a4:16:da:87:1b:29:
                    53:30:ad:a8:23:3a:a4:fe:f2:11:4a:af:01:79:53:
                    36:39:12:3c:37:cd:ab:11:94:36:b0:df:42:3d:b6:
                    f2:4a:58:4c:31:c1:cc:e3:92:bc:8a:01:cd:85:11:
                    4e:75:7d:28:06:dd:af:b9:8b:1f:1f:94:cc:86:38:
                    d9:69:85:a0:94:59:d4:a7:ac:ac:e7:ac:f9:ad:fc:
                    92:29:23:5b:f1:c3:10:c2:06:7b:43:a2:43:27:90:
                    79:e6:6e:67:37:ac:88:a9:5a:6b:2c:b5:45:6a:02:
                    b6:f6:20:92:2b:7c:6c:b6:7b:2f:42:ee:f5:75:f2:
                    fb:07:28:60:fc:e7:a6:85:5b:81:85:ea:cd:a7:a3:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:BB:88:36:FF:51:B0:BB:90:BE:07:D1:D4:46:E5:25:FD:FF:EB
            X509v3 Authority Key Identifier:
                keyid:C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:cb:f0:34:e5:be:02:83:c3:19:00:54:23:7d:da:e0:d1:
         8f:74:6c:67:b3:f5:f5:0b:9d:14:df:6c:e5:3d:c0:93:31:9d:
         9a:0b:9e:1a:06:9a:de:23:fc:7e:55:65:84:27:29:c1:ac:b0:
         6e:f7:4b:03:e4:74:33:03:b3:a2:dd:79:49:1c:91:ca:8a:cc:
         90:cb:c5:02:62:23:ae:14:0f:46:bd:30:df:e0:62:ce:b0:17:
         0b:20:00:bc:bf:04:15:33:2b:4f:af:48:d3:82:47:bf:f7:55:
         44:8d:a9:57:5c:06:dd:66:5b:9b:0b:da:8c:77:2b:e3:45:c8:
         74:73:56:69:79:23:d7:41:75:bf:f7:dd:0e:d0:3b:2a:d8:54:
         27:ed:19:94:f2:b9:44:98:c8:b3:b7:b2:84:ce:70:c7:55:62:
         5d:8e:ff:60:91:d1:1a:6e:f2:8a:a1:71:7d:f1:54:08:11:aa:
         51:0d:8f:0f:94:33:e0:0d:23:e0:77:f2:ee:d1:e4:a6:2a:01:
         58:59:dc:fe:35:8c:4e:00:d7:2d:f2:d0:4d:66:f3:8e:6c:dd:
         57:2d:13:20:a1:60:b9:f1:b3:23:06:31:51:53:c0:fb:02:ed:
         65:99:d3:48:c3:af:b5:0e:43:a7:b8:e8:55:db:ce:33:1a:06:
         9a:9f:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----