Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.mft
File:                     2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.mft (raw, json)
Hash identifier:          rG4FId96G4bVcVV2t3mJnemOy17resiJX1qP9jnENnk=
Subject key identifier:   BD:56:B7:38:35:69:B4:18:16:73:5F:26:55:93:9A:A7:C2:5D:1B:5B
Authority key identifier: 3C:5A:35:90:43:FA:D7:3A:F7:D0:0A:73:22:2A:9D:CB:73:06:05:93
Certificate issuer:       /CN=2114c12558d3e7c70c4a1a25a2c8de34959f5ec4
Certificate serial:       290EF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.mft
Manifest number:          0E0C
Signing time:             Mon 15 Apr 2024 05:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:11:17 +0000
Files and hashes:         1: 1ad3a27f0cbf6bf54c0ebe5d9e1c69831a146a0b.roa (hash: bdSr6P2LmGjU+EzhIeEic3B26IoE8xSvQKTC5D1ECro=)
                          2: 2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.crl (hash: nLPzpUBm4J2CjmTNMtLyB9jKj37dkCXK0sZvClvNxPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690809 (0x290ef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114c12558d3e7c70c4a1a25a2c8de34959f5ec4
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:11:17 2024 GMT
        Subject: CN=3820dea485aaa2d31873cedb8d4f823b68834f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:aa:ca:9b:07:bc:f7:fd:3d:c3:52:d7:67:30:
                    af:82:23:fb:ba:c2:2c:91:2f:92:94:75:05:46:24:
                    15:20:2e:77:6e:28:e3:9a:aa:e7:21:c7:5b:33:ab:
                    9b:92:09:f2:94:da:2c:76:b6:a7:4b:ce:6f:c4:64:
                    36:d2:08:73:38:3c:4f:b8:63:82:c8:f5:27:aa:63:
                    93:b5:be:7e:ff:bc:b7:eb:d6:b7:d4:8a:7f:1c:6c:
                    fc:f8:ee:80:1b:27:b4:06:28:7f:27:81:6b:9a:9c:
                    0e:99:40:95:24:1e:ec:04:ca:c6:de:0a:fd:9c:7c:
                    96:44:aa:82:99:8c:fc:7d:de:29:72:e4:32:5b:06:
                    e5:c1:45:55:38:2b:e9:4f:64:83:3e:a4:01:79:0b:
                    6e:50:7b:65:a0:25:89:04:c6:b5:05:52:ca:a3:2e:
                    07:77:fd:14:89:f8:eb:cd:1e:dd:43:fc:a0:64:a8:
                    09:17:36:17:a9:f2:5a:68:52:ab:b5:0f:1a:b6:92:
                    b9:a4:2a:fd:19:f6:41:88:9d:18:6e:fd:63:6a:e1:
                    61:f4:3a:fe:ba:51:da:ef:75:2c:7f:88:1d:fa:34:
                    e4:07:5d:ed:91:80:b9:6e:8e:b9:24:7b:cb:10:9f:
                    d1:92:8b:92:5d:f3:f4:f2:db:c3:8e:aa:c9:6f:85:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:B7:38:35:69:B4:18:16:73:5F:26:55:93:9A:A7:C2:5D:1B:5B
            X509v3 Authority Key Identifier:
                keyid:3C:5A:35:90:43:FA:D7:3A:F7:D0:0A:73:22:2A:9D:CB:73:06:05:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7473b339-5fea-4bc4-84c8-375fd39cc7a7/2114c12558d3e7c70c4a1a25a2c8de34959f5ec4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f3:e4:82:0a:b9:84:1c:ef:32:09:73:f9:96:ac:e8:8f:5e:
         0d:12:6b:43:75:ab:18:68:94:ec:d1:23:bf:49:cf:54:6b:53:
         a2:16:1a:9e:fe:e6:58:80:8c:e9:48:a6:83:d6:05:e4:7a:f3:
         a5:a9:fd:d4:3a:9c:ba:37:e2:d1:05:67:58:1e:3c:e6:c1:3e:
         67:b6:5c:c5:f2:f4:79:f7:c1:db:3b:f6:15:14:d1:f0:e7:ec:
         31:27:91:8a:3c:66:96:6a:dd:10:1d:a8:0f:d3:0a:9d:97:10:
         5c:59:6d:ef:dd:a9:7a:7c:72:a8:cf:29:0c:1f:a3:58:91:4a:
         9a:e3:38:aa:4a:01:80:54:25:0f:f6:8a:bf:0f:5f:89:8e:f6:
         f7:27:1f:b7:29:bf:8f:2b:1e:05:b3:78:bb:29:d0:2c:8c:82:
         e4:fb:07:79:79:8b:9a:f1:a6:b8:a0:d5:bb:a5:c4:c7:ac:53:
         32:e1:99:d7:89:48:50:7a:94:0f:3f:6a:03:25:7d:68:af:3d:
         e9:b0:71:90:43:dc:75:fb:27:08:ff:5c:64:b4:e0:11:70:37:
         bd:76:f1:42:5f:1e:78:c4:5f:a9:0f:8b:fa:ed:b6:59:a2:fc:
         56:89:d1:e5:6c:28:55:42:61:28:75:22:32:96:b4:0e:75:9d:
         15:86:20:7c
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKQ75MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTRjMTI1NThkM2U3YzcwYzRhMWEyNWEyYzhkZTM0OTU5ZjVlYzQwHhcNMjQwNDE1
MDQyMDE3WhcNMjQwNDE4MDcxMTE3WjAzMTEwLwYDVQQDEygzODIwZGVhNDg1YWFh
MmQzMTg3M2NlZGI4ZDRmODIzYjY4ODM0Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiarKmwe89/09w1LXZzCvgiP7usIskS+SlHUFRiQVIC53bijj
mqrnIcdbM6ubkgnylNosdranS85vxGQ20ghzODxPuGOCyPUnqmOTtb5+/7y369a3
1Ip/HGz8+O6AGye0Bih/J4FrmpwOmUCVJB7sBMrG3gr9nHyWRKqCmYz8fd4pcuQy
WwblwUVVOCvpT2SDPqQBeQtuUHtloCWJBMa1BVLKoy4Hd/0UifjrzR7dQ/ygZKgJ
FzYXqfJaaFKrtQ8atpK5pCr9GfZBiJ0Ybv1jauFh9Dr+ulHa73Usf4gd+jTkB13t
kYC5bo65JHvLEJ/RkouSXfP08tvDjqrJb4VCVwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFL1Wtzg1abQYFnNfJlWTmqfCXRtbMB8GA1UdIwQYMBaAFDxaNZBD+tc699AK
cyIqnctzBgWTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExNGMx
MjU1OGQzZTdjNzBjNGExYTI1YTJjOGRlMzQ5NTlmNWVjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzQ3M2IzMzktNWZlYS00YmM0LTg0YzgtMzc1ZmQz
OWNjN2E3LzIxMTRjMTI1NThkM2U3YzcwYzRhMWEyNWEyYzhkZTM0OTU5ZjVlYzQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NDczYjMzOS01ZmVhLTRiYzQtODRjOC0zNzVm
ZDM5Y2M3YTcvMjExNGMxMjU1OGQzZTdjNzBjNGExYTI1YTJjOGRlMzQ5NTlmNWVj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAH/z5IIKuYQc7zIJc/mWrOiPXg0Sa0N1qxholOzRI79Jz1Rr
U6IWGp7+5liAjOlIpoPWBeR686Wp/dQ6nLo34tEFZ1gePObBPme2XMXy9Hn3wds7
9hUU0fDn7DEnkYo8ZpZq3RAdqA/TCp2XEFxZbe/dqXp8cqjPKQwfo1iRSprjOKpK
AYBUJQ/2ir8PX4mO9vcnH7cpv48rHgWzeLsp0CyMguT7B3l5i5rxprig1bulxMes
UzLhmdeJSFB6lA8/agMlfWivPemwcZBD3HX7Jwj/XGS04BFwN7128UJfHnjEX6kP
i/rttlmi/FaJ0eVsKFVCYSh1IjKWtA51nRWGIHw=
-----END CERTIFICATE-----