Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8035d1f7-4a4b-45a2-88fd-b836326086c1/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.mft
File:                     2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.mft (raw, json)
Hash identifier:          +OqKZe4YN5pAnZiGvThlkKBm1Jq1vn2rajk5od3+myA=
Subject key identifier:   5C:CC:43:F8:A7:67:E4:53:9E:D9:19:2D:EA:38:87:4A:4C:9D:0E:F3
Authority key identifier: 8B:F3:93:14:28:AE:E0:C0:F9:4F:10:2B:DE:4C:8C:C2:C4:78:2A:40
Certificate issuer:       /CN=2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf
Certificate serial:       283C11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8035d1f7-4a4b-45a2-88fd-b836326086c1/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.mft
Manifest number:          0DD3
Signing time:             Mon 15 Apr 2024 06:21:54 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:15:39 +0000
Files and hashes:         1: 2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.crl (hash: Nszz4k8pYEQqlN0/dydAmEaRqhghgqA7ndeW/88xsJI=)
                          2: 9236e8ea3d6f3acbb79ee9e176616e2a60c5b678.roa (hash: Ld2FsQg8GKcjZ4jhi3hefu886R+LMT/EpT7TkWqizJM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2636817 (0x283c11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:15:39 2024 GMT
        Subject: CN=6b6a971948811ad3f1219b60558b7f3ecbca76c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:18:32:e1:96:c5:f4:66:65:ac:d8:3e:82:
                    5a:de:60:7e:af:e9:a1:5b:61:c4:a7:16:1a:0f:2a:
                    b8:98:cf:df:78:43:b8:82:15:53:06:1b:b4:b7:ca:
                    82:d6:91:35:03:51:8a:20:7f:79:b8:c4:b0:e1:3b:
                    0d:86:eb:69:bb:52:67:c6:1a:2e:46:d3:50:41:62:
                    24:c2:89:73:a5:40:af:6a:ea:83:27:eb:43:6c:96:
                    21:a4:a5:b1:2a:38:f6:25:59:86:92:13:bd:00:a4:
                    b3:8b:98:6e:c0:95:fe:bd:ba:c4:66:0b:f2:13:4f:
                    6b:89:fe:1e:a1:da:80:07:f4:3c:7d:dd:cc:48:19:
                    da:ff:7b:b4:52:73:9b:41:64:0b:d4:d0:95:d7:55:
                    0a:64:52:42:cb:07:e7:02:c4:42:ba:e4:c1:b8:67:
                    06:ee:6a:c1:6d:af:2e:06:0b:34:b3:31:34:c0:0b:
                    b2:93:06:39:8f:a0:fa:fa:0e:ca:1b:88:83:51:e8:
                    43:18:3e:fd:92:33:c7:1b:d7:f5:35:5e:53:dd:4b:
                    8d:cc:51:b7:57:27:54:b3:1a:b4:d2:bd:fe:3b:3e:
                    b4:20:8e:37:c4:80:79:2b:78:2b:5c:bc:f6:df:95:
                    1c:b1:ba:db:14:92:fe:c6:34:63:c4:67:a5:72:ab:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CC:43:F8:A7:67:E4:53:9E:D9:19:2D:EA:38:87:4A:4C:9D:0E:F3
            X509v3 Authority Key Identifier:
                keyid:8B:F3:93:14:28:AE:E0:C0:F9:4F:10:2B:DE:4C:8C:C2:C4:78:2A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8035d1f7-4a4b-45a2-88fd-b836326086c1/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8035d1f7-4a4b-45a2-88fd-b836326086c1/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:a4:70:11:10:c1:c1:fc:a5:7a:57:54:67:c7:e7:3b:46:
         74:60:57:96:65:2b:6c:8d:10:55:03:c7:a8:70:fe:51:5b:bf:
         c5:cc:8a:38:76:89:1f:84:d9:47:1f:06:26:4a:cc:88:16:74:
         57:d8:19:4b:90:e0:b7:9f:4e:b2:ff:20:52:f7:e4:3f:1d:50:
         63:3f:c5:d8:ba:05:04:a6:3d:d9:94:8e:6d:d2:b5:fd:47:cc:
         df:32:21:51:68:13:fc:09:38:f5:8f:fa:0d:59:f0:c1:d9:c0:
         1e:30:00:1f:8a:79:df:65:e5:9c:98:b4:dd:da:2a:41:29:a1:
         d2:b8:39:fb:f5:58:80:11:0b:20:7d:f0:d6:58:a7:fb:06:da:
         ad:16:1a:a8:a7:a3:b3:50:8e:c5:60:af:b6:99:58:4c:7a:d4:
         34:07:49:1c:f6:80:4d:cd:52:5f:f7:79:02:a0:93:3d:9c:c7:
         95:f0:bf:77:69:c0:61:2d:1c:82:5b:f2:2c:e9:52:94:18:88:
         ca:a2:5c:32:98:ea:b9:2a:75:c5:66:8b:ba:b4:79:ee:93:48:
         3b:06:e0:ea:fa:68:56:d7:ed:f4:12:61:35:b0:69:89:41:cb:
         22:e1:3d:91:0a:ca:1c:f2:b4:5c:42:30:11:2c:9b:bc:74:e9:
         75:cc:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----