Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/868e503e-03de-4b68-84ed-607aca8dce64/ca317a9159c9c766333ea54fd7eb64edf60ce61d.mft
File:                     ca317a9159c9c766333ea54fd7eb64edf60ce61d.mft (raw, json)
Hash identifier:          eBASfApjcslc2FQzJUgriALz5R6OksvvhkzdcYROGYA=
Subject key identifier:   27:7B:DE:9E:03:85:EC:1F:5B:73:D2:F3:C4:30:6B:6A:49:B4:23:8F
Authority key identifier: 85:35:EC:7F:E7:39:FB:7C:C8:3F:7E:87:7B:F3:19:84:B2:03:F5:1D
Certificate issuer:       /CN=ca317a9159c9c766333ea54fd7eb64edf60ce61d
Certificate serial:       0393F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca317a9159c9c766333ea54fd7eb64edf60ce61d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/868e503e-03de-4b68-84ed-607aca8dce64/ca317a9159c9c766333ea54fd7eb64edf60ce61d.mft
Manifest number:          01D2
Signing time:             Mon 15 Apr 2024 04:20:40 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 06:29:26 +0000
Files and hashes:         1: 3b7d8384c25216e1755f177c6bddc73176bcd629.roa (hash: wpmJUFjEj3xWZVUjP29ABFpuc4nRgINV2VDs1fGYIbU=)
                          2: ca317a9159c9c766333ea54fd7eb64edf60ce61d.crl (hash: 7hpXTGIRHbwT9CYO63zBo1aOy1Z/C3HxODVszo1JcL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234489 (0x393f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca317a9159c9c766333ea54fd7eb64edf60ce61d
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 06:29:26 2024 GMT
        Subject: CN=3049c5ad064c5070a071316f79c9af71137617fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:aa:2a:11:95:0a:b0:cf:cf:b8:0b:55:28:
                    21:9c:96:13:29:68:b2:5a:72:d7:1f:16:9a:3a:04:
                    d4:24:52:51:6c:82:a4:9a:a7:31:b4:d8:57:ea:0e:
                    e7:14:b8:44:33:92:a6:b6:f2:e1:8b:eb:ff:53:05:
                    10:d0:82:3f:41:34:b1:17:3b:2a:de:ec:8a:9b:dc:
                    4e:b7:66:9b:77:3e:6a:ea:27:69:92:4d:1d:b7:da:
                    38:4c:c1:d1:63:d8:80:1b:31:c4:5b:57:ef:d5:3d:
                    f8:05:4c:72:d4:1b:0d:c1:a1:7d:b1:c7:fa:cb:1f:
                    ca:bf:90:8c:82:ee:1c:81:bc:18:0a:81:f9:e6:00:
                    ad:a3:99:32:ad:e4:54:fc:5a:08:a6:65:5c:c4:68:
                    74:86:ba:34:89:ed:fc:54:6d:47:3b:58:25:96:85:
                    52:27:5a:8e:41:85:46:68:f3:21:a8:b9:6c:e6:69:
                    7f:09:d7:ed:cf:33:a3:eb:83:e3:fb:d2:0b:a7:93:
                    79:bd:b5:24:50:74:1c:d4:b4:17:87:29:fb:2d:36:
                    02:ca:be:00:18:c7:63:18:4f:78:f6:e7:ac:37:d7:
                    39:28:a9:e4:98:6b:e8:99:eb:47:91:c2:75:a5:9f:
                    7b:17:63:c5:86:cb:17:65:75:33:5f:38:a1:31:6c:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7B:DE:9E:03:85:EC:1F:5B:73:D2:F3:C4:30:6B:6A:49:B4:23:8F
            X509v3 Authority Key Identifier:
                keyid:85:35:EC:7F:E7:39:FB:7C:C8:3F:7E:87:7B:F3:19:84:B2:03:F5:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca317a9159c9c766333ea54fd7eb64edf60ce61d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/868e503e-03de-4b68-84ed-607aca8dce64/ca317a9159c9c766333ea54fd7eb64edf60ce61d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/868e503e-03de-4b68-84ed-607aca8dce64/ca317a9159c9c766333ea54fd7eb64edf60ce61d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:29:36:89:70:5d:ee:c7:c7:ae:59:ea:f7:95:65:ec:d7:1b:
         73:00:72:8f:d2:56:d8:f2:bf:5a:11:8c:5a:e2:b7:7a:5a:57:
         14:20:14:b6:59:9a:a3:13:a1:ed:1a:c1:3e:43:d8:2b:7c:0f:
         44:b5:33:23:b2:09:ca:18:fd:d0:ec:64:98:ca:78:d9:ed:32:
         a0:9c:3a:b3:8f:ad:be:a2:05:80:c9:d4:ad:ba:ad:9e:f1:7a:
         34:b0:bc:35:45:4a:86:61:a8:4c:f9:33:eb:25:b1:c2:b1:a0:
         9d:cf:46:71:25:41:b5:0a:28:92:f0:07:0f:8c:24:a0:12:25:
         1f:cc:23:4a:6e:58:5e:48:a2:c2:1c:6a:be:82:f5:43:27:03:
         8c:af:77:22:ac:3a:4b:bf:00:8f:cc:7f:6f:37:f2:d4:81:7b:
         51:6b:59:26:3d:1d:d3:69:4a:93:2a:8e:72:73:76:b9:33:37:
         30:24:a3:cb:94:19:d3:1a:0e:7b:41:86:5c:6e:fc:5b:4e:36:
         28:29:5e:ad:5f:b8:12:dc:1b:60:67:3f:79:bc:1e:07:1f:61:
         e9:c1:4f:b0:ad:a3:75:e0:27:fc:4b:22:dd:35:08:ab:74:ed:
         b6:fd:33:26:06:24:3c:36:99:b6:50:6e:95:8e:dd:dd:4a:c1:
         2a:da:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----