Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/d09b29fafea894e6b788dbdd1de3f40383aa6226.mft
File:                     d09b29fafea894e6b788dbdd1de3f40383aa6226.mft (raw, json)
Hash identifier:          x2DgIKWQ7y9t7HJ9Pw1D5uUF0YTDbUJDDGcHRbf2Pg0=
Subject key identifier:   51:04:9C:59:A1:08:7E:07:3A:53:A4:47:92:16:BD:66:AD:2F:4E:F7
Authority key identifier: 29:56:8F:C7:D8:6D:06:3D:95:71:B4:B2:6E:CD:B5:1C:AF:A5:8D:E9
Certificate issuer:       /CN=d09b29fafea894e6b788dbdd1de3f40383aa6226
Certificate serial:       0DB0BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d09b29fafea894e6b788dbdd1de3f40383aa6226.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/d09b29fafea894e6b788dbdd1de3f40383aa6226.mft
Manifest number:          0707
Signing time:             Mon 15 Apr 2024 07:21:05 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 08:08:17 +0000
Files and hashes:         1: 288c197c0e7c4c8326fa105755bbc92989cdfc2e.roa (hash: R/KqIGRpovpiiplQYcaDQd8sZ0NsBi9r2ITWV149PPI=)
                          2: d09b29fafea894e6b788dbdd1de3f40383aa6226.crl (hash: 6i+ALwIuUUXDlHZGZSJXEMUu6IK7SkmQUHGq7C8VIpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897214 (0xdb0be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09b29fafea894e6b788dbdd1de3f40383aa6226
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 08:08:17 2024 GMT
        Subject: CN=4c30fc0dd8f9b3b574eee8f6871451f979cb6299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:ed:91:dd:21:e8:d4:39:eb:84:da:0b:86:
                    1c:01:b7:32:6f:cb:87:d6:84:19:c0:43:12:16:6c:
                    2c:f2:6e:cf:5b:a4:bd:94:81:5e:0e:1b:9d:71:33:
                    46:3a:4a:8b:5b:c7:5b:98:93:40:cf:dd:40:a2:13:
                    0e:30:3e:77:62:4c:fd:d0:2f:7b:52:bb:01:6f:81:
                    5e:bf:59:23:9e:31:db:77:fd:0e:66:7e:5b:e3:c7:
                    a4:1f:ee:1a:c4:cd:ad:35:cc:e6:62:c3:fa:2a:7c:
                    e3:d5:ff:57:fb:2c:c2:a2:f0:82:03:4d:c7:81:fd:
                    15:e4:75:45:80:fd:69:a3:94:9b:64:88:76:3e:ed:
                    67:45:e6:52:22:cd:29:d1:42:30:2f:bb:d5:7c:3d:
                    fe:ee:60:c9:5f:68:1e:4b:8b:a4:11:ff:9b:f5:51:
                    a6:ea:6a:0b:8d:5a:d3:b7:d5:29:1c:23:cc:0a:40:
                    7e:77:83:51:07:8d:cd:47:67:f7:de:f0:52:47:19:
                    7d:10:ed:11:46:07:4d:19:46:bc:0a:1c:7c:e2:30:
                    3e:8c:c4:6e:d0:cb:96:76:17:36:7a:e5:c9:cb:57:
                    ea:56:1a:0b:8b:cf:65:bb:eb:d1:8b:4e:c0:1f:e6:
                    c3:cb:87:63:34:97:a7:f3:53:7d:98:d9:32:cd:74:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:04:9C:59:A1:08:7E:07:3A:53:A4:47:92:16:BD:66:AD:2F:4E:F7
            X509v3 Authority Key Identifier:
                keyid:29:56:8F:C7:D8:6D:06:3D:95:71:B4:B2:6E:CD:B5:1C:AF:A5:8D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d09b29fafea894e6b788dbdd1de3f40383aa6226.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/d09b29fafea894e6b788dbdd1de3f40383aa6226.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/d09b29fafea894e6b788dbdd1de3f40383aa6226.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:90:c5:b7:1a:32:f5:f1:c3:58:ae:36:f1:02:e8:bd:ec:
         44:10:ad:c3:0f:69:b5:07:ca:72:85:77:07:8d:c7:49:42:56:
         4e:5d:09:86:15:36:52:e0:1b:3c:0f:7e:81:83:7b:54:c2:85:
         b7:3f:96:b0:4e:8a:7f:10:3b:b0:05:f0:0d:cd:3a:a7:91:96:
         27:11:02:b7:b2:17:d5:83:fa:71:bb:7f:f4:97:d4:9a:a9:93:
         f0:00:59:b7:7b:ef:9d:bf:58:3c:73:0a:c8:a6:90:17:5a:8f:
         17:4a:74:4c:bb:cc:87:2c:02:7a:74:33:43:e3:18:ad:c1:19:
         3a:5e:39:15:7e:01:68:72:87:87:fd:79:88:ba:66:5d:db:0c:
         cc:f9:99:47:0f:28:ce:6a:44:a7:3d:f7:cd:dc:3a:2e:87:d8:
         26:6d:5b:70:6e:90:bb:da:60:24:ce:81:34:f5:f7:69:76:85:
         40:32:bf:66:27:9a:ba:6a:70:94:0d:46:26:1e:c3:2b:e8:40:
         7a:6e:9e:5c:9e:f2:2d:6b:37:b9:33:bb:a6:89:69:59:36:38:
         3c:c9:92:df:b2:05:b3:78:a3:99:54:27:b2:d4:69:f6:4e:17:
         d9:5d:48:66:b3:36:04:8d:79:31:dc:93:c9:ff:7c:86:25:f2:
         7a:92:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----