Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.mft
File:                     fc3eb9c806dfd203fdb6fc49031057505a0c6f13.mft (raw, json)
Hash identifier:          HnC8fxu7V0NYSu6MnoFuhz5/KZViDEe6Ett6ckk6fjI=
Subject key identifier:   CB:79:25:02:6E:8F:BE:13:D3:D7:FF:85:16:19:7C:D5:3E:CD:D5:E3
Authority key identifier: 2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14
Certificate issuer:       /CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
Certificate serial:       27B737
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.mft
Manifest number:          0E1D
Signing time:             Mon 15 Apr 2024 11:20:48 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:30:18 +0000
Files and hashes:         1: 80a95d1dadcc2a42c62848008a7c408e49fca24b.roa (hash: LRAPqeypC405eRG5eTcLQsQwjovcnByv3Yf3u4ql4e4=)
                          2: fc3eb9c806dfd203fdb6fc49031057505a0c6f13.crl (hash: ZGoyM0sX+Nzaolj7NfvlY1rabuNOP4cboSJsUsDObb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602807 (0x27b737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:30:18 2024 GMT
        Subject: CN=f52e6f6ebacaef3e5ef266b401894e4e2699d14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:bd:89:94:1c:87:ee:8a:3a:0b:47:27:d0:
                    6a:73:d9:5d:db:6a:a2:3a:1a:07:f7:74:96:a1:97:
                    bf:c5:cb:19:8f:1c:61:a7:62:24:c4:9a:2d:29:d9:
                    02:d2:b3:1e:75:bb:8e:11:af:5d:ff:86:93:6b:47:
                    07:92:0c:1c:45:e4:bd:8f:36:e0:f1:14:ca:14:37:
                    86:eb:46:b0:5f:84:78:af:b3:91:38:bb:ba:d5:d7:
                    f1:dc:a0:2b:62:9b:21:44:69:23:b4:61:e3:d9:72:
                    e3:e6:18:e9:fc:8c:aa:42:90:de:99:6a:25:7e:e3:
                    9c:40:50:41:20:42:65:20:13:74:c1:a6:fb:fa:54:
                    04:41:c9:5c:ca:cc:8c:51:d4:79:40:5d:67:ba:11:
                    2f:62:de:bd:f7:ab:0b:59:6a:21:b5:cd:95:3d:0e:
                    fe:ca:71:65:46:44:8a:fb:8c:94:92:9e:36:25:f9:
                    d9:1b:2e:6c:ba:f8:7b:e0:77:67:f7:63:61:c8:43:
                    4a:58:9f:51:87:82:ec:c0:15:5c:37:07:64:12:98:
                    f0:49:2c:f8:65:22:ef:76:9c:4f:92:b0:02:23:aa:
                    7e:e7:89:20:56:64:3d:0f:cb:3b:fe:7d:4e:fb:01:
                    87:47:3d:e8:a1:56:22:32:94:23:f5:9a:9d:ee:31:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:79:25:02:6E:8F:BE:13:D3:D7:FF:85:16:19:7C:D5:3E:CD:D5:E3
            X509v3 Authority Key Identifier:
                keyid:2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ed:1e:89:a0:77:70:22:95:14:3b:03:e9:c5:6d:9f:89:72:
         55:f7:54:dc:e0:46:e2:1d:88:06:87:ba:7a:e9:f0:7d:11:c4:
         09:b6:cf:6d:dc:32:85:ca:a1:88:94:40:bd:c4:e9:32:cf:b7:
         da:87:6f:73:5f:9c:36:e1:55:87:16:33:2d:0f:be:e6:f6:d7:
         9f:45:62:1b:94:ec:3b:4e:25:7b:c1:98:fc:2e:ba:b0:98:65:
         35:8b:aa:7e:b8:58:c2:b0:fb:f4:18:26:c4:67:09:5c:f7:64:
         d4:dd:cf:93:85:30:6f:98:8f:e2:39:9c:a4:7d:c4:d4:c3:07:
         e1:ae:e2:57:9e:70:84:68:e4:75:61:fb:a3:86:e2:7d:20:41:
         78:98:64:58:ff:4f:84:ea:56:15:69:02:69:38:16:a0:8d:f5:
         a2:6e:d1:ba:c8:b6:38:0e:1f:ce:ee:9e:d3:7f:7b:1a:3c:fd:
         40:e3:00:fd:96:c7:9c:6a:1e:93:75:6a:ae:e1:66:53:62:cf:
         24:2c:75:cc:e7:e2:62:af:98:55:41:1d:b1:02:31:ab:45:59:
         ae:45:87:13:d2:8a:27:76:b5:27:3d:61:39:c9:02:63:be:f1:
         c6:fb:eb:ac:e6:4a:d5:0c:11:04:4a:bf:00:4b:d7:6f:73:cc:
         8a:15:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----