Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89d2b597-5d6d-44f7-a172-d9f0269f4e84/4d58dd13f3b722372f20a7e18ce06647368e0ad4.mft
File:                     4d58dd13f3b722372f20a7e18ce06647368e0ad4.mft (raw, json)
Hash identifier:          mHExJkSYx6lvWJZi30eXCj3MDFa9DN01hG/W75qC1yg=
Subject key identifier:   3D:BB:73:DA:EA:62:2A:62:F4:97:D8:57:7A:F4:2B:BA:A5:47:C6:52
Authority key identifier: CC:F6:23:5C:67:18:21:A4:DA:8A:E6:AF:AB:91:2A:9F:8B:7B:05:6E
Certificate issuer:       /CN=4d58dd13f3b722372f20a7e18ce06647368e0ad4
Certificate serial:       28BFC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d58dd13f3b722372f20a7e18ce06647368e0ad4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89d2b597-5d6d-44f7-a172-d9f0269f4e84/4d58dd13f3b722372f20a7e18ce06647368e0ad4.mft
Manifest number:          0DFE
Signing time:             Mon 15 Apr 2024 08:20:35 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 10:53:16 +0000
Files and hashes:         1: 452d15af8e4ff5acd0f2c0ed3e8ea6dd5a77a80f.roa (hash: 2CS7Tz4/IWNFv7MTGtXpScofwUiIZi+EA6wjtkkr0Fw=)
                          2: 4d58dd13f3b722372f20a7e18ce06647368e0ad4.crl (hash: FVGkvhHt3WiaNPdK6U2MdrbX7KC5Ka0wkdVF2L60nJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2670529 (0x28bfc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d58dd13f3b722372f20a7e18ce06647368e0ad4
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 10:53:16 2024 GMT
        Subject: CN=ea8958dd4d888fcde2c287fb642cdc6c10164884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:b9:13:e3:c5:bc:19:48:9a:16:6a:2f:d7:
                    5a:71:4c:53:10:c6:cf:dc:98:b3:fe:2f:8a:8d:ae:
                    aa:3d:0c:b1:6e:ec:08:74:ec:71:f9:87:79:87:b7:
                    4f:43:44:7d:4a:d1:57:a4:ef:27:82:23:15:c4:54:
                    14:d8:7e:1b:0b:c5:a9:62:d1:d0:16:72:b8:42:3e:
                    ba:95:b1:3c:03:0c:c3:54:86:79:0e:9b:15:a0:3e:
                    d8:bc:81:a3:b0:3a:c0:8e:af:78:17:2e:32:10:df:
                    6b:35:53:a9:4f:fa:11:1d:98:76:57:2e:86:8d:8b:
                    d5:a1:f2:d8:bf:69:49:03:ec:dd:27:6b:af:5e:ee:
                    7f:84:96:5b:d6:ed:77:16:72:b8:b0:d1:c5:00:0a:
                    2e:7a:68:a8:c1:50:56:f6:aa:ac:2d:a1:40:66:3a:
                    73:08:b6:82:e1:12:7b:39:e0:3c:9d:75:cb:36:c9:
                    df:46:e2:80:72:78:85:71:d3:e9:14:72:5d:22:59:
                    9c:96:f9:90:95:ba:7d:c3:a1:ba:8f:11:a7:c0:66:
                    bb:1c:01:95:f3:52:a1:22:b6:00:46:82:60:08:ab:
                    4d:51:c3:cb:ec:04:ed:f0:fd:89:bd:0e:44:a4:5a:
                    80:51:b7:d7:50:aa:85:37:c8:4d:96:20:e6:8b:97:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:73:DA:EA:62:2A:62:F4:97:D8:57:7A:F4:2B:BA:A5:47:C6:52
            X509v3 Authority Key Identifier:
                keyid:CC:F6:23:5C:67:18:21:A4:DA:8A:E6:AF:AB:91:2A:9F:8B:7B:05:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d58dd13f3b722372f20a7e18ce06647368e0ad4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89d2b597-5d6d-44f7-a172-d9f0269f4e84/4d58dd13f3b722372f20a7e18ce06647368e0ad4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89d2b597-5d6d-44f7-a172-d9f0269f4e84/4d58dd13f3b722372f20a7e18ce06647368e0ad4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:37:aa:b4:b8:0a:97:75:19:1b:9f:9b:3c:31:0b:00:41:ab:
         eb:1b:dd:42:00:f9:c2:04:d8:28:14:09:f7:8d:06:61:fe:28:
         56:46:8d:e1:75:fe:78:20:fe:8e:57:bd:05:33:cf:8e:e6:a7:
         05:92:86:b6:9f:44:d3:9d:ad:fa:d2:1c:91:90:05:12:37:10:
         6d:8f:00:1d:49:3c:da:63:da:c9:22:3b:1f:48:f4:1c:a3:a9:
         5f:3e:94:78:f4:fc:0c:17:f5:e3:6c:a5:10:31:39:86:f7:ed:
         8b:38:8c:be:91:50:92:86:00:45:1b:b5:bf:7b:e8:7a:71:7c:
         5c:94:08:c1:a7:6a:17:6c:d8:8e:7e:42:c6:e8:26:8e:b3:d0:
         89:e2:8c:78:94:00:e1:d9:d8:0e:40:78:df:56:68:bb:4d:dd:
         7b:ef:8e:0d:88:ce:04:da:1a:2f:ce:06:bb:c5:80:d4:9b:07:
         54:a4:bc:6f:5e:b9:26:d2:f2:8e:4d:89:1d:4c:41:b3:e2:1d:
         ce:81:db:bb:a8:fb:2d:94:1a:4a:43:95:4b:dc:8d:86:3a:30:
         ec:d0:7c:22:dc:c2:2d:a4:6c:77:25:65:c6:3d:4c:ba:80:23:
         0e:a9:ed:d9:a3:b6:fd:04:f3:ff:11:b3:86:df:ed:7f:1e:78:
         f4:04:67:01
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKL/BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
NThkZDEzZjNiNzIyMzcyZjIwYTdlMThjZTA2NjQ3MzY4ZTBhZDQwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MTA1MzE2WjAzMTEwLwYDVQQDEyhlYTg5NThkZDRkODg4
ZmNkZTJjMjg3ZmI2NDJjZGM2YzEwMTY0ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxSe5E+PFvBlImhZqL9dacUxTEMbP3Jiz/i+Kja6qPQyxbuwI
dOxx+Yd5h7dPQ0R9StFXpO8ngiMVxFQU2H4bC8WpYtHQFnK4Qj66lbE8AwzDVIZ5
DpsVoD7YvIGjsDrAjq94Fy4yEN9rNVOpT/oRHZh2Vy6GjYvVofLYv2lJA+zdJ2uv
Xu5/hJZb1u13FnK4sNHFAAouemiowVBW9qqsLaFAZjpzCLaC4RJ7OeA8nXXLNsnf
RuKAcniFcdPpFHJdIlmclvmQlbp9w6G6jxGnwGa7HAGV81KhIrYARoJgCKtNUcPL
7ATt8P2JvQ5EpFqAUbfXUKqFN8hNliDmi5cegQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFD27c9rqYipi9JfYV3r0K7qlR8ZSMB8GA1UdIwQYMBaAFMz2I1xnGCGk2orm
r6uRKp+LewVuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ1OGRk
MTNmM2I3MjIzNzJmMjBhN2UxOGNlMDY2NDczNjhlMGFkNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODlkMmI1OTctNWQ2ZC00NGY3LWExNzItZDlmMDI2
OWY0ZTg0LzRkNThkZDEzZjNiNzIyMzcyZjIwYTdlMThjZTA2NjQ3MzY4ZTBhZDQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OWQyYjU5Ny01ZDZkLTQ0ZjctYTE3Mi1kOWYw
MjY5ZjRlODQvNGQ1OGRkMTNmM2I3MjIzNzJmMjBhN2UxOGNlMDY2NDczNjhlMGFk
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGk3qrS4Cpd1GRufmzwxCwBBq+sb3UIA+cIE2CgUCfeNBmH+
KFZGjeF1/ngg/o5XvQUzz47mpwWShrafRNOdrfrSHJGQBRI3EG2PAB1JPNpj2ski
Ox9I9ByjqV8+lHj0/AwX9eNspRAxOYb37Ys4jL6RUJKGAEUbtb976HpxfFyUCMGn
ahds2I5+QsboJo6z0InijHiUAOHZ2A5AeN9WaLtN3Xvvjg2IzgTaGi/OBrvFgNSb
B1SkvG9euSbS8o5NiR1MQbPiHc6B27uo+y2UGkpDlUvcjYY6MOzQfCLcwi2kbHcl
ZcY9TLqAIw6p7dmjtv0E8/8Rs4bf7X8eePQEZwE=
-----END CERTIFICATE-----