Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8b066309-a923-4581-a1b3-d11e46a96866/1976970d3a4209e79111635c6355777637147412.mft
File:                     1976970d3a4209e79111635c6355777637147412.mft (raw, json)
Hash identifier:          bvxtCYRRlQVcjWIM9ndBrL6DCgTJdHyKg4EAxOtjtQg=
Subject key identifier:   D4:72:27:03:70:A3:AF:15:AD:37:0F:CE:25:25:78:6B:C3:7F:D9:93
Authority key identifier: C8:40:0D:A9:6D:56:A6:3C:A4:A8:3E:6E:65:C9:11:33:FD:2F:77:C6
Certificate issuer:       /CN=1976970d3a4209e79111635c6355777637147412
Certificate serial:       286409
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1976970d3a4209e79111635c6355777637147412.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8b066309-a923-4581-a1b3-d11e46a96866/1976970d3a4209e79111635c6355777637147412.mft
Manifest number:          0DED
Signing time:             Mon 15 Apr 2024 06:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:01:39 +0000
Files and hashes:         1: 1976970d3a4209e79111635c6355777637147412.crl (hash: 4RSiTWSqtapRvPj2OfWGGukPXvFExvhi1FWpDppNv7c=)
                          2: 7b2627680f0cf4129a9b93f0aba5aba38f74305b.roa (hash: K8dieEujmgGT54tczOShgf3xHvRLLEcnIg9lq6OJfF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2647049 (0x286409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976970d3a4209e79111635c6355777637147412
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:01:39 2024 GMT
        Subject: CN=0c7460f850a8ef381c08de47a39fc144d45d6318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:a0:7f:51:96:b0:be:d5:fd:c1:2d:0e:5e:
                    fc:41:d9:62:84:12:e5:43:1b:a0:d3:27:85:93:94:
                    0e:d6:5d:ea:07:91:04:33:56:18:4b:d1:8b:2b:f8:
                    81:79:82:80:cf:30:fa:b4:c1:c1:8a:51:6a:ac:6f:
                    2a:40:b3:85:14:f0:ee:9f:9b:0a:3c:26:28:04:73:
                    50:20:09:5d:37:40:ad:b2:c0:00:37:70:c2:a8:39:
                    de:41:ba:4f:d8:0e:12:66:4f:97:9c:d7:6c:f6:ed:
                    17:9f:73:32:ce:8a:de:71:a3:b1:4a:79:1b:ed:90:
                    95:63:a6:2f:67:d3:50:86:05:73:14:9a:0c:1c:f2:
                    99:76:16:65:b5:68:fe:2b:6e:fa:a8:8b:ba:47:a4:
                    c3:5f:c0:32:86:73:c1:0b:15:a2:20:d2:d1:1e:0b:
                    de:89:1d:d8:f7:3d:b6:72:80:77:96:6b:12:ff:77:
                    10:98:1f:d9:31:31:fa:56:7d:23:97:df:b0:94:e3:
                    82:c5:ca:16:c7:68:29:53:21:48:f5:42:08:78:d6:
                    39:71:c9:8a:19:9d:c2:4b:fc:45:33:4c:ab:f6:2d:
                    57:ec:77:44:d5:55:8f:69:30:02:30:10:15:81:92:
                    65:a1:71:2d:2a:8b:cc:22:0d:22:68:e7:1f:b0:01:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:72:27:03:70:A3:AF:15:AD:37:0F:CE:25:25:78:6B:C3:7F:D9:93
            X509v3 Authority Key Identifier:
                keyid:C8:40:0D:A9:6D:56:A6:3C:A4:A8:3E:6E:65:C9:11:33:FD:2F:77:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1976970d3a4209e79111635c6355777637147412.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8b066309-a923-4581-a1b3-d11e46a96866/1976970d3a4209e79111635c6355777637147412.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8b066309-a923-4581-a1b3-d11e46a96866/1976970d3a4209e79111635c6355777637147412.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:95:d9:62:a5:a7:95:e2:3f:e9:ab:f6:65:41:61:36:df:02:
         34:25:34:b3:58:55:61:ee:65:4b:a1:a7:84:e8:0a:87:20:95:
         54:1c:dc:f9:21:e4:14:04:93:f4:78:7d:d2:9a:88:16:b7:49:
         d4:d5:f7:ce:a9:5f:fc:5f:bc:eb:b4:2b:0c:fe:9c:40:c3:31:
         f6:bd:fb:d0:45:01:93:ef:31:db:4d:3a:6e:09:60:46:11:46:
         4e:8e:5a:a9:5c:44:57:57:e1:51:e6:27:0b:17:1a:91:b5:d0:
         f6:4d:ca:35:e1:36:60:99:a7:23:7a:e5:f4:7b:df:93:ed:ae:
         12:7c:aa:de:4f:09:7c:f4:10:3b:6a:31:2a:cd:bf:5e:dd:29:
         1b:c7:d8:00:42:36:47:6c:52:5f:07:65:f9:fe:06:b9:99:f2:
         b0:61:c2:a1:7f:aa:09:7e:87:9d:27:df:39:e2:1b:c5:60:78:
         c5:6d:49:b0:76:f8:38:ee:31:28:dd:23:d4:de:81:49:43:8f:
         ee:8b:c9:86:45:08:5e:af:36:6c:a4:e0:16:00:f8:26:3b:e8:
         ae:36:80:49:46:d2:70:dd:39:f4:f1:2b:0b:8e:86:9e:aa:ad:
         53:34:83:a4:85:b4:d1:45:22:80:ea:db:06:1d:8a:9e:5e:ba:
         85:f2:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----