Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.mft
File:                     05ae69d2f111c794165a01a865fe187b8831227d.mft (raw, json)
Hash identifier:          8pKY1811BWVy5u+VjKDTv4s5o+Kp5/xoKXm8zB9KIbU=
Subject key identifier:   3E:00:64:33:92:30:2D:56:28:ED:95:5B:A7:29:B3:08:6B:91:A5:1D
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       28EB15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.mft
Manifest number:          0D91
Signing time:             Wed 28 Feb 2024 13:20:30 +0000
Manifest this update:     Wed 28 Feb 2024 12:19:50 +0000
Manifest next update:     Sat 02 Mar 2024 14:10:50 +0000
Files and hashes:         1: 05ae69d2f111c794165a01a865fe187b8831227d.crl (hash: ijC8Ug1kYBQyXNoPzyRp5FK4FOLRNWILZnygypk+1lU=)
                          2: 0628182940727f9dd5757d94d43effc8442afeba.roa (hash: S2uFKS52cT0I+pVU57E3mLW1k+Vs6zwAyfPWMnarr0Y=)
                          3: 1a1091f1abe4bc1a775c0c8b74440a73d3e00a77.roa (hash: Mn2FRM/ICHNJMcZrMbLcTJXMWHkc8qjr7zuIugyuQKc=)
                          4: 2a16041cc35796563a7e54aedb740147bba37e96.roa (hash: 5CA389QBxeuGcz4EkVM6eTHrSYVjW2Hpu2wEaJJNdMs=)
                          5: 8e1ee2353c3511fb6b66cb1b53d5bb295a160d12.roa (hash: i71SfSkdg55ykC77/mWforvXDg49YMws3mV3NLGyR8U=)
                          6: bce0dcc43dc3b7b75b357b3845061d3dda4cd089.roa (hash: JsQn0mjWntQ55ijpQjQfy5MZENK+fXqaxWkuIc2irKY=)
                          7: be411c3b380b4c786acbbbb8e6d5c2a56c2b520d.roa (hash: kyC0FqRxxM2qD2tLIdtHDP8mtDWcVkJnCpMXwGzvhmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2681621 (0x28eb15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Feb 28 12:19:50 2024 GMT
            Not After : Mar  2 14:10:50 2024 GMT
        Subject: CN=3c74b87079190eea8f3d22a8c5122fcd0f67dd12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:3a:78:56:74:7f:c8:d9:8c:47:29:c4:3c:
                    9a:24:fa:62:12:02:68:83:24:06:52:95:49:8a:c4:
                    53:95:92:fd:7d:ca:03:cd:db:91:80:36:c2:7e:3f:
                    ed:7e:c7:5e:ef:5a:9c:96:c2:f6:33:3c:98:a2:7b:
                    f6:3a:e4:e6:3d:48:ed:db:e4:b6:08:47:5d:a1:7a:
                    d5:01:b2:a9:89:bb:d2:cd:a7:65:9c:49:cf:ce:ea:
                    0e:5c:84:17:13:db:38:b0:8e:49:7c:44:ec:6a:5a:
                    6f:25:1b:fb:a3:d8:49:f8:a5:b4:07:a0:69:e1:de:
                    2d:20:f2:fe:bb:5b:84:1c:40:18:7f:33:ca:80:80:
                    83:7f:0e:f7:71:0a:72:fd:de:ea:a4:c3:c7:df:8b:
                    13:8a:d7:3f:69:7c:65:15:a3:5d:81:8a:56:05:de:
                    91:a5:38:5d:2c:23:5e:a1:f6:27:7e:ec:9b:f0:13:
                    e4:46:b8:7e:95:69:bb:7b:b5:0a:cf:06:64:10:19:
                    14:08:ef:e5:9e:54:dc:7c:04:50:59:97:1e:a8:9b:
                    f4:b3:60:1a:dc:9f:3a:c7:2b:5b:a2:8e:e3:c5:7e:
                    8b:8a:df:03:6c:90:cd:1b:6d:b7:ef:ee:53:17:96:
                    45:8c:4e:91:b5:5b:21:f4:53:21:33:68:95:f3:f4:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:00:64:33:92:30:2D:56:28:ED:95:5B:A7:29:B3:08:6B:91:A5:1D
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:25:96:51:0d:76:36:b0:12:d8:2f:ff:8f:a9:05:73:8b:b6:
         d0:9e:cd:f7:64:a7:f6:b5:84:1f:d8:a5:07:14:75:94:b2:6c:
         50:57:64:b4:e1:44:e5:d6:49:ad:a0:00:7f:f2:54:73:a0:a1:
         63:fb:62:7f:91:4d:7d:40:26:90:b4:37:43:e5:fe:f7:4a:01:
         1f:a3:f3:09:62:a5:cd:17:bf:47:c9:d1:53:73:5f:c4:52:39:
         7e:d4:d0:8d:54:fe:92:65:f4:5a:c1:d9:14:23:04:8e:db:d4:
         3a:de:b3:be:4f:64:ae:f1:80:99:c5:e6:06:60:2f:b8:4f:26:
         a5:a3:e3:a7:e8:a3:43:50:b4:52:4b:cb:c6:29:14:a1:c7:db:
         e3:a3:30:32:2a:85:f9:57:4e:99:07:f3:43:7f:0b:ea:a1:ff:
         33:0f:48:43:ec:24:ff:1c:86:74:61:3e:c9:39:a8:fe:b0:98:
         10:08:59:83:ac:bd:ce:3b:f9:7c:0c:c9:61:31:5b:c4:7e:40:
         f7:09:57:b4:46:7d:6c:b3:47:e7:35:a2:cd:67:46:26:6c:32:
         43:7f:bb:04:8d:d7:7f:7e:92:b3:c2:f4:8f:0f:a7:66:20:84:
         b0:9f:7b:24:86:81:e6:a0:1e:a1:0c:5c:fa:da:7c:ae:93:26:
         70:c3:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----