Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8cb8b1a2-ccf5-4d69-ac2d-11109b90b180/3dac6b4fe17d525a35284f012253da1d85356746.mft
File:                     3dac6b4fe17d525a35284f012253da1d85356746.mft (raw, json)
Hash identifier:          Y9P/UXfQ/SGp4fLci6rmfY/8o93LKCkcHHZV/Dnpxiw=
Subject key identifier:   C7:DB:4A:3E:1F:D2:40:D6:A9:DA:8A:3C:FE:7E:33:A1:73:C1:D8:96
Authority key identifier: AF:5C:AF:9B:43:47:D9:0C:97:CD:CE:25:82:A3:C8:87:63:73:AE:6A
Certificate issuer:       /CN=3dac6b4fe17d525a35284f012253da1d85356746
Certificate serial:       089161
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3dac6b4fe17d525a35284f012253da1d85356746.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8cb8b1a2-ccf5-4d69-ac2d-11109b90b180/3dac6b4fe17d525a35284f012253da1d85356746.mft
Manifest number:          045A
Signing time:             Mon 15 Apr 2024 03:21:41 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:46:17 +0000
Files and hashes:         1: 3dac6b4fe17d525a35284f012253da1d85356746.crl (hash: IXywRtXP7SUntQF8CunvygRpfBbCP3OWcjt9sFe73AI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561505 (0x89161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dac6b4fe17d525a35284f012253da1d85356746
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:46:17 2024 GMT
        Subject: CN=79ead6ff25f4e88f2ec4e1d1ab30a15f9a676742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:35:db:5e:93:c9:1c:0d:cd:83:b2:55:d8:
                    cf:d0:6d:fe:06:16:cb:67:ec:70:35:e9:a7:55:68:
                    83:8e:0c:36:37:7a:44:5c:0d:89:c4:f7:a7:66:e9:
                    ed:9e:26:37:48:c9:16:7f:90:0d:ca:83:4b:04:65:
                    be:0f:0a:35:80:7a:c3:c7:18:18:7d:d6:d8:1a:23:
                    87:8b:be:89:75:fd:a0:88:ff:5a:e0:d2:19:54:67:
                    b4:cd:a9:5d:3e:37:a5:24:7a:f7:89:e6:e8:3f:cb:
                    c6:5c:7e:21:12:19:d9:4d:11:a2:49:d6:41:87:7b:
                    bd:71:9b:8b:04:fa:b0:dc:bf:aa:c2:50:fd:50:66:
                    6a:79:d3:8c:c5:98:d7:42:96:c5:ef:0d:ac:73:9e:
                    9c:52:c7:4d:59:d2:ff:00:3d:f5:bc:00:dc:f5:e9:
                    3b:16:6a:f7:6d:62:fd:c6:65:09:f3:fc:b9:dd:e8:
                    64:40:3f:ec:52:07:ac:47:68:a4:42:41:e0:ec:63:
                    8a:d0:62:07:90:8b:c1:2a:2f:e5:33:33:97:87:aa:
                    38:22:fd:0d:ff:55:6f:7b:a1:79:a7:bb:38:d3:6f:
                    8a:4a:0a:f8:71:b6:7a:16:7a:7a:28:34:70:cb:17:
                    95:aa:ca:03:8d:00:bb:49:d6:b4:89:f1:98:d7:23:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:4A:3E:1F:D2:40:D6:A9:DA:8A:3C:FE:7E:33:A1:73:C1:D8:96
            X509v3 Authority Key Identifier:
                keyid:AF:5C:AF:9B:43:47:D9:0C:97:CD:CE:25:82:A3:C8:87:63:73:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3dac6b4fe17d525a35284f012253da1d85356746.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8cb8b1a2-ccf5-4d69-ac2d-11109b90b180/3dac6b4fe17d525a35284f012253da1d85356746.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8cb8b1a2-ccf5-4d69-ac2d-11109b90b180/3dac6b4fe17d525a35284f012253da1d85356746.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:31:0e:a1:3a:13:b0:8f:41:42:6f:6c:99:10:f7:3c:e0:
         4f:f8:77:19:32:f8:40:bc:54:11:f3:9a:cd:62:02:a1:02:67:
         78:e7:90:75:74:ba:da:34:15:94:63:4b:39:9d:7b:24:2a:ed:
         ee:cb:10:ca:b4:35:e7:0a:c6:be:06:b8:e4:91:49:40:97:2c:
         b7:46:82:df:11:23:d2:d9:80:12:6c:52:ef:7f:5f:01:ae:46:
         81:19:60:62:c7:3d:3a:4e:cd:c3:a4:a7:31:22:02:67:b5:c8:
         f4:41:68:eb:9b:f1:b5:8f:d1:32:63:b3:4a:7a:bc:d0:a9:18:
         4d:62:3b:e9:d5:4a:dc:b5:3b:43:82:c9:cb:71:c9:13:0a:ab:
         1f:1f:1e:2c:bc:39:ef:b4:d2:61:d2:75:96:ff:5f:f8:9e:b9:
         e4:ce:ae:a0:83:c4:85:a9:00:1b:cd:20:e6:04:c8:0f:8d:db:
         7f:b3:8e:60:7a:7c:1c:e2:ab:25:98:1a:d7:84:42:e9:b4:0a:
         c2:8d:32:18:ac:ca:2b:d4:32:23:2a:6a:09:c4:5b:47:b1:7d:
         1d:a4:a7:7c:de:ba:6b:e9:39:f4:5a:6e:59:2c:db:8f:f8:b0:
         4e:d8:8c:79:1e:2e:7e:ab:2c:db:c3:1f:32:95:d6:99:07:39:
         7f:55:2c:2b
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCJFhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNk
YWM2YjRmZTE3ZDUyNWEzNTI4NGYwMTIyNTNkYTFkODUzNTY3NDYwHhcNMjQwNDE1
MDIyMDE3WhcNMjQwNDE4MDQ0NjE3WjAzMTEwLwYDVQQDEyg3OWVhZDZmZjI1ZjRl
ODhmMmVjNGUxZDFhYjMwYTE1ZjlhNjc2NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgsQ1216TyRwNzYOyVdjP0G3+BhbLZ+xwNemnVWiDjgw2N3pE
XA2JxPenZuntniY3SMkWf5ANyoNLBGW+Dwo1gHrDxxgYfdbYGiOHi76Jdf2giP9a
4NIZVGe0zaldPjelJHr3ieboP8vGXH4hEhnZTRGiSdZBh3u9cZuLBPqw3L+qwlD9
UGZqedOMxZjXQpbF7w2sc56cUsdNWdL/AD31vADc9ek7Fmr3bWL9xmUJ8/y53ehk
QD/sUgesR2ikQkHg7GOK0GIHkIvBKi/lMzOXh6o4Iv0N/1Vve6F5p7s402+KSgr4
cbZ6Fnp6KDRwyxeVqsoDjQC7Sda0ifGY1yNpIwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFMfbSj4f0kDWqdqKPP5+M6FzwdiWMB8GA1UdIwQYMBaAFK9cr5tDR9kMl83O
JYKjyIdjc65qMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2RhYzZi
NGZlMTdkNTI1YTM1Mjg0ZjAxMjI1M2RhMWQ4NTM1Njc0Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGNiOGIxYTItY2NmNS00ZDY5LWFjMmQtMTExMDli
OTBiMTgwLzNkYWM2YjRmZTE3ZDUyNWEzNTI4NGYwMTIyNTNkYTFkODUzNTY3NDYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Y2I4YjFhMi1jY2Y1LTRkNjktYWMyZC0xMTEw
OWI5MGIxODAvM2RhYzZiNGZlMTdkNTI1YTM1Mjg0ZjAxMjI1M2RhMWQ4NTM1Njc0
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAAddMQ6hOhOwj0FCb2yZEPc84E/4dxky+EC8VBHzms1iAqEC
Z3jnkHV0uto0FZRjSzmdeyQq7e7LEMq0NecKxr4GuOSRSUCXLLdGgt8RI9LZgBJs
Uu9/XwGuRoEZYGLHPTpOzcOkpzEiAme1yPRBaOub8bWP0TJjs0p6vNCpGE1iO+nV
Sty1O0OCyctxyRMKqx8fHiy8Oe+00mHSdZb/X/ieueTOrqCDxIWpABvNIOYEyA+N
23+zjmB6fBziqyWYGteEQum0CsKNMhisyivUMiMqagnEW0exfR2kp3zeumvpOfRa
blks24/4sE7YjHkeLn6rLNvDHzKV1pkHOX9VLCs=
-----END CERTIFICATE-----