Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8fa9adce-779c-4ca1-abc2-e483e250f204/21b8730514026edc86e82b40ef606caea445e458.mft
File:                     21b8730514026edc86e82b40ef606caea445e458.mft (raw, json)
Hash identifier:          O39RK2+DFMio/BpM1be72h8kJgedVx5FYnO29oP3DFQ=
Subject key identifier:   16:EB:48:71:1D:B2:56:49:65:6D:F6:10:A6:FE:F4:FA:DC:8C:AE:1F
Authority key identifier: DA:4A:1C:5D:C1:43:69:33:3D:4C:F6:27:7F:35:D2:08:FD:D3:7F:47
Certificate issuer:       /CN=21b8730514026edc86e82b40ef606caea445e458
Certificate serial:       1B1A07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21b8730514026edc86e82b40ef606caea445e458.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8fa9adce-779c-4ca1-abc2-e483e250f204/21b8730514026edc86e82b40ef606caea445e458.mft
Manifest number:          0436
Signing time:             Sat 03 Dec 2022 21:15:03 +0000
Manifest this update:     Sat 03 Dec 2022 20:14:34 +0000
Manifest next update:     Tue 06 Dec 2022 22:28:34 +0000
Files and hashes:         1: 21b8730514026edc86e82b40ef606caea445e458.crl (hash: bQL/nk5e7RfZfhL1cSWWeAvQVqZ7Qc8ytw/lsQjquOU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776135 (0x1b1a07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21b8730514026edc86e82b40ef606caea445e458
        Validity
            Not Before: Dec  3 20:14:34 2022 GMT
            Not After : Dec  6 22:28:34 2022 GMT
        Subject: CN=f9225b27390a6b25562694d9a7ab96ba05b7be6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:90:0a:4b:da:78:17:3c:a2:3a:69:e9:ee:
                    54:4e:ba:23:7f:b4:9f:af:cc:c6:3a:77:91:ac:e6:
                    b1:cd:dd:e7:d7:57:0d:b9:53:79:31:97:4d:1d:47:
                    9b:4e:f2:f1:29:1b:a1:a9:d7:14:24:42:67:5d:fa:
                    e0:1b:70:32:ee:f2:88:bf:2c:69:42:96:17:42:c2:
                    2c:71:b5:5f:a7:ff:61:8a:95:b1:79:db:4a:c0:59:
                    62:95:f9:3b:a0:0e:b5:0b:1f:b2:75:2e:e2:d9:ba:
                    f1:88:f4:c4:a0:79:1e:4f:61:a5:0a:0c:80:a3:c2:
                    9c:93:ef:6a:bf:e1:d3:c7:5b:33:16:5a:e3:c1:c3:
                    f4:43:36:7f:d7:e4:4a:5b:ef:66:25:01:13:b1:6e:
                    cb:f4:c6:cf:23:96:5d:4a:9c:26:63:02:45:71:be:
                    1d:82:99:ef:27:62:29:88:00:73:43:30:24:e8:c9:
                    13:98:55:b0:da:51:bc:e0:31:da:01:54:36:d9:cf:
                    84:32:f4:8a:f6:c2:a9:01:4d:0f:37:f4:be:9d:e4:
                    a9:b1:f9:c4:6e:51:21:c2:97:8c:5d:57:d4:f5:8a:
                    08:49:0e:dd:90:3a:d1:27:a0:f2:69:2f:ed:83:08:
                    58:5b:b5:35:c0:2d:86:ff:17:0b:24:da:89:ce:75:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:48:71:1D:B2:56:49:65:6D:F6:10:A6:FE:F4:FA:DC:8C:AE:1F
            X509v3 Authority Key Identifier:
                keyid:DA:4A:1C:5D:C1:43:69:33:3D:4C:F6:27:7F:35:D2:08:FD:D3:7F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21b8730514026edc86e82b40ef606caea445e458.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8fa9adce-779c-4ca1-abc2-e483e250f204/21b8730514026edc86e82b40ef606caea445e458.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8fa9adce-779c-4ca1-abc2-e483e250f204/21b8730514026edc86e82b40ef606caea445e458.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:06:e3:c8:d8:4f:86:79:ff:b7:80:bc:6a:c2:c2:d4:99:
         9d:a8:1d:50:3a:1a:02:e4:fd:0b:51:ad:75:e1:07:b4:d6:54:
         0c:51:b4:c1:5d:c1:45:74:b3:b5:5d:a3:b7:ff:11:af:02:d3:
         a0:ff:19:58:21:cd:b4:28:5d:16:0a:2a:ef:9f:7e:e0:f8:5c:
         4b:6e:7c:83:98:ff:7f:78:e1:80:aa:41:ab:39:bb:5d:1a:00:
         34:b8:a9:21:97:44:3c:a5:e3:cd:92:84:61:a0:ae:ca:b4:68:
         92:cb:17:fe:0e:56:45:c1:2d:00:e8:21:65:28:14:c9:c7:40:
         60:b9:72:f1:7a:e7:c0:d5:17:7d:b0:bf:61:7d:f8:3a:81:5d:
         bc:f5:78:b6:52:dc:ea:b1:c9:84:16:4d:71:e1:2a:c7:7b:4a:
         eb:35:23:f9:8b:16:65:c6:91:94:d2:91:68:9f:ae:ed:97:57:
         c4:a9:42:2f:fc:67:c0:46:1a:6b:0b:9d:bd:da:51:61:df:6b:
         d5:0a:c4:68:0f:01:28:6a:a1:6f:b5:c8:4d:5b:09:96:74:ee:
         65:96:1f:60:bc:31:34:cb:4c:3a:d0:0b:62:d5:84:ba:d9:bd:
         42:c8:9f:21:74:88:81:57:0c:13:e5:82:3b:5b:9e:5f:0c:b8:
         2e:c6:37:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----