Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.mft
File:                     3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.mft (raw, json)
Hash identifier:          pnC97AeHw9BxK6HlXdkdN35fv54isF1A1rIZ7ZtOdds=
Subject key identifier:   90:40:79:4A:23:3E:95:B3:0F:95:39:4D:ED:1B:06:3F:50:F1:ED:C3
Authority key identifier: 85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21
Certificate issuer:       /CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
Certificate serial:       0CBFE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.mft
Manifest number:          069C
Signing time:             Mon 15 Apr 2024 09:21:43 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:14:18 +0000
Files and hashes:         1: 203565780904c639bea4f8ab23810f469fc125f2.roa (hash: y+qWzN3TdoqO6lDB7i+SeGnsj0vi01t4fSxXgj2Kq0w=)
                          2: 3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.crl (hash: AtEvCMpCFhyx9dTE5R2Dh2C8ZaAs3R/5MQq3nQIuECg=)
                          3: 4303a2ac3ea0e57e1e8a8ff9b2fc3116448d20cf.roa (hash: h9TPZtiWupwUe4Hq5lr65gYul55v1AceKt2K3g0FfXA=)
                          4: b6f6763ebd0d5c7288985b773cc47cf8d64a8aa2.roa (hash: g2nX7rx7UMBD/PPycxQ6xfgD2Rg4Fw0v5eZPXJXK/V4=)
                          5: becee50d83233bc1bb235ee7f2e6a439483dd6a1.roa (hash: MxN5SutUGdnZfbTvoAul/XswEtgfaeW1mdr3kpkDoCs=)
                          6: d37d5a189c4ba849b9de13b4fc8967b72a484022.roa (hash: 6KFS8wNsjlbxHyihqw4nehO46F0mpLwUbRabo72Ecsc=)
                          7: e80b2db7af77de8e9d4ac49d9dc5e02f3ef6a7ff.roa (hash: jmBCG8X1+bZHusrD/dps5F0HlnWhb4v5XLMEVUbSP1s=)
                          8: f8f2a5e031319015a35ac675db9c39e9b05059d3.roa (hash: gSCBgxVxr/bhbsPouV43dDe4DWqO9JsbxL594vJzBZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835552 (0xcbfe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:14:18 2024 GMT
        Subject: CN=4cd6222dcea88ec02ad0ac88740f9438d5b02018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:96:7f:c9:08:e3:4c:f7:47:61:c6:26:8f:
                    b2:b9:89:5e:61:39:57:d4:89:c8:ea:5a:71:3f:43:
                    81:33:7d:fd:ed:95:f4:f3:99:66:ed:6e:a6:28:5f:
                    25:82:e1:6e:73:70:5a:fa:7e:bd:27:39:08:4d:c0:
                    87:25:06:84:59:5c:d6:86:86:31:aa:66:07:47:3a:
                    b2:17:7c:97:6e:1d:54:de:84:0d:bc:4f:78:e9:91:
                    36:9d:9c:0d:ac:67:bd:a9:d8:80:1b:f3:59:d5:11:
                    50:33:87:3b:dc:a3:7f:4b:4b:e9:92:fd:18:46:14:
                    53:58:4c:9e:37:f0:10:d4:4d:e0:bf:7f:f7:19:96:
                    4e:88:a8:2c:cd:f3:d8:bf:9c:58:51:8c:89:e4:8c:
                    11:67:88:12:a8:4b:8e:59:3d:ad:12:ee:a4:f0:ed:
                    e9:54:96:a6:dc:35:37:be:cc:ac:c6:53:fb:74:fe:
                    d9:10:d1:4e:e9:a3:4e:e8:71:01:05:b9:5e:be:33:
                    d7:76:b5:3b:fd:93:9e:3c:68:ea:d1:eb:cb:2a:26:
                    1e:f9:73:bb:01:b4:15:2a:a3:4c:a2:f1:5a:5c:f4:
                    80:39:1a:84:ea:f9:6d:cc:89:f6:b2:35:57:e5:f5:
                    45:f5:cf:ab:b2:06:d4:66:9f:84:de:ed:0e:b0:de:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:40:79:4A:23:3E:95:B3:0F:95:39:4D:ED:1B:06:3F:50:F1:ED:C3
            X509v3 Authority Key Identifier:
                keyid:85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:02:62:90:64:d0:6b:33:43:df:17:a1:41:2a:42:96:1c:8b:
         8f:78:44:56:77:24:70:c8:2e:e1:e8:41:2c:61:d3:0e:8d:b0:
         6f:f3:55:fe:fa:61:1c:80:5f:02:b8:4c:b6:a7:b6:21:82:f8:
         9b:a5:90:2b:43:73:7f:7f:a6:7d:9b:24:37:72:13:8c:eb:23:
         c9:0a:a8:56:df:aa:24:6e:a8:10:d1:9f:50:56:5f:8a:5f:b2:
         ee:31:1f:04:76:ff:5d:e5:a4:d7:27:1c:92:2a:d4:7e:16:ce:
         9c:dc:33:a5:1b:f6:e0:eb:6e:de:b0:f5:75:ad:a8:a9:d9:eb:
         1b:3d:f5:a3:ae:b6:29:4e:e2:bd:80:11:55:6b:ef:8c:85:e1:
         53:24:d9:53:66:c3:34:be:1d:06:09:56:7d:04:34:77:c8:47:
         15:5a:b2:85:b3:5d:79:84:42:50:ba:9d:be:71:1f:b1:c1:82:
         04:11:e6:83:dd:c7:8c:62:6c:67:82:0a:82:eb:92:44:c1:33:
         d2:a7:91:01:2d:ef:5c:09:58:5f:bc:76:2f:45:90:6b:4d:e3:
         8f:e8:b3:cb:6c:11:93:fe:b6:5c:3c:38:a8:05:92:4f:92:a5:
         a4:e0:ec:cd:a3:fb:4c:b1:30:11:2f:6a:f4:6e:3e:75:6c:c6:
         fb:43:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----