Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98F907F64B327C7BC46C03ACE13F42D1B4D2EE6A1EE03C1FEEBF14521F3483D6/0/DEF6A3B4557B7433B0352A3434A2340C1CEFB84A.mft
File:                     DEF6A3B4557B7433B0352A3434A2340C1CEFB84A.mft (raw, json)
Hash identifier:          OCLVA7I9ls4/1xq+kjXQK+mJBgzYku8ZZkuXNuH/1hE=
Subject key identifier:   E1:61:EF:7E:4C:1C:76:82:27:47:1D:51:64:18:2A:E2:C9:3B:13:7E
Authority key identifier: DE:F6:A3:B4:55:7B:74:33:B0:35:2A:34:34:A2:34:0C:1C:EF:B8:4A
Certificate issuer:       /CN=DEF6A3B4557B7433B0352A3434A2340C1CEFB84A
Certificate serial:       68C0B69F871A3213F34B7F3AB229802DEE824DC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEF6A3B4557B7433B0352A3434A2340C1CEFB84A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98F907F64B327C7BC46C03ACE13F42D1B4D2EE6A1EE03C1FEEBF14521F3483D6/0/DEF6A3B4557B7433B0352A3434A2340C1CEFB84A.mft
Manifest number:          3F
Signing time:             Sun 14 Jul 2024 13:18:05 +0000
Manifest this update:     Sun 14 Jul 2024 13:13:05 +0000
Manifest next update:     Sat 20 Jul 2024 00:30:05 +0000
Files and hashes:         1: DEF6A3B4557B7433B0352A3434A2340C1CEFB84A.crl (hash: HrjsV/ZH7kYfk1COYKilF80C26Y1hf+1BH0ZSuC/kSI=)
                          2: 3133382e3131382e3132342e302f32322d3233203d3e203238303035.roa (hash: m6d75Y/P/pv4pks4wz8IFD4Jf/ZYK5WVJXVI9MFnNbs=)
                          3: 323830333a623834303a3a2f33322d3332203d3e203238303035.roa (hash: +7kjFwQo5/6YQ0gyp9s+aie70thfpVvyucCPtRaAre8=)
                          4: 3139302e3130322e35362e302f32312d3233203d3e203238303035.roa (hash: JWJh5GuN7AbpbbdoqV7ah1fQTyELfFIAUm8JqB6sN7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c0:b6:9f:87:1a:32:13:f3:4b:7f:3a:b2:29:80:2d:ee:82:4d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEF6A3B4557B7433B0352A3434A2340C1CEFB84A
        Validity
            Not Before: Jul 14 13:13:05 2024 GMT
            Not After : Jul 20 00:30:05 2024 GMT
        Subject: CN=E161EF7E4C1C768227471D5164182AE2C93B137E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:5e:06:3b:5b:1a:9c:7c:44:6e:e3:ed:1b:
                    cd:72:42:87:d9:38:23:be:4d:a1:89:3b:f7:03:eb:
                    c5:be:18:a2:90:c1:35:85:67:ac:20:aa:fc:c3:92:
                    0a:1d:d4:8d:ff:da:ca:27:34:97:c0:42:b9:84:3c:
                    64:c4:71:2e:6a:96:ad:07:82:de:b3:f9:24:e6:9b:
                    2e:b7:83:50:ba:25:9d:3c:be:5c:7e:8e:a7:66:2e:
                    eb:38:e4:be:36:51:a1:57:74:9c:aa:f3:74:38:e2:
                    dc:f7:8c:a6:cd:2a:4f:a3:79:fc:d0:c0:18:01:04:
                    99:fc:fc:ac:28:ed:3d:0f:38:82:f2:a1:ff:7e:fb:
                    5a:e5:39:62:eb:81:c4:5b:ff:ef:6c:a4:4e:2f:b1:
                    a5:81:6b:45:bb:de:22:2e:57:12:2f:d9:ce:82:b3:
                    89:58:cf:9b:6a:9e:38:9a:9d:80:9e:12:4a:d8:b8:
                    f2:45:4d:37:c5:ec:ad:ad:04:29:f2:13:2d:7d:96:
                    62:2b:2f:94:a0:74:7d:43:58:44:3e:78:4b:03:44:
                    fb:b3:d2:a2:06:03:60:24:71:88:de:d2:a3:2a:c0:
                    7e:92:06:a5:8a:a9:6d:23:f5:17:c0:0c:b3:b9:9a:
                    f0:7f:24:f5:bd:bf:45:07:a1:36:75:cd:dd:23:85:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:61:EF:7E:4C:1C:76:82:27:47:1D:51:64:18:2A:E2:C9:3B:13:7E
            X509v3 Authority Key Identifier:
                keyid:DE:F6:A3:B4:55:7B:74:33:B0:35:2A:34:34:A2:34:0C:1C:EF:B8:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98F907F64B327C7BC46C03ACE13F42D1B4D2EE6A1EE03C1FEEBF14521F3483D6/0/DEF6A3B4557B7433B0352A3434A2340C1CEFB84A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEF6A3B4557B7433B0352A3434A2340C1CEFB84A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98F907F64B327C7BC46C03ACE13F42D1B4D2EE6A1EE03C1FEEBF14521F3483D6/0/DEF6A3B4557B7433B0352A3434A2340C1CEFB84A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:fb:44:38:bb:59:c4:a4:0c:cd:c1:f3:b2:06:3b:1e:d9:
         6e:4a:a1:3a:14:b1:40:5e:ec:10:23:4d:59:fd:68:e3:59:8d:
         07:b8:a5:aa:88:86:42:86:c1:82:72:0a:ce:2e:72:d3:38:d2:
         30:ac:21:80:01:69:eb:bd:51:65:15:66:fb:36:d8:8a:25:bb:
         b1:ae:a5:e6:92:99:0c:9a:07:0b:e9:ac:6e:c9:cb:12:6d:b8:
         39:77:71:6f:ca:d2:ff:f5:a9:17:39:4b:58:11:36:10:10:5f:
         2d:f0:12:ec:c3:b6:f9:9d:a2:23:b5:19:7b:08:47:8e:7f:8e:
         83:da:ee:06:ac:e5:b3:df:37:74:1f:2b:14:08:e9:ea:fc:8c:
         46:e2:85:b5:41:b1:ab:66:c7:ab:f2:80:0e:49:52:43:33:19:
         85:51:22:a7:50:44:62:89:09:e0:eb:b5:2e:3d:61:31:8b:67:
         f2:d7:64:d5:6b:d6:25:19:6e:81:b2:1a:76:f4:ad:87:d2:87:
         4a:23:f2:44:d1:d5:80:de:05:ac:e6:6f:1f:76:b7:3d:fa:4e:
         fa:54:d6:f7:bd:04:eb:d9:d3:e4:0d:57:09:65:f4:85:89:c9:
         f7:2c:3d:58:af:ba:37:fe:45:09:f6:ac:c0:b6:59:cd:2b:94:
         68:2d:54:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----