Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.mft
File:                     2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.mft (raw, json)
Hash identifier:          DeFbK8q5NEEJVnrRkKkwNh8oomFfTVHHE1EDI1NRGBk=
Subject key identifier:   37:A0:EC:F3:D1:52:91:B1:DE:1B:8D:E5:75:18:8D:EC:A9:CD:10:AA
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       21487C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.mft
Manifest number:          0E21
Signing time:             Mon 15 Apr 2024 02:21:01 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 04:18:29 +0000
Files and hashes:         1: 2725fe61463dd8b8e537b828fc941201f2086ce4.roa (hash: UI4WmmQHT70xMnE4d3b6xfGMscTigUMANVEdNyqOUbc=)
                          2: 2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl (hash: 5T+qAMheCLy46jUTzh0Xb4Y//YUrgL5G39mk9OntZ2s=)
                          3: 2f4b549a3c57a6cfc618b44549706ddb2647c150.roa (hash: rtIIC+PG3BYHD448FxDDSx3+Hiw7p2JCHnJyVagAyCc=)
                          4: 310316623e62c80fa5f7f3061508e21eb792da5e.roa (hash: 28lNDeTVNi40jlKOGgVKwdMQnVczXAIvLBR2Eh+Ot8Q=)
                          5: 4214b4006b150007e4466987464eb4b98dc22e91.roa (hash: QfrnlqCvkmNjmM/tef/lxjMSkWkDAnuV023dHUamzrk=)
                          6: 5335d41954132eea38a9a5e152d7b70046717d43.roa (hash: rYdGBK6l/jFPS4dlNSzXptfcXMG4tsIE2qwCNDDjflI=)
                          7: 8dfaebaec50b2d82bc614891c8d3cc9c17effc39.roa (hash: 2jAnyg6QTHm2oQapwdMfz7EnvKSseqlpRuBMScvfREo=)
                          8: a221f6a6d4a9290a4cc521fa7e1a97d37162a3ff.roa (hash: djkSJeZfbpIEep8MzYt5c+gzQbRAvhQ5gkscoRM184k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181244 (0x21487c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 04:18:29 2024 GMT
        Subject: CN=246420be48239bc93a48bbf601cfd3f9ca3838d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7c:ab:c4:f3:12:c3:ae:5b:84:b3:8a:b3:39:
                    ab:a0:17:03:ba:1b:e7:9a:ee:94:47:80:7c:9d:1e:
                    d1:4d:63:da:f9:ec:30:33:20:40:87:ef:10:24:b7:
                    b1:82:92:15:ce:33:56:c9:ca:b7:89:dc:a9:5e:2a:
                    74:e0:5e:b8:da:2e:42:d3:bf:e7:b5:dd:11:6e:5f:
                    ef:66:d2:05:8d:57:b1:6e:41:8b:01:45:2b:62:6d:
                    70:8c:6d:6b:b4:69:90:1f:f0:96:6a:89:03:8b:7f:
                    58:13:39:b0:d6:d8:1a:e6:ef:ec:4a:a2:2d:2f:18:
                    f0:5e:73:0b:7c:96:96:ec:c1:e8:64:0b:1e:4f:84:
                    1f:c4:9d:d8:f1:9f:d1:04:e9:4c:9f:cb:d7:cf:82:
                    5c:45:02:96:d5:25:64:b1:71:9f:d3:3f:eb:68:a4:
                    a7:8c:19:f5:e5:00:ec:74:43:e0:27:d2:ac:b6:cd:
                    2f:e3:ac:ef:be:d7:36:ae:23:9e:8a:f6:0f:1d:1f:
                    88:04:0e:09:04:51:9e:ce:03:b2:fc:2c:c4:34:9c:
                    cd:3e:ec:cb:69:2c:56:cd:02:a3:74:77:23:30:43:
                    c6:13:fd:72:f9:6d:d2:90:32:04:08:24:e3:bd:02:
                    75:5b:97:9a:61:0b:1f:9a:70:7d:65:61:27:be:55:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A0:EC:F3:D1:52:91:B1:DE:1B:8D:E5:75:18:8D:EC:A9:CD:10:AA
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:bc:06:78:11:a5:bc:b8:0e:0e:af:bf:75:5d:9b:5d:c2:
         2a:bd:64:89:a1:d1:3d:96:b9:42:86:e9:0a:bc:f8:98:de:2f:
         9d:03:30:cf:e9:66:cd:bb:d5:31:54:60:f4:ef:db:44:32:be:
         3b:7b:f3:90:ed:53:14:b3:af:c3:94:61:07:5e:1e:72:70:1e:
         c4:5e:72:e9:a5:45:23:ba:39:bc:ae:f2:8c:b9:fc:3a:ae:f7:
         a9:f2:3e:8e:d9:bf:94:26:ed:29:f3:3c:ef:1d:87:e1:c9:19:
         1b:13:4c:7b:16:c9:5e:c4:3c:a3:54:f8:99:16:88:72:e7:6f:
         a2:52:7d:e7:16:4d:63:27:57:8c:68:69:0f:df:0d:f6:15:50:
         b9:36:68:a3:e3:a6:3b:03:a4:e6:92:6c:73:f7:2c:df:7a:5c:
         d4:07:39:fd:c7:6f:2e:0e:e7:48:e0:cf:f9:6c:ab:d1:34:33:
         02:b6:be:a8:a7:bb:fd:5b:13:4c:b9:16:cc:00:9c:2c:9f:75:
         5c:22:f0:bf:70:b6:23:5c:e5:4a:4f:0a:76:c9:5a:be:da:f0:
         e0:bd:dd:68:44:f7:bf:d6:2c:8f:78:26:d8:c7:b9:68:f5:15:
         65:7d:40:5c:7b:24:86:23:91:f0:9a:62:dc:6c:5b:81:44:7b:
         00:fb:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----