Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.mft
File:                     ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.mft (raw, json)
Hash identifier:          xM9cQ6ETqMOT/lgqb8IaCg9BH3enRujlyp5FY9/2qow=
Subject key identifier:   8F:E4:D0:F1:26:51:47:77:99:24:42:99:7E:C3:15:49:00:88:79:60
Authority key identifier: 61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21
Certificate issuer:       /CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
Certificate serial:       280A85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.mft
Manifest number:          0DE1
Signing time:             Mon 15 Apr 2024 10:21:06 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 12:25:25 +0000
Files and hashes:         1: 09d164937ea631a82674bf2fe24d369f7926aa60.roa (hash: KIBrwtiAVvo4bEKudl+uzdI11o0z5NzSmu06p3JF9Qc=)
                          2: 1db74152a4ed10499b8c0026589ae686b37072be.roa (hash: mIoFsqkU5XwGejoUhUSSMNsA3jbZwyE0eGBSBRtzgmY=)
                          3: 1dc0a72bddf4de12e6dcdafbe7b9370b24699cac.roa (hash: psOrx/Ur8e7nNV/qHsHEQXiK8D1pYUQnkwbOncobXLI=)
                          4: 377f0bf76aba47cc82ef21543e9091f3a6bab447.roa (hash: lEmMdJflSs3kxl7cQZzljSLVE4w0pHCPzU1wWRV0LJM=)
                          5: 95f75affc5719f7d06f3bc769bf6da9e1a452250.roa (hash: wDx3TqoJcPDQOMor2WiiUhqCAEAcGnwN4IenScZ0FWA=)
                          6: ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.crl (hash: iASXCBIwWVWVHcQ+UR9WRHe0IOIAUylJ7gty2Wkhb/s=)
                          7: f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa (hash: tmenWncM5GL1JZc/AwBdn3VzXTMhE3zK6VnPRL9h03A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2624133 (0x280a85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 12:25:25 2024 GMT
        Subject: CN=8b22afc8aa30529c0257d143873dd337efe63eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:8b:e3:26:c2:61:49:22:71:fa:f3:9e:dd:
                    11:67:25:d1:2d:fa:6d:3d:34:88:4a:d8:43:3a:1d:
                    ea:a7:bd:6e:70:b6:7f:77:8d:f1:29:5c:01:b1:02:
                    65:ca:5e:da:5f:7d:16:02:64:f6:4a:c3:e8:7a:01:
                    5a:74:39:10:fd:7e:01:f1:c9:52:8b:8b:d7:93:7e:
                    55:bf:fa:5a:1f:b5:26:f5:fa:e4:71:29:5f:d5:96:
                    e3:b2:08:cf:7b:10:9d:2b:33:33:d4:52:f5:9d:10:
                    ab:f9:35:56:24:53:46:90:b9:c5:0b:fd:ed:b5:04:
                    cf:ac:ae:82:5e:aa:b0:d1:bf:60:f6:ee:0d:44:24:
                    4b:13:ff:42:07:9e:43:f4:09:ce:b1:fd:e5:c9:06:
                    1f:6a:7d:50:18:bd:76:40:49:4d:69:59:6e:95:e8:
                    da:41:14:7f:aa:67:fd:82:f6:81:5a:1b:7e:61:60:
                    8e:8b:8b:41:d9:ea:ee:ec:f3:8a:dc:46:b4:9c:8f:
                    ba:f8:4a:47:03:32:59:65:70:94:c2:23:88:bd:e2:
                    d3:ef:b6:6c:3d:d6:79:2e:3d:e0:59:59:2e:4b:a3:
                    c7:c1:74:78:b1:f8:f9:5f:82:5d:78:9a:d2:df:c9:
                    f8:bb:0a:a9:04:32:d4:d8:c8:50:5a:62:91:1a:b8:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:D0:F1:26:51:47:77:99:24:42:99:7E:C3:15:49:00:88:79:60
            X509v3 Authority Key Identifier:
                keyid:61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:22:ff:97:9d:64:6d:d0:de:7e:87:9a:c8:e1:8b:31:58:
         b7:34:a1:a7:09:84:5f:31:83:5b:71:49:a9:91:4d:61:9f:38:
         55:7d:ae:dc:a3:56:5f:06:32:6a:05:28:cb:35:2c:c8:79:ea:
         9d:43:12:af:ef:9b:df:5b:7b:43:d5:f4:31:c6:66:90:d5:52:
         59:20:2e:69:a6:5a:cc:ed:a4:96:25:ff:f4:1a:09:b9:a8:29:
         ab:f1:d1:74:c3:8d:e8:b3:e0:c3:5d:3b:1f:46:f7:55:6d:39:
         58:fd:27:f7:4b:1d:25:5e:b3:74:02:10:c7:ae:95:c5:50:78:
         9a:ed:f2:a4:ef:73:a3:d8:46:37:45:90:66:be:7f:c7:94:87:
         c0:01:d1:ce:2d:f4:a5:00:7a:0d:66:ff:84:74:08:57:c5:97:
         c1:6d:92:48:1f:70:a5:2b:4a:12:df:d9:d8:1c:e8:d0:90:7a:
         7e:c8:bb:ed:f1:04:1d:b6:7a:8a:13:e8:7c:3b:bd:79:5b:fa:
         74:fd:8d:96:6a:3c:a1:11:5e:95:8a:36:2b:f0:8c:9a:cc:3d:
         aa:7e:4d:0a:93:2c:53:12:bf:95:93:c5:73:2f:22:7f:9c:ce:
         ff:05:8c:a8:cf:13:c6:fb:01:63:1f:c9:5b:31:a4:7c:55:17:
         68:44:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----