Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.mft
File:                     dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.mft (raw, json)
Hash identifier:          nQuLoHwMvLFm4Kx4AubAMVXdHqoFfpFGdGYBa9QGTZo=
Subject key identifier:   8C:1E:A8:88:11:4C:1A:79:5D:85:77:86:31:1E:34:9C:86:A2:BE:B3
Authority key identifier: 24:C1:3F:89:56:C0:A5:34:2F:23:D4:C2:54:0F:C8:CC:C0:C1:0F:37
Certificate issuer:       /CN=dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152
Certificate serial:       135F8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.mft
Manifest number:          0A16
Signing time:             Mon 15 Apr 2024 10:21:27 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 10:54:25 +0000
Files and hashes:         1: 5274b4f64a1649dab0b84384850ad20eee519482.roa (hash: 8gRJ4ZjoSAydc3vy8QRF2R5Vr6IOO1ljmWh/oy1IkyM=)
                          2: dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.crl (hash: 5cHYcH1G+banxpHyRvLGRJXkHv/SJYW1AV9LtkBawT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269642 (0x135f8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 10:54:25 2024 GMT
        Subject: CN=44545e086369a413cacb664cdddc6de8ab697bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:16:2f:36:de:b8:74:00:ea:b8:1c:65:86:
                    61:cf:61:1f:14:3c:8c:7a:b0:32:2a:a5:64:8e:1e:
                    60:01:89:f3:1b:23:92:f6:8f:93:67:db:a7:94:a4:
                    c1:7d:30:3e:7f:40:a5:56:50:cc:cf:18:39:1d:fb:
                    09:41:cd:cb:64:82:83:c7:e8:55:f7:e0:f1:ee:10:
                    70:cf:57:00:c9:98:35:00:0f:52:d0:61:79:48:75:
                    21:20:9e:41:58:7e:45:6d:20:f7:62:8f:4a:26:a3:
                    0b:b5:e3:88:4d:02:d4:cf:fa:cb:7c:75:b7:cf:1f:
                    cc:e9:b4:51:c9:12:83:49:c9:b2:1a:db:38:a3:e5:
                    05:ca:18:64:a4:da:6b:cb:f4:63:d4:33:dc:be:a7:
                    51:02:5f:36:35:71:21:30:25:c6:87:b4:09:07:75:
                    50:d6:5e:ed:f6:a3:25:e6:4a:1d:e8:5c:53:81:3f:
                    05:26:0f:65:13:28:4f:ea:51:df:99:c2:7d:d3:a2:
                    42:90:07:8b:42:9a:f9:27:27:96:74:2f:16:e8:01:
                    94:89:56:45:d3:ed:43:09:08:0f:71:42:99:d3:57:
                    f6:62:c4:b9:8d:63:02:51:09:33:7f:69:e9:fd:2c:
                    8c:ce:bd:d1:39:64:86:63:2d:ed:95:d9:06:50:b4:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1E:A8:88:11:4C:1A:79:5D:85:77:86:31:1E:34:9C:86:A2:BE:B3
            X509v3 Authority Key Identifier:
                keyid:24:C1:3F:89:56:C0:A5:34:2F:23:D4:C2:54:0F:C8:CC:C0:C1:0F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:09:5a:21:3e:a2:f7:f7:c1:fc:ca:c8:ff:76:8c:7d:31:c4:
         a9:1e:00:c7:f5:70:be:12:6b:ec:15:ef:3f:f2:86:dc:4e:16:
         75:a5:0d:7e:72:f9:8d:cf:fa:e3:a1:8f:2e:29:b5:a8:db:d3:
         46:d4:93:d2:2c:a0:87:d3:94:e2:83:49:79:0b:27:60:95:66:
         8c:fc:67:52:95:27:6e:9c:0e:54:3b:b1:c7:9c:2a:ed:1b:06:
         37:ef:55:4b:f0:0c:1c:6b:a4:7f:c8:70:03:9b:c4:6d:dd:ee:
         e6:0b:83:ac:17:6c:aa:3c:b6:8a:a6:8d:49:04:6d:09:4e:4e:
         70:31:72:01:f0:05:82:bb:0d:54:0e:11:0d:c5:34:d4:47:d3:
         52:f0:84:f1:3d:9b:ac:75:a9:bb:85:ad:45:c8:49:c8:2d:47:
         90:71:65:33:f4:d6:6f:7b:aa:98:5b:8c:94:86:63:77:79:a4:
         65:2f:87:b3:bf:5c:80:c7:27:e4:cf:5a:42:55:30:99:d4:e1:
         99:e0:18:10:b2:bd:11:23:a6:3b:72:da:09:40:3c:8b:25:22:
         c8:ae:68:d9:f6:62:10:11:4b:9d:5c:b0:3f:c2:49:f7:b7:93:
         78:4d:e5:9b:57:65:fe:8a:07:07:06:f0:a8:72:15:1c:b0:53:
         d5:81:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----