Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e6fd1bd-819f-407b-83d3-acb9e845ec0e/5ad47c3d5a22e31aee0616f9de0a4f722d1709b0.mft
File:                     5ad47c3d5a22e31aee0616f9de0a4f722d1709b0.mft (raw, json)
Hash identifier:          0NIHaa4waiKxKVX/Gjs7fAt831TB/WDw0rgm14RRc8A=
Subject key identifier:   39:55:E2:DC:68:A9:E7:BA:B5:27:7C:3B:64:1F:B6:BF:EE:40:97:86
Authority key identifier: BA:98:3B:9E:01:50:47:30:E8:64:55:E1:3B:6E:97:FF:75:0A:C1:A5
Certificate issuer:       /CN=5ad47c3d5a22e31aee0616f9de0a4f722d1709b0
Certificate serial:       2830DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ad47c3d5a22e31aee0616f9de0a4f722d1709b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e6fd1bd-819f-407b-83d3-acb9e845ec0e/5ad47c3d5a22e31aee0616f9de0a4f722d1709b0.mft
Manifest number:          0DF0
Signing time:             Mon 15 Apr 2024 06:21:29 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 06:36:39 +0000
Files and hashes:         1: 5ad47c3d5a22e31aee0616f9de0a4f722d1709b0.crl (hash: h3e4H/zLTBvoGDPLe4w45/OIbR5T9sBQWI2PEdrgNmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2633949 (0x2830dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad47c3d5a22e31aee0616f9de0a4f722d1709b0
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 06:36:39 2024 GMT
        Subject: CN=76881b030b801f5a52a7cbcae5e5b9f9c18f4dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:e1:f1:72:83:76:74:49:33:14:68:d0:df:
                    34:51:ec:37:e8:7b:03:cf:4f:6c:71:1d:e9:b7:a9:
                    f3:37:d2:47:6b:8b:46:ed:19:45:71:d6:84:c1:e6:
                    3a:ea:cc:b1:e8:a8:d4:3f:d7:be:e3:67:86:6c:ee:
                    8f:b3:6b:46:6e:d4:9b:db:f6:95:83:1e:c7:f3:72:
                    4b:81:eb:a3:07:d9:6b:61:b6:b8:63:2e:6f:75:a6:
                    f4:2a:0f:05:ef:9f:c8:1c:45:ae:47:b8:f4:3b:1c:
                    8f:5f:3a:19:14:62:88:51:50:1a:5d:c8:5c:52:17:
                    a3:ff:ed:b1:71:93:4a:73:90:21:f4:c7:1c:cf:91:
                    cc:3c:e5:b9:ec:62:af:a9:e2:21:92:aa:34:b3:f7:
                    89:3a:d5:5b:33:2b:12:45:10:1a:19:64:a5:4c:50:
                    71:2f:f8:e2:7f:25:51:ff:b6:74:0b:be:3e:d9:26:
                    e7:32:9e:e5:00:f4:ec:3a:50:1d:fc:b7:79:47:9d:
                    f7:78:08:9e:7b:6a:a9:bd:a2:a0:36:11:3b:4c:9d:
                    1f:d9:50:f9:96:5b:91:ae:2a:aa:79:75:03:7a:3f:
                    2d:f9:d4:c2:41:d1:c1:94:2a:09:be:90:d4:4e:76:
                    53:45:f2:4e:de:91:dd:5d:a9:ab:fd:61:e6:ff:81:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:55:E2:DC:68:A9:E7:BA:B5:27:7C:3B:64:1F:B6:BF:EE:40:97:86
            X509v3 Authority Key Identifier:
                keyid:BA:98:3B:9E:01:50:47:30:E8:64:55:E1:3B:6E:97:FF:75:0A:C1:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ad47c3d5a22e31aee0616f9de0a4f722d1709b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e6fd1bd-819f-407b-83d3-acb9e845ec0e/5ad47c3d5a22e31aee0616f9de0a4f722d1709b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e6fd1bd-819f-407b-83d3-acb9e845ec0e/5ad47c3d5a22e31aee0616f9de0a4f722d1709b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:21:d4:1a:32:51:96:0c:2a:7f:4a:8d:5d:e4:a5:23:d6:5f:
         31:43:59:77:7a:34:a9:09:83:0b:1f:ec:b7:f7:8f:5a:f9:79:
         ec:05:d2:84:77:56:54:4d:1b:9c:ab:81:7e:60:db:ce:d6:04:
         80:45:28:2b:9f:0f:bf:5c:a6:44:94:70:22:20:84:05:19:cc:
         85:57:29:82:b0:51:32:f1:f3:19:4d:6b:66:3b:8c:40:19:8f:
         03:69:a2:36:25:bb:e4:53:fc:8a:6f:de:c7:99:20:c0:af:5f:
         5c:93:b9:66:96:81:93:72:78:ad:ce:59:1a:a3:de:eb:f4:b1:
         be:e0:f0:bd:c5:82:3f:a6:1c:71:2e:17:fe:d4:16:c6:a3:e7:
         89:79:f8:91:da:7b:ee:c0:ff:86:ed:ad:bb:bb:12:57:57:0c:
         80:93:87:56:1b:ca:74:36:18:a9:31:94:a1:0a:da:40:69:80:
         dd:e6:65:fb:4f:1e:84:f2:5f:8f:a3:bd:60:95:97:6f:f4:d1:
         41:4d:c8:f0:1c:bb:2f:f0:7b:2b:6c:e8:c1:64:ff:fd:74:b4:
         03:a4:e7:c2:78:0b:3c:d0:07:71:1e:bc:79:ea:13:eb:06:3d:
         24:0f:90:2b:f0:f0:2d:ad:9c:29:89:e1:62:d8:fe:c6:87:d5:
         b6:e3:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----