Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.mft
File:                     40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.mft (raw, json)
Hash identifier:          nVwA/SFp9qIFQtbRGX5hvCAwL1Sy3igVWSRT9CH9EGk=
Subject key identifier:   04:73:B4:43:E0:A8:78:E8:3C:19:33:FB:01:15:82:5D:F2:99:F4:6C
Authority key identifier: DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
Certificate issuer:       /CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
Certificate serial:       2977D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.mft
Manifest number:          025B
Signing time:             Mon 15 Apr 2024 02:21:51 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 03:09:29 +0000
Files and hashes:         1: 40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.crl (hash: s7QLYSTbcxO9ImKJ3jay9zVl00vS5pnY9VPUuylAs3s=)
                          2: 4f22eabb346ad23d1b168850f8a5ab6f63fcf190.roa (hash: kNOceFdbbOCKR67gF5fL+CnbbyyYd5II7DnU9rlcFxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2717657 (0x2977d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 03:09:29 2024 GMT
        Subject: CN=87793ca958da0226524b535d606cc49cb6c9aaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:46:a4:ba:0e:a5:5d:25:a0:34:e0:16:86:
                    e6:0f:8f:54:09:88:af:67:88:41:dd:d1:ec:08:91:
                    ff:7e:8b:23:13:0a:56:91:3d:fc:ec:0d:20:b1:4d:
                    1b:0e:d6:7e:2e:ac:4a:15:86:ec:d0:ad:14:76:d2:
                    5f:68:53:00:b8:a2:ba:8c:e7:ab:34:b9:2e:b4:33:
                    49:2d:86:4e:00:d5:72:1f:bf:36:d0:3e:a5:3c:32:
                    4b:2e:9b:ad:a2:db:6c:ed:80:06:5b:f1:a1:96:87:
                    8e:37:9f:6d:8e:09:c4:c2:bd:d5:45:56:c3:94:8d:
                    78:e6:57:55:37:bb:9e:29:6f:9f:21:6e:ef:b9:d2:
                    57:00:d7:87:30:48:12:1b:d9:7d:6e:56:15:2a:bd:
                    38:0a:e6:30:24:09:69:9c:3a:2a:7c:37:f1:12:50:
                    ac:3b:4a:6d:0b:f2:b9:7a:90:99:4a:b4:ca:ab:58:
                    ce:56:46:9d:13:13:c4:c2:10:c5:f4:67:b0:c3:27:
                    80:60:51:fb:94:b9:4b:a9:3d:db:cd:48:99:cc:d0:
                    27:c3:b0:6f:75:e1:ac:c1:f3:66:e7:dc:3d:71:10:
                    65:59:30:f5:d7:91:4d:12:34:f8:91:01:76:59:a6:
                    c4:49:37:b4:bf:a0:a5:e0:f1:ed:80:8b:a0:f9:a5:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:73:B4:43:E0:A8:78:E8:3C:19:33:FB:01:15:82:5D:F2:99:F4:6C
            X509v3 Authority Key Identifier:
                keyid:DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:96:88:06:33:59:e1:40:02:a7:5c:da:7d:6f:f9:65:4f:
         f1:37:7c:c4:b0:b5:8d:87:aa:18:8d:6a:fd:83:f2:64:d2:03:
         5d:c3:7b:7b:04:8f:45:39:25:43:9c:a0:60:28:35:c8:c2:b4:
         18:e0:3c:42:32:dc:98:5a:18:ac:cb:8b:7f:95:ae:ed:24:33:
         e8:b3:63:43:22:c2:9e:74:c5:83:c0:c6:8f:11:50:2d:d2:97:
         a5:35:84:3c:ba:d1:c1:08:2c:fb:0a:08:ad:16:d6:c2:bb:e1:
         10:3b:ec:cf:44:8e:83:eb:fd:3b:c3:60:8a:11:a1:c1:7f:0e:
         08:0f:80:51:f2:da:7f:ed:0f:12:92:7b:d7:8c:b0:ae:ee:6d:
         fa:76:96:54:29:91:0d:4d:8f:b1:4b:b3:8a:95:ac:41:19:f2:
         70:a3:03:54:3f:f5:57:7d:7a:33:21:cf:5f:11:28:f7:b4:17:
         b2:71:f1:42:f1:62:54:ed:f7:4e:37:2e:e4:a2:5d:d3:f0:62:
         a6:f0:ed:05:3c:11:68:ab:17:47:06:69:b8:98:bf:53:a6:ac:
         f3:47:f5:5b:df:b7:d7:cd:df:d2:fd:e1:20:4f:78:10:20:85:
         be:5c:70:6e:8c:95:ce:d0:13:92:ce:a4:28:9c:b7:15:81:52:
         1e:be:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----