Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.mft
File:                     c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.mft (raw, json)
Hash identifier:          dtjCQfl7b6PtMUPDkh5h0ZGJ1SxJ7ewF7A21jq3CB9s=
Subject key identifier:   76:70:C1:7F:98:6F:6B:6A:56:A3:A5:D4:05:8C:F8:05:8F:4D:90:3F
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       24E242
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.mft
Manifest number:          0C14
Signing time:             Wed 11 Oct 2023 16:00:55 +0000
Manifest this update:     Wed 11 Oct 2023 15:00:54 +0000
Manifest next update:     Sat 14 Oct 2023 16:04:54 +0000
Files and hashes:         1: a635545d19280b00264187fee50a859a7de6d0d1.roa (hash: YXH3I/ihC4T1GS4RSx0gGIr0sYslFLkmnss4AFk4qq8=)
                          2: c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl (hash: gIwgpvIhRttQooibvviaba1nmPoxzu1oLRRDjWcwx8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417218 (0x24e242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Oct 11 15:00:54 2023 GMT
            Not After : Oct 14 16:04:54 2023 GMT
        Subject: CN=2531c6c18f41abb8d5b6b6b46cbbbe0b7e8dbea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:45:0e:cd:23:b3:2c:63:3d:66:fc:fb:66:51:
                    0f:e8:ab:c7:c6:dd:f7:60:0c:92:73:ab:b7:02:d3:
                    09:db:87:22:3e:16:64:6b:bc:6a:4b:b2:9d:29:70:
                    f4:10:1b:bf:5f:79:96:33:06:36:92:ac:3b:69:f1:
                    c8:5d:25:18:59:77:13:99:98:71:32:c9:55:4c:2b:
                    4e:86:78:ec:1e:d5:23:c2:b5:ca:c7:95:38:7d:84:
                    f3:50:10:0a:39:8d:9c:11:1a:a4:87:8b:12:c2:ab:
                    10:b6:3e:36:b1:88:9d:bf:5d:de:2a:99:e2:fc:ea:
                    e5:e5:ce:13:f0:00:9d:39:b7:76:b7:23:a3:e4:14:
                    96:03:fd:a2:1d:c6:bb:bd:da:d7:d8:84:84:e6:1c:
                    e3:0b:2f:11:1e:25:1d:21:16:9f:70:e5:80:d9:cf:
                    ed:2a:a8:19:a9:01:db:40:11:8d:b9:ab:38:ff:1b:
                    da:6a:9b:6b:24:58:28:35:b9:82:2e:4f:e3:83:20:
                    44:b2:60:b5:7d:31:b9:4a:1b:46:41:c9:9a:3c:79:
                    64:95:29:74:ea:db:9e:cf:c2:02:d7:46:53:4f:59:
                    a6:49:70:de:0b:a5:bc:84:39:0b:9d:f2:42:30:6a:
                    51:cc:76:eb:89:ae:52:af:a1:80:81:4a:9e:64:8d:
                    83:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:70:C1:7F:98:6F:6B:6A:56:A3:A5:D4:05:8C:F8:05:8F:4D:90:3F
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:3f:59:c0:e0:b6:93:98:2b:7a:65:ad:5a:0b:df:cb:84:
         01:6a:b8:e4:f7:c1:49:48:e0:42:8c:ad:aa:8b:de:f0:47:07:
         7c:2b:5f:fc:66:27:d4:c4:c6:90:80:fc:84:22:25:14:42:b4:
         0b:41:4a:cb:52:08:e9:ea:24:68:f9:2c:24:0b:df:16:a8:c6:
         0f:b5:ce:f3:76:ea:93:4e:63:03:1f:b1:8a:72:8b:2b:65:db:
         07:8c:ba:61:5e:4f:af:56:b8:d4:bc:21:c4:90:d5:05:7c:a7:
         e1:9b:f4:53:a1:c1:f1:18:e0:82:f3:ef:80:b8:07:85:2b:1e:
         ae:85:f3:83:fc:17:43:2a:38:9c:90:d1:a6:cc:78:f7:78:da:
         4c:c2:bc:e7:7a:71:c7:c2:0a:76:c3:50:5c:37:88:72:07:0f:
         3f:15:09:96:a7:eb:ec:63:ee:48:d0:79:95:44:05:90:07:8b:
         88:fd:20:65:1c:f5:a2:53:76:a8:1c:8f:61:b4:7f:b5:b6:58:
         30:01:dc:25:88:8c:64:92:0b:4c:96:06:13:e1:fd:03:a2:7f:
         d7:20:15:3b:c3:57:5b:d1:a2:89:df:bb:e4:6b:19:df:5e:ef:
         8c:32:1d:6f:8d:5c:69:ae:70:9f:0d:28:08:ef:71:2f:68:aa:
         f1:57:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----