Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft
File:                     28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft (raw, json)
Hash identifier:          rJ6gv2zQJm5pFFZnuOLFTKJkveosvkOrC+AsITp2mhg=
Subject key identifier:   0B:40:D3:9B:FC:B4:24:C1:97:C1:91:E2:C1:A8:E3:1F:DF:07:2F:07
Authority key identifier: 9C:B8:1C:93:F1:3D:AF:49:79:00:65:67:FE:3A:0C:6C:58:EC:EE:B3
Certificate issuer:       /CN=28411e73cb2042bb1a9c78b47807e0acd5a97e06
Certificate serial:       1EFAA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28411e73cb2042bb1a9c78b47807e0acd5a97e06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft
Manifest number:          0DF4
Signing time:             Mon 15 Apr 2024 01:21:34 +0000
Manifest this update:     Mon 15 Apr 2024 00:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 01:53:17 +0000
Files and hashes:         1: 28411e73cb2042bb1a9c78b47807e0acd5a97e06.crl (hash: O0VCqwk3V0ZQOyLLtWNEf4gWUW0UN27D0cociK4DmTg=)
                          2: 289b877dd7dcdb7124312a2b3fd06a621e583ab2.roa (hash: N5zM/ByZ5SXYwHEhcNKrD1ajVtZ8wM0AwB23mKCvRxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2030243 (0x1efaa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28411e73cb2042bb1a9c78b47807e0acd5a97e06
        Validity
            Not Before: Apr 15 00:20:17 2024 GMT
            Not After : Apr 18 01:53:17 2024 GMT
        Subject: CN=304d52a5e93ae236790d588ae9ad51bd0554b685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:21:fc:85:be:d9:14:41:3c:a5:4f:ef:ef:
                    6b:b8:90:de:d1:be:6f:33:1b:14:c1:67:a9:d9:36:
                    79:df:85:77:bf:d3:45:f9:90:68:79:f6:e4:ab:b7:
                    01:59:fe:26:30:ff:b6:59:11:78:2b:f2:f5:d0:75:
                    22:87:8f:58:5b:93:a3:11:cb:37:9d:be:30:27:89:
                    87:d4:77:62:d4:3f:8b:b8:3c:6c:b0:ed:8d:cb:75:
                    74:3c:a9:52:c7:e9:c1:77:f2:2b:c3:1a:89:f4:5b:
                    25:cd:ea:47:1b:7d:6f:31:db:2b:39:d6:f9:e7:04:
                    e0:8d:b7:b8:5e:ab:75:11:6a:ea:be:9a:4d:57:6b:
                    58:51:a1:66:60:ac:3a:25:c8:8f:a4:d6:5a:b1:c4:
                    9e:60:e1:97:5e:34:d6:bf:86:66:48:09:77:09:a1:
                    47:22:7c:b8:ec:3e:ae:82:32:8c:9d:59:b6:1a:b9:
                    d3:cf:11:3d:27:22:10:0a:4d:b2:d9:e4:1c:38:90:
                    38:2d:a0:b1:73:c4:44:e4:ec:3c:06:ce:e7:e8:ee:
                    8e:9e:2d:40:c1:6d:50:64:d2:78:5e:7c:95:95:5b:
                    9e:e1:48:88:58:a4:ad:e7:a2:25:1d:b1:64:16:85:
                    46:7e:cd:f8:8f:e1:fa:df:7d:b4:3b:f9:f1:7f:93:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:40:D3:9B:FC:B4:24:C1:97:C1:91:E2:C1:A8:E3:1F:DF:07:2F:07
            X509v3 Authority Key Identifier:
                keyid:9C:B8:1C:93:F1:3D:AF:49:79:00:65:67:FE:3A:0C:6C:58:EC:EE:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28411e73cb2042bb1a9c78b47807e0acd5a97e06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:71:97:81:12:83:66:0b:4f:57:cc:c4:3d:d4:4a:e6:f4:c8:
         86:c2:37:ec:09:2b:4c:d8:f9:76:ae:17:a7:11:f0:72:bf:97:
         a3:ce:63:ce:ce:cf:eb:91:58:75:6f:c6:84:74:c6:1c:af:39:
         1c:f7:6d:29:d7:14:c4:35:c8:52:b8:1b:66:fb:37:fe:65:23:
         e6:77:b3:61:e8:3f:91:2f:59:bc:d6:6f:f9:6e:4b:97:76:8b:
         54:a5:c6:d0:c2:be:43:59:49:13:0a:d9:cb:e1:c3:3d:51:40:
         b4:a1:47:1c:7c:75:ad:f0:f6:c3:ba:de:de:fe:41:02:74:72:
         af:cb:b6:cf:ec:29:55:43:61:8a:6d:2e:61:77:97:fd:30:71:
         50:09:3e:51:01:59:d5:a8:b2:2b:51:d6:a5:c9:e8:b7:11:13:
         8d:1a:2c:ee:a4:fb:0a:8f:92:0c:78:a2:e5:ce:c7:1d:d8:a8:
         b2:e0:81:62:f7:cf:33:99:39:80:89:5a:1b:10:38:12:21:28:
         1c:99:b3:44:3e:56:6d:37:88:08:4a:63:49:f6:0b:f0:2d:5b:
         85:8e:26:cf:10:1c:7f:b2:af:b0:22:9a:da:a3:10:5a:7b:a1:
         ca:7c:4c:ea:e0:8a:81:97:2c:a9:42:0f:f0:2d:aa:e6:a1:09:
         fd:8d:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----