Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8328b35-4ef5-4ffd-b4dc-b504ceb7a7e2/0a5d1c0f119df68361fed30d122fb4103a8db3b3.mft
File:                     0a5d1c0f119df68361fed30d122fb4103a8db3b3.mft (raw, json)
Hash identifier:          UALMMx/hAyXedi3cpptsfgzZPns5CPK5U9hsf0QQ63M=
Subject key identifier:   9F:0D:BA:AD:DA:C1:CB:12:20:3C:4E:E0:93:15:F3:90:76:B9:C6:6B
Authority key identifier: A6:0A:56:F5:55:3D:4E:44:D4:2C:22:EF:42:81:D0:92:15:79:9C:85
Certificate issuer:       /CN=0a5d1c0f119df68361fed30d122fb4103a8db3b3
Certificate serial:       0F3B3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a5d1c0f119df68361fed30d122fb4103a8db3b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8328b35-4ef5-4ffd-b4dc-b504ceb7a7e2/0a5d1c0f119df68361fed30d122fb4103a8db3b3.mft
Manifest number:          0798
Signing time:             Mon 15 Apr 2024 11:20:25 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:02:18 +0000
Files and hashes:         1: 0a5d1c0f119df68361fed30d122fb4103a8db3b3.crl (hash: /Ywib9jKGPLaZjBE7qJnmEcTLvcnrvgeOzVckpdrTPQ=)
                          2: 4480b63cdbd9ba6821e09cf1227929a5cf6caa98.roa (hash: 2zJvunANcvITd7dqav3xjkqMDSO6qqNMQPSFty5b0qM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998205 (0xf3b3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5d1c0f119df68361fed30d122fb4103a8db3b3
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:02:18 2024 GMT
        Subject: CN=aaffc12068386b8710d6d6f0ada99876c0ded6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:77:13:57:97:67:29:37:de:05:72:2a:0e:
                    05:ba:99:a3:67:d6:43:54:6b:79:a2:b4:08:b0:0e:
                    bf:2f:5d:5f:b9:73:92:3c:ec:a3:c1:9f:88:dc:49:
                    a2:9a:d7:36:72:81:d8:9a:6c:1d:6a:fd:b1:76:e6:
                    67:65:bf:36:4c:46:a6:6f:dc:29:67:82:3c:df:a4:
                    de:99:d1:9d:12:3b:a5:d9:ab:09:b5:20:c8:05:fe:
                    7f:bc:51:c3:8d:40:6d:e4:47:26:1c:3a:f5:4f:94:
                    5c:ac:3d:b4:94:fa:42:c5:48:12:e7:cc:f0:e8:e6:
                    62:bd:ee:6e:15:01:d8:d4:76:c1:08:c6:9d:7c:6f:
                    5a:f9:d3:de:96:ca:ff:72:a6:f8:e1:d5:7d:40:25:
                    31:03:f7:99:3f:2a:b3:19:06:ba:e5:fd:c5:4d:39:
                    78:a9:81:28:36:3c:ea:47:0f:12:48:c6:23:bd:3a:
                    b2:9b:a3:48:22:11:42:82:c1:79:29:6d:ae:d2:ef:
                    8c:93:76:61:d0:37:02:51:9c:e2:b1:b2:8e:69:44:
                    11:56:7d:d7:7e:e5:df:fe:9e:c5:0a:24:3e:4e:c2:
                    2d:5f:0d:8d:49:88:3c:b5:41:2f:8d:80:10:46:35:
                    23:27:f4:5e:f5:73:d1:b0:72:ec:40:51:6a:35:fa:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0D:BA:AD:DA:C1:CB:12:20:3C:4E:E0:93:15:F3:90:76:B9:C6:6B
            X509v3 Authority Key Identifier:
                keyid:A6:0A:56:F5:55:3D:4E:44:D4:2C:22:EF:42:81:D0:92:15:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a5d1c0f119df68361fed30d122fb4103a8db3b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8328b35-4ef5-4ffd-b4dc-b504ceb7a7e2/0a5d1c0f119df68361fed30d122fb4103a8db3b3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8328b35-4ef5-4ffd-b4dc-b504ceb7a7e2/0a5d1c0f119df68361fed30d122fb4103a8db3b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b2:a1:2d:00:db:45:62:b4:57:39:75:49:a9:1e:f3:14:99:
         13:95:5f:49:41:80:5a:93:85:57:2e:b3:52:51:62:16:fd:b8:
         c0:8c:e6:4d:89:13:f6:01:40:a3:f3:10:bd:98:b7:d2:2e:86:
         b6:53:b5:77:a7:aa:38:35:4e:25:93:18:b2:45:aa:ce:72:05:
         55:f2:85:10:26:5f:c0:6e:d0:b3:f5:62:2f:9c:f6:ef:b5:31:
         ab:f0:84:df:23:f1:5a:8e:22:71:1c:0d:0e:bd:af:dd:46:b8:
         39:55:55:ac:6d:3e:87:fc:47:0b:2a:61:c2:68:4f:42:13:b5:
         49:3b:a7:bd:d2:87:29:c7:67:08:70:c7:ff:79:5c:79:42:9f:
         e7:b8:1f:78:a8:d3:20:c6:3a:0a:a0:46:db:9a:f8:da:d1:63:
         76:07:bf:ad:64:20:55:12:99:10:1a:22:26:63:35:5d:c7:eb:
         57:17:d4:2f:cd:7f:32:d4:d7:04:4d:5c:f1:b8:af:18:e5:29:
         12:01:aa:e1:ad:6b:ea:7e:33:a9:81:d3:3b:10:d9:df:1f:80:
         63:84:e0:b8:c0:b2:b3:f3:97:dc:44:5d:8a:b2:0b:60:2b:42:
         79:ce:4a:15:8c:60:f1:ed:15:ec:a6:bc:1d:a9:b8:24:ab:b1:
         fa:53:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----