Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft
File:                     254bebd96f7e069ee36566fd9821930de6b2d7ad.mft (raw, json)
Hash identifier:          lnAY2oJzkAbRm0Xvv0NHMg/7zKOACS/yC+8v50cYqdg=
Subject key identifier:   94:4F:13:E6:71:B2:4F:39:7C:D9:42:52:44:16:BE:39:8E:22:CF:CA
Authority key identifier: 03:01:12:9D:7B:CF:62:23:9E:7F:58:1D:D6:C9:E5:76:F2:0F:6F:5A
Certificate issuer:       /CN=254bebd96f7e069ee36566fd9821930de6b2d7ad
Certificate serial:       28E5AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft
Manifest number:          0DE7
Signing time:             Mon 15 Apr 2024 05:20:35 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:31:17 +0000
Files and hashes:         1: 254bebd96f7e069ee36566fd9821930de6b2d7ad.crl (hash: +At6DFSLEM7qfjffmfnYgR7G8pzi/Npxl6RoKbfCrDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680238 (0x28e5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254bebd96f7e069ee36566fd9821930de6b2d7ad
        Validity
            Not Before: Apr 15 04:20:17 2024 GMT
            Not After : Apr 18 07:31:17 2024 GMT
        Subject: CN=995efa240a5cadf866f3516468f4445c523c752b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:83:1d:fe:49:9c:c5:45:5d:9d:9b:c3:ee:
                    36:5e:f1:c0:79:2a:b1:11:af:82:cd:29:c5:d3:21:
                    2f:66:80:1b:6f:9c:7b:3d:3c:f7:65:23:ac:30:76:
                    47:04:92:7b:3f:d7:33:04:f2:0b:22:7e:7a:d7:4a:
                    2a:d5:0c:b9:02:d1:33:d3:b6:3e:eb:3d:ea:21:47:
                    5b:3c:11:1e:9b:78:9a:a3:a5:05:86:b1:b8:1a:6c:
                    b5:09:84:b4:90:1d:ce:68:66:ae:44:b7:7c:26:a2:
                    96:fa:90:3d:2d:89:04:6a:88:98:0f:64:e9:28:09:
                    a8:9a:ab:8d:ec:1a:37:d9:62:45:1d:d7:8a:f5:fa:
                    5d:bf:5e:bb:0e:32:b4:ab:6f:bc:a2:5d:05:85:cd:
                    7e:18:66:79:fa:d8:d3:31:de:0c:c4:ba:76:b7:69:
                    28:a6:4e:48:ef:4a:d1:b5:39:0d:dc:56:c9:89:d5:
                    bd:87:76:5f:36:da:dd:c6:50:03:36:fa:4a:c4:cf:
                    ae:d9:57:25:27:9b:d1:72:da:4a:ed:a3:62:a8:5f:
                    be:9b:b7:68:00:5e:05:40:63:21:f4:6c:fe:62:cb:
                    08:db:88:51:78:aa:21:a9:63:e7:b8:1d:36:22:b1:
                    58:15:8c:39:a3:38:5c:df:07:05:93:8a:b5:7b:22:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4F:13:E6:71:B2:4F:39:7C:D9:42:52:44:16:BE:39:8E:22:CF:CA
            X509v3 Authority Key Identifier:
                keyid:03:01:12:9D:7B:CF:62:23:9E:7F:58:1D:D6:C9:E5:76:F2:0F:6F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:d3:c8:41:ba:eb:4a:fd:42:d2:76:cd:14:70:fe:e2:be:
         7e:fa:40:90:fd:fe:55:1a:31:02:91:20:ef:fb:41:0a:cd:63:
         fe:a6:ca:ed:f5:14:b4:99:9d:05:ee:37:c5:5b:aa:57:1d:04:
         9c:07:64:15:ff:8c:22:48:d1:56:ac:5f:46:c6:1c:5d:f7:3d:
         6b:68:60:74:24:84:9f:bf:d8:c9:cc:d5:23:1f:c4:2c:23:a9:
         ae:b4:e3:5b:9a:58:7d:38:01:c4:97:69:1f:b1:07:36:a6:96:
         bf:83:26:74:29:e3:8b:50:a3:db:4e:0f:6a:d3:50:dd:89:36:
         3b:96:9a:ba:89:7e:cd:c6:d4:89:d2:d4:f3:d9:88:ab:5c:19:
         a6:82:d1:6d:e5:57:84:ba:9e:c2:73:95:5b:39:06:c6:f2:70:
         f8:0d:23:8a:99:fd:48:e6:1e:83:99:e1:1e:59:e4:63:84:98:
         77:22:4d:72:94:1e:57:bc:b5:a2:fd:4b:66:8d:78:e1:91:a6:
         c5:5d:2e:54:8c:75:c1:1e:66:7f:09:e9:22:a5:3e:79:82:82:
         c3:0a:ae:4b:75:d5:61:1e:99:df:8a:01:31:5b:aa:0e:70:94:
         aa:a7:48:7a:9b:9e:ef:c9:88:95:c9:1e:6e:66:9c:f2:72:5e:
         6e:db:82:cc
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKOWuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1
NGJlYmQ5NmY3ZTA2OWVlMzY1NjZmZDk4MjE5MzBkZTZiMmQ3YWQwHhcNMjQwNDE1
MDQyMDE3WhcNMjQwNDE4MDczMTE3WjAzMTEwLwYDVQQDEyg5OTVlZmEyNDBhNWNh
ZGY4NjZmMzUxNjQ2OGY0NDQ1YzUyM2M3NTJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlu6DHf5JnMVFXZ2bw+42XvHAeSqxEa+CzSnF0yEvZoAbb5x7
PTz3ZSOsMHZHBJJ7P9czBPILIn5610oq1Qy5AtEz07Y+6z3qIUdbPBEem3iao6UF
hrG4Gmy1CYS0kB3OaGauRLd8JqKW+pA9LYkEaoiYD2TpKAmomquN7Bo32WJFHdeK
9fpdv167DjK0q2+8ol0Fhc1+GGZ5+tjTMd4MxLp2t2kopk5I70rRtTkN3FbJidW9
h3ZfNtrdxlADNvpKxM+u2VclJ5vRctpK7aNiqF++m7doAF4FQGMh9Gz+YssI24hR
eKohqWPnuB02IrFYFYw5ozhc3wcFk4q1eyLPWwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFJRPE+Zxsk85fNlCUkQWvjmOIs/KMB8GA1UdIwQYMBaAFAMBEp17z2Ijnn9Y
HdbJ5XbyD29aMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjU0YmVi
ZDk2ZjdlMDY5ZWUzNjU2NmZkOTgyMTkzMGRlNmIyZDdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE4NTU5MzItNmNiNS00MTk4LWFkM2UtNDc2NGYx
YWNmOWI0LzI1NGJlYmQ5NmY3ZTA2OWVlMzY1NjZmZDk4MjE5MzBkZTZiMmQ3YWQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTg1NTkzMi02Y2I1LTQxOTgtYWQzZS00NzY0
ZjFhY2Y5YjQvMjU0YmViZDk2ZjdlMDY5ZWUzNjU2NmZkOTgyMTkzMGRlNmIyZDdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEH108hBuutK/ULSds0UcP7ivn76QJD9/lUaMQKRIO/7QQrN
Y/6myu31FLSZnQXuN8VbqlcdBJwHZBX/jCJI0VasX0bGHF33PWtoYHQkhJ+/2MnM
1SMfxCwjqa6041uaWH04AcSXaR+xBzamlr+DJnQp44tQo9tOD2rTUN2JNjuWmrqJ
fs3G1InS1PPZiKtcGaaC0W3lV4S6nsJzlVs5BsbycPgNI4qZ/UjmHoOZ4R5Z5GOE
mHciTXKUHle8taL9S2aNeOGRpsVdLlSMdcEeZn8J6SKlPnmCgsMKrkt11WEemd+K
ATFbqg5wlKqnSHqbnu/JiJXJHm5mnPJyXm7bgsw=
-----END CERTIFICATE-----