Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaa866e4-bd7e-4f03-a86b-c7f886cb616b/fca0a71b4503bf2320fc7533d1db53e1b58401c1.mft
File:                     fca0a71b4503bf2320fc7533d1db53e1b58401c1.mft (raw, json)
Hash identifier:          3gkN5OX96LJNiI9nGIMsQvKzvc36MMvlIk1t9QyxUXA=
Subject key identifier:   55:72:45:38:1F:09:CE:37:1B:38:8D:34:E4:28:85:FC:7C:02:26:CC
Authority key identifier: F7:8A:38:F7:DD:A9:C6:C4:A6:BF:27:15:16:14:AC:98:2B:3B:D4:C0
Certificate issuer:       /CN=fca0a71b4503bf2320fc7533d1db53e1b58401c1
Certificate serial:       28CBFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fca0a71b4503bf2320fc7533d1db53e1b58401c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aaa866e4-bd7e-4f03-a86b-c7f886cb616b/fca0a71b4503bf2320fc7533d1db53e1b58401c1.mft
Manifest number:          0DFF
Signing time:             Mon 15 Apr 2024 09:21:34 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 09:22:18 +0000
Files and hashes:         1: fca0a71b4503bf2320fc7533d1db53e1b58401c1.crl (hash: JWSjzRlRkUqFgZ9EujjkMUixN5pcksNqkOp7XxCyxv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673660 (0x28cbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca0a71b4503bf2320fc7533d1db53e1b58401c1
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 09:22:18 2024 GMT
        Subject: CN=ec376f13f54197c9a598e1fa6c9576dab271ea10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:7b:58:34:e8:7e:19:77:7d:11:3c:69:11:
                    a3:7e:de:1e:47:49:76:db:3a:62:b4:aa:1a:d5:ed:
                    68:ae:37:c2:27:19:26:66:8c:10:34:39:9a:55:bb:
                    a8:e3:89:89:ca:b3:28:fc:26:8d:2a:ea:84:55:c1:
                    ea:4c:8b:5b:93:a4:bd:c4:db:ad:fb:35:23:3c:f1:
                    fc:8f:8d:90:91:62:cc:6e:8d:10:43:9b:a8:b1:3a:
                    3b:41:e7:30:01:e6:c3:28:2f:25:77:ee:1f:08:49:
                    bd:16:cf:a3:11:29:3f:4e:4a:82:d2:68:c8:c9:e8:
                    cc:0a:7c:0d:73:dd:2d:73:e9:74:95:a3:82:84:2c:
                    8b:3b:5b:46:dc:d7:a5:9f:ea:8b:ff:bb:da:ff:9f:
                    b5:24:73:59:82:2d:80:72:07:9c:7e:78:f2:38:4b:
                    4e:ce:8a:5f:0a:36:54:e5:50:6e:04:81:6c:cd:6b:
                    ea:0c:1d:fb:44:b4:44:ab:a1:94:41:60:0e:b7:6d:
                    9c:0f:d9:7a:86:9e:6f:03:2d:4d:47:f9:ee:87:19:
                    03:57:05:d0:08:3f:da:34:16:60:72:48:3e:86:22:
                    71:f3:5f:10:ad:50:7b:4b:b6:b5:f0:3f:19:6e:f8:
                    38:5c:14:82:a6:c3:b9:cf:ad:9b:89:42:29:03:cf:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:72:45:38:1F:09:CE:37:1B:38:8D:34:E4:28:85:FC:7C:02:26:CC
            X509v3 Authority Key Identifier:
                keyid:F7:8A:38:F7:DD:A9:C6:C4:A6:BF:27:15:16:14:AC:98:2B:3B:D4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fca0a71b4503bf2320fc7533d1db53e1b58401c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaa866e4-bd7e-4f03-a86b-c7f886cb616b/fca0a71b4503bf2320fc7533d1db53e1b58401c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aaa866e4-bd7e-4f03-a86b-c7f886cb616b/fca0a71b4503bf2320fc7533d1db53e1b58401c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:71:09:b9:27:16:47:04:ef:5f:1a:3d:4b:6c:5e:ec:e8:b7:
         89:8e:ea:2b:f8:f9:41:50:4e:f9:32:47:ac:df:bb:47:6d:23:
         d7:5a:3e:ec:4d:73:b5:35:26:f0:c4:ec:9c:77:4d:37:72:95:
         e2:4e:08:d1:e5:f0:cf:ab:94:13:76:e2:f7:85:7f:b5:3c:54:
         84:26:a7:ba:b2:fd:12:df:89:f9:52:9c:d3:98:e7:01:13:70:
         eb:d7:f7:37:1c:39:03:e6:ba:ef:6a:3e:37:be:35:15:b0:9e:
         2f:90:ed:28:68:df:1f:27:d7:83:55:2a:f7:db:16:1d:5a:3b:
         c1:e6:de:e0:2d:5d:b9:cd:84:fe:49:50:b2:91:a0:9e:da:99:
         98:18:80:2b:fb:4f:39:f0:2a:a0:15:97:4f:bd:e0:87:02:a4:
         f4:2e:32:4a:a9:5f:ae:75:db:85:83:c9:28:b8:8b:b5:aa:60:
         b1:38:47:98:80:4f:d3:3a:11:fb:bf:59:43:1e:a4:a1:bd:59:
         34:11:af:45:fa:db:4e:aa:67:f9:a0:c4:69:be:34:a2:0f:16:
         25:49:10:3c:4e:4f:dd:d1:8e:ef:a1:a4:b5:54:1d:dc:2d:d6:
         e1:aa:fe:5d:9f:94:64:ae:ac:43:8c:fb:94:74:cf:7e:4d:20:
         81:b0:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----