Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaf8ca69-f87e-4f0a-a4ac-c860a44902f1/8feb5b04bb39522f043c7303dc6c68fe603e6c09.mft
File:                     8feb5b04bb39522f043c7303dc6c68fe603e6c09.mft (raw, json)
Hash identifier:          aV5QEbJDU7e+UrzAUvmNGkZW5vvOjJdOs6Wfv9P3g/I=
Subject key identifier:   9D:AE:08:B6:68:A8:9D:A9:53:6D:13:4D:65:8E:9C:D4:13:68:5C:0F
Authority key identifier: 76:86:9C:CC:14:1D:BD:CB:1A:49:D6:D9:75:00:85:8E:2C:DF:5B:98
Certificate issuer:       /CN=8feb5b04bb39522f043c7303dc6c68fe603e6c09
Certificate serial:       07A1CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8feb5b04bb39522f043c7303dc6c68fe603e6c09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aaf8ca69-f87e-4f0a-a4ac-c860a44902f1/8feb5b04bb39522f043c7303dc6c68fe603e6c09.mft
Manifest number:          03CC
Signing time:             Mon 15 Apr 2024 04:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:29:26 +0000
Files and hashes:         1: 77eae4b6adc1d5cd47a1d2708babb760bdcf13d1.roa (hash: IPAq7B8rvKvd5ehQu8dN/a3NcdHuQa5VlDR8/QiAf2U=)
                          2: 8feb5b04bb39522f043c7303dc6c68fe603e6c09.crl (hash: b+OERoH+iKv99MP1tRO9KFG2mXtwXWzeqZ3v9xN+i14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500175 (0x7a1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8feb5b04bb39522f043c7303dc6c68fe603e6c09
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:29:26 2024 GMT
        Subject: CN=f1914b39e742d8bd96ad95269c48cdd7ac647e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:2c:9b:f8:fd:76:16:12:27:c3:61:dd:74:
                    77:fd:a8:9c:d9:fe:92:d2:2a:2a:2e:7f:5f:0a:b5:
                    dd:b8:40:af:be:7d:58:90:a3:63:33:3a:48:dd:ce:
                    f2:5c:ae:7c:4f:62:93:56:cc:fc:37:59:48:54:7d:
                    31:17:7c:a4:be:81:ec:f1:33:96:44:81:20:24:c7:
                    5f:70:dc:43:fc:6d:f1:1f:b3:b5:4c:3b:77:40:71:
                    63:6b:98:74:d5:11:1f:d5:de:27:ec:ba:d2:dd:a7:
                    91:53:92:7f:3b:51:ea:fc:94:c7:a0:ad:43:4e:d8:
                    ef:fb:a2:7a:8b:06:d1:66:4b:93:63:91:e7:07:77:
                    41:f1:5e:a0:59:78:99:9a:19:da:03:9a:c1:05:f8:
                    21:7d:40:e5:a2:2d:d6:18:54:01:d1:87:c1:2d:d7:
                    91:68:6c:95:00:7b:7d:7b:a0:13:5d:a6:2d:e1:23:
                    3a:04:86:49:d2:4d:19:32:cd:bb:1a:fc:64:94:06:
                    e4:e0:7a:f1:ad:db:1a:f7:c0:d3:1b:76:92:78:ae:
                    03:c2:4b:7e:93:4e:77:0f:79:fd:ac:8d:bc:02:cb:
                    a7:6d:2e:69:a9:07:4b:27:24:77:e5:df:93:28:d5:
                    1f:a0:38:ff:0a:5f:11:de:9b:af:22:54:a2:14:cd:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:08:B6:68:A8:9D:A9:53:6D:13:4D:65:8E:9C:D4:13:68:5C:0F
            X509v3 Authority Key Identifier:
                keyid:76:86:9C:CC:14:1D:BD:CB:1A:49:D6:D9:75:00:85:8E:2C:DF:5B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8feb5b04bb39522f043c7303dc6c68fe603e6c09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaf8ca69-f87e-4f0a-a4ac-c860a44902f1/8feb5b04bb39522f043c7303dc6c68fe603e6c09.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aaf8ca69-f87e-4f0a-a4ac-c860a44902f1/8feb5b04bb39522f043c7303dc6c68fe603e6c09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:2a:9e:da:a6:80:1e:78:c6:bd:2d:76:0b:26:ab:a6:50:
         0b:9e:68:42:1f:0e:a5:45:2a:f5:14:e8:16:bb:6f:d4:55:0e:
         0d:7f:b2:77:c1:93:57:d2:07:24:b7:54:51:25:ec:ee:26:af:
         18:86:ca:13:dc:05:9a:7e:4c:fa:be:a3:62:37:68:ce:8d:1f:
         a1:77:55:9c:be:9e:a5:56:e5:1e:9b:1f:c3:5b:0b:47:85:68:
         74:d8:89:d5:0d:91:92:6f:1b:60:ea:ca:14:1f:77:19:33:fb:
         d9:68:33:a1:34:91:3d:8e:6e:c9:b5:6c:54:50:b6:60:70:b4:
         f2:48:aa:a8:6d:bd:4d:e9:65:67:d6:57:b7:bd:c5:d3:65:f5:
         c8:26:5c:c1:5a:6a:7e:ca:49:5c:b9:fa:a4:d6:33:90:00:e2:
         30:e0:ae:27:b1:13:29:00:59:45:44:2e:11:a5:73:fe:62:fb:
         ff:0f:7d:9a:02:39:cf:fe:b9:c0:dd:4a:6e:5d:27:a7:35:59:
         59:0a:fb:d2:14:c5:b5:2a:90:34:7a:f3:6e:3f:85:96:d0:56:
         2c:24:fc:0a:c0:80:8c:a7:4b:70:b0:23:cd:1d:ce:3e:1f:a9:
         b2:fb:4c:26:f9:42:77:74:4c:2e:88:8e:43:b2:5f:7f:39:18:
         c8:cc:05:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----