Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.mft
File:                     a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.mft (raw, json)
Hash identifier:          DDnLyzyg+Tcgo9t/tnAXj3w71E4cpb0Sd/whHUQY/HI=
Subject key identifier:   D5:F3:CF:B3:21:72:E5:F1:CC:E3:80:8D:40:0E:32:85:E3:C2:67:5A
Authority key identifier: 12:A7:2B:66:E3:12:28:9E:97:67:96:DB:FA:BB:8F:F0:2A:54:F8:CC
Certificate issuer:       /CN=a282b488a30f6e8b70f0d85fd8cddfd7888f98a2
Certificate serial:       1AEA29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.mft
Manifest number:          0DCB
Signing time:             Mon 15 Apr 2024 10:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 09:20:25 +0000
Manifest next update:     Thu 18 Apr 2024 11:54:25 +0000
Files and hashes:         1: a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.crl (hash: Iys9HNoO8aM1evwlCOAFkek75svpUb0PrkIhUtynEhM=)
                          2: b128f552405c736309bd08717c2f6fd9ffae10dd.roa (hash: AAR4EeQ9lxg/IaBsBmlVi0fRtIMOczwZ6wdCdw7+y8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763881 (0x1aea29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a282b488a30f6e8b70f0d85fd8cddfd7888f98a2
        Validity
            Not Before: Apr 15 09:20:25 2024 GMT
            Not After : Apr 18 11:54:25 2024 GMT
        Subject: CN=902866bc13989157756d851a22860b3583720a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:fb:35:69:ab:f6:3f:fc:62:13:b8:9e:43:
                    1a:13:5e:d8:88:89:fe:04:90:2b:c6:e0:62:2a:ea:
                    47:9b:a2:5b:58:3d:d0:25:50:9a:fb:78:6d:6d:a2:
                    08:bb:f3:12:68:92:0e:d4:c1:79:f8:17:08:96:27:
                    ee:bb:39:2c:ee:06:05:3f:f7:28:3e:a4:95:85:df:
                    be:84:6b:ef:ed:50:b5:49:52:02:a7:e3:0c:5a:31:
                    12:5d:a7:20:15:48:39:c1:39:cb:33:88:c5:69:d3:
                    9f:1b:24:c1:6c:36:71:63:22:2f:2b:a5:b5:db:2d:
                    48:dd:3f:43:77:fc:0a:1a:16:52:1d:c6:9c:b0:71:
                    23:d8:f7:0b:e5:8f:c6:65:a0:24:1f:77:57:4e:8b:
                    7e:49:ca:43:3f:a1:97:5f:8a:75:9b:cf:58:64:9e:
                    dd:6d:ef:56:dd:61:f0:5b:6a:8a:18:4f:b5:1b:f3:
                    93:65:65:00:ea:ff:26:1c:e8:ac:85:30:65:c3:8c:
                    79:4f:f5:bb:41:51:78:64:ca:fb:f2:b0:2b:8b:f6:
                    1e:6d:3f:17:e0:f6:82:33:95:82:fe:e7:db:b7:6f:
                    ec:1c:cb:36:48:d7:52:af:25:f1:28:80:88:b1:0e:
                    ce:6f:e2:38:66:52:7e:28:5c:cf:d8:c7:2d:cc:21:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:CF:B3:21:72:E5:F1:CC:E3:80:8D:40:0E:32:85:E3:C2:67:5A
            X509v3 Authority Key Identifier:
                keyid:12:A7:2B:66:E3:12:28:9E:97:67:96:DB:FA:BB:8F:F0:2A:54:F8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ada4e857-8cc5-4e9d-a281-1dafc68a7203/a282b488a30f6e8b70f0d85fd8cddfd7888f98a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:10:1a:a4:61:e5:a9:44:5a:b1:fc:42:21:af:52:16:91:a5:
         26:b8:74:c8:70:fd:fc:eb:44:af:af:56:31:f0:1d:a3:6f:89:
         4a:05:42:ab:34:4a:9c:00:92:3c:68:cf:89:df:8d:14:f2:01:
         a3:11:2f:e2:6c:b7:c9:4c:c6:ea:57:53:b2:e5:03:9b:6c:84:
         5e:cb:74:46:77:cf:6c:3b:b4:60:51:e1:5a:4e:0f:7d:70:a0:
         e9:81:cd:e0:60:eb:59:1d:02:14:22:83:90:9b:48:da:fc:53:
         ff:aa:12:d0:60:b8:66:4b:bc:e8:f6:5a:da:ca:b0:d4:96:bc:
         5c:74:83:df:a0:40:df:f0:95:10:77:bf:1a:b9:58:1a:6d:0b:
         81:a5:00:75:0b:49:a8:05:7a:6b:74:43:29:56:8f:88:d4:6c:
         f3:7e:cc:ce:c7:45:b3:24:68:e6:51:4d:4b:05:97:c7:35:1f:
         49:71:37:81:81:9d:2b:18:30:cc:29:bc:a0:db:ff:08:be:9f:
         8a:42:7a:bd:b7:8b:af:c5:d7:ba:be:39:df:c3:df:11:07:c1:
         1d:d0:97:e4:7c:9e:47:3f:c4:f0:de:f4:c3:cf:1b:f0:7b:2d:
         63:7d:89:3a:da:5d:25:66:a6:45:ce:d9:3f:93:b5:83:20:71:
         fe:d4:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----