Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b43a95f3-c3b2-473f-8558-037223766e6b/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.mft
File:                     9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.mft (raw, json)
Hash identifier:          DmPufXfNyVD4TdCa0+83RxZsTA6pqgyqP8MzOB6n/Wk=
Subject key identifier:   F6:E6:FF:43:81:49:1A:94:D6:02:4B:19:CA:7B:F8:0C:25:C4:4E:D7
Authority key identifier: 88:50:26:FB:A4:E1:38:3F:8F:41:12:37:FE:40:ED:6F:E8:33:9D:48
Certificate issuer:       /CN=9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab
Certificate serial:       0CD97C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b43a95f3-c3b2-473f-8558-037223766e6b/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.mft
Manifest number:          068F
Signing time:             Mon 15 Apr 2024 02:21:19 +0000
Manifest this update:     Mon 15 Apr 2024 01:20:29 +0000
Manifest next update:     Thu 18 Apr 2024 02:24:29 +0000
Files and hashes:         1: 917fe0b0137e4ea1c9d7a42bfb7b378e6885f1f7.roa (hash: uNutGRz/pvJOSFbsnaH+/Fnfy0fdUOwTYsqsvSOQcnM=)
                          2: 9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.crl (hash: 2MWnZsDLZesrs5XhX2GJDwdoCnHzcEfg1O/XV8AVGuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842108 (0xcd97c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab
        Validity
            Not Before: Apr 15 01:20:29 2024 GMT
            Not After : Apr 18 02:24:29 2024 GMT
        Subject: CN=0543cc0a486841a52b65c2b13533848b5d4c7f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b2:e8:b4:b7:6a:b1:f5:31:f5:08:cf:88:44:
                    04:89:08:e9:15:5d:0b:c6:3a:14:a4:36:f1:c0:cd:
                    a0:60:e0:b8:09:78:fd:14:6c:fc:dd:47:00:d2:1c:
                    4b:2b:5c:89:03:38:17:b4:45:02:ce:ff:46:80:c8:
                    5c:f6:4b:59:89:b7:ea:e0:0e:49:cb:f7:6d:be:b2:
                    cf:23:7e:8d:8c:7c:ad:fd:3c:bf:be:cc:44:94:a2:
                    b3:14:92:22:c3:ab:dd:c2:35:47:6a:63:91:38:19:
                    59:0a:b9:08:6b:6a:9f:26:28:a5:e1:30:08:4c:28:
                    2b:cb:a0:0a:26:64:d5:18:02:9d:d0:6e:fb:d7:10:
                    3e:fe:30:40:97:80:17:e2:dd:5a:c8:39:32:05:fe:
                    13:d4:f4:9e:93:76:a5:b6:ea:65:ed:0d:12:28:e2:
                    dd:59:06:e2:a0:61:8b:c4:4b:23:f7:15:ac:12:be:
                    de:db:6f:99:92:ce:73:df:93:64:2e:b1:81:5d:25:
                    8b:d1:29:44:1b:5e:6b:8f:a7:ef:17:dc:71:17:20:
                    e6:fd:cb:a2:9f:70:81:a9:8c:39:b5:95:26:ff:4f:
                    19:e0:b2:26:98:84:f2:cd:2e:34:3b:fa:d3:b8:ba:
                    fa:a5:55:f7:5e:08:7c:87:c2:72:7d:db:24:06:0b:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:FF:43:81:49:1A:94:D6:02:4B:19:CA:7B:F8:0C:25:C4:4E:D7
            X509v3 Authority Key Identifier:
                keyid:88:50:26:FB:A4:E1:38:3F:8F:41:12:37:FE:40:ED:6F:E8:33:9D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b43a95f3-c3b2-473f-8558-037223766e6b/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b43a95f3-c3b2-473f-8558-037223766e6b/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:eb:0e:72:38:61:61:a6:3c:fe:fe:67:78:ac:1f:d0:ea:ae:
         fb:20:6e:44:c0:17:ac:0d:e9:3e:d5:71:46:b5:25:53:4e:a8:
         df:a8:b3:4d:ba:33:df:31:4d:0f:5a:c7:9c:58:e8:fd:24:51:
         97:0c:f3:e0:26:53:1c:33:e0:bc:1e:58:fd:94:b4:e1:9e:7e:
         ec:dd:4a:72:fd:38:be:05:df:66:d1:8a:10:36:d4:a7:3f:09:
         a3:e9:58:96:57:32:87:79:8b:cf:89:4f:ea:30:cd:17:21:43:
         32:6b:07:b1:ca:03:22:61:11:37:36:df:99:4c:29:fd:08:6e:
         2e:13:38:b9:fa:38:81:c3:56:b5:bd:d0:a9:3e:93:26:1f:11:
         b6:93:4f:fc:fe:4b:77:5b:b0:8d:42:88:11:99:4c:f5:fd:2d:
         30:92:88:91:1b:63:73:a8:09:cd:fb:7d:b3:d1:63:e4:21:40:
         88:94:b3:84:2d:16:75:28:94:c4:f3:83:10:02:c5:e9:1c:97:
         8b:6a:13:02:01:eb:8f:6e:ee:db:bd:3a:7a:52:58:71:4e:3d:
         0c:67:d5:1a:7b:af:d6:9f:9b:b2:12:71:82:5e:a1:3e:b6:38:
         98:db:3c:cf:67:ce:71:b7:5b:1a:a9:89:49:59:cc:11:d2:40:
         ae:04:b4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----