Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/a021501bf713ce344873efb6d039b5bf1e030235.mft
File:                     a021501bf713ce344873efb6d039b5bf1e030235.mft (raw, json)
Hash identifier:          QYP3hBY39B6iUZMNeC2xwdeu+wJ0PyZzR4EL/RiQn+I=
Subject key identifier:   45:EB:A5:BA:F7:1E:C4:B4:86:70:5A:7B:26:55:6A:1B:86:F4:9B:8E
Authority key identifier: 04:B8:C4:EA:F7:79:2E:CF:D6:C2:01:3D:72:7D:1C:CB:51:E0:0A:D0
Certificate issuer:       /CN=a021501bf713ce344873efb6d039b5bf1e030235
Certificate serial:       28B7AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a021501bf713ce344873efb6d039b5bf1e030235.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/a021501bf713ce344873efb6d039b5bf1e030235.mft
Manifest number:          0DF4
Signing time:             Mon 15 Apr 2024 07:20:55 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 07:43:17 +0000
Files and hashes:         1: 29c5e222d9a7b3edfecce380f448ca401c509cae.roa (hash: 9AUjqCZLcXQTeBy/Shh0KMR0bsuc5coUpF0ZW/rDRgA=)
                          2: 38dc1424a7621b42c00a9cda612c68de7ad62b0d.roa (hash: ZauoOMnpqCMrFbhQTLVcD25ZtbkGmfgCNgj4e63JsSs=)
                          3: 9cef4cde8b75961324b954443d6ff89732b15440.roa (hash: W/bulDzVWXalNJRfvQu6tA5PE+vAk3wFIa3H/soztJs=)
                          4: a021501bf713ce344873efb6d039b5bf1e030235.crl (hash: yH8AX9P9nnHFXDowScM89TuciGPoyMxNvBfp5KqkYVQ=)
                          5: c3ce6351533f27e0859a4124e8a9c2d70bea30b7.roa (hash: adr6EovE2MUl1B2de3xd4Uy1QyC8wgItJZ3cgFQZ6LM=)
                          6: f48f540ad350fe9e526f611a1db023dac06bac15.roa (hash: SXIVq9GESIZfkOPkoj9DiK+4dDtEhmLshCxsq8Inb/U=)
                          7: f8e8390b75d25934a7ad202ad57d903bb9fe9202.roa (hash: GVQ7kB8C1eTDuLaxQAu6GolA6OK9A+79ywyHjSDY1l4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668460 (0x28b7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a021501bf713ce344873efb6d039b5bf1e030235
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 07:43:17 2024 GMT
        Subject: CN=4338872da2293d67488f948b0f5444b2bec6fde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:89:92:5c:41:c5:7a:3b:44:9b:23:79:56:
                    00:a8:a9:ec:95:14:11:89:59:d2:ab:6a:45:25:f3:
                    34:e0:5c:43:41:c2:06:9a:4d:7c:8a:a7:1d:7a:c5:
                    3b:9c:d3:2e:b6:f2:c1:df:e4:82:cf:36:a7:f5:32:
                    46:6f:47:a7:31:99:60:c5:5d:83:bf:9a:6e:7e:2a:
                    63:4c:d1:47:22:34:d4:1a:36:3b:86:ab:b8:97:76:
                    fa:0f:54:26:47:bb:15:df:9c:a0:e0:7c:8b:e8:b3:
                    14:15:71:ed:69:ee:bb:b4:75:5d:eb:63:e0:53:35:
                    8e:10:a9:f9:46:1a:d2:a4:50:af:af:f3:46:81:9f:
                    26:cd:12:78:d5:33:b6:f1:ea:bd:56:9b:96:9d:18:
                    72:6f:b7:a3:34:88:cd:dd:2d:b9:51:9c:d0:cf:95:
                    42:30:2b:e0:42:23:c1:d9:24:60:2a:e2:8c:1e:3a:
                    5f:ea:62:71:b5:54:b9:d8:9c:0a:a5:32:19:19:30:
                    60:34:3d:1c:a5:3b:68:6f:ce:2d:59:3e:73:c4:ff:
                    7b:9e:e9:20:16:36:8b:cb:18:2d:16:79:a7:1d:2e:
                    9b:6d:bf:bd:c5:f6:2d:ad:f9:86:99:5b:af:fe:f3:
                    4a:79:07:9d:ba:b0:e5:04:27:50:c9:f3:2e:c0:0e:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EB:A5:BA:F7:1E:C4:B4:86:70:5A:7B:26:55:6A:1B:86:F4:9B:8E
            X509v3 Authority Key Identifier:
                keyid:04:B8:C4:EA:F7:79:2E:CF:D6:C2:01:3D:72:7D:1C:CB:51:E0:0A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a021501bf713ce344873efb6d039b5bf1e030235.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/a021501bf713ce344873efb6d039b5bf1e030235.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/a021501bf713ce344873efb6d039b5bf1e030235.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:00:35:c1:8e:71:72:d9:db:39:c2:c6:22:d8:ed:21:11:
         b5:f6:ec:c5:5d:c6:0d:44:b8:00:c7:c1:23:01:47:19:48:02:
         73:75:55:a7:e2:71:7e:48:6f:09:d3:f0:b6:ce:d9:89:60:d9:
         d1:11:a6:1f:39:e9:68:21:10:f6:a3:32:a5:5a:b8:54:bb:62:
         2e:50:c4:0f:a9:f9:d0:4b:3d:cc:00:d1:62:30:ca:92:62:76:
         2d:24:bb:9f:0a:95:06:e1:36:5e:eb:72:79:75:97:e9:ec:05:
         0b:fc:73:47:70:fa:39:4c:53:a7:9c:4c:02:6d:69:5d:4b:46:
         a2:99:66:7b:59:38:4a:2b:a1:13:9a:05:6e:54:1b:16:62:1f:
         19:f1:e4:ba:d7:df:88:5c:47:ae:76:77:f6:d7:5d:85:02:bd:
         c4:f0:45:6a:c2:41:f3:d8:b5:a7:e4:dc:74:23:a5:fc:7f:78:
         5a:87:8d:d9:b8:88:5a:fd:92:06:31:ec:59:24:d0:b8:0a:cc:
         75:ef:47:e9:b4:3b:63:fe:b0:23:5d:54:29:99:2e:6f:9f:77:
         b5:f4:df:28:35:b2:00:a4:91:30:7a:9e:98:4b:80:14:9f:62:
         85:9a:e5:6b:a3:1f:2a:dd:51:a9:88:3a:ba:ac:98:ef:49:b5:
         c5:27:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----