Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b994c4a0-89b1-48ad-b381-fb095ea39951/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.mft
File:                     9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.mft (raw, json)
Hash identifier:          teQL9REm4XrL+hNDwPZQBN1KV7U5MyOUw0a+FOBhNZ4=
Subject key identifier:   57:1B:52:35:E9:6B:04:5D:D8:D4:16:BE:8D:78:68:E9:EF:0E:74:2B
Authority key identifier: 3D:1C:E7:25:75:2B:68:39:0F:21:A0:1F:29:5C:28:F6:58:9F:DB:1E
Certificate issuer:       /CN=9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5
Certificate serial:       073DB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b994c4a0-89b1-48ad-b381-fb095ea39951/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.mft
Manifest number:          03C7
Signing time:             Mon 15 Apr 2024 03:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:16:17 +0000
Files and hashes:         1: 66c89a25af189cda04c6d1b00301bf38cac12b0a.roa (hash: zJg1XCXMBzinudXuU2BB3GOj4rOgiyKyW4S26RvnYSI=)
                          2: 9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.crl (hash: mmawIQYxKm3hx0BeFVG5Dbjr9/l6V+/fOveE9aIYI+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474547 (0x73db3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:16:17 2024 GMT
        Subject: CN=ca9bbcd50b6a8bef1030cee5a7a8b9503e6275dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:86:74:5b:9c:b7:cc:d9:32:62:8f:b2:cb:
                    14:86:84:c0:64:ae:b2:5b:1e:d2:3c:3e:90:21:5d:
                    fa:2a:64:d8:da:5d:8e:74:ce:a0:7c:37:58:31:87:
                    70:59:69:34:9e:ef:20:e5:af:26:20:f1:ee:e9:a9:
                    d8:13:aa:ca:49:a5:b7:9c:36:e4:70:7b:35:f1:11:
                    8b:f3:1a:ec:52:7e:29:4b:e8:b4:76:eb:6e:cb:d0:
                    b9:55:68:3d:e9:8a:9e:8f:38:c8:d3:c1:96:84:c8:
                    43:4e:6b:a4:16:c2:1e:18:7f:fc:27:b2:af:ae:2e:
                    c4:dd:09:dd:89:07:ef:ae:44:40:6f:98:b5:5c:77:
                    48:ba:48:2f:40:9b:fb:ab:28:b2:83:ef:77:32:f5:
                    dc:73:b6:d1:05:f5:ae:6e:16:bd:06:60:0f:bf:c8:
                    34:bd:24:01:f0:00:23:80:45:a1:67:f1:6b:07:a8:
                    d8:b6:bd:2a:17:1f:9b:70:5e:ad:1a:cb:2c:cc:10:
                    e7:81:d7:f7:fb:4d:cd:6e:c6:1b:ab:65:00:d3:ff:
                    67:c9:57:e4:6f:1a:34:23:cf:9c:3c:9e:0f:5a:c5:
                    a8:c4:48:ee:69:f5:a1:b7:36:e3:ab:00:fe:49:c5:
                    9a:47:b2:98:c9:5e:f5:aa:ef:ec:2c:e1:d4:5d:7f:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1B:52:35:E9:6B:04:5D:D8:D4:16:BE:8D:78:68:E9:EF:0E:74:2B
            X509v3 Authority Key Identifier:
                keyid:3D:1C:E7:25:75:2B:68:39:0F:21:A0:1F:29:5C:28:F6:58:9F:DB:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b994c4a0-89b1-48ad-b381-fb095ea39951/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b994c4a0-89b1-48ad-b381-fb095ea39951/9b99b0e5244a1d4b8c3be1852e35ffec9d51fdb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:88:75:4f:0c:5a:50:dd:6f:86:44:62:8f:33:ab:f4:f9:b7:
         09:dc:fc:8c:5d:1c:22:ce:3e:be:b9:2f:cd:8f:9e:0d:52:15:
         f8:dc:2e:27:ea:17:46:13:49:77:72:9e:a6:62:02:7d:a7:73:
         7b:40:4d:3f:c0:3b:f0:1b:d2:37:04:f5:f5:3a:4f:c0:c8:ba:
         d5:ec:d0:11:ce:86:93:5d:66:cd:ae:ee:26:bc:ae:fd:2e:35:
         7a:32:a4:0a:e3:ce:52:21:f3:23:bf:f4:2e:77:17:f8:c8:87:
         b3:1d:98:91:dd:c7:bd:3a:a4:e2:4d:65:4b:89:3c:af:d4:e2:
         4e:96:21:4c:e5:7a:ba:da:5e:30:40:6c:2c:1f:e8:2b:d5:6f:
         98:ea:dc:fb:9a:77:b2:82:21:5f:46:85:7d:f2:b9:ed:44:2f:
         d4:68:79:92:52:9e:a2:2a:e7:be:93:69:2d:86:c7:c9:79:93:
         57:f9:41:cc:4e:11:3c:4b:32:9c:10:74:4c:16:b3:8c:8e:f8:
         e5:9f:9e:d8:9f:b8:26:a0:53:3c:ba:c1:0c:74:01:27:51:5f:
         8d:51:47:22:cf:a4:de:3c:59:5c:e0:d0:7c:36:f6:13:57:05:
         e9:26:5e:5f:21:af:d7:e7:ab:03:65:ae:25:ba:57:12:91:b9:
         78:70:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----