Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd6d1edc-5ce1-4298-a03f-8faba69303bc/b0ccf652dada809fc364ef32b2e5b048271f559d.mft
File:                     b0ccf652dada809fc364ef32b2e5b048271f559d.mft (raw, json)
Hash identifier:          pbMKbuaka/z1qrPectqLBlHW8l/uKszLNOcQd2bdEdA=
Subject key identifier:   D2:C4:0F:A4:33:46:47:8E:1A:A0:B8:89:64:00:96:F0:EB:0C:55:DA
Authority key identifier: AA:45:F0:96:C1:A9:76:6C:23:1F:E6:A5:F4:22:7C:71:E7:43:25:65
Certificate issuer:       /CN=b0ccf652dada809fc364ef32b2e5b048271f559d
Certificate serial:       1CD888
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0ccf652dada809fc364ef32b2e5b048271f559d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd6d1edc-5ce1-4298-a03f-8faba69303bc/b0ccf652dada809fc364ef32b2e5b048271f559d.mft
Manifest number:          0DF2
Signing time:             Mon 15 Apr 2024 07:21:18 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 09:21:17 +0000
Files and hashes:         1: b0ccf652dada809fc364ef32b2e5b048271f559d.crl (hash: fEOin1ysKJUWcnICJYOKdekQWeKy5ujoL17i0xjqc+c=)
                          2: e0ca7505d3b51eea8b2a24e971fd86dea377e01f.roa (hash: rF0XwU+ZjdGoACcTN92UjYBsbTRLdrUjG53b/CA0lbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890440 (0x1cd888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ccf652dada809fc364ef32b2e5b048271f559d
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 09:21:17 2024 GMT
        Subject: CN=45faecc930d40a6a929c95e887f5a2411bcd112c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:cf:f4:fe:cf:2b:ad:3c:a4:e3:33:7c:24:
                    d9:c9:24:e3:5b:8a:85:05:9d:7e:3c:27:33:a3:02:
                    39:bd:25:6f:15:fc:8c:c7:74:68:8c:c9:22:d6:4f:
                    a8:f5:ea:a1:6b:cc:ed:6f:13:e3:d7:d9:ca:85:c9:
                    b1:f3:46:0f:fb:86:c6:4b:e5:54:dc:97:c4:aa:ec:
                    e5:75:25:91:76:8f:04:8e:89:0c:a8:36:e5:16:1e:
                    6c:23:4a:25:68:9a:77:ba:0d:3d:54:2f:f6:72:17:
                    22:e8:80:d3:91:1d:8b:91:be:a0:86:8f:ee:03:10:
                    a6:b2:5c:e0:82:9f:07:bd:a7:e0:56:7c:cd:63:d9:
                    b2:ac:4a:ea:fc:ea:c7:ca:e6:15:e1:24:5a:49:9a:
                    7b:1e:49:77:eb:86:a1:8c:bb:89:c5:61:37:1c:f2:
                    f3:f6:dc:44:7b:2d:de:c5:99:02:c3:ba:ea:fc:f9:
                    98:2b:d9:80:a6:f8:1b:db:49:8b:8f:3a:c6:fa:44:
                    96:f9:99:3d:50:1e:2c:07:fb:da:22:42:21:71:b9:
                    27:82:56:de:e4:fb:6f:f0:a2:0d:b8:bf:fb:fb:1b:
                    7b:16:8b:c9:df:74:ce:36:9b:de:72:cd:49:86:ce:
                    15:c5:48:22:a1:36:aa:e3:04:81:31:d9:b5:55:b3:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C4:0F:A4:33:46:47:8E:1A:A0:B8:89:64:00:96:F0:EB:0C:55:DA
            X509v3 Authority Key Identifier:
                keyid:AA:45:F0:96:C1:A9:76:6C:23:1F:E6:A5:F4:22:7C:71:E7:43:25:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0ccf652dada809fc364ef32b2e5b048271f559d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd6d1edc-5ce1-4298-a03f-8faba69303bc/b0ccf652dada809fc364ef32b2e5b048271f559d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd6d1edc-5ce1-4298-a03f-8faba69303bc/b0ccf652dada809fc364ef32b2e5b048271f559d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:3a:e7:5f:56:8c:75:5d:46:83:f3:a7:1a:61:65:99:78:
         e3:00:ca:4b:d2:3b:8d:25:d7:5a:c2:d6:fa:34:af:5a:fa:c2:
         74:c0:9b:4a:73:ca:80:fb:f1:18:3b:c0:b1:cd:a4:d2:4b:37:
         f5:74:59:66:f4:29:05:c2:77:fe:b7:41:cc:80:80:11:2f:4b:
         d9:f6:29:4d:b7:0d:04:0b:66:dd:11:20:a9:fa:17:07:56:5c:
         d5:0b:39:ec:2f:9d:bc:f1:53:65:d9:42:52:0e:99:0d:5d:23:
         15:87:ae:56:77:72:53:ad:70:39:ed:28:a7:bf:c1:27:1e:31:
         b0:b9:5f:be:64:93:b6:62:1a:82:3f:9d:70:05:0b:ff:12:65:
         9a:b9:c7:9e:56:ef:db:23:b1:53:e7:fe:04:f3:2d:70:2b:d8:
         33:c0:7d:f6:b5:fb:35:76:d2:2c:ba:ea:c6:72:40:78:c4:80:
         9f:9a:eb:25:78:2d:89:59:6b:d2:b8:00:1e:d9:b7:5c:82:12:
         ef:c1:63:45:45:c0:b5:d7:f8:84:c9:b9:3d:92:d6:2e:76:e4:
         d9:4f:e4:03:3d:8b:63:eb:98:cf:37:5c:ab:ca:0b:f9:6d:2a:
         4d:0c:13:d3:de:ce:c1:fc:23:3e:c7:05:40:d6:bf:ea:73:64:
         de:27:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----