Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c7d09245-f3d5-4f4c-ad79-8fca5321efe8/d5620db6d95921ffe5a29805479423583a9ae9a9.mft
File:                     d5620db6d95921ffe5a29805479423583a9ae9a9.mft (raw, json)
Hash identifier:          xkDlVGdy10bnE3fypBnAtGJAiqALdZFdrx1vKMq+kjI=
Subject key identifier:   72:44:FB:67:D0:07:D0:E5:33:D4:FC:CA:40:0F:DB:72:17:A4:4F:F9
Authority key identifier: 65:6A:46:4C:AE:36:EA:FA:39:53:C2:3B:4D:1C:EC:FC:D3:42:B6:48
Certificate issuer:       /CN=d5620db6d95921ffe5a29805479423583a9ae9a9
Certificate serial:       0832C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5620db6d95921ffe5a29805479423583a9ae9a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c7d09245-f3d5-4f4c-ad79-8fca5321efe8/d5620db6d95921ffe5a29805479423583a9ae9a9.mft
Manifest number:          0438
Signing time:             Mon 15 Apr 2024 11:20:57 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:20:18 +0000
Files and hashes:         1: c1af0b553c9c0b88401964dcb9fd47f5253de422.roa (hash: 09oIWnDAGAPlp5kt7YA39ib5NNcQV/1TiD1DSjjdipo=)
                          2: d5620db6d95921ffe5a29805479423583a9ae9a9.crl (hash: /L4SA0Acj8dcpYV2ZDCXxX3IzY5p9FdbeQjvXeRTVbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537283 (0x832c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5620db6d95921ffe5a29805479423583a9ae9a9
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:20:18 2024 GMT
        Subject: CN=c51af16c9355f8d31e096bd0935d150eb9bbaecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8d:11:e5:7c:39:5f:b5:29:b6:9b:c7:0a:fe:
                    4d:dd:b5:7e:63:ab:2c:89:3a:b6:7c:9e:32:e3:1a:
                    79:a8:cc:8d:44:26:9a:b6:f0:7e:89:45:d0:77:8a:
                    63:8f:1a:79:5a:d4:19:7b:5d:ec:f3:6c:10:1f:b6:
                    24:14:f3:80:d6:5c:ea:ad:1f:72:af:40:11:8c:14:
                    63:5a:f4:9c:77:8f:40:f2:e3:ed:07:95:c1:d5:12:
                    f8:3a:c6:c6:47:f6:31:21:f3:c9:eb:8d:3e:1b:37:
                    62:42:4a:e1:2f:24:a5:a4:3d:b1:d5:d0:51:47:e4:
                    1f:80:db:cc:a2:0b:9a:68:4b:d1:e7:c2:86:c3:91:
                    b9:e5:bd:1b:22:dc:b8:ff:43:5a:27:d8:a3:30:58:
                    43:bb:39:95:4e:a5:d9:76:5d:85:2a:40:ca:54:18:
                    b7:9e:05:2d:62:a1:be:62:d9:66:3a:e4:a2:08:04:
                    6c:0a:c7:4d:5e:cf:db:be:7d:93:bb:dc:9d:73:d8:
                    1b:3e:f6:e1:61:f2:be:6a:74:e6:6e:74:4d:f1:97:
                    c6:5c:34:87:b9:4b:25:6d:d8:11:91:f5:5a:6d:95:
                    d7:33:23:cc:ed:a8:7b:ef:55:1f:4f:64:86:eb:7d:
                    c0:9c:8c:e3:58:c4:95:83:41:99:2b:14:73:a6:95:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:44:FB:67:D0:07:D0:E5:33:D4:FC:CA:40:0F:DB:72:17:A4:4F:F9
            X509v3 Authority Key Identifier:
                keyid:65:6A:46:4C:AE:36:EA:FA:39:53:C2:3B:4D:1C:EC:FC:D3:42:B6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5620db6d95921ffe5a29805479423583a9ae9a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c7d09245-f3d5-4f4c-ad79-8fca5321efe8/d5620db6d95921ffe5a29805479423583a9ae9a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c7d09245-f3d5-4f4c-ad79-8fca5321efe8/d5620db6d95921ffe5a29805479423583a9ae9a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:25:55:c8:40:3b:03:de:91:b9:ca:42:cb:05:ad:fc:66:78:
         99:fe:5e:13:c3:19:f9:03:a4:7c:d7:21:8b:da:49:08:51:3c:
         e0:17:45:1f:06:46:c6:b3:d2:fd:b6:6a:5c:7a:0c:9a:4e:1d:
         8a:46:41:56:9f:0d:6a:59:c5:aa:94:80:d4:21:a3:fd:75:26:
         74:92:e6:4c:0b:17:24:24:29:74:95:ea:e8:5f:4c:0a:8e:f7:
         e4:8d:18:0a:f8:0e:50:10:4e:98:b7:53:91:d9:cf:b2:83:b4:
         19:0f:52:c6:0f:93:29:70:66:fa:17:f2:1e:fe:d7:7a:d0:5a:
         aa:39:c3:07:9c:cb:b4:08:97:2a:ac:a1:94:79:d6:51:9d:3c:
         00:9d:6c:c3:b6:9e:17:81:59:85:8a:ca:42:f1:55:c0:96:38:
         26:f9:c4:28:6c:61:69:7e:c1:f8:c4:1b:b8:ff:30:0f:64:47:
         1c:a4:42:5c:28:0b:39:fd:bc:a3:ae:4b:d6:29:f8:cb:ae:ed:
         8e:dc:5b:f3:eb:5a:c4:ce:49:05:f2:41:02:ad:98:2b:da:f4:
         44:f7:47:fc:d6:ae:56:a5:76:18:78:f1:82:0d:30:a6:bd:8e:
         cb:06:28:aa:a2:2d:63:19:87:f4:fe:92:24:a2:ba:cc:60:06:
         ae:45:56:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----