Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.mft
File:                     491991f40dab281b295c3cc5d691493655fc7e8d.mft (raw, json)
Hash identifier:          iS+wNYMpfG5t29mIDqhoxnOU5ekD8zVTuRERlDYLkUQ=
Subject key identifier:   21:23:92:86:DF:ED:A5:8E:B4:BB:1D:E5:C7:5A:3E:42:10:6E:51:4C
Authority key identifier: A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
Certificate issuer:       /CN=491991f40dab281b295c3cc5d691493655fc7e8d
Certificate serial:       2914ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.mft
Manifest number:          0DEA
Signing time:             Mon 15 Apr 2024 09:21:15 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:32:18 +0000
Files and hashes:         1: 03486068db38984418f1d46748ab12e212623073.roa (hash: 3LPDShbECIiEZvMjv9jAhOc6lm8NcEQdbRx996gXCdQ=)
                          2: 491991f40dab281b295c3cc5d691493655fc7e8d.crl (hash: nVqvz5WkwDA4mvGbLuN/vohmIw/xEB+nV+gW3WlJFt4=)
                          3: 50e94e154fe50eb6b283d5a61de5b195c095e528.roa (hash: u2JORl6SVnyzQ8+FFEI3/D9h0quNn9h1b9G1Mj+wk3A=)
                          4: bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa (hash: xTzWhL7dY5dggpj1SbKPwfX10bCPgN+U6MiB87pLRJE=)
                          5: d932d9388fb21a6bb6c0ad7bb3223081094b6362.roa (hash: bBlC8Er8Vy0w/fog8d66kV3rJjqVLUMAdGJZ+FLCzUI=)
                          6: e797f0b68a9768b023d295272a5e7733370590ee.roa (hash: ATnOrr32XgKkM7KdztwbsY1vbpwCAJu+8hTOaSjMVNc=)
                          7: f7df1f481969ee282e9512492360556d6df1ec12.roa (hash: qWT6It3RhSK+V0V04fGfZKlaZ99mUCMh1yrXVVhbD7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2692333 (0x2914ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491991f40dab281b295c3cc5d691493655fc7e8d
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 11:32:18 2024 GMT
        Subject: CN=71bcebed398cb6cee01e695a380ebd78af6ac527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fb:14:b2:24:f9:bf:2b:16:d5:dc:0c:bd:8c:
                    eb:46:ab:16:31:7e:d6:66:75:be:0f:49:14:9f:cd:
                    c1:9d:e2:dc:1f:4c:e5:af:e2:c0:a5:5e:8b:f4:48:
                    89:4b:fb:1b:46:08:89:94:3a:df:c3:12:28:19:f0:
                    ae:75:51:8d:4c:c9:ca:07:dc:ce:c4:74:93:da:8f:
                    32:4d:a0:6c:c6:28:28:9b:c2:e1:7c:40:21:d5:8b:
                    52:62:40:97:87:a3:d4:bf:65:0e:ea:ad:6d:d2:79:
                    85:2a:e4:2d:40:b1:54:3d:bc:f5:c3:8b:d5:0c:9b:
                    ee:f0:8d:64:a8:e2:21:6e:c2:5b:6b:2e:b1:9e:dd:
                    c8:43:f9:af:46:91:a1:36:7c:a7:e4:66:a3:c9:34:
                    f1:fe:db:9a:e3:8e:3d:63:e9:97:6d:f7:c7:b5:bd:
                    fa:a5:50:1e:94:fd:8c:bf:b8:58:c2:7c:5e:55:a9:
                    33:0a:15:66:a0:b0:1e:3e:46:9d:59:5b:0f:27:b7:
                    4c:37:bb:67:60:0c:f0:a7:60:41:81:41:a9:af:2d:
                    8f:f4:81:4c:bb:db:1c:16:1d:b4:eb:0d:95:0d:d3:
                    c0:86:a6:63:27:b0:11:00:b1:5a:a0:b2:c0:ac:a1:
                    0f:bb:93:a0:38:24:21:e8:5d:e1:f6:1e:7e:b9:41:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:23:92:86:DF:ED:A5:8E:B4:BB:1D:E5:C7:5A:3E:42:10:6E:51:4C
            X509v3 Authority Key Identifier:
                keyid:A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:20:87:6b:4f:e4:08:39:ad:db:07:3d:19:e9:96:f8:6c:
         3c:be:cd:c8:94:b6:1a:f2:46:d5:7c:19:7b:85:65:ef:57:f1:
         e2:41:13:39:99:76:7d:ca:d4:9b:90:c1:1a:93:2d:21:a8:e4:
         9a:e7:f8:90:94:9f:a0:3f:53:1c:8a:d1:33:14:7e:b0:6f:27:
         57:9a:fb:ce:75:b7:f0:5d:8e:b4:02:0d:0c:be:5d:31:96:94:
         8c:35:92:8a:95:e6:9f:56:d3:06:70:3c:55:c2:55:94:9b:8f:
         e7:20:4a:1b:6a:0d:b9:b5:3f:28:0f:b4:69:94:fa:bc:c3:ba:
         34:94:c5:50:8e:f7:91:b8:11:cc:f2:55:0a:ee:f6:ff:9c:26:
         cb:3b:ea:0d:91:e0:6f:b5:5a:2e:1c:e9:07:23:d7:32:80:63:
         3f:e0:cb:1a:66:61:1f:c0:5a:d0:e8:e1:ac:a5:a9:e3:07:11:
         a0:00:62:47:ca:ac:aa:e0:a6:2f:2a:99:dc:83:1a:20:2f:4b:
         38:e2:65:f8:ea:90:3f:f3:f7:47:61:80:11:a3:bf:60:8c:a6:
         4f:06:27:23:5a:0a:06:27:84:3a:65:e5:b6:89:14:06:89:58:
         b3:e3:42:d4:4d:51:3c:ed:a0:ca:02:71:08:4d:8f:7b:d5:d7:
         35:b7:bf:91
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKRTtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MTk5MWY0MGRhYjI4MWIyOTVjM2NjNWQ2OTE0OTM2NTVmYzdlOGQwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MTEzMjE4WjAzMTEwLwYDVQQDEyg3MWJjZWJlZDM5OGNi
NmNlZTAxZTY5NWEzODBlYmQ3OGFmNmFjNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhfsUsiT5vysW1dwMvYzrRqsWMX7WZnW+D0kUn83BneLcH0zl
r+LApV6L9EiJS/sbRgiJlDrfwxIoGfCudVGNTMnKB9zOxHST2o8yTaBsxigom8Lh
fEAh1YtSYkCXh6PUv2UO6q1t0nmFKuQtQLFUPbz1w4vVDJvu8I1kqOIhbsJbay6x
nt3IQ/mvRpGhNnyn5GajyTTx/tua4449Y+mXbffHtb36pVAelP2Mv7hYwnxeVakz
ChVmoLAePkadWVsPJ7dMN7tnYAzwp2BBgUGpry2P9IFMu9scFh206w2VDdPAhqZj
J7ARALFaoLLArKEPu5OgOCQh6F3h9h5+uUEqdQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFCEjkobf7aWOtLsd5cdaPkIQblFMMB8GA1UdIwQYMBaAFKP5NihuxsziMi3w
JbHIZ3Rjm7eTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkxOTkx
ZjQwZGFiMjgxYjI5NWMzY2M1ZDY5MTQ5MzY1NWZjN2U4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2JhOTc4ZWItOGJiNy00MzI4LWIyOWQtODM5ZWVm
ZWUzNjgzLzQ5MTk5MWY0MGRhYjI4MWIyOTVjM2NjNWQ2OTE0OTM2NTVmYzdlOGQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYmE5NzhlYi04YmI3LTQzMjgtYjI5ZC04Mzll
ZWZlZTM2ODMvNDkxOTkxZjQwZGFiMjgxYjI5NWMzY2M1ZDY5MTQ5MzY1NWZjN2U4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAHXCIIdrT+QIOa3bBz0Z6Zb4bDy+zciUthryRtV8GXuFZe9X
8eJBEzmZdn3K1JuQwRqTLSGo5Jrn+JCUn6A/UxyK0TMUfrBvJ1ea+851t/BdjrQC
DQy+XTGWlIw1koqV5p9W0wZwPFXCVZSbj+cgShtqDbm1PygPtGmU+rzDujSUxVCO
95G4EczyVQru9v+cJss76g2R4G+1Wi4c6Qcj1zKAYz/gyxpmYR/AWtDo4aylqeMH
EaAAYkfKrKrgpi8qmdyDGiAvSzjiZfjqkD/z90dhgBGjv2CMpk8GJyNaCgYnhDpl
5baJFAaJWLPjQtRNUTztoMoCcQhNj3vV1zW3v5E=
-----END CERTIFICATE-----