Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.mft
File:                     a79f7c916be3a1ea7251327afacd5a877554edc2.mft (raw, json)
Hash identifier:          ZcWEDWWCfgAaG48Imc/JX72g8zw9hfPDSh5RsF+R3cI=
Subject key identifier:   49:D4:34:2F:40:8F:38:ED:42:F3:5B:97:24:40:31:9A:24:06:40:CA
Authority key identifier: 72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
Certificate issuer:       /CN=a79f7c916be3a1ea7251327afacd5a877554edc2
Certificate serial:       28FC48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.mft
Manifest number:          0E2F
Signing time:             Mon 15 Apr 2024 07:20:24 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 09:59:17 +0000
Files and hashes:         1: 0685d69f418c17a2a300e34f771e832f995fc64f.roa (hash: 2xjMKK8X+JTv3RWQt+ZSMFDbiAQpxmq7WQQhw1nE00E=)
                          2: a79f7c916be3a1ea7251327afacd5a877554edc2.crl (hash: ZUAfS8+6/60hicHRTPYq2Yq5yv9VY07zcg0+iDDuYPU=)
                          3: afb8e331c45546f2bae0e6c19737b0073ae82340.roa (hash: 1zSG8N7iHM4fgCMicRMgb62iw8DpqWfrHjzSIlOLUOM=)
                          4: d1ebc357a14ba38f3e6be7698e05d0ab96a0a4bf.roa (hash: 3KKI2iZaF56DDif3o0zgaoCgLDMGvPm6coniAS8H5c0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2686024 (0x28fc48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79f7c916be3a1ea7251327afacd5a877554edc2
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 09:59:17 2024 GMT
        Subject: CN=1e7fb589066e20d737deb8213b1b36944c829416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:ec:80:f2:11:63:ab:8e:a5:4e:4b:11:b8:
                    0c:3b:74:fd:21:25:13:51:02:fb:85:aa:07:d2:94:
                    a4:ce:d7:72:ce:d6:01:0b:29:2e:85:2d:bd:ce:98:
                    76:33:60:e3:cd:e4:13:05:ef:69:0f:0a:7f:da:a0:
                    b5:d9:cf:00:9e:9b:2f:53:92:3d:74:bb:8e:97:92:
                    44:20:10:e2:83:18:d5:d9:07:3b:fa:f7:2d:cd:a5:
                    1f:27:db:be:9a:45:59:9f:59:9b:88:bb:13:b7:3d:
                    70:9f:25:8d:be:0e:49:38:cd:b7:73:cd:41:ce:5f:
                    23:8f:28:02:99:c0:e3:c8:74:c5:34:89:75:6e:62:
                    d4:22:cc:e0:c8:fa:f0:6c:ea:b2:c2:a5:ef:75:c9:
                    d5:07:ea:e7:23:15:b6:7e:03:ab:99:f5:ea:a2:c8:
                    6f:f2:3a:16:89:22:55:9a:36:71:c8:4c:6d:91:d5:
                    42:3d:e9:4e:bd:46:61:7b:70:8c:41:dd:24:3f:cc:
                    2a:e4:bb:32:f0:9f:2f:a2:32:fd:5c:df:85:f6:0d:
                    c0:40:5e:08:cd:68:a2:a5:4e:aa:ff:39:c2:35:2f:
                    de:41:3e:9a:0e:eb:93:18:12:a4:fa:bb:08:88:98:
                    a7:cd:68:43:db:81:f7:2e:3d:16:83:dc:8d:df:85:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D4:34:2F:40:8F:38:ED:42:F3:5B:97:24:40:31:9A:24:06:40:CA
            X509v3 Authority Key Identifier:
                keyid:72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:dd:37:8a:ff:24:2f:22:ac:c4:60:90:bb:1f:b6:9f:ef:
         a6:b8:8c:27:fa:d5:c2:28:37:54:63:73:71:f7:04:19:9a:c8:
         6e:47:47:fb:5d:3b:9c:b9:69:a6:5b:07:e2:17:65:3d:db:ec:
         54:4f:2c:ee:01:b2:5b:48:cc:ff:4e:a5:a9:a5:2f:1c:59:ef:
         2c:80:ec:a6:5a:95:a5:0a:a9:7b:44:53:25:7b:b3:7f:d3:60:
         57:23:cd:e7:aa:c0:39:76:9d:98:d7:b5:71:64:a6:dd:69:ed:
         0d:67:3d:fe:2f:e9:26:55:71:d1:df:fc:52:4a:11:8a:c0:88:
         de:ec:f4:f9:b7:d0:8c:bf:7d:71:d8:95:9c:c2:5e:31:b5:ca:
         7e:5a:42:f7:ca:5c:ab:c5:52:d4:9d:cf:49:b3:0c:f1:81:e0:
         8a:2f:1e:7e:c2:3c:6e:4b:f4:7d:f5:a6:9b:6f:56:c0:74:24:
         54:60:12:b8:7b:04:8e:45:96:48:47:ed:77:86:d7:8d:87:01:
         e5:09:2e:bf:1c:6a:f6:78:35:0f:3b:71:ae:d8:59:41:dd:48:
         5c:1f:77:b0:5e:62:8e:8a:ac:e0:ee:c1:71:81:e3:d1:ed:30:
         76:c2:e8:09:bc:2f:c3:24:e3:94:b4:a5:e9:e7:11:1e:f9:01:
         e9:08:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----