Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/d669f1619ed478965c98d9a134f5fd106be561a4.mft
File:                     d669f1619ed478965c98d9a134f5fd106be561a4.mft (raw, json)
Hash identifier:          Gsy0l8+cfvfzX/H3HEBECpo+zIOzc00aUkTyVn8FJuw=
Subject key identifier:   FB:1A:55:21:A5:51:A5:12:D4:64:3F:78:50:DF:F0:C3:23:59:64:E6
Authority key identifier: F1:CF:A8:DD:82:81:99:5F:BF:34:09:EC:89:9C:57:90:5C:16:FA:3B
Certificate issuer:       /CN=d669f1619ed478965c98d9a134f5fd106be561a4
Certificate serial:       08769F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d669f1619ed478965c98d9a134f5fd106be561a4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/d669f1619ed478965c98d9a134f5fd106be561a4.mft
Manifest number:          0454
Signing time:             Mon 15 Apr 2024 11:21:03 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:32:18 +0000
Files and hashes:         1: 30e41d24d540255e40f0218f2d7d921cf6a9425c.roa (hash: IgTjyZfeKaaSbXXdYyqMS9A9g7NjBjhb71zJb6VV/eE=)
                          2: d669f1619ed478965c98d9a134f5fd106be561a4.crl (hash: Mm9Zfvk3O27G08onBDO5jsfdshxSIFysahftxyiAco0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554655 (0x8769f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d669f1619ed478965c98d9a134f5fd106be561a4
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:32:18 2024 GMT
        Subject: CN=c610707a05c60b3a2e1c1a20511423ef7459e6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:e5:f9:49:8c:17:e8:c8:77:a2:8c:e8:0d:
                    e8:b2:02:2b:7d:52:c0:fc:2c:21:3f:ec:42:c8:9f:
                    7b:57:90:5b:b2:54:e5:bf:29:d2:7d:cb:e8:e2:de:
                    c0:f4:39:c6:30:2b:e8:ad:85:65:45:97:8a:8b:0c:
                    31:b8:97:b8:cd:2b:d6:0b:0c:f4:59:8a:2a:36:ac:
                    d2:9c:79:2a:d3:42:b4:72:38:a5:28:d3:8c:9b:10:
                    7c:2e:c1:17:1a:d6:b6:27:3e:1a:ff:01:0e:23:64:
                    41:10:b4:13:e4:d2:a5:3a:73:95:c6:57:69:77:6d:
                    30:c3:8a:26:fb:c5:99:b7:ee:69:9a:6d:ec:e5:b4:
                    74:2b:09:fb:6e:d3:4a:91:a8:fe:b8:3c:cf:9f:d1:
                    10:2a:b5:1d:9d:f5:28:52:72:3f:35:14:e9:37:2c:
                    42:6d:43:ce:b5:a6:40:bf:95:8c:6d:78:ae:00:d5:
                    1e:82:74:28:e5:33:25:9e:7e:f2:fd:64:c5:26:17:
                    5a:ce:87:50:0f:5b:11:ae:c5:b1:ad:5c:b1:bb:eb:
                    e7:b2:39:2f:a4:2f:0d:2b:dc:2f:ef:c0:5c:72:66:
                    4a:f5:a3:91:fd:50:97:81:94:55:bc:6b:3f:e4:34:
                    46:37:ff:f1:fa:b7:08:b0:a3:4c:30:56:d9:8f:34:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1A:55:21:A5:51:A5:12:D4:64:3F:78:50:DF:F0:C3:23:59:64:E6
            X509v3 Authority Key Identifier:
                keyid:F1:CF:A8:DD:82:81:99:5F:BF:34:09:EC:89:9C:57:90:5C:16:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d669f1619ed478965c98d9a134f5fd106be561a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/d669f1619ed478965c98d9a134f5fd106be561a4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/d669f1619ed478965c98d9a134f5fd106be561a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:ee:15:56:a0:9a:03:46:69:97:2c:51:67:d9:2f:96:2d:
         d1:7d:f3:83:1c:09:11:5a:98:73:46:3a:0d:82:79:01:87:ac:
         25:26:b5:a8:27:8b:e9:fc:53:98:41:a5:ec:f3:a6:20:74:35:
         07:53:88:ad:b7:6d:ad:25:14:cd:00:98:ec:fc:79:d1:87:a8:
         7a:cb:77:d3:09:9f:08:46:7a:36:55:8a:27:bc:a5:37:35:c2:
         cf:97:58:d2:1d:02:9d:cd:9e:f0:5a:51:14:30:c4:3c:97:d1:
         29:cb:f5:53:29:d4:d0:cc:fc:fe:47:5e:cb:d0:a7:43:f8:06:
         fe:44:5a:69:c8:e2:9e:cd:0f:97:a0:38:51:fe:bc:58:5c:6f:
         c5:f7:c5:e6:23:cf:10:4f:4f:1a:b2:c2:8f:f8:27:f4:82:40:
         2a:e7:e1:f7:b8:e7:db:bc:bf:0b:8c:f5:69:69:cc:46:14:56:
         e8:a8:55:b1:29:db:4f:ae:c7:0a:06:c4:ae:26:2c:51:9a:e5:
         39:5a:75:67:ad:3f:9f:72:ca:ff:a0:79:76:dd:c6:20:6d:a0:
         fc:e3:a3:9d:a8:17:53:4f:3a:b3:45:c1:90:d6:ee:be:7c:5d:
         1f:9d:54:b3:4c:b4:df:df:50:62:81:00:d3:19:53:88:e2:8c:
         40:5a:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----