Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.mft
File:                     8634873a21a0af40a01354647ad4978d3847d365.mft (raw, json)
Hash identifier:          NeBTWeeCmcsxD2vmTfJVLR3npyZY/adHOgTEUngAau4=
Subject key identifier:   A6:CD:9F:87:49:FD:8F:01:01:5F:23:3E:34:7F:9E:EC:C1:EA:65:1C
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Certificate issuer:       /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial:       297D77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.mft
Manifest number:          0E2B
Signing time:             Mon 15 Apr 2024 07:20:34 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 09:16:17 +0000
Files and hashes:         1: 375bf0d15431af057499263c59ffc8f57264fe00.roa (hash: OA6cUeYnqvcxUZqRKFs6pf9jRo8QhvoR8SFah+tubuo=)
                          2: 3f3df11a83405c47dd50b4cc7ef7a6d5936d6916.roa (hash: R8pH3sT4Gi0AYB/4G6e25mTSiSUIH/hPTYabZis/gXc=)
                          3: 6f939fb20be12f70c7c0783032270384debeb674.roa (hash: PF6NGo7cQ+51CsdQ/WqaU/ll5XXIMnXOgctFRJSC3cU=)
                          4: 8634873a21a0af40a01354647ad4978d3847d365.crl (hash: Dm22Tr31W3++vCeFH6WS4q6YfTJjdizHfp+blMcsP5E=)
                          5: 95eaf9c257b17ffb16a230fdfff54e985072a462.roa (hash: +p7veIH4ooca7Zj3hWiaAxh+/BgFEsbylM6wYr2UaGU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2719095 (0x297d77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 09:16:17 2024 GMT
        Subject: CN=89925eadfc3749844abd00c6e2a9919f9fb9007e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:d4:aa:00:1d:70:a7:00:48:a1:56:10:53:
                    5f:13:c3:e5:3b:89:91:9e:60:6e:a2:77:0b:e5:eb:
                    92:d7:09:fc:04:c9:ee:d1:bb:64:e5:39:18:e8:8a:
                    31:37:26:09:50:d0:c4:cb:24:03:1e:c9:5c:f4:2b:
                    ce:4b:02:60:2a:a8:9c:9d:c0:fd:cf:e1:be:fe:60:
                    15:c7:37:40:fb:1b:e5:3d:44:1c:c7:e7:d1:ec:ef:
                    48:e4:67:10:50:11:d0:7a:71:6f:b5:b7:81:45:e5:
                    1e:d0:25:a5:c3:a1:be:5b:63:00:1c:3d:14:f7:1d:
                    5e:4b:3f:4b:70:90:95:ee:11:d9:a9:02:e3:9c:05:
                    3c:02:58:50:70:13:fa:c9:82:50:55:bc:eb:d6:08:
                    19:88:34:d1:1b:d1:7b:df:56:69:4b:e5:16:e4:3e:
                    8a:c0:d9:fb:6d:df:2a:93:ff:26:5e:5e:2c:6f:2a:
                    28:b3:46:64:32:1a:30:34:13:d2:45:c3:59:33:45:
                    41:3b:73:64:4b:50:dc:87:cf:d5:da:be:1f:00:1a:
                    04:54:de:5f:31:44:67:44:32:fd:bf:47:90:35:d1:
                    01:5c:3e:70:71:d1:50:f1:17:52:74:87:ff:96:0b:
                    29:03:d5:b5:09:33:38:14:ef:bd:6d:46:17:d3:08:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CD:9F:87:49:FD:8F:01:01:5F:23:3E:34:7F:9E:EC:C1:EA:65:1C
            X509v3 Authority Key Identifier:
                keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:55:d5:95:c5:fd:92:76:60:8c:1a:91:f1:69:fe:46:d0:
         cf:9a:2c:cd:a6:47:b6:b5:e5:0d:b2:8e:3b:24:2f:26:44:d4:
         15:08:d6:b9:5e:00:a0:02:6f:65:59:fc:ff:95:c8:fe:64:1b:
         38:fb:14:4a:64:4f:d0:02:87:74:fd:a5:e0:2e:eb:2b:ba:62:
         2e:f0:6e:2b:7a:73:fc:a1:f1:7f:2b:93:09:17:14:e4:24:d6:
         53:07:3a:12:c2:4a:27:2a:3c:5d:39:87:75:3d:ee:39:60:fe:
         43:bf:ee:78:05:e6:b3:9e:79:03:5c:cd:13:3f:97:db:3c:ab:
         33:e5:b1:01:d5:46:32:6c:59:39:ff:37:63:4d:a6:74:c3:83:
         26:d4:19:26:b4:f3:d4:df:21:7d:bb:b4:24:9c:a9:ac:fd:f2:
         eb:9d:2f:27:b8:68:05:a6:2f:b9:c5:45:66:9a:7f:9b:41:98:
         b7:30:e4:65:a2:e6:71:e5:5b:bd:a8:e1:67:8e:1b:f5:03:7a:
         3a:66:8a:27:39:58:a6:68:b5:92:34:9f:f7:0a:de:f1:88:5d:
         38:4a:2f:cc:5f:b1:6b:92:32:30:4e:13:9a:3c:23:fc:92:58:
         0c:58:e5:fe:62:e6:a6:ed:d4:09:75:7b:64:a6:b0:46:08:85:
         f2:40:31:f2
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKX13MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg2
MzQ4NzNhMjFhMGFmNDBhMDEzNTQ2NDdhZDQ5NzhkMzg0N2QzNjUwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MDkxNjE3WjAzMTEwLwYDVQQDEyg4OTkyNWVhZGZjMzc0
OTg0NGFiZDAwYzZlMmE5OTE5ZjlmYjkwMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArcTUqgAdcKcASKFWEFNfE8PlO4mRnmBuoncL5euS1wn8BMnu
0btk5TkY6IoxNyYJUNDEyyQDHslc9CvOSwJgKqicncD9z+G+/mAVxzdA+xvlPUQc
x+fR7O9I5GcQUBHQenFvtbeBReUe0CWlw6G+W2MAHD0U9x1eSz9LcJCV7hHZqQLj
nAU8AlhQcBP6yYJQVbzr1ggZiDTRG9F731ZpS+UW5D6KwNn7bd8qk/8mXl4sbyoo
s0ZkMhowNBPSRcNZM0VBO3NkS1Dch8/V2r4fABoEVN5fMURnRDL9v0eQNdEBXD5w
cdFQ8RdSdIf/lgspA9W1CTM4FO+9bUYX0wgbGQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFKbNn4dJ/Y8BAV8jPjR/nuzB6mUcMB8GA1UdIwQYMBaAFA71kgJl0auTUq5P
vH+jJzRsaL9AMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODYzNDg3
M2EyMWEwYWY0MGEwMTM1NDY0N2FkNDk3OGQzODQ3ZDM2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDI0NTg1YTQtYzc2Ni00NTA5LWEzNWEtMDI2ZjM4
MzY0YWVkLzg2MzQ4NzNhMjFhMGFmNDBhMDEzNTQ2NDdhZDQ5NzhkMzg0N2QzNjUu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMjQ1ODVhNC1jNzY2LTQ1MDktYTM1YS0wMjZm
MzgzNjRhZWQvODYzNDg3M2EyMWEwYWY0MGEwMTM1NDY0N2FkNDk3OGQzODQ3ZDM2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAHidVdWVxf2SdmCMGpHxaf5G0M+aLM2mR7a15Q2yjjskLyZE
1BUI1rleAKACb2VZ/P+VyP5kGzj7FEpkT9ACh3T9peAu6yu6Yi7wbit6c/yh8X8r
kwkXFOQk1lMHOhLCSicqPF05h3U97jlg/kO/7ngF5rOeeQNczRM/l9s8qzPlsQHV
RjJsWTn/N2NNpnTDgybUGSa089TfIX27tCScqaz98uudLye4aAWmL7nFRWaaf5tB
mLcw5GWi5nHlW72o4WeOG/UDejpmiic5WKZotZI0n/cK3vGIXThKL8xfsWuSMjBO
E5o8I/ySWAxY5f5i5qbt1Al1e2SmsEYIhfJAMfI=
-----END CERTIFICATE-----