Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/aa9626805288e743eebc32afd6c5d414b8f13c2d.mft
File:                     aa9626805288e743eebc32afd6c5d414b8f13c2d.mft (raw, json)
Hash identifier:          tuhYNxn4vPshokTgpSAsvl5A+MS5JXHyJVJUbSF/cu4=
Subject key identifier:   B4:79:2F:34:BF:D3:67:B1:B6:9E:AD:BC:73:45:EB:C9:86:4C:68:DE
Authority key identifier: F9:64:EC:EE:24:59:60:D9:D0:46:23:3D:B0:F9:5D:D9:DC:E6:DA:8E
Certificate issuer:       /CN=aa9626805288e743eebc32afd6c5d414b8f13c2d
Certificate serial:       079B2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa9626805288e743eebc32afd6c5d414b8f13c2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/aa9626805288e743eebc32afd6c5d414b8f13c2d.mft
Manifest number:          03E3
Signing time:             Mon 15 Apr 2024 06:21:07 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:20:39 +0000
Files and hashes:         1: 745d4f835cdd78a82dfbce54bc657a44fa8713ef.roa (hash: D91fYFQ1lVveBhrKlTWKecTkcHaS18ulLYrp5ykQ1aY=)
                          2: aa9626805288e743eebc32afd6c5d414b8f13c2d.crl (hash: ziyY5G4zipOB4K+EQaOHRfbwKzBOyo+gD0Fa2NUFvrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498474 (0x79b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9626805288e743eebc32afd6c5d414b8f13c2d
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:20:39 2024 GMT
        Subject: CN=47322673a97289b9d857961e2d5eb0594053a0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:27:ec:e7:11:d2:78:d5:9a:56:44:b2:f6:
                    a6:e6:7f:ff:10:21:76:0f:bf:f7:f2:ae:53:e5:ae:
                    f2:93:12:36:c3:fa:27:b2:f0:8e:88:44:c0:c1:e2:
                    8d:17:09:63:b6:cb:55:70:96:a2:58:83:2a:6a:b4:
                    59:e7:36:35:cf:6d:d8:5e:d0:1b:93:b6:49:77:d7:
                    bd:7e:d7:2c:96:95:51:da:b3:01:30:75:a7:cf:af:
                    74:b2:b6:4d:8d:f4:5f:4a:61:4a:86:74:ca:ab:e3:
                    36:e7:74:d7:8f:e2:12:08:65:1b:51:bf:ec:79:6b:
                    d3:09:54:88:56:5e:fc:92:f1:7b:1c:55:ff:36:a0:
                    be:d8:94:03:8b:24:db:8f:9c:43:9e:6b:c6:f5:84:
                    8d:85:3b:47:d2:ea:e0:4e:12:f4:5e:b7:9f:fd:f0:
                    cb:a9:2e:75:82:9e:28:b2:2e:df:63:f0:5d:9c:95:
                    8d:3e:7f:a8:d5:8e:9e:68:03:b5:75:80:f1:34:b7:
                    8d:d9:b1:60:e7:7b:4a:e4:56:90:8a:c2:cf:7e:ed:
                    80:44:cb:7a:97:9d:ae:20:17:ad:6f:e0:b5:52:fe:
                    5a:d2:e3:06:fd:0c:99:92:68:e3:19:4f:96:52:cc:
                    0e:fc:aa:d8:01:f2:da:95:3f:18:8b:97:8a:62:66:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:79:2F:34:BF:D3:67:B1:B6:9E:AD:BC:73:45:EB:C9:86:4C:68:DE
            X509v3 Authority Key Identifier:
                keyid:F9:64:EC:EE:24:59:60:D9:D0:46:23:3D:B0:F9:5D:D9:DC:E6:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa9626805288e743eebc32afd6c5d414b8f13c2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/aa9626805288e743eebc32afd6c5d414b8f13c2d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3f781fd-dcc7-48d6-b483-3cbf0920ea22/aa9626805288e743eebc32afd6c5d414b8f13c2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:48:ac:98:86:6a:4c:4c:3d:44:87:66:9b:6e:da:41:56:58:
         15:2a:14:5b:86:04:f7:2e:d8:d9:f4:40:e7:6f:a0:0e:f8:a9:
         ad:5c:cb:36:27:6b:cc:63:6d:64:e9:ea:cb:a9:b6:c0:e8:b6:
         61:60:67:fc:fb:d0:96:49:f2:3e:8a:8e:1d:cf:73:19:74:1a:
         b0:eb:29:bb:33:58:ca:2c:07:7c:b0:c2:06:ed:a0:aa:ac:e6:
         75:bf:4a:72:9d:1e:9d:fa:3c:83:96:83:4b:b7:a4:83:f5:13:
         24:a0:7a:04:c4:e3:07:0b:37:3e:d1:42:4a:e7:20:90:f5:0e:
         67:fe:8c:8d:84:e3:18:53:ee:4d:d3:1d:98:1f:ed:08:66:37:
         6f:d0:18:b4:00:01:1d:df:2f:5c:f7:6d:3f:22:30:67:b3:13:
         41:23:e4:07:83:35:df:93:2a:86:bc:57:33:00:1a:e1:ce:1e:
         ac:a4:19:6b:3f:ed:cd:54:a2:53:57:10:e1:1e:ed:47:30:cd:
         1f:47:1d:71:6b:c2:5b:f3:fe:95:f5:b9:78:66:8b:2d:66:df:
         48:c5:50:93:49:c5:41:a0:1b:5d:8b:1c:aa:13:62:df:3b:2e:
         a4:b8:47:e4:41:97:28:02:3c:4d:c4:44:95:f4:43:dd:c9:a4:
         bd:91:5d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----