Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/291eabb216c39d9d6cc2d1dc5a50ad142670df98.mft
File:                     291eabb216c39d9d6cc2d1dc5a50ad142670df98.mft (raw, json)
Hash identifier:          g+aMsYtUOFjWHoHb+Mm1jIvL8FS6vU0KM5cV6WKTIsQ=
Subject key identifier:   88:96:F8:6C:E1:4D:17:F9:E5:19:13:1F:82:66:A7:24:0E:1F:CA:E6
Authority key identifier: 76:83:39:AA:60:E0:A5:33:3C:70:15:93:6C:55:82:64:03:14:EC:A8
Certificate issuer:       /CN=291eabb216c39d9d6cc2d1dc5a50ad142670df98
Certificate serial:       1AC52E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291eabb216c39d9d6cc2d1dc5a50ad142670df98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/291eabb216c39d9d6cc2d1dc5a50ad142670df98.mft
Manifest number:          0DA0
Signing time:             Mon 15 Apr 2024 03:20:57 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 03:44:17 +0000
Files and hashes:         1: 291eabb216c39d9d6cc2d1dc5a50ad142670df98.crl (hash: /Vtc1Ip7wY1NKIwTFYHtb1hX4UD6BS7CXxyZ+67ThzM=)
                          2: 42002b1159ea8dbc834bba462fa95cc74ee86bc0.roa (hash: 4NfFlyCyLT9c4PsfZW44ICvUKDTfypZsqoPddJXFGkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754414 (0x1ac52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291eabb216c39d9d6cc2d1dc5a50ad142670df98
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 03:44:17 2024 GMT
        Subject: CN=5eff23691bf60501d1e16c795e5cc03f374ff8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a2:42:66:4d:3a:af:26:39:87:62:0f:c2:d3:
                    c0:fb:fe:a8:90:cc:0f:c2:bd:89:c9:d2:d4:d6:8c:
                    97:d0:d2:78:34:7e:32:01:1d:04:7e:23:d1:82:72:
                    36:89:d6:32:5c:a1:f0:dc:38:03:77:7c:9d:40:f8:
                    6c:ec:0b:d2:14:eb:d7:45:f4:83:3e:be:5b:7e:96:
                    eb:9b:57:a0:0b:b8:17:08:64:f1:db:47:c6:d0:dd:
                    b5:8e:8a:fb:db:56:78:fe:1b:e9:bd:52:28:72:51:
                    98:34:c4:a0:86:a5:56:2b:33:8e:e9:76:8b:56:8c:
                    b2:07:bb:79:e9:9d:cf:d2:c0:7e:75:61:23:08:b8:
                    d6:57:bf:e8:22:df:71:19:16:a8:38:9a:08:0e:5d:
                    e6:66:cc:ba:85:94:f4:4e:e0:4a:51:1c:53:6b:04:
                    9d:b9:68:f0:b7:36:87:ed:96:78:06:3c:c2:3f:10:
                    c1:72:08:85:a9:be:6f:92:7f:da:a3:f7:53:f4:48:
                    1a:ac:88:8b:6b:e2:2c:2c:8d:d5:0e:91:f3:c4:9e:
                    f3:10:43:8d:c0:c1:d2:16:f2:5a:2d:7f:b0:8d:78:
                    3a:dd:9e:44:5d:c3:d7:8b:06:11:e8:e8:37:7c:90:
                    17:41:dc:e9:d2:69:9f:d5:ee:5a:3d:f8:c1:da:5d:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:96:F8:6C:E1:4D:17:F9:E5:19:13:1F:82:66:A7:24:0E:1F:CA:E6
            X509v3 Authority Key Identifier:
                keyid:76:83:39:AA:60:E0:A5:33:3C:70:15:93:6C:55:82:64:03:14:EC:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291eabb216c39d9d6cc2d1dc5a50ad142670df98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/291eabb216c39d9d6cc2d1dc5a50ad142670df98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d737c8e5-cb41-4fb2-b6cc-3ca701e3900d/291eabb216c39d9d6cc2d1dc5a50ad142670df98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:01:04:8f:6e:b7:15:cc:d7:dd:a1:c3:80:f2:3d:5c:8a:22:
         48:7c:34:6b:c4:41:67:05:ad:0d:08:26:90:94:cf:64:df:fa:
         3a:86:8e:a6:cd:2a:13:3e:21:ec:da:fa:9d:3f:f7:70:99:33:
         ab:47:ad:58:28:2b:fe:fe:12:d6:33:f8:52:d8:63:30:b3:65:
         5b:b7:52:8b:3a:f5:18:56:f0:32:fc:f0:88:a9:23:46:d5:e2:
         77:f0:a1:25:9b:5e:38:b2:c3:6e:96:83:13:28:1d:8b:19:58:
         d6:2a:7d:2d:a6:93:c9:20:a3:cf:b5:49:27:49:dd:83:59:37:
         4c:8e:e0:ec:a1:e9:40:b8:92:51:d6:67:06:f7:17:11:8a:37:
         59:e7:23:da:91:b0:a5:4a:88:7f:63:9a:f0:27:20:da:bf:a4:
         3b:b2:9c:c2:1f:32:1f:ba:0a:e2:62:a6:20:dd:e8:20:42:d5:
         2b:78:d4:15:a6:fd:02:92:41:4d:b6:93:2d:b9:93:b1:5b:5b:
         34:e8:34:59:50:34:0f:28:59:f8:17:09:c4:85:0b:61:5a:13:
         01:0d:b9:02:f5:05:6a:5c:39:57:a3:ab:d5:68:d3:7d:a0:1a:
         b7:13:c6:72:28:dd:66:95:ad:c8:78:6e:c1:e8:34:5f:ee:83:
         44:29:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----