Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.mft
File:                     a2f5abf58c957a2bfcf51b30227c2c814dce93e0.mft (raw, json)
Hash identifier:          52rC+GlvZ559QUt6d3gt0aCYXRy66ZZaJLfGNtDwsZk=
Subject key identifier:   F0:B9:55:20:B4:63:5A:80:8A:D8:D3:01:B8:92:24:49:95:60:B0:E6
Authority key identifier: B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Certificate issuer:       /CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Certificate serial:       28C13E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.mft
Manifest number:          0E23
Signing time:             Mon 15 Apr 2024 07:21:29 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 09:04:17 +0000
Files and hashes:         1: 22e8ff1ca6b1f11d7346c4fe1686cb154332ce14.roa (hash: Vz2SNoiDndDffFZ2TSMpCzasc2WVkk0R+2FR44IHw0I=)
                          2: 65cdffcc5354d6d8cf45ae6260bb38764e581529.roa (hash: Bshzmz4P45y7blfXnc5b8UTID4GXV/4N/+coGJPyRWw=)
                          3: 785cca6346baea1edf93b264c870f84b206e192c.roa (hash: S0lN2JXHVLbw1lKzTeg8NcQ0Tv1wso9Sz8MRGBJShHc=)
                          4: a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl (hash: HC23aZ+VyJsXMfVqbTpaqgqsZechOC25PaNlQemzAh8=)
                          5: eac3b1e5e2bfe04f4e29d30cb7e65983343bad94.roa (hash: T8P59HJJrvpGMH32oP1kU7BkO5iGxQPX/01zhBkf5PE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2670910 (0x28c13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 09:04:17 2024 GMT
        Subject: CN=7d000b41fba81a61830b1592297ce97d74cf8795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:ec:83:95:a1:a2:ee:9c:90:c6:87:6b:4e:
                    aa:70:02:9a:93:9c:54:97:4e:07:fd:66:40:51:1c:
                    47:6c:df:cc:63:b5:b5:f4:79:b8:65:ea:e3:88:32:
                    fa:db:58:e4:75:da:6a:62:9a:87:dd:20:d3:e7:d9:
                    e5:99:8e:ba:39:42:d0:5b:a0:8f:31:04:81:aa:57:
                    7b:03:0e:4a:7d:e9:69:6c:bd:0e:4f:b3:bc:fb:7c:
                    81:77:59:9d:5e:26:1d:3c:f7:9f:74:d1:46:02:b9:
                    dd:01:b8:2e:61:d7:ba:f1:5e:4b:ba:b9:c9:fd:5a:
                    86:5f:6e:4e:25:28:bd:a9:ad:62:10:90:d8:61:be:
                    0d:2c:46:23:7c:4f:87:f6:29:c7:a3:1f:0c:8b:78:
                    66:cc:e4:28:c0:a5:12:ee:23:5a:b3:53:c9:31:50:
                    e8:43:5b:0b:cf:1a:27:22:97:89:65:ae:72:cd:f8:
                    be:ff:8d:73:ce:c8:ff:5b:11:5b:5d:53:ac:8a:09:
                    8b:a3:18:db:3c:e0:5d:0b:64:53:c2:fe:f2:d8:ee:
                    37:00:57:60:d0:84:08:9b:46:98:af:7d:b7:03:74:
                    30:7e:9d:36:a3:90:6e:f0:1f:79:ec:38:e0:0f:d6:
                    a9:a8:a8:c5:c0:f2:0d:90:79:28:02:47:55:fb:f2:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B9:55:20:B4:63:5A:80:8A:D8:D3:01:B8:92:24:49:95:60:B0:E6
            X509v3 Authority Key Identifier:
                keyid:B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:ae:ae:b7:62:04:7a:c0:27:ce:b0:06:db:67:69:53:df:
         1f:d8:63:02:25:72:0b:df:3b:e3:14:80:2f:bd:a4:f1:35:d4:
         a7:e1:12:89:44:ad:3b:c2:93:d8:6a:e3:3c:82:b2:4e:fb:06:
         f9:47:6b:17:28:cd:a2:56:3a:6c:b9:4b:91:46:c8:07:ff:96:
         b0:2b:8b:cc:ad:c3:80:4b:ca:6e:1a:1c:7c:0b:97:c7:87:c4:
         43:2d:95:df:80:1e:8b:cc:d5:cc:fa:fd:4c:ef:3f:af:46:0c:
         a3:a3:86:0e:55:cf:d5:65:b8:2d:74:0f:f3:34:cf:f5:b7:06:
         2c:51:86:d3:f9:5a:08:b4:e9:ca:61:45:ff:81:29:b6:c7:df:
         6f:9a:7d:1a:0c:f0:5c:b7:5f:3c:9a:24:b5:6e:a9:e5:c1:c0:
         2b:26:41:03:0b:f0:b4:7b:78:96:f7:8f:11:93:20:28:5d:27:
         d1:a5:a4:be:e6:43:d7:18:de:8e:f8:9e:aa:c8:b2:01:42:c9:
         09:98:84:0a:fc:40:6a:9c:9a:2a:61:f6:b3:3a:43:f3:c2:f8:
         3b:1c:6d:4d:ad:b4:50:7d:2c:4d:d7:43:48:fa:b5:e5:a9:79:
         aa:36:1e:f2:c4:11:ad:54:67:72:c9:b7:db:f6:01:fa:ed:94:
         35:88:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----