Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8ed7bc0-daf1-46c8-8e41-73fd916c745a/227fd99f85ce60d1b1b511e37e626686b25a57d4.mft
File:                     227fd99f85ce60d1b1b511e37e626686b25a57d4.mft (raw, json)
Hash identifier:          DnHlYC5hL/bYpwzHfSZuZX7HEtjYFKwJrr7xNEYvCf0=
Subject key identifier:   D8:11:71:1F:D7:78:B0:83:C3:64:45:88:AE:F6:4A:65:34:49:47:DB
Authority key identifier: 25:59:35:6D:11:35:FC:54:3C:F0:65:CA:2F:CC:FF:B4:60:54:75:08
Certificate issuer:       /CN=227fd99f85ce60d1b1b511e37e626686b25a57d4
Certificate serial:       2223B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/227fd99f85ce60d1b1b511e37e626686b25a57d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8ed7bc0-daf1-46c8-8e41-73fd916c745a/227fd99f85ce60d1b1b511e37e626686b25a57d4.mft
Manifest number:          0DF5
Signing time:             Mon 15 Apr 2024 06:21:05 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 08:51:39 +0000
Files and hashes:         1: 227fd99f85ce60d1b1b511e37e626686b25a57d4.crl (hash: J9veEVR9ba5pI3blW4Y53bQUJrtcKHkCRqcdeVeUVJY=)
                          2: 7f3878c199a8c32435b93fa6a721d7752671e0cd.roa (hash: hmaFAE1JM55g/DSTsYcO2aei/z+s9y80li7qeOQBRUQ=)
                          3: c51deaa8c7029566db41f9a33e3e3ddb25922086.roa (hash: tj9TGfOn4QJq4LEcLqJgL7/MAfo23Vv/nY+TtTXnnhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237368 (0x2223b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227fd99f85ce60d1b1b511e37e626686b25a57d4
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 08:51:39 2024 GMT
        Subject: CN=d9f8491557f56414548eadcd907631c3824528c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:bd:2d:a6:8b:55:6c:23:05:cf:b5:a9:58:
                    2e:bf:c2:e4:51:bf:24:2e:7a:22:53:9d:af:4d:14:
                    9e:fa:f8:29:1e:2e:4a:94:84:c1:4c:6f:93:83:d1:
                    bc:12:0d:2c:0b:fd:85:9f:0c:3f:96:e7:5c:22:b7:
                    fd:e7:69:9b:3c:d9:e8:7e:3f:da:1a:1c:12:74:b7:
                    1f:65:05:ce:61:06:5a:53:f9:09:cc:0e:22:f2:ae:
                    bd:66:d3:f6:d5:c7:c5:e2:95:fe:f3:d6:89:0e:ec:
                    33:96:88:7e:9b:7a:ca:80:a9:b9:62:a2:e2:c5:38:
                    33:d2:93:f3:e6:f6:93:af:1d:5e:15:22:87:46:f2:
                    ef:db:83:6f:60:ce:09:13:0f:f5:e3:60:bf:1d:be:
                    93:7d:11:76:49:b4:10:38:2a:ca:48:8d:b1:a7:63:
                    fe:e2:49:63:08:85:cb:1e:75:8b:14:c9:23:de:80:
                    da:d8:d1:31:cb:ee:1b:06:0f:dd:8e:ea:cc:21:c1:
                    d7:61:4c:c7:01:02:18:6c:c7:ca:9d:68:7c:cf:65:
                    bc:92:7e:7e:f8:e7:bf:46:60:6a:41:33:b6:fc:a9:
                    98:fa:7e:22:27:ee:dd:fa:16:d4:2f:7e:bf:c0:4c:
                    37:81:92:98:dc:a1:62:bb:21:28:3d:b9:8b:34:6b:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:11:71:1F:D7:78:B0:83:C3:64:45:88:AE:F6:4A:65:34:49:47:DB
            X509v3 Authority Key Identifier:
                keyid:25:59:35:6D:11:35:FC:54:3C:F0:65:CA:2F:CC:FF:B4:60:54:75:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/227fd99f85ce60d1b1b511e37e626686b25a57d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ed7bc0-daf1-46c8-8e41-73fd916c745a/227fd99f85ce60d1b1b511e37e626686b25a57d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8ed7bc0-daf1-46c8-8e41-73fd916c745a/227fd99f85ce60d1b1b511e37e626686b25a57d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:69:04:84:fb:44:00:71:9a:0f:53:48:58:44:ce:82:a4:
         79:46:97:e5:f9:f4:a9:c6:f7:c8:69:09:73:9c:a6:b0:59:9e:
         88:87:73:0c:f6:7a:10:7a:4d:0c:cd:69:8f:57:2a:80:56:64:
         29:d9:23:83:d4:77:13:d3:ba:3c:0a:1c:0f:bd:7a:1d:51:bf:
         79:70:b3:0a:85:79:5a:be:08:08:0c:0c:3d:9e:44:65:f3:7d:
         b9:57:5c:79:61:da:e7:29:2c:cc:e4:33:bc:fd:0e:7a:df:5b:
         f6:92:1e:59:fe:2a:50:f2:2d:9a:ab:1d:54:19:67:5e:3d:a5:
         fc:17:d8:f9:f9:85:c5:38:4b:97:1a:40:cd:b6:57:e1:95:ae:
         11:be:22:ec:e3:f4:93:49:b2:1c:83:b3:ee:4f:eb:b8:4c:bf:
         69:43:f9:92:1c:fa:8c:f7:f5:ce:3f:9f:2c:7c:4a:b6:bc:71:
         b7:76:76:87:2f:55:48:d3:39:d5:d8:ca:8b:7c:a3:05:82:c1:
         b4:bb:c1:d1:d2:03:2b:c5:fe:04:5a:e8:f7:9c:d8:d4:7c:4c:
         8e:9a:9d:df:8c:cd:a4:4d:e1:8d:84:be:2c:45:99:77:bd:65:
         e6:05:41:e8:1f:03:9c:de:58:4b:dd:09:5c:96:14:e8:6d:b0:
         22:1f:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----