Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/daff575c-5788-4bec-80cf-7a567320d367/fdb2b1334138eab1636acdd60991bb540520dcf8.mft
File:                     fdb2b1334138eab1636acdd60991bb540520dcf8.mft (raw, json)
Hash identifier:          3S8IycpxNlgVPX69yVb3yBzgiB5SPws29viFwWah7Tk=
Subject key identifier:   40:EF:EB:1E:76:C9:5D:71:A3:7D:AD:E2:B0:E7:B0:8E:E7:A1:60:42
Authority key identifier: 8F:2D:59:FA:A9:43:8F:DA:40:29:BF:F5:7C:8A:08:A7:B4:47:FA:B4
Certificate issuer:       /CN=fdb2b1334138eab1636acdd60991bb540520dcf8
Certificate serial:       049875
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdb2b1334138eab1636acdd60991bb540520dcf8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/daff575c-5788-4bec-80cf-7a567320d367/fdb2b1334138eab1636acdd60991bb540520dcf8.mft
Manifest number:          0251
Signing time:             Mon 15 Apr 2024 03:20:53 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 04:13:17 +0000
Files and hashes:         1: fdb2b1334138eab1636acdd60991bb540520dcf8.crl (hash: fpaDrjwO57jjjtGY+9ckAfHs7XFUsCefMzfrwpMBeRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301173 (0x49875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdb2b1334138eab1636acdd60991bb540520dcf8
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 04:13:17 2024 GMT
        Subject: CN=9c4e1a5a8455a53bcfb5c0a6d7643e177a2d3942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:6e:07:e5:f0:88:9b:11:37:d6:e5:d0:fc:
                    9e:71:4e:be:6d:5c:60:95:b1:6d:b4:3c:e5:a7:0d:
                    6f:9b:0b:56:bf:a3:42:34:f4:8c:f5:73:79:39:c0:
                    c0:fc:09:24:3f:bc:4a:fc:2c:e0:81:8d:fb:f4:54:
                    06:ab:ba:47:64:a2:e4:b0:cf:e3:e9:16:d9:0f:fb:
                    f6:ea:a8:49:43:c7:33:a3:d1:9d:bd:3c:cb:c3:8d:
                    23:1c:2e:82:db:3c:f0:30:0d:de:9d:9e:a7:26:eb:
                    85:84:df:41:33:39:86:6a:4d:56:74:d2:64:a6:a2:
                    70:37:5a:1f:7d:58:9b:bb:74:ce:30:01:2c:41:56:
                    ae:9a:c8:c6:cf:16:8e:69:2f:8b:0e:5f:41:06:b9:
                    a5:ec:f9:33:43:ce:e7:d1:80:28:dc:39:11:1e:9f:
                    e2:5a:fb:b6:1b:83:b3:26:fb:4d:10:3d:09:63:b6:
                    e3:74:62:8c:e1:65:73:67:dd:6c:f0:c7:06:d7:d8:
                    25:87:62:30:52:20:28:f0:71:1c:ff:c1:86:ec:68:
                    95:58:0b:60:0c:0f:30:59:9a:70:44:20:dd:93:89:
                    60:d1:ec:d0:61:d0:b8:cf:c1:6c:71:5a:a2:fe:e4:
                    ee:d7:05:27:9d:1e:37:f4:84:38:8e:d6:0d:f5:77:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EF:EB:1E:76:C9:5D:71:A3:7D:AD:E2:B0:E7:B0:8E:E7:A1:60:42
            X509v3 Authority Key Identifier:
                keyid:8F:2D:59:FA:A9:43:8F:DA:40:29:BF:F5:7C:8A:08:A7:B4:47:FA:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdb2b1334138eab1636acdd60991bb540520dcf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/daff575c-5788-4bec-80cf-7a567320d367/fdb2b1334138eab1636acdd60991bb540520dcf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/daff575c-5788-4bec-80cf-7a567320d367/fdb2b1334138eab1636acdd60991bb540520dcf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0f:c8:39:dd:bb:07:ba:01:3f:e5:17:5f:6d:e4:d3:42:0c:
         79:fa:7a:46:d5:23:23:39:60:5a:fc:82:d8:14:e3:7f:33:16:
         f7:c2:79:ba:22:01:bf:46:cb:6d:b3:73:ed:dc:13:2c:79:10:
         f8:2a:b6:20:37:66:96:ae:5d:7a:17:30:3a:f3:3a:d7:e1:0f:
         50:3e:17:eb:00:be:55:66:36:a9:90:ed:ba:6c:e0:ba:88:11:
         20:f7:f5:f5:5c:cb:b5:4e:c2:be:f9:83:1e:48:0a:eb:63:81:
         1e:33:b3:dc:9a:de:a8:21:11:53:2a:b3:41:e1:75:dc:6a:46:
         4e:9e:60:d0:9a:cf:31:30:c5:7b:10:56:cb:12:d9:f2:0c:92:
         54:d4:7a:95:17:ed:7e:6e:3e:5f:d8:1d:b8:67:3c:a0:59:6d:
         ea:68:43:95:9f:76:25:96:3a:21:85:c6:30:36:31:38:35:58:
         60:22:2f:59:8a:94:52:c0:1c:52:15:7b:5f:78:c6:ca:b2:4d:
         03:e4:ba:c8:5d:48:de:a3:89:b2:0e:97:49:a0:02:44:e9:d5:
         c3:e6:ff:47:3b:41:76:28:87:c8:71:f2:ba:0b:db:7e:2e:f5:
         d3:ac:57:98:f4:38:0b:79:bc:f1:0c:09:6f:2c:84:53:b3:bd:
         69:bd:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----