Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.mft
File:                     2a96158adc7e9d3c9c541c010ab3e9435225e88f.mft (raw, json)
Hash identifier:          BsNtzCLg3P93tgMwUkVkV9m5p85HkdNugAEFAzKIuL4=
Subject key identifier:   CA:BD:26:F8:FD:60:5B:CB:14:01:43:47:1F:B3:AF:BE:8C:07:7C:85
Authority key identifier: C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
Certificate issuer:       /CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
Certificate serial:       160CD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.mft
Manifest number:          0B94
Signing time:             Mon 15 Apr 2024 11:21:28 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 12:51:18 +0000
Files and hashes:         1: 2a96158adc7e9d3c9c541c010ab3e9435225e88f.crl (hash: hJt9NzxNb4qgdxdZ1hG0stBL4q1qHuibM0EAc5QpSKY=)
                          2: 85f7275c68a03cdbebda423da97b0e9c9b850d6f.roa (hash: SV04KMKjtDfi9DgNzscwYkUPEv+x8QMhDjeXYNPQYTA=)
                          3: bb9bec3652760f53bf0fa06aace38822ed140b73.roa (hash: 6tMVdYAbRKczhJDpmzT1drLiS1xVVRTpUCxpacgk/kw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445078 (0x160cd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 12:51:18 2024 GMT
        Subject: CN=5b97f14cd59ee4f62bf2271b919ae70fa04ba64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:10:ef:43:a7:01:13:7a:35:80:df:3c:31:
                    cb:8e:28:c6:3f:94:e8:91:58:cb:b0:7c:29:53:bf:
                    8e:42:99:7b:d7:64:be:93:db:f1:65:20:fe:80:0b:
                    c1:75:1c:83:c9:d2:fe:58:dd:14:ce:b3:ae:9b:9f:
                    9e:11:f6:65:0e:c3:30:6f:7f:a3:16:e2:4c:d3:9a:
                    e4:a9:f2:3b:02:4f:aa:60:e1:88:a0:0e:91:8d:ec:
                    2b:64:5d:3f:5b:0d:70:20:51:d1:c5:6d:aa:56:94:
                    74:44:3d:7c:95:5e:a5:72:dd:b6:10:53:b6:01:9b:
                    31:c7:27:82:9d:a3:45:1e:4c:27:62:0d:7d:65:40:
                    d3:f5:c5:8e:80:c7:d1:a6:02:12:f3:e8:6d:f7:e0:
                    59:2a:eb:88:3b:7c:6b:d0:f9:72:64:d0:a2:7f:6d:
                    3c:14:68:71:59:5e:62:c1:c0:cb:22:cd:69:34:5d:
                    e5:62:49:31:67:1f:b5:66:2f:0c:e8:cc:36:18:6d:
                    4f:a6:f4:5d:cf:a9:64:6c:d6:c3:6b:49:db:5b:a9:
                    a2:9f:08:77:ee:b1:21:77:0f:5a:20:7d:30:32:18:
                    32:89:14:97:7a:08:9f:14:65:57:cb:66:0c:d6:fe:
                    5d:5b:94:93:27:a2:21:5c:e9:02:57:4f:fd:65:1a:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:26:F8:FD:60:5B:CB:14:01:43:47:1F:B3:AF:BE:8C:07:7C:85
            X509v3 Authority Key Identifier:
                keyid:C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1e:71:8e:8f:c9:c9:28:d7:01:ff:d6:c5:95:59:13:61:c5:
         76:d6:7d:25:f9:0b:b3:e2:5b:8c:e2:16:5f:38:80:2e:65:83:
         90:e8:83:bc:67:be:02:27:13:c4:ea:eb:41:c4:01:33:e1:32:
         15:a8:9a:28:d2:02:c0:ce:ff:0d:ad:e6:76:e5:93:f5:3e:e6:
         47:08:e9:f3:90:46:cb:75:79:39:be:71:2a:78:13:99:5c:0f:
         b2:22:e0:5a:3b:2e:58:02:12:4c:5a:6f:74:ab:03:19:3b:a0:
         3a:4b:76:74:01:bd:c0:e0:e5:4d:67:8f:7f:47:bc:5c:ae:39:
         62:dc:07:7f:ec:2c:0d:a3:2e:2b:5a:ea:9b:43:1c:8b:c8:76:
         4a:fe:7c:f1:2d:cd:d7:dc:bc:71:f7:6a:76:ec:8c:29:06:58:
         bd:d2:47:dc:4e:d6:9c:86:be:20:33:0e:ba:6b:40:45:2e:4a:
         c1:85:cb:fd:ec:82:65:90:be:4d:16:10:2b:1a:5d:19:49:d5:
         de:7d:52:04:3f:46:07:6c:15:7b:80:6b:43:6c:32:64:13:5e:
         27:c5:cc:4f:e4:5e:24:3d:b2:6d:86:58:43:87:d0:b3:92:b5:
         d5:72:95:44:5b:37:f5:0b:2c:e4:48:5a:71:57:8b:20:b6:1e:
         67:ed:d3:12
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDFgzWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
OTYxNThhZGM3ZTlkM2M5YzU0MWMwMTBhYjNlOTQzNTIyNWU4OGYwHhcNMjQwNDE1
MTAyMDE4WhcNMjQwNDE4MTI1MTE4WjAzMTEwLwYDVQQDEyg1Yjk3ZjE0Y2Q1OWVl
NGY2MmJmMjI3MWI5MTlhZTcwZmEwNGJhNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoo8Q70OnARN6NYDfPDHLjijGP5TokVjLsHwpU7+OQpl712S+
k9vxZSD+gAvBdRyDydL+WN0UzrOum5+eEfZlDsMwb3+jFuJM05rkqfI7Ak+qYOGI
oA6RjewrZF0/Ww1wIFHRxW2qVpR0RD18lV6lct22EFO2AZsxxyeCnaNFHkwnYg19
ZUDT9cWOgMfRpgIS8+ht9+BZKuuIO3xr0PlyZNCif208FGhxWV5iwcDLIs1pNF3l
YkkxZx+1Zi8M6Mw2GG1PpvRdz6lkbNbDa0nbW6minwh37rEhdw9aIH0wMhgyiRSX
egifFGVXy2YM1v5dW5STJ6IhXOkCV0/9ZRpLHwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFMq9Jvj9YFvLFAFDRx+zr76MB3yFMB8GA1UdIwQYMBaAFMGM8bgQeGkcwgKM
H0qkdOi9vA54MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmE5NjE1
OGFkYzdlOWQzYzljNTQxYzAxMGFiM2U5NDM1MjI1ZTg4Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGU0ZTU2MjAtZDkwMC00NjA2LTgwMTYtZjNmZWEy
NWVkMDUxLzJhOTYxNThhZGM3ZTlkM2M5YzU0MWMwMTBhYjNlOTQzNTIyNWU4OGYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZTRlNTYyMC1kOTAwLTQ2MDYtODAxNi1mM2Zl
YTI1ZWQwNTEvMmE5NjE1OGFkYzdlOWQzYzljNTQxYzAxMGFiM2U5NDM1MjI1ZTg4
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGYecY6Pycko1wH/1sWVWRNhxXbWfSX5C7PiW4ziFl84gC5l
g5Dog7xnvgInE8Tq60HEATPhMhWomijSAsDO/w2t5nblk/U+5kcI6fOQRst1eTm+
cSp4E5lcD7Ii4Fo7LlgCEkxab3SrAxk7oDpLdnQBvcDg5U1nj39HvFyuOWLcB3/s
LA2jLita6ptDHIvIdkr+fPEtzdfcvHH3anbsjCkGWL3SR9xO1pyGviAzDrprQEUu
SsGFy/3sgmWQvk0WECsaXRlJ1d59UgQ/RgdsFXuAa0NsMmQTXifFzE/kXiQ9sm2G
WEOH0LOStdVylURbN/ULLORIWnFXiyC2Hmft0xI=
-----END CERTIFICATE-----