Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.mft
File:                     962886d2caf49497dff544bb6ba251bf1ffa6220.mft (raw, json)
Hash identifier:          d97NQBJIkahu6UhcY2p55wT4JNYXRiHQFPU/7xQqI/Y=
Subject key identifier:   0C:66:71:26:47:78:C3:99:B3:8D:2C:70:A5:EC:2F:A8:5F:30:A9:5E
Authority key identifier: EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7
Certificate issuer:       /CN=962886d2caf49497dff544bb6ba251bf1ffa6220
Certificate serial:       243BC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.mft
Manifest number:          0E33
Signing time:             Mon 15 Apr 2024 09:20:35 +0000
Manifest this update:     Mon 15 Apr 2024 08:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 10:03:18 +0000
Files and hashes:         1: 811ef01a94123e75cfc32c4f3e39e752e5cc6576.roa (hash: kwSC3pE9waUzpuOkGwQgx5XaRHvbRxSVwcjyqvqwVwM=)
                          2: 962886d2caf49497dff544bb6ba251bf1ffa6220.crl (hash: jJrntTDeLZqwxo4O5TmCq4mUZiTeAqEQ1kLOo9nOBfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374597 (0x243bc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962886d2caf49497dff544bb6ba251bf1ffa6220
        Validity
            Not Before: Apr 15 08:20:18 2024 GMT
            Not After : Apr 18 10:03:18 2024 GMT
        Subject: CN=0a39ab17e010f8114ef8aecbc3343e1638204b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:c4:53:2d:ab:fe:89:2c:95:0a:a4:06:80:
                    67:d3:25:f1:ca:16:0f:db:df:e4:f3:98:b7:76:46:
                    da:6a:ba:1e:31:e3:1e:14:d7:d3:07:50:4d:27:aa:
                    3b:f6:a9:91:27:57:fa:c9:90:59:b5:2b:6a:27:d8:
                    6d:30:5d:14:4f:d6:19:e6:f6:72:05:dc:13:77:ef:
                    a0:72:26:47:02:e4:3e:40:fe:e5:76:78:7a:16:0d:
                    bf:f9:ed:66:ef:26:75:41:b9:c1:aa:16:73:76:30:
                    57:9b:3d:a3:89:08:57:57:54:0a:90:1c:87:4f:ba:
                    fa:5d:56:2f:89:a6:c1:fb:18:d6:eb:7d:07:33:31:
                    59:cb:6b:93:c8:a2:d8:97:34:56:dc:7d:d4:a1:d8:
                    05:0d:9c:c9:7a:ea:df:4c:c4:55:88:99:a0:13:59:
                    a9:cb:3a:65:eb:1f:ec:0a:21:e7:3f:e0:7f:f0:22:
                    e1:13:03:1d:3a:50:7c:e9:8a:5d:8c:d6:7f:5b:37:
                    7c:de:f8:a7:a5:a0:28:d6:3b:4a:7f:39:e0:3f:fd:
                    04:83:20:34:0e:0c:a7:0b:97:24:67:47:39:a4:e9:
                    56:46:1d:b2:f5:dd:5e:ef:bf:97:fb:cd:1d:26:40:
                    80:4f:ec:12:e9:45:c0:db:b1:fc:b9:2c:82:22:27:
                    19:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:71:26:47:78:C3:99:B3:8D:2C:70:A5:EC:2F:A8:5F:30:A9:5E
            X509v3 Authority Key Identifier:
                keyid:EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:a0:e0:60:5f:27:7f:72:dc:fa:5c:03:d8:bc:07:9a:63:
         5f:1f:90:1a:22:72:9f:e6:ff:a6:1e:65:ac:42:ed:c2:32:fe:
         76:bc:be:08:11:fd:14:a8:bd:5e:09:af:20:1d:fb:eb:2f:96:
         f4:12:e6:e4:ea:aa:c8:39:8b:4d:91:c6:3c:6f:66:79:26:42:
         a9:cb:fd:9f:38:57:91:d8:d0:db:e6:88:b7:8d:2f:0b:d6:8a:
         98:62:b3:c2:4a:fb:bb:50:4f:85:2b:14:2e:69:20:66:bd:da:
         5f:ca:0b:17:ee:7b:9a:bd:4f:0f:05:11:6c:a2:28:58:d3:84:
         bc:bc:f9:62:9e:97:0f:ab:e2:ba:8d:52:c7:b5:70:7e:73:d5:
         41:af:a2:40:7c:4b:3a:cf:ca:a8:19:f5:7c:fa:56:9c:c3:e3:
         64:9a:00:01:a0:f1:cb:38:d4:56:1a:02:5f:1c:fe:62:0f:62:
         70:f9:8d:19:da:2f:5a:d0:e5:e5:ab:d9:39:e7:b2:88:d6:0b:
         22:70:96:e1:84:ff:8a:bd:d2:52:19:97:7a:71:82:c0:d5:d7:
         84:2c:cd:ab:a5:12:0e:81:c0:e4:d6:a7:89:9c:9c:38:b8:97:
         cc:dc:17:ba:7c:5b:f2:69:dc:41:fb:29:e8:1b:73:b1:81:b0:
         01:77:42:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----