Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/def51dcf-50fc-4d4e-afc0-361d1aeebac3/21b1658340fcfb1906b17edd897b8e8385d6a4ef.mft
File:                     21b1658340fcfb1906b17edd897b8e8385d6a4ef.mft (raw, json)
Hash identifier:          mFnO7UorYuTJm3t/yXLcoc1NUCU5RYNVJsNmYtqVryc=
Subject key identifier:   56:62:C9:37:BF:7B:6E:28:CB:FF:62:8E:AD:AB:C4:2B:1F:34:58:06
Authority key identifier: AF:41:F5:00:4B:1A:DA:32:BF:D6:07:10:10:CB:4B:F1:CB:22:9D:33
Certificate issuer:       /CN=21b1658340fcfb1906b17edd897b8e8385d6a4ef
Certificate serial:       270C13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21b1658340fcfb1906b17edd897b8e8385d6a4ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/def51dcf-50fc-4d4e-afc0-361d1aeebac3/21b1658340fcfb1906b17edd897b8e8385d6a4ef.mft
Manifest number:          0E07
Signing time:             Mon 15 Apr 2024 11:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:47:18 +0000
Files and hashes:         1: 21b1658340fcfb1906b17edd897b8e8385d6a4ef.crl (hash: f7ByyGDuP1EKubBM/zI83HXSNL8OMAj613LOGqUZuHw=)
                          2: 5dc2c0561841f5f49faba17080296956ce09a81a.roa (hash: lJ1L/5P+TK91VsCc84vqpzT3vHDmD7oNmb9kzrBtCRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558995 (0x270c13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21b1658340fcfb1906b17edd897b8e8385d6a4ef
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:47:18 2024 GMT
        Subject: CN=03306492e2dea6d3b88e5239708f708743dba865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:e7:53:2b:11:c7:17:ec:ff:8e:41:80:95:
                    d7:35:00:25:e9:e5:06:20:b5:bb:cc:64:fe:55:da:
                    81:87:86:49:3a:61:b5:f0:ca:43:a4:ee:88:ee:56:
                    e0:c3:13:51:7a:d0:4c:34:5e:7b:82:59:0d:39:2e:
                    2a:11:41:7c:2f:e4:55:1f:46:65:ea:e4:65:3b:c4:
                    64:29:b7:84:5f:cf:7a:fe:40:60:36:4e:d5:db:01:
                    be:b0:54:04:93:3a:43:1e:82:42:08:db:83:8f:41:
                    5d:3c:88:e6:1e:24:cb:49:5f:ed:fa:32:61:da:95:
                    a9:ba:c8:3b:b1:ff:64:ec:ec:1c:0f:4d:0f:2b:6d:
                    81:17:77:28:c7:c0:0c:ad:ba:05:05:36:5c:6c:be:
                    df:c6:dd:a4:99:05:af:cb:be:f7:63:5b:6f:d0:6d:
                    e7:b1:37:79:9f:c7:79:bc:43:78:85:c8:fa:6a:83:
                    9f:99:9f:67:40:4f:70:fa:b1:e6:a5:b3:38:6c:67:
                    57:4f:0e:c3:c8:49:d5:77:31:cf:8d:08:0e:b2:0d:
                    84:01:5e:df:2a:66:66:08:6f:a8:60:de:d4:9b:db:
                    65:a6:9c:71:7c:ab:60:4b:86:bb:fb:21:8e:5f:2d:
                    44:b8:c2:98:55:d5:0e:75:37:79:cc:43:0d:50:f8:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:62:C9:37:BF:7B:6E:28:CB:FF:62:8E:AD:AB:C4:2B:1F:34:58:06
            X509v3 Authority Key Identifier:
                keyid:AF:41:F5:00:4B:1A:DA:32:BF:D6:07:10:10:CB:4B:F1:CB:22:9D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21b1658340fcfb1906b17edd897b8e8385d6a4ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/def51dcf-50fc-4d4e-afc0-361d1aeebac3/21b1658340fcfb1906b17edd897b8e8385d6a4ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/def51dcf-50fc-4d4e-afc0-361d1aeebac3/21b1658340fcfb1906b17edd897b8e8385d6a4ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:b9:ac:81:0f:b8:20:bb:70:ba:77:c7:15:cd:55:49:25:
         59:bf:4f:8c:d0:8d:cf:7f:ce:d6:5e:1d:f0:f0:af:23:d0:f1:
         2f:41:fd:f0:e3:1f:af:69:d0:f6:a1:c0:cc:09:1d:29:f9:95:
         f8:f1:4c:0b:e2:f5:6a:52:34:6d:ba:1e:7c:1c:f1:09:e4:23:
         13:09:6e:f9:48:63:f1:89:06:e2:3f:bb:6d:c7:26:ba:25:c6:
         12:14:5a:ac:62:e8:be:d6:44:98:83:be:f4:72:49:a1:74:c0:
         4c:c0:f9:72:e9:ce:8f:13:18:7d:a2:f7:0e:5b:97:2a:35:f7:
         b8:9f:8d:c1:e0:54:69:81:29:61:9a:68:50:87:78:04:7d:61:
         6a:13:18:b1:66:72:48:39:12:bb:ee:68:ae:d3:17:8b:6a:c8:
         d7:4f:3d:dc:84:12:2c:43:98:f1:d8:45:f1:20:9a:b0:c8:17:
         8d:a3:e9:a1:0b:ed:75:7f:26:61:32:01:e7:7e:1c:34:9d:ab:
         eb:fd:a3:ba:c6:6d:5e:f9:0d:d7:cd:e3:2a:1e:83:c7:64:55:
         dd:79:ba:80:68:0b:6d:e4:c4:b1:35:c4:39:85:f2:5e:22:7c:
         10:fc:c7:55:54:de:99:84:a0:a4:d0:60:e4:45:87:e0:45:50:
         5f:88:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----