Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df9e7885-8143-4413-895f-cb9de9b47ed7/ba42ad8e73492a2941a4eefb8f6981630bae4d2a.mft
File:                     ba42ad8e73492a2941a4eefb8f6981630bae4d2a.mft (raw, json)
Hash identifier:          ve+f3Tj4cMqa7Wb/Wo602TNnBXDI5lbWxj4sANvlIE0=
Subject key identifier:   CB:7F:26:F3:01:7B:BA:BB:8A:90:2D:2B:00:5D:08:A1:6D:E9:78:5F
Authority key identifier: A0:77:75:4E:30:69:6D:D2:FF:28:DF:03:40:A9:97:F2:A6:4D:E1:B8
Certificate issuer:       /CN=ba42ad8e73492a2941a4eefb8f6981630bae4d2a
Certificate serial:       01B79C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba42ad8e73492a2941a4eefb8f6981630bae4d2a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df9e7885-8143-4413-895f-cb9de9b47ed7/ba42ad8e73492a2941a4eefb8f6981630bae4d2a.mft
Manifest number:          DB
Signing time:             Mon 15 Apr 2024 04:21:33 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 05:04:26 +0000
Files and hashes:         1: ba42ad8e73492a2941a4eefb8f6981630bae4d2a.crl (hash: 1BINM4PtpKSSH1HT5H/c0INBs973BtYxsqh4Kfqgwac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112540 (0x1b79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba42ad8e73492a2941a4eefb8f6981630bae4d2a
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 05:04:26 2024 GMT
        Subject: CN=ce1638327558a312afe90b3cbdbbf9b9a1c43fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:24:20:a3:0a:f0:6b:3f:81:e7:90:a2:98:
                    8c:45:14:f1:75:b6:f3:0d:35:e0:ad:3d:84:32:2e:
                    d4:4a:e5:d5:c9:e1:f7:b4:b3:5a:91:ae:09:01:6e:
                    39:a4:00:e4:1a:52:d6:ec:6f:14:00:79:14:bf:e0:
                    33:b1:f6:b8:20:d3:60:00:7d:f9:dd:d6:f8:4a:3c:
                    3a:6d:15:05:67:9a:11:43:ec:b3:b4:b9:fe:28:51:
                    b9:44:ea:e3:2e:ed:a1:d8:8f:a7:a0:30:32:14:be:
                    55:b3:70:8e:1f:2e:fc:61:3a:51:68:6a:e9:f0:fb:
                    17:61:e3:a9:41:c4:c7:8e:be:0c:1d:25:0f:bb:c4:
                    e9:4d:f4:8f:25:0c:d3:2a:d1:42:05:e1:23:6d:55:
                    47:df:74:db:09:dc:52:c5:34:59:73:05:20:33:84:
                    2a:6a:1a:db:da:62:51:64:b7:0f:05:e7:ee:55:98:
                    fe:54:6e:1a:fe:be:24:19:6e:46:db:f7:81:88:47:
                    d2:0c:ad:5b:f7:fe:f0:9b:30:95:21:6d:c1:7d:33:
                    c8:d4:70:eb:7c:89:a8:e7:8d:75:0f:ec:ce:d4:92:
                    e4:4d:e8:01:09:1f:da:cc:88:8b:7b:ab:eb:a5:01:
                    84:59:68:88:fb:ad:88:d3:1b:a0:82:02:a5:ef:d7:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:26:F3:01:7B:BA:BB:8A:90:2D:2B:00:5D:08:A1:6D:E9:78:5F
            X509v3 Authority Key Identifier:
                keyid:A0:77:75:4E:30:69:6D:D2:FF:28:DF:03:40:A9:97:F2:A6:4D:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba42ad8e73492a2941a4eefb8f6981630bae4d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df9e7885-8143-4413-895f-cb9de9b47ed7/ba42ad8e73492a2941a4eefb8f6981630bae4d2a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df9e7885-8143-4413-895f-cb9de9b47ed7/ba42ad8e73492a2941a4eefb8f6981630bae4d2a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:58:1e:9d:7c:e4:5b:dc:d3:d1:82:4f:c7:70:4f:6b:ab:19:
         dd:f1:2e:f4:da:33:18:d9:7f:19:79:e7:2f:46:86:56:82:dd:
         f6:61:87:92:9b:2c:dd:b4:b6:99:98:01:3c:bd:df:53:2d:94:
         d0:f2:a7:d6:b6:89:e1:18:d1:29:54:a2:cb:77:e2:fd:04:e6:
         5d:f5:2c:ca:c6:6e:97:e6:46:1b:31:cb:96:d8:ba:ad:43:39:
         45:19:1b:0f:41:18:fc:7d:42:f2:f6:fc:12:3b:bc:f2:88:cd:
         bd:7b:97:2a:a9:48:02:fb:43:ee:46:89:17:af:7f:f1:c7:78:
         78:b3:62:c0:02:89:ae:66:37:00:07:c9:03:c7:34:d1:58:6e:
         be:76:eb:b7:1d:2e:4c:25:74:e3:e0:3c:7b:8f:9f:2c:22:dd:
         54:83:6d:c7:73:1a:f2:0c:c4:50:21:21:0d:ea:58:56:55:f7:
         5a:b1:f6:2b:8f:dd:de:49:0f:4d:0e:39:bc:e6:48:f7:23:cd:
         21:98:5c:eb:e6:6a:a5:3b:86:46:a8:2f:ce:b8:9a:9d:87:16:
         0a:99:2a:f0:a5:75:eb:af:11:19:20:ae:80:55:55:28:1c:66:
         fe:30:87:d2:a6:76:a1:89:e4:12:de:e9:40:4c:63:0d:1e:cf:
         63:90:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----