Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2eb3c78-fd8a-48bc-b16f-a8f3b54fdeab/01589d89842e97c2ec051a7c1b495017e2d59ba4.mft
File:                     01589d89842e97c2ec051a7c1b495017e2d59ba4.mft (raw, json)
Hash identifier:          kX+wmP9O/L9L2+i9x+zQC/U6feSRETjCU/ZvSOrPQHI=
Subject key identifier:   DD:1C:17:B2:B1:63:81:20:B1:1A:18:4E:89:1D:22:3E:50:FF:45:87
Authority key identifier: A2:D2:1C:FF:B4:F4:F3:C2:68:AC:52:AC:8C:7E:90:FF:70:66:36:60
Certificate issuer:       /CN=01589d89842e97c2ec051a7c1b495017e2d59ba4
Certificate serial:       273BB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01589d89842e97c2ec051a7c1b495017e2d59ba4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2eb3c78-fd8a-48bc-b16f-a8f3b54fdeab/01589d89842e97c2ec051a7c1b495017e2d59ba4.mft
Manifest number:          0E0E
Signing time:             Mon 15 Apr 2024 04:21:02 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 04:43:26 +0000
Files and hashes:         1: 01589d89842e97c2ec051a7c1b495017e2d59ba4.crl (hash: u0eeeC5vmX1LE5cZw0TSDO5jC0exz8BkooTXw0A9G88=)
                          2: 52aaf1770d1910b4d32a3e6703ad94a7ecae180a.roa (hash: WASDGuNoCpLWMsh4lpZaIzO94m+bSbUSjxRvaGGVaq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571191 (0x273bb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01589d89842e97c2ec051a7c1b495017e2d59ba4
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 04:43:26 2024 GMT
        Subject: CN=c2d72b6e09b3d100d12e763152b0f637f6ad44e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:0e:9a:b4:e7:6a:8a:ab:09:58:55:ba:f0:
                    e9:ae:f1:ec:ea:06:37:b4:9c:d8:d1:22:b4:96:da:
                    f2:fa:76:5a:c0:57:c2:4b:fc:5b:fa:38:47:7b:ef:
                    ae:e3:8c:3c:80:2e:5e:bb:03:ff:0d:13:dc:5f:8b:
                    14:ac:4e:10:c7:05:89:de:1c:33:8d:53:b6:91:9b:
                    89:26:f5:77:c1:a0:44:1e:ab:cf:20:5d:b0:71:c2:
                    ab:0d:7c:47:04:bb:64:5e:56:8b:96:61:31:bc:f9:
                    72:bf:4b:8b:43:dd:4f:d9:1c:4b:65:68:76:29:29:
                    43:bf:32:55:51:ab:45:64:9d:67:5e:c6:2b:99:7a:
                    7f:c8:e5:86:f1:4a:25:e3:08:4e:59:d6:47:d8:ab:
                    f8:41:49:ed:44:bd:36:02:c2:a2:c6:51:f7:d4:21:
                    e6:53:c3:1b:74:b7:cf:59:88:9f:12:1a:d7:a1:c4:
                    48:de:3a:5a:22:7c:ab:af:1d:e6:5a:19:94:e8:3a:
                    2f:30:09:1c:5b:dd:d2:75:e4:c0:6b:70:47:a8:d3:
                    54:bf:5d:47:5c:64:e7:55:28:80:66:ec:51:18:c5:
                    21:32:36:a9:16:8e:81:9f:b3:92:3f:c2:9f:87:0e:
                    8b:11:4f:93:db:2b:fe:e0:cf:a2:15:0c:c2:4f:7d:
                    77:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1C:17:B2:B1:63:81:20:B1:1A:18:4E:89:1D:22:3E:50:FF:45:87
            X509v3 Authority Key Identifier:
                keyid:A2:D2:1C:FF:B4:F4:F3:C2:68:AC:52:AC:8C:7E:90:FF:70:66:36:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01589d89842e97c2ec051a7c1b495017e2d59ba4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2eb3c78-fd8a-48bc-b16f-a8f3b54fdeab/01589d89842e97c2ec051a7c1b495017e2d59ba4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2eb3c78-fd8a-48bc-b16f-a8f3b54fdeab/01589d89842e97c2ec051a7c1b495017e2d59ba4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d1:35:df:ac:af:75:17:ec:c9:b1:77:ee:e3:c2:55:2d:8a:
         c4:35:4e:46:ce:f3:05:18:f6:65:f8:ac:18:d8:5e:3e:d7:9f:
         e1:4d:3c:2f:8b:1b:52:31:95:90:61:d1:37:47:8e:b7:6e:e0:
         80:58:2a:99:b7:aa:d1:ab:f1:76:d0:43:5d:84:36:d3:5d:89:
         b2:66:51:27:64:81:eb:a9:5c:49:bb:24:e1:c9:20:ba:40:84:
         04:40:ca:7b:b4:f7:5f:a7:0c:e5:b8:8d:03:ac:0c:46:eb:5e:
         1c:6d:8b:8b:b1:bf:b5:4f:17:99:56:1f:7e:00:91:4b:89:f2:
         ab:7e:dd:0e:37:69:ad:5e:d1:5f:0e:04:14:9b:7e:c9:65:4b:
         e4:b9:7c:02:54:30:c8:48:02:df:59:c8:c7:f2:72:7f:b1:c3:
         da:4d:04:13:f9:d2:03:72:25:b8:3f:eb:a4:c4:ac:e6:78:4b:
         56:4a:9f:d1:54:36:70:82:4b:94:df:1d:75:88:54:11:71:39:
         96:05:24:21:f8:dd:65:a3:57:bb:86:ef:eb:65:1a:5e:d9:95:
         2d:8b:39:58:b5:bd:98:73:11:a5:c7:b4:27:18:23:b5:f2:74:
         dc:eb:ac:5b:a6:cc:b5:a1:64:5d:0e:a2:75:59:5d:56:40:5a:
         d0:c9:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----