Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e9253cb6-19df-4a5f-a369-74956a59ad71/86c878f8fb518b77b03f25c8a73403a1bc44f652.mft
File:                     86c878f8fb518b77b03f25c8a73403a1bc44f652.mft (raw, json)
Hash identifier:          QMqxmC2X6gkiPkkQDI99lfiFMG3mLSgBEYYu4chVbL0=
Subject key identifier:   F4:57:18:5D:8F:AF:28:F0:36:00:33:76:A5:49:60:91:85:C7:73:90
Authority key identifier: 22:B8:46:B2:7E:1A:43:3D:A4:AC:F0:72:20:F9:04:55:49:AB:A0:5A
Certificate issuer:       /CN=86c878f8fb518b77b03f25c8a73403a1bc44f652
Certificate serial:       08F7C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86c878f8fb518b77b03f25c8a73403a1bc44f652.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e9253cb6-19df-4a5f-a369-74956a59ad71/86c878f8fb518b77b03f25c8a73403a1bc44f652.mft
Manifest number:          0487
Signing time:             Mon 15 Apr 2024 03:20:43 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 06:08:17 +0000
Files and hashes:         1: 86c878f8fb518b77b03f25c8a73403a1bc44f652.crl (hash: lnjsqC+p9YKeHDUIlJ//G2l4RBZS49/1244LgTfPWAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587716 (0x8f7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86c878f8fb518b77b03f25c8a73403a1bc44f652
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 06:08:17 2024 GMT
        Subject: CN=6bf199812300a863eab7db632edaf87b607927c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:cb:f0:98:24:22:fe:7f:ac:82:9d:13:9d:
                    d6:a6:d5:ce:4d:97:1d:d1:28:be:4c:e7:9c:3f:fa:
                    66:22:62:3e:f2:ee:93:46:cf:83:ca:2f:1c:d0:cd:
                    6d:51:fa:c0:e9:31:66:ac:30:79:03:73:d5:57:03:
                    fe:16:0c:9a:fe:1a:1f:0e:39:d2:af:e4:25:01:cc:
                    67:bf:4a:32:f6:f8:4e:75:71:33:b8:a9:c2:89:1a:
                    25:5b:24:86:ed:2f:94:be:2d:54:39:2a:82:0d:56:
                    5f:6c:c7:2d:ab:ea:5b:b5:de:40:ee:6c:18:99:0f:
                    90:ee:2e:bf:a4:83:31:a9:6a:e2:19:55:95:b4:cf:
                    55:4d:36:bb:8e:94:9a:b7:48:2a:f1:9f:82:92:60:
                    9d:fb:9b:5b:7f:a9:1a:40:47:f1:c7:67:6d:ad:e9:
                    3a:f7:4a:c4:f9:a5:f6:24:70:93:5a:3c:02:3d:7e:
                    09:48:36:23:5c:7f:d4:f9:ad:02:46:1a:ca:0a:dd:
                    40:2a:06:2e:9d:2f:0e:16:fd:08:73:ab:62:0a:d0:
                    97:cc:cd:d6:2c:f2:9f:a9:3c:93:09:12:d7:bb:ea:
                    c2:07:ee:83:ab:46:48:e9:db:00:b1:32:ee:bf:cc:
                    b2:52:c9:bc:4a:c2:1c:57:84:ec:ab:a3:e1:f5:2c:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:57:18:5D:8F:AF:28:F0:36:00:33:76:A5:49:60:91:85:C7:73:90
            X509v3 Authority Key Identifier:
                keyid:22:B8:46:B2:7E:1A:43:3D:A4:AC:F0:72:20:F9:04:55:49:AB:A0:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86c878f8fb518b77b03f25c8a73403a1bc44f652.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e9253cb6-19df-4a5f-a369-74956a59ad71/86c878f8fb518b77b03f25c8a73403a1bc44f652.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e9253cb6-19df-4a5f-a369-74956a59ad71/86c878f8fb518b77b03f25c8a73403a1bc44f652.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0a:7d:1d:6c:47:8a:86:76:cf:ba:2d:1a:d8:67:80:30:d9:
         92:d7:ee:fa:82:92:2a:ae:c4:eb:0b:83:d3:35:df:6b:f6:d4:
         7b:4f:cb:db:6d:d2:b2:e7:9a:08:87:64:83:f3:8b:b2:6a:9e:
         81:63:48:91:96:8f:73:02:71:be:01:f3:45:23:7f:a0:0f:ae:
         ce:30:65:e6:5f:2b:44:0e:66:cd:a5:dd:60:ef:db:8f:f1:a5:
         f7:62:63:56:94:88:4c:34:d7:ef:60:66:13:0c:9d:08:60:78:
         71:10:4f:9f:ec:fe:be:3b:9a:3b:78:04:1f:f8:0a:d6:23:f4:
         2c:af:e6:5d:1e:18:36:a2:5f:56:9d:3a:76:fa:06:4e:47:6b:
         64:3f:9c:9c:07:d5:52:1e:e3:41:4a:94:40:60:92:7b:e3:a5:
         9e:c2:92:98:b7:12:ce:9e:d2:c5:0c:90:98:d3:38:e7:f0:f5:
         4f:14:cc:bd:27:96:9e:6d:04:d5:96:e2:d1:e2:ee:a2:0e:08:
         83:6d:fc:0a:a7:c9:11:30:bb:61:d9:c6:da:af:70:59:47:58:
         f4:35:f6:97:14:ae:ff:5b:d9:4e:38:6e:a4:53:84:32:37:0a:
         1c:59:93:31:f4:61:8e:81:2d:a2:d1:72:cb:cf:f3:dd:95:10:
         c7:79:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----