Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eeda44c1-df69-4990-8c7b-d26bf92563b3/bfb4f095f1383d247a230f1e6137a24c0e460f5b.mft
File:                     bfb4f095f1383d247a230f1e6137a24c0e460f5b.mft (raw, json)
Hash identifier:          NECrrp8ECetH1Qa/vcTBn06JZmuMPpHRgNpHYUBMLlU=
Subject key identifier:   2F:D6:B9:31:C8:21:CB:B9:A2:BE:A6:B8:93:04:6B:15:22:23:96:A4
Authority key identifier: B2:C8:05:5D:C8:02:42:9F:CB:96:0C:80:E1:7E:E1:8F:14:5C:78:5C
Certificate issuer:       /CN=bfb4f095f1383d247a230f1e6137a24c0e460f5b
Certificate serial:       16CC96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfb4f095f1383d247a230f1e6137a24c0e460f5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eeda44c1-df69-4990-8c7b-d26bf92563b3/bfb4f095f1383d247a230f1e6137a24c0e460f5b.mft
Manifest number:          0BB7
Signing time:             Mon 15 Apr 2024 07:21:17 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 08:48:17 +0000
Files and hashes:         1: 1dc71d27ad20b8a3e20c37728ca70de495d58aa9.roa (hash: UKnRdysF81J0VGgjQQCh0/mJRu2//Q5zfNubEWER8N4=)
                          2: bfb4f095f1383d247a230f1e6137a24c0e460f5b.crl (hash: oUdbOVPkRC+M/k/rILw8vTtYhhOuyp2Z8pfyO12SrYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494166 (0x16cc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb4f095f1383d247a230f1e6137a24c0e460f5b
        Validity
            Not Before: Apr 15 06:20:17 2024 GMT
            Not After : Apr 18 08:48:17 2024 GMT
        Subject: CN=d3e99b9928e071a6e1db8ab0819f1baeac284d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fe:46:3a:0a:1e:07:f9:0c:23:a5:74:3c:b7:
                    da:02:21:0e:1d:f3:4f:70:54:a1:71:38:10:a9:07:
                    f6:4b:56:0a:e1:2a:1b:1d:25:17:86:fb:14:90:95:
                    81:b5:32:e0:e7:c2:d6:f4:7c:cd:ab:87:6e:6d:f2:
                    67:34:3a:0e:a6:07:50:3c:9f:da:c1:1d:24:94:bb:
                    e6:b2:4f:f8:4c:c0:f3:1d:62:ca:27:5e:08:d4:a9:
                    74:e8:0f:c3:3a:78:36:70:7f:8f:bb:59:3b:9f:ab:
                    e9:d6:10:5d:54:bf:f4:53:79:63:bc:39:4e:36:60:
                    70:f5:5d:4a:dc:24:8c:6c:f5:5b:7e:c7:23:06:6e:
                    b1:12:ad:08:0f:2c:20:82:f0:a1:0e:e7:a3:f2:a1:
                    c9:3b:6d:e7:5a:1b:89:c8:1d:a5:23:8e:0b:18:6c:
                    bd:46:eb:8f:a6:05:68:b6:7e:f8:24:5e:5b:ae:2a:
                    49:01:a3:e1:26:9a:be:35:87:e3:da:cf:af:54:e8:
                    88:1b:25:ab:00:51:4c:45:87:a1:30:63:29:50:45:
                    24:3f:05:36:c5:ba:f9:e2:ee:a4:b8:ee:e3:e9:73:
                    76:5a:81:95:c3:a2:58:50:15:84:57:a2:1a:4c:9d:
                    cc:c6:60:85:21:18:21:07:c9:bc:82:74:b9:a3:9b:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:B9:31:C8:21:CB:B9:A2:BE:A6:B8:93:04:6B:15:22:23:96:A4
            X509v3 Authority Key Identifier:
                keyid:B2:C8:05:5D:C8:02:42:9F:CB:96:0C:80:E1:7E:E1:8F:14:5C:78:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfb4f095f1383d247a230f1e6137a24c0e460f5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eeda44c1-df69-4990-8c7b-d26bf92563b3/bfb4f095f1383d247a230f1e6137a24c0e460f5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eeda44c1-df69-4990-8c7b-d26bf92563b3/bfb4f095f1383d247a230f1e6137a24c0e460f5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:60:44:eb:bc:fa:d1:65:3a:24:89:61:d7:f6:25:ff:a4:9c:
         a3:b0:21:29:0e:8b:4d:d7:7f:4f:8a:60:ee:a3:26:78:9e:59:
         9f:8c:0f:55:c8:da:d9:5a:75:8f:4d:1b:45:d6:97:56:49:0b:
         ac:14:5c:cf:27:d0:e0:fc:5b:94:a6:98:c9:55:90:85:ab:78:
         a9:67:7c:48:88:38:e5:e5:f4:c4:22:c1:8e:82:43:0e:db:20:
         30:c6:6f:1d:cf:3e:f1:e0:c9:83:7d:32:43:f6:74:67:87:69:
         78:0b:bc:be:92:ca:85:ef:05:ab:e8:0b:f4:1f:1c:b4:56:ec:
         b6:b6:c6:3c:9e:5d:19:58:a0:1b:59:2f:80:c7:ff:dd:22:a2:
         0b:7f:e8:75:0a:5b:1b:0d:a9:c4:ad:1b:57:95:8f:7f:ba:2e:
         c9:d2:74:15:9e:1a:99:bb:c1:9f:65:b8:cd:34:25:c8:04:26:
         7b:3c:da:4d:05:01:35:9e:ce:83:d7:4e:f7:2d:71:d0:8b:7c:
         e6:be:0b:9e:44:f6:6a:57:7f:e4:e9:0f:57:04:3a:87:cc:90:
         3c:a1:9e:61:46:b2:b8:c8:43:05:91:2d:22:5c:0b:c8:12:9b:
         d8:f0:d2:11:d9:58:16:55:7e:08:b8:d8:db:37:1f:c9:7b:1f:
         52:bb:95:63
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDFsyWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YjRmMDk1ZjEzODNkMjQ3YTIzMGYxZTYxMzdhMjRjMGU0NjBmNWIwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MDg0ODE3WjAzMTEwLwYDVQQDEyhkM2U5OWI5OTI4ZTA3
MWE2ZTFkYjhhYjA4MTlmMWJhZWFjMjg0ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0P5GOgoeB/kMI6V0PLfaAiEOHfNPcFShcTgQqQf2S1YK4Sob
HSUXhvsUkJWBtTLg58LW9HzNq4dubfJnNDoOpgdQPJ/awR0klLvmsk/4TMDzHWLK
J14I1Kl06A/DOng2cH+Pu1k7n6vp1hBdVL/0U3ljvDlONmBw9V1K3CSMbPVbfscj
Bm6xEq0IDywggvChDuej8qHJO23nWhuJyB2lI44LGGy9RuuPpgVotn74JF5bripJ
AaPhJpq+NYfj2s+vVOiIGyWrAFFMRYehMGMpUEUkPwU2xbr54u6kuO7j6XN2WoGV
w6JYUBWEV6IaTJ3MxmCFIRghB8m8gnS5o5s/oQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFC/WuTHIIcu5or6muJMEaxUiI5akMB8GA1UdIwQYMBaAFLLIBV3IAkKfy5YM
gOF+4Y8UXHhcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiNGYw
OTVmMTM4M2QyNDdhMjMwZjFlNjEzN2EyNGMwZTQ2MGY1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWVkYTQ0YzEtZGY2OS00OTkwLThjN2ItZDI2YmY5
MjU2M2IzL2JmYjRmMDk1ZjEzODNkMjQ3YTIzMGYxZTYxMzdhMjRjMGU0NjBmNWIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZWRhNDRjMS1kZjY5LTQ5OTAtOGM3Yi1kMjZi
ZjkyNTYzYjMvYmZiNGYwOTVmMTM4M2QyNDdhMjMwZjFlNjEzN2EyNGMwZTQ2MGY1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBABVgROu8+tFlOiSJYdf2Jf+knKOwISkOi03Xf0+KYO6jJnie
WZ+MD1XI2tladY9NG0XWl1ZJC6wUXM8n0OD8W5SmmMlVkIWreKlnfEiIOOXl9MQi
wY6CQw7bIDDGbx3PPvHgyYN9MkP2dGeHaXgLvL6SyoXvBavoC/QfHLRW7La2xjye
XRlYoBtZL4DH/90iogt/6HUKWxsNqcStG1eVj3+6LsnSdBWeGpm7wZ9luM00JcgE
Jns82k0FATWezoPXTvctcdCLfOa+C55E9mpXf+TpD1cEOofMkDyhnmFGsrjIQwWR
LSJcC8gSm9jw0hHZWBZVfgi42Ns3H8l7H1K7lWM=
-----END CERTIFICATE-----