Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f3a6e5ee-8377-4b32-809b-2057abdb43c5/2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0.mft
File:                     2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0.mft (raw, json)
Hash identifier:          sMZm1cYANWJzreBaAZIaYtX5VOFFWjJgH/cqq/omMPc=
Subject key identifier:   94:D2:D7:3D:82:B5:D5:C8:22:48:EF:52:79:E5:0E:7A:7E:89:88:54
Authority key identifier: B1:3D:C1:94:94:D9:C7:A2:CA:48:FB:0C:71:EB:63:2C:90:77:FF:71
Certificate issuer:       /CN=2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0
Certificate serial:       139B68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f3a6e5ee-8377-4b32-809b-2057abdb43c5/2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0.mft
Manifest number:          0A21
Signing time:             Mon 15 Apr 2024 08:20:23 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 09:23:16 +0000
Files and hashes:         1: 2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0.crl (hash: ItkJV5yjX6ELM/y44mDpEwjiAVJKEC1v2OrfumBTuK0=)
                          2: c207b8e11b60c562105ab6a6579a8614f42c5027.roa (hash: OxCFJ0/c0WzODesINelKmwBjpdsXWiNukL4sZwo+Kqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284968 (0x139b68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 09:23:16 2024 GMT
        Subject: CN=2a8a36d51f30134b9d43a0c0bcda3231e9aa91b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:c2:b9:60:46:08:a1:59:65:00:52:31:fd:
                    3c:12:f2:fe:b2:b3:58:35:b2:8c:7e:ca:68:52:d3:
                    e4:f5:dc:0f:43:ac:3d:ed:cd:ad:41:a2:54:a2:b2:
                    ad:ca:6f:0d:10:dc:5c:38:9b:19:ed:11:52:71:7e:
                    3c:a6:4b:d8:0f:2c:ce:e6:35:f4:9a:be:1f:4e:08:
                    cf:81:74:99:92:b8:3b:ff:db:a1:3f:ef:8f:f0:9e:
                    30:2f:16:3b:b9:c6:6e:0b:e4:6c:90:13:aa:39:6a:
                    70:b3:ed:f0:49:3e:b1:43:e4:60:07:ed:7d:56:62:
                    bb:44:6c:88:7c:02:28:e5:de:23:b8:f1:e8:8a:ea:
                    4f:6a:d1:3b:e2:05:7a:d7:50:b5:98:4f:98:46:00:
                    2d:23:e8:09:0b:c0:f8:70:c3:dd:7b:47:89:e3:30:
                    1f:4a:a4:ff:86:9c:59:41:e2:95:8a:a5:86:6f:d0:
                    92:e7:3c:1a:0a:d2:9a:10:20:3a:08:f9:6b:b6:d5:
                    06:af:a9:e9:ee:87:80:0a:33:07:9b:b8:fb:4d:f8:
                    62:e3:b0:72:c5:44:9b:0c:d3:70:b8:74:ad:38:ba:
                    b2:a6:93:32:8c:2b:ba:07:d5:66:ae:91:25:bb:1d:
                    bf:7b:5d:f6:c4:5e:4b:df:b1:4d:11:b7:2c:19:b3:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D2:D7:3D:82:B5:D5:C8:22:48:EF:52:79:E5:0E:7A:7E:89:88:54
            X509v3 Authority Key Identifier:
                keyid:B1:3D:C1:94:94:D9:C7:A2:CA:48:FB:0C:71:EB:63:2C:90:77:FF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f3a6e5ee-8377-4b32-809b-2057abdb43c5/2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f3a6e5ee-8377-4b32-809b-2057abdb43c5/2fdee0a0b7605a71bc8d0dee4c47fa401abd92e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:a6:fc:d5:62:b1:4c:77:ca:fe:c9:0c:28:f1:7c:bf:0c:
         c9:ea:a4:03:f9:e3:6d:f5:2b:a8:c5:7e:a9:35:9f:e0:5e:dc:
         84:f9:5f:bf:23:2c:1c:a4:dd:e4:56:1e:14:33:21:a1:7e:c2:
         a1:c0:4b:13:02:7d:8d:5d:4a:91:69:6e:bf:8a:26:26:8e:a1:
         53:73:b6:ca:30:67:0f:7d:e8:1d:32:fb:01:2c:39:88:c3:80:
         da:22:f6:04:8e:40:36:8b:f0:44:f7:35:d5:b4:4e:42:a7:15:
         20:bd:f7:6e:9d:8a:c2:0a:1f:9c:31:21:4e:86:77:58:af:cf:
         fc:bc:31:ad:a6:7c:a1:0c:ce:cb:1c:2e:ca:c3:ca:c2:19:b6:
         eb:12:ce:7c:12:b8:86:e6:10:83:5c:b5:f5:1d:f1:34:d7:f2:
         3c:d2:3b:be:c3:b8:87:c5:a5:37:29:68:fb:3b:ed:c4:26:a4:
         1b:81:ab:a0:d3:1a:f6:9d:75:cd:1f:b8:cc:f6:25:f8:29:53:
         7a:5e:a9:2d:15:7c:e2:04:d6:d0:a3:7d:d3:4e:51:27:6d:b4:
         e7:fd:67:bd:8e:6a:27:0d:5d:fc:12:b2:50:bd:5d:0b:83:4e:
         70:1d:33:07:7d:4f:5a:d7:90:0f:2d:2d:1e:6b:36:83:7a:3c:
         63:93:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----