Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.mft
File:                     aa536e2112fb6fbd4fd90b644c6fd66acba797ea.mft (raw, json)
Hash identifier:          SWjZ2Wg5xwmOusZoDi7pEhO4rvFb3rBmeoymNkCvusc=
Subject key identifier:   4E:2D:34:A5:8E:8A:31:47:7B:36:0D:44:A8:A6:5B:AB:E2:29:74:84
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Certificate issuer:       /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial:       293442
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.mft
Manifest number:          0E06
Signing time:             Mon 15 Apr 2024 03:20:58 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:30:17 +0000
Files and hashes:         1: 07f8cd9b2da5a7345feb5aeda7c49d680020e1e3.roa (hash: se0vY1HizA6UUVdwArw+tJe72C1E5LgSZJZhrTLs9qg=)
                          2: 70cd0898d46e1f8757bf90d7b7ff390b1b20799a.roa (hash: 4pYu35NGVjjA6uLEFyBUBTDmqHqI+Bqw9haY6JP3V3Q=)
                          3: aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl (hash: 3+Da2icVieKhUUNRYNY3Kh8rW/VgB3BW1dfquEYcXgE=)
                          4: b9875f1c3d21e9ae94dac7800d22e0c9ab1b1cc6.roa (hash: Tl0/4BXTMdYUmxR/ubqduja8evt34T4xqAEtvZMvBoU=)
                          5: bdc29f6dfc0a900a15122fbb9ea8896a155988f2.roa (hash: fy3sORCC98unzIOZb+LVY+W0VeKJGkJjYx0Iy3s2PIc=)
                          6: cb78907708f1e99ba391d6a1ea247c5409bd9210.roa (hash: kgAz797L3WZXz7GD7DorS27S/VX0TVGn6X8mEw+w120=)
                          7: e1409c41d2ccb39214ae59acdd37889ad5814e2a.roa (hash: OajXN6ag0QVQ9UKKpV2TFXDNEzz4UDIndW2P+z5+xOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700354 (0x293442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:30:17 2024 GMT
        Subject: CN=61df68302147eaa1c2f3bbd95eaf1f43bf136d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:61:2e:61:ae:56:b1:bf:4c:91:cd:6d:03:
                    62:36:b4:60:ce:46:34:f9:54:bd:a5:db:f2:80:45:
                    08:ee:24:8d:d9:02:ba:53:d1:3f:d4:65:da:01:2a:
                    58:0a:fa:e3:e5:6e:2d:cc:cc:90:7e:e8:bf:42:e0:
                    6f:ad:38:7a:aa:e9:a0:8a:fe:11:df:d6:71:06:15:
                    5b:52:1f:8d:2c:99:4f:2f:08:9d:49:e6:95:2e:99:
                    de:6b:1f:2b:e2:42:b8:3c:aa:46:0a:bb:9d:75:6a:
                    88:49:97:af:da:1d:bc:3c:11:58:bd:39:66:25:02:
                    4f:2f:f4:98:e8:e0:56:36:74:b5:d8:2f:1c:46:4a:
                    28:68:39:2a:96:37:0d:99:99:b1:f8:d4:9b:57:8c:
                    98:35:f6:e4:68:03:fa:e2:8e:62:3b:c5:15:18:63:
                    a4:a4:92:93:bb:bb:1e:31:58:e0:50:91:f1:d9:57:
                    2d:42:b8:e7:b3:17:a9:d6:4d:ec:19:de:de:34:9b:
                    cf:8e:8f:f1:a3:ec:95:63:c9:51:1a:03:4c:76:7c:
                    90:6f:1d:27:b6:f6:7e:b3:de:4d:29:f0:82:38:32:
                    d0:8f:f5:1e:e6:c3:03:f1:c4:19:14:99:dc:79:0b:
                    98:4b:8c:58:36:2a:66:0d:e4:25:9c:7f:85:18:f1:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2D:34:A5:8E:8A:31:47:7B:36:0D:44:A8:A6:5B:AB:E2:29:74:84
            X509v3 Authority Key Identifier:
                keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:2c:ab:ff:e3:d5:06:df:8c:9d:d3:65:13:ce:46:6f:54:
         36:93:08:9b:7c:60:25:e7:5b:60:d9:0e:1f:a2:7d:1e:d9:2d:
         b7:ff:de:13:96:a8:b2:de:c2:b5:a1:df:bb:37:9c:42:ef:a2:
         5b:3b:08:de:3a:e5:6b:85:f9:ed:92:56:39:09:2c:ab:69:ef:
         c9:fc:d1:e4:ed:cf:88:8d:86:93:3f:c0:9d:45:81:7e:b5:6b:
         5f:c7:a1:56:b9:59:ae:7f:cd:81:71:07:c5:74:a9:c8:2c:72:
         ec:82:ab:7a:78:84:9f:4d:84:a0:36:fa:9d:c9:f6:99:b7:c4:
         36:a4:09:13:9d:f4:d3:6d:ea:30:e2:71:08:74:94:4f:27:dd:
         c0:2d:71:57:a3:cc:64:43:85:8a:1e:40:b7:c0:73:aa:3c:70:
         e6:89:ce:b0:2c:9b:ca:d0:35:78:7d:d4:b1:c5:71:b8:b7:e0:
         38:54:09:65:71:4d:80:bd:2e:65:65:4c:14:75:3b:11:40:ce:
         f9:69:f4:43:4f:46:8c:4e:df:4f:31:9e:c6:6d:43:8a:f3:82:
         a2:54:f1:d4:76:7a:ad:5a:b2:8c:e2:0a:ca:a9:01:44:86:64:
         fa:8a:ff:08:9a:20:98:d4:c2:05:c2:e0:30:98:73:35:a5:35:
         cd:1d:e3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----