Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5e82449-5fad-4dde-8656-da25b40acec0/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.mft
File:                     cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.mft (raw, json)
Hash identifier:          tC9ZgEO13Ua1DkpN4HoX4L+YFdaM73QvSWt2p/SFOA0=
Subject key identifier:   CB:03:2D:10:52:B3:46:49:A6:DF:86:07:B5:F9:87:D3:E6:87:25:22
Authority key identifier: 89:1E:94:5D:0F:B8:31:0C:7B:4B:D0:7A:D8:3C:D7:AB:FA:ED:7C:2F
Certificate issuer:       /CN=cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4
Certificate serial:       1B9B09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5e82449-5fad-4dde-8656-da25b40acec0/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.mft
Manifest number:          0E04
Signing time:             Mon 15 Apr 2024 11:20:40 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 11:49:18 +0000
Files and hashes:         1: 0efae12ed90f5ebaa329eb1b9c46fce4ad8bf646.roa (hash: JEqojTitMKxFhljVQxxgCvE7UD0elmlh4VIr2xj/3oo=)
                          2: cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.crl (hash: YzPt+eoq5XpgYsQQ1c/fQTYC6CnBxT1CiyPke4/CklQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809161 (0x1b9b09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 11:49:18 2024 GMT
        Subject: CN=101154c270966555596f953fe3e0b7babeb63fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:5a:98:a3:2c:93:11:a1:2c:06:25:2e:8f:
                    11:8c:34:40:bd:6e:b3:6c:54:f1:1d:90:67:81:72:
                    b7:93:83:ed:dd:00:ca:05:f6:00:ae:84:ed:a4:35:
                    a3:5b:fd:49:e2:1e:ac:72:c4:a0:5a:3b:b4:3a:72:
                    e5:81:94:0c:9e:4f:5c:72:ec:67:7f:fa:df:e4:32:
                    b7:13:b1:c4:e5:65:eb:4b:ba:08:9a:b5:c2:a5:1a:
                    a3:08:ad:f9:59:dc:bd:3c:33:c5:52:86:06:e5:1e:
                    5a:b0:a4:51:28:15:93:00:f9:e5:49:29:32:78:fb:
                    5b:0c:3e:ba:4a:73:ff:52:62:cb:2c:db:96:1e:16:
                    c0:32:2a:c7:ad:ff:72:d5:cd:55:44:eb:6e:9e:44:
                    15:1b:3a:d7:b9:f7:6f:d5:2e:1e:08:a1:33:d0:1b:
                    9a:be:4e:d9:c0:89:a7:cf:09:0d:d3:ab:97:d1:c4:
                    f9:5f:76:45:b2:0b:38:fd:10:36:bb:36:de:1c:bd:
                    78:dd:58:da:c1:f3:09:b4:e8:6a:a0:7f:86:05:49:
                    e7:8d:f4:ee:29:84:03:76:68:f9:e0:3f:4f:7c:2e:
                    ab:31:58:5c:dc:33:0b:f9:61:af:fb:95:ce:cf:69:
                    16:19:fe:90:42:6b:00:ca:01:e0:8c:97:e5:27:1b:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:03:2D:10:52:B3:46:49:A6:DF:86:07:B5:F9:87:D3:E6:87:25:22
            X509v3 Authority Key Identifier:
                keyid:89:1E:94:5D:0F:B8:31:0C:7B:4B:D0:7A:D8:3C:D7:AB:FA:ED:7C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5e82449-5fad-4dde-8656-da25b40acec0/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5e82449-5fad-4dde-8656-da25b40acec0/cd1fc4f3c86be0fbc1a481a5e4aa8ede57671cf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:e5:9a:f0:5d:7f:fd:f0:33:02:0f:6c:49:90:01:cf:6a:
         d0:cf:42:c9:08:33:9f:23:23:69:be:0e:d1:bf:c8:b6:f0:40:
         e7:38:af:57:53:e6:57:ce:29:64:28:11:bf:c0:c7:30:21:d6:
         b8:09:fb:2d:6c:33:48:82:68:62:71:88:cd:a0:7f:3f:b3:58:
         a2:d1:03:8c:d8:60:1b:ca:44:4e:d3:ac:74:72:ac:8b:d0:eb:
         45:ab:c3:c8:0e:81:96:b5:e6:05:b4:02:57:3d:74:d9:10:61:
         fc:e6:71:a1:eb:ea:6a:cd:a4:29:90:bc:9a:4b:ff:48:5b:bf:
         d0:ef:c6:40:8b:bc:6f:e5:7f:c4:aa:e3:76:b0:17:7e:d4:9c:
         37:a2:0e:d5:b7:bd:c1:9f:e8:d4:58:71:bc:92:77:10:53:a1:
         29:e5:8b:0e:81:6e:04:ba:65:3e:12:eb:0c:83:fa:0f:fb:79:
         0d:99:3c:82:60:a3:eb:5a:1e:78:47:92:c0:22:3c:e3:24:f6:
         f8:63:30:f9:4b:46:48:14:e7:7b:38:d9:39:8e:1e:26:1a:80:
         62:2b:20:ed:97:8b:96:57:64:91:9c:c7:69:df:3f:ab:25:80:
         29:f7:29:9a:56:2d:ba:c8:ac:d2:00:d9:0c:e4:bc:6f:83:79:
         6f:f9:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----