Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/8645a0b0079c3b9d770e0aec383c5034d164eae4.mft
File:                     8645a0b0079c3b9d770e0aec383c5034d164eae4.mft (raw, json)
Hash identifier:          j3UDwK42aTQlDjav4kMRprM+0hgeimNgfZEtxYBc9vs=
Subject key identifier:   8B:39:7D:4A:79:BE:79:32:3B:AB:BC:A7:BC:25:BB:C9:8C:C6:13:C3
Authority key identifier: 2A:14:60:F7:0E:31:4C:34:17:37:3F:7F:40:88:C0:94:FE:05:69:1C
Certificate issuer:       /CN=8645a0b0079c3b9d770e0aec383c5034d164eae4
Certificate serial:       275BA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8645a0b0079c3b9d770e0aec383c5034d164eae4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/8645a0b0079c3b9d770e0aec383c5034d164eae4.mft
Manifest number:          0DE9
Signing time:             Mon 15 Apr 2024 01:21:08 +0000
Manifest this update:     Mon 15 Apr 2024 00:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 03:42:17 +0000
Files and hashes:         1: 2f5e67d5101c67421c59c7381f92fb3d36a53d2a.roa (hash: 7Xz1VNpSAlZVCL2swYt2Z8pHiGGOvOcnIhCUCFbEDKE=)
                          2: 8645a0b0079c3b9d770e0aec383c5034d164eae4.crl (hash: PVEozdwF1WMkSmNTWRKlJeGxAWwzBy0IOPWHHKB3xf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579363 (0x275ba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8645a0b0079c3b9d770e0aec383c5034d164eae4
        Validity
            Not Before: Apr 15 00:20:17 2024 GMT
            Not After : Apr 18 03:42:17 2024 GMT
        Subject: CN=d62a28f9867b7b0b85e95657a7b663e1b6a82d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:12:9f:23:3e:1d:71:9d:9f:28:e8:97:f7:
                    46:59:39:ba:15:6e:82:54:fc:11:d5:45:0e:e3:ae:
                    78:0b:ee:4a:44:8f:39:c3:d2:8a:09:47:bc:f2:82:
                    1f:5d:2e:1c:19:96:f3:70:58:0d:be:59:4a:2c:e3:
                    08:de:c7:1c:5e:41:07:88:16:f0:a9:f1:56:f3:48:
                    28:32:67:c4:a8:19:74:5b:f2:c4:28:54:f3:87:84:
                    33:63:1e:e6:4c:5f:ef:87:c7:d1:ca:b2:b6:43:15:
                    ff:41:a1:77:36:b1:cf:6a:f1:bf:29:6b:f1:f8:72:
                    b5:98:59:98:d8:01:f0:50:a5:85:f3:c6:f0:b1:6c:
                    a2:a5:75:5f:ac:40:6b:eb:f0:84:28:2a:67:10:08:
                    e2:45:14:15:16:8c:fe:25:49:60:69:af:cb:dc:c0:
                    92:45:f9:2f:1f:35:d3:85:6c:d8:81:18:ee:5a:05:
                    9f:46:d8:af:49:26:51:9f:3e:64:97:b2:dc:d5:73:
                    7c:3b:c3:de:0a:8f:ed:2d:4e:1a:82:33:cf:38:1b:
                    31:59:84:ad:f2:44:7c:bb:21:a8:67:14:24:b4:72:
                    d9:6c:83:be:09:48:8f:7a:7c:a0:20:c9:a0:53:2b:
                    61:b6:2b:82:86:55:d8:86:b7:5a:8f:b2:dd:e4:ea:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:39:7D:4A:79:BE:79:32:3B:AB:BC:A7:BC:25:BB:C9:8C:C6:13:C3
            X509v3 Authority Key Identifier:
                keyid:2A:14:60:F7:0E:31:4C:34:17:37:3F:7F:40:88:C0:94:FE:05:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8645a0b0079c3b9d770e0aec383c5034d164eae4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/8645a0b0079c3b9d770e0aec383c5034d164eae4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f6c40017-1704-4b7e-b616-ec05f525dfea/8645a0b0079c3b9d770e0aec383c5034d164eae4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:57:62:af:3e:14:e5:a4:56:69:6b:e6:21:0c:2d:20:ed:db:
         10:9f:c0:c2:a7:b2:6a:b8:ec:72:21:09:a7:f8:9b:e6:0a:de:
         85:e2:ce:ff:f3:66:98:f8:dc:69:5f:25:5f:e1:82:78:0b:98:
         12:5c:8a:8a:3e:51:42:be:2d:ee:e1:d4:03:9c:8b:5e:81:cb:
         30:21:fd:9d:7d:0f:9c:65:28:67:40:52:9d:f5:27:11:f4:20:
         14:65:07:05:b5:9a:48:bf:29:84:5f:ce:e1:68:54:12:67:4c:
         b1:d2:1e:18:00:9b:77:1e:36:36:bf:3c:68:07:30:ec:bc:91:
         91:bb:b6:d7:ac:93:3f:41:85:9a:40:d0:e5:d3:a2:5c:41:58:
         23:9f:d9:73:fd:3f:da:a3:76:3b:25:a1:a4:89:2d:e5:dc:ac:
         f8:7d:f7:f4:1c:d6:89:04:26:18:2a:16:1d:66:22:d5:9e:65:
         08:f8:7e:12:50:1c:83:a5:6f:85:fb:75:f1:81:d3:02:57:41:
         e7:13:c1:cf:f2:50:d9:fa:21:f6:fd:64:0d:8b:73:15:57:67:
         ba:ea:3d:b8:11:0d:3e:ff:2a:23:2a:0f:a3:ea:3d:50:c4:13:
         be:4a:a2:11:89:6f:4d:4b:ab:2e:96:02:2a:c2:5f:7a:f1:5c:
         88:9b:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----