Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f86609fd-08b0-4c7a-942b-4df5918d5d89/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.mft
File:                     f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.mft (raw, json)
Hash identifier:          q3YzWDpzvyw6yFwiut7yXRqiKO4+g669iVaxpbHNrWQ=
Subject key identifier:   42:18:EC:1E:B1:37:4E:58:7F:94:2F:4E:AA:15:78:82:0B:C2:3E:8D
Authority key identifier: 5C:B6:F6:15:7C:12:35:A2:E9:DD:69:BB:F9:AA:5A:73:AE:45:77:E4
Certificate issuer:       /CN=f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f
Certificate serial:       26D8A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f86609fd-08b0-4c7a-942b-4df5918d5d89/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.mft
Manifest number:          0DE9
Signing time:             Mon 15 Apr 2024 11:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:02:18 +0000
Files and hashes:         1: de5862cd83bc6977e61516db53a1ca6f9539800d.roa (hash: xK6IP9p9fmn9F/1OnXbKijHdd+8rrYIn8/ZAUWKPy/s=)
                          2: f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.crl (hash: Rgakf2ONXPfox6QJvxbO1mrfbO4zIWDocNcJn7Bho+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2545825 (0x26d8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:02:18 2024 GMT
        Subject: CN=e8da425045189903e204f7aa49d54d689347893c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:7c:39:c9:f0:cf:30:b2:0e:2f:d0:e0:ce:
                    81:f7:ec:7d:7a:9a:1e:dd:af:b0:6f:21:1b:db:61:
                    b3:db:c0:d4:b8:7e:f1:24:72:34:7f:93:19:ce:af:
                    77:fa:7c:93:59:0c:e3:a2:66:03:52:4b:c6:7d:21:
                    e6:4d:38:67:5e:63:da:08:ce:c6:68:87:5a:3c:66:
                    f7:ec:57:db:d0:45:08:48:fd:17:51:92:b9:41:67:
                    3f:5b:48:db:04:42:93:08:9e:ef:51:ab:35:49:b4:
                    9b:6f:38:e0:42:84:2e:c5:b9:d4:61:38:9c:03:c0:
                    bf:dd:ec:f0:d5:94:e3:8c:f5:44:c3:79:83:25:f0:
                    ad:18:94:24:40:97:33:0c:db:98:3c:a4:ce:7e:f2:
                    ee:db:bd:e0:b6:8d:07:55:f6:32:2c:30:ac:5c:ba:
                    66:05:ba:28:52:39:09:1c:d3:d3:ca:0b:db:21:1e:
                    49:28:71:86:f6:c2:34:b7:92:40:a3:dc:89:3a:96:
                    de:a6:f9:3e:ba:aa:a4:f4:79:9d:d5:c1:53:a9:17:
                    55:52:2c:c8:d2:36:38:51:28:8f:14:e4:66:4e:69:
                    c0:d0:48:23:e3:16:cc:98:2f:61:c3:3f:03:00:fa:
                    b8:a7:18:57:c8:cf:d1:85:10:1f:3d:85:41:bb:79:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:18:EC:1E:B1:37:4E:58:7F:94:2F:4E:AA:15:78:82:0B:C2:3E:8D
            X509v3 Authority Key Identifier:
                keyid:5C:B6:F6:15:7C:12:35:A2:E9:DD:69:BB:F9:AA:5A:73:AE:45:77:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f86609fd-08b0-4c7a-942b-4df5918d5d89/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f86609fd-08b0-4c7a-942b-4df5918d5d89/f9eff36fdd5b194b91d8e33f9693f1cb9c6fe77f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0d:aa:b3:6b:41:06:42:c4:96:39:6d:3b:97:53:e8:d7:d0:
         34:ff:92:3a:42:b2:ea:b6:8c:db:a4:af:08:f6:7e:8c:dd:ea:
         4c:9f:3a:d2:ed:bb:f8:23:62:13:9f:5e:71:80:0c:cf:42:36:
         cd:22:2d:2b:52:c9:1f:79:a1:b7:fe:58:35:63:b8:12:04:6e:
         88:52:16:9a:af:86:56:b6:b4:4f:27:dd:81:67:f8:32:36:71:
         2a:87:bd:45:a1:3c:7e:cf:46:bd:87:8d:6f:e9:bb:aa:db:37:
         32:e2:d8:bd:40:4d:23:7d:a5:fd:95:65:95:6f:60:6f:bb:8c:
         2f:5a:b3:8d:55:99:ad:25:8b:9b:55:ed:62:14:6b:1f:2d:c3:
         4f:f8:2e:40:dc:f6:d8:96:fa:28:d5:a3:50:40:59:c4:70:f0:
         96:25:b9:32:fc:37:00:0d:c5:49:b1:1c:0e:b8:0b:64:e2:71:
         bb:b6:f1:e9:75:d1:2a:04:1f:11:19:b8:3b:0d:13:40:ec:c3:
         a6:e2:26:eb:b3:d1:78:c7:c7:de:bc:03:46:6d:eb:96:f6:93:
         88:1d:13:40:81:fd:60:57:ab:17:49:01:6f:9b:82:fb:0f:d1:
         9f:a2:2c:78:54:ed:e9:3c:07:d7:e1:5b:88:80:e1:c5:5a:5c:
         01:f3:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----