Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/8f8928f693cae2152db68b3f0f8d2832228b50c4.mft
File:                     8f8928f693cae2152db68b3f0f8d2832228b50c4.mft (raw, json)
Hash identifier:          DID/b6r6NEE5uJtklKhZc4mZLJlfqFsoPfOAz3qHneo=
Subject key identifier:   0A:7A:14:FC:8E:56:5E:F6:01:E1:9D:B5:E6:99:AD:D5:DF:4A:25:D7
Authority key identifier: E7:AC:F1:9D:5C:A5:ED:B0:DA:1F:95:67:BE:F2:83:F2:2F:38:B2:E0
Certificate issuer:       /CN=8f8928f693cae2152db68b3f0f8d2832228b50c4
Certificate serial:       235F07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f8928f693cae2152db68b3f0f8d2832228b50c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/8f8928f693cae2152db68b3f0f8d2832228b50c4.mft
Manifest number:          0DDD
Signing time:             Mon 15 Apr 2024 08:21:05 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 10:31:16 +0000
Files and hashes:         1: 8f8928f693cae2152db68b3f0f8d2832228b50c4.crl (hash: kQfXIXWURHqfAilhaTh3grOdD61mklTbRczFPOhf7+Q=)
                          2: b6e43da4c1554818b0854280f00c7b6677950fd1.roa (hash: 0F3rv0iRvTe2pV+tb6SeICu9IFRAC24fsWkPiz0iyxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318087 (0x235f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8928f693cae2152db68b3f0f8d2832228b50c4
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 10:31:16 2024 GMT
        Subject: CN=b48bfe711a39b29058d02cedaa73669f7c816c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:7c:d0:68:19:c6:ca:47:5e:41:94:cb:50:
                    c5:2a:ce:6f:71:93:15:d7:03:69:cd:a4:84:c7:12:
                    90:4a:2a:a5:fc:c8:83:e6:ab:a3:7d:0e:72:be:c8:
                    8c:c0:29:88:cc:6a:e4:ec:b7:09:eb:9d:b7:8c:72:
                    1f:d3:45:b2:f4:f1:f2:bf:3a:ff:0a:39:63:62:8a:
                    d1:1d:97:1c:36:ee:f9:d1:ef:6c:20:6f:93:33:16:
                    9f:8f:cc:3c:77:a3:f0:3c:b8:63:67:9b:19:e6:0b:
                    34:fe:43:96:18:c5:e4:ee:9a:36:0e:0a:1f:73:b6:
                    af:39:8a:89:77:c3:46:1d:76:f4:fc:57:51:50:a4:
                    67:61:10:a2:55:9e:95:a4:22:f2:2d:5f:de:b6:88:
                    2a:40:9b:a3:d9:dc:55:2d:f0:ee:fc:32:3c:48:02:
                    2a:70:c4:37:59:fb:42:19:b9:36:42:6c:86:6a:a4:
                    bf:6a:a1:b8:d5:ab:cb:c8:1b:ac:65:fb:72:48:ce:
                    f2:0f:0b:b3:05:1b:12:51:b3:0b:db:81:b8:5e:a9:
                    0f:e8:23:85:4a:07:bd:0b:dc:34:ff:51:e8:08:f1:
                    de:bc:a5:dc:85:c8:53:35:73:b0:b5:f4:12:32:76:
                    30:b3:00:6d:b0:5e:83:e3:3c:90:a4:59:4e:4c:a5:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:14:FC:8E:56:5E:F6:01:E1:9D:B5:E6:99:AD:D5:DF:4A:25:D7
            X509v3 Authority Key Identifier:
                keyid:E7:AC:F1:9D:5C:A5:ED:B0:DA:1F:95:67:BE:F2:83:F2:2F:38:B2:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f8928f693cae2152db68b3f0f8d2832228b50c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/8f8928f693cae2152db68b3f0f8d2832228b50c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f922e89e-787f-4eed-bd71-463605a83fd2/8f8928f693cae2152db68b3f0f8d2832228b50c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:32:cc:aa:eb:3a:f6:78:b2:b5:f0:c1:fa:0d:1b:01:93:30:
         c9:75:05:f5:e9:05:8c:cd:30:c1:06:38:79:05:c5:ae:99:7f:
         df:e2:68:89:b9:14:f2:98:8a:21:e9:c2:f6:c3:e0:d3:48:0b:
         5d:96:fe:79:49:28:a3:2e:cd:e6:e3:82:05:60:af:b0:bf:0c:
         ae:61:e6:aa:07:de:68:24:c6:00:d0:6f:4c:71:bf:b9:25:88:
         ea:52:3e:5f:e3:5b:89:74:e2:61:3e:ca:ca:c5:f4:75:7f:74:
         73:17:ff:6c:b5:1f:d8:57:f9:24:3c:aa:81:62:b6:88:cc:14:
         02:32:37:46:89:39:6d:28:f2:65:fa:4f:21:f6:bb:08:7b:b6:
         fe:03:8f:5e:67:1d:75:ed:6f:e2:97:1b:fb:40:e7:8c:31:78:
         5b:30:90:f7:e4:32:9a:32:ef:07:59:fb:c2:e2:81:cf:3a:32:
         03:28:ff:bd:2e:7a:2f:9d:12:0b:12:29:ae:b6:b2:a7:6b:e9:
         ea:16:f8:3e:6f:60:67:a3:43:80:8a:72:42:e7:88:7a:4f:d7:
         4e:e0:87:fd:79:36:a1:d5:fa:28:c5:58:f5:b9:7e:a8:6f:0a:
         17:d6:c0:61:64:9b:02:1f:21:94:a4:49:c9:53:4f:82:99:0b:
         e9:a8:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----