$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: rpwJI+MRAnMDG2MjNrRahNMr3cxBoF0OpbeyRkAz6iI= Subject key identifier: FE:19:74:75:28:0E:F0:50:D4:E9:B9:05:47:1F:CA:79:B1:1D:E2:88 Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 685A90F8B4994F642C0E0A0EE9D9774C7CE5216B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: 86 Signing time: Thu 21 Nov 2024 05:12:34 +0000 Manifest this update: Thu 21 Nov 2024 05:07:34 +0000 Manifest next update: Tue 26 Nov 2024 03:36:34 +0000 Files and hashes: 1: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: 1zhtlqJXmW3m7ccN7RUFx9NZzpQq5n/af6F1W7QcBlU=) 2: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: 7DDnas+F776CXGxahjvQVjMBhiVSZx2TyWeZISUfCvI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5a:90:f8:b4:99:4f:64:2c:0e:0a:0e:e9:d9:77:4c:7c:e5:21:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Nov 21 05:07:34 2024 GMT Not After : Nov 26 03:36:34 2024 GMT Subject: CN=FE197475280EF050D4E9B905471FCA79B11DE288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:58:54:4e:02:88:60:41:d5:07:39:bc:c9: 94:71:08:9b:f4:bc:a6:ad:a8:af:d0:65:b0:5d:74: 69:e6:5b:92:3d:fd:90:69:02:cb:3d:1c:03:b5:2c: 18:53:73:68:31:f0:ab:27:26:a1:a9:b3:ca:e7:de: b4:c1:b5:b1:33:59:ab:25:f1:ed:81:63:d3:15:c8: 53:77:9d:14:c9:df:1e:3c:44:6a:38:19:14:64:10: 14:06:e3:3f:b6:2d:4a:53:2f:95:c2:8e:9a:c1:f6: 29:53:89:0b:db:e3:b1:77:64:93:75:16:79:dc:2a: ae:6e:20:a2:9a:8d:44:25:e7:67:bc:8a:7c:9b:bb: f8:4f:6d:c5:bc:82:1a:49:9a:d9:a1:9e:ce:28:1e: d5:08:12:3f:20:47:a2:b2:8d:15:d2:fc:f0:94:01: 62:24:06:d8:e8:b8:71:32:e5:05:d6:4f:26:44:7d: 88:31:5b:b2:be:42:e4:96:ed:c2:df:65:37:ec:62: b0:98:bc:c5:44:05:6d:87:2d:1a:ec:3c:09:9e:c7: 9a:f6:d1:5b:14:25:09:ed:cc:09:0e:83:3b:94:f1: 33:b5:86:9d:0e:83:78:36:81:b9:f8:3c:4f:0a:d0: 99:66:17:89:44:da:b0:93:3f:f7:ff:98:b1:f7:0c: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:74:75:28:0E:F0:50:D4:E9:B9:05:47:1F:CA:79:B1:1D:E2:88 X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:88:42:80:a6:d2:17:1c:51:db:7c:a9:53:7d:74:66:6f:97: 38:63:95:37:b8:2b:e3:20:d4:7f:87:e6:87:f7:df:53:89:47: 22:fe:a6:b0:8c:e2:a8:65:9e:a6:7a:d0:0f:32:5d:9f:79:b5: 9c:62:0e:f4:d8:f6:7b:00:be:80:a5:02:14:06:00:58:c1:4c: 42:91:91:5c:56:90:2f:e6:20:e7:9d:cf:a4:3c:54:be:ec:12: 61:45:c9:e2:2f:0c:c0:dd:13:3d:a4:56:16:db:87:d6:d4:c6: 6e:42:bf:39:af:8d:75:c1:c4:4f:ba:7d:c5:93:84:aa:39:ef: 98:8a:dc:8d:41:e4:58:14:1c:0b:59:a1:ca:0f:0e:b5:0b:5c: 2d:ca:e1:4f:fb:69:3b:27:a1:68:6d:a0:b2:92:48:4e:77:2a: 2d:f2:f8:ce:b0:f9:5e:9e:48:2a:da:50:d6:aa:7a:75:a0:50: db:8b:44:92:d8:2f:db:36:f0:60:c5:f6:4f:39:c4:80:c2:59: df:31:2d:1d:65:b2:37:27:a2:ff:0d:d3:01:fd:4d:9a:77:66: 25:00:f2:83:e4:b2:af:3d:e7:89:11:0c:28:4c:67:74:e3:87: 18:b4:68:a6:97:f6:9b:e1:f7:82:4e:8f:4a:42:02:41:11:90: 4b:62:dd:b1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaFqQ+LSZT2QsDgoO6dl3THzlIWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNDExMjEwNTA3MzRaFw0yNDExMjYwMzM2MzRaMDMxMTAvBgNV BAMTKEZFMTk3NDc1MjgwRUYwNTBENEU5QjkwNTQ3MUZDQTc5QjExREUyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nlhUTgKIYEHVBzm8yZRxCJv0 vKatqK/QZbBddGnmW5I9/ZBpAss9HAO1LBhTc2gx8KsnJqGps8rn3rTBtbEzWasl 8e2BY9MVyFN3nRTJ3x48RGo4GRRkEBQG4z+2LUpTL5XCjprB9ilTiQvb47F3ZJN1 FnncKq5uIKKajUQl52e8inybu/hPbcW8ghpJmtmhns4oHtUIEj8gR6KyjRXS/PCU AWIkBtjouHEy5QXWTyZEfYgxW7K+QuSW7cLfZTfsYrCYvMVEBW2HLRrsPAmex5r2 0VsUJQntzAkOgzuU8TO1hp0Og3g2gbn4PE8K0JlmF4lE2rCTP/f/mLH3DM61AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/hl0dSgO8FDU6bkFRx/KebEd4ogwHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPiEKAptIXHFHbfKlTfXRmb5c4 Y5U3uCvjINR/h+aH999TiUci/qawjOKoZZ6metAPMl2febWcYg702PZ7AL6ApQIU BgBYwUxCkZFcVpAv5iDnnc+kPFS+7BJhRcniLwzA3RM9pFYW24fW1MZuQr85r411 wcRPun3Fk4SqOe+YityNQeRYFBwLWaHKDw61C1wtyuFP+2k7J6FobaCykkhOdyot 8vjOsPlenkgq2lDWqnp1oFDbi0SS2C/bNvBgxfZPOcSAwlnfMS0dZbI3J6L/DdMB /U2ad2YlAPKD5LKvPeeJEQwoTGd044cYtGiml/ab4feCTo9KQgJBEZBLYt2x -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org