$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.mft File: 4452c063f42ef0ca8b3cf935d619efd87649c998.mft (raw, json) Hash identifier: 8bz/arjsbMX2ccHgP4g90Bg5NR3ZEe3vAset+PFUvZg= Subject key identifier: 68:5F:D9:5E:D7:C1:6D:37:DA:58:AE:DA:6B:8C:13:0D:3F:81:5E:0B Authority key identifier: 6C:C1:91:0F:E6:13:20:5F:A0:FC:C5:D5:97:3B:3F:B5:5B:C9:3B:7F Certificate issuer: /CN=4452c063f42ef0ca8b3cf935d619efd87649c998 Certificate serial: 1C665E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4452c063f42ef0ca8b3cf935d619efd87649c998.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.mft Manifest Number: 0939 Signing time: Tue 28 Mar 2023 01:16:08 +0000 Manifest this update: Tue 28 Mar 2023 00:15:49 +0000 Manifest next update: Fri 31 Mar 2023 03:55:49 +0000 Files and hashes: 1: 4452c063f42ef0ca8b3cf935d619efd87649c998.crl (hash: xKlXsaHjGCR230qLP11fRAVMSFoYf1gItOP/aAENI8M=) 2: 6560afd8b4212fb67bcd127682e453b33a512bbf.roa (hash: uZE4AJun3yIvsEXCBwE55Ff1vxU6B22w5moCNNxRp1A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.crl rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4452c063f42ef0ca8b3cf935d619efd87649c998.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 31 Mar 2023 00:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861214 (0x1c665e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4452c063f42ef0ca8b3cf935d619efd87649c998 Validity Not Before: Mar 28 00:15:49 2023 GMT Not After : Mar 31 03:55:49 2023 GMT Subject: CN=dbba83fcac79f043f0eaddaffdd4fb2f5f0aad04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:9d:28:00:54:ce:19:88:5f:3a:62:5a:6b: b4:a9:14:bb:d4:5e:5d:af:d9:dd:7f:f5:be:b5:59: cc:03:7e:1f:c6:ab:71:d2:8e:b9:4e:e9:20:d2:10: 0d:ef:e4:17:55:38:2d:50:10:d9:6f:10:52:5a:cf: 20:ac:c0:dc:0a:e8:1d:8b:16:b0:92:11:2b:a5:3f: 5d:df:d2:0c:1c:9c:73:b4:15:9f:c3:0e:75:0f:81: f9:35:71:8f:60:f3:fa:d9:75:01:91:18:50:ad:1f: dd:ae:d3:08:dc:17:d2:79:56:ff:34:e5:a8:5a:93: e8:4e:31:94:bd:b4:ae:3a:dd:94:97:44:73:07:94: 2f:81:68:e1:e8:51:9c:07:e9:00:ae:c2:cd:c6:58: 69:82:7f:2d:a3:b3:d6:25:74:64:32:ba:00:07:07: e6:71:63:2d:8c:66:d4:c8:32:9f:c4:9f:61:37:19: ef:fb:9f:f0:eb:c6:dc:63:8a:1e:70:b5:41:e0:8f: c5:04:b3:a6:2c:1e:8e:53:93:8e:1a:fb:4e:e1:cf: 52:f5:97:d2:26:bb:1b:29:69:b4:a7:aa:1c:ed:61: 20:fd:d8:08:bb:b8:ad:24:4e:0e:60:8f:7d:f5:0b: 1f:67:de:d9:1e:e6:38:e7:12:fc:c7:93:cf:5d:f5: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:D9:5E:D7:C1:6D:37:DA:58:AE:DA:6B:8C:13:0D:3F:81:5E:0B X509v3 Authority Key Identifier: keyid:6C:C1:91:0F:E6:13:20:5F:A0:FC:C5:D5:97:3B:3F:B5:5B:C9:3B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4452c063f42ef0ca8b3cf935d619efd87649c998.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1dd6c19f-31cf-4a5e-8f47-6acca246f339/4452c063f42ef0ca8b3cf935d619efd87649c998.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:00:cf:87:7f:62:56:27:ac:21:3f:99:98:41:56:af:84:91: 40:75:4e:41:ec:52:99:d2:94:fb:b4:7f:41:59:c1:a4:24:fc: 72:15:1b:66:f1:85:fb:b9:b6:83:b3:7b:b4:d5:15:d5:ac:a2: 03:06:2f:c6:e4:8f:0b:ff:ad:e9:27:92:72:8b:bb:cc:cb:7c: 58:fd:de:73:a6:db:31:80:58:51:84:b9:05:50:29:81:12:e5: e5:17:c4:12:1d:3a:28:27:64:05:89:cc:5f:04:9e:93:6d:9d: eb:dc:48:67:70:71:2d:68:3f:80:e5:24:b4:94:e1:ef:5c:81: 62:f7:ec:c1:fb:da:87:65:ec:41:92:1e:58:89:7b:d6:b7:af: b9:22:a2:2f:6f:85:30:8c:7e:d6:9b:8e:05:13:8b:36:68:10: bc:89:ec:67:29:2b:40:0d:07:33:83:72:c3:0f:4c:ab:be:33: 03:71:19:a5:2d:d9:bb:6e:56:10:83:bc:53:87:2e:71:9e:42: 3b:b4:0a:6c:9d:45:f5:06:6d:fe:6b:9d:79:b2:fc:15:3c:a8: e6:cb:7e:30:b2:46:07:c4:ea:3f:7a:03:f5:18:b7:5f:c0:86: b8:e4:3f:39:13:bd:ad:04:90:8b:51:b4:16:0a:f8:00:96:74: 5d:ac:0e:69 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHGZeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ0 NTJjMDYzZjQyZWYwY2E4YjNjZjkzNWQ2MTllZmQ4NzY0OWM5OTgwHhcNMjMwMzI4 MDAxNTQ5WhcNMjMwMzMxMDM1NTQ5WjAzMTEwLwYDVQQDEyhkYmJhODNmY2FjNzlm MDQzZjBlYWRkYWZmZGQ0ZmIyZjVmMGFhZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAydadKABUzhmIXzpiWmu0qRS71F5dr9ndf/W+tVnMA34fxqtx 0o65Tukg0hAN7+QXVTgtUBDZbxBSWs8grMDcCugdixawkhErpT9d39IMHJxztBWf ww51D4H5NXGPYPP62XUBkRhQrR/drtMI3BfSeVb/NOWoWpPoTjGUvbSuOt2Ul0Rz B5QvgWjh6FGcB+kArsLNxlhpgn8to7PWJXRkMroABwfmcWMtjGbUyDKfxJ9hNxnv +5/w68bcY4oecLVB4I/FBLOmLB6OU5OOGvtO4c9S9ZfSJrsbKWm0p6oc7WEg/dgI u7itJE4OYI999QsfZ97ZHuY45xL8x5PPXfXUYQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFGhf2V7XwW032liu2muMEw0/gV4LMB8GA1UdIwQYMBaAFGzBkQ/mEyBfoPzF 1Zc7P7VbyTt/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDQ1MmMw NjNmNDJlZjBjYThiM2NmOTM1ZDYxOWVmZDg3NjQ5Yzk5OC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMWRkNmMxOWYtMzFjZi00YTVlLThmNDctNmFjY2Ey NDZmMzM5LzQ0NTJjMDYzZjQyZWYwY2E4YjNjZjkzNWQ2MTllZmQ4NzY0OWM5OTgu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xZGQ2YzE5Zi0zMWNmLTRhNWUtOGY0Ny02YWNj YTI0NmYzMzkvNDQ1MmMwNjNmNDJlZjBjYThiM2NmOTM1ZDYxOWVmZDg3NjQ5Yzk5 OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAEIAz4d/YlYnrCE/mZhBVq+EkUB1TkHsUpnSlPu0f0FZwaQk /HIVG2bxhfu5toOze7TVFdWsogMGL8bkjwv/reknknKLu8zLfFj93nOm2zGAWFGE uQVQKYES5eUXxBIdOignZAWJzF8EnpNtnevcSGdwcS1oP4DlJLSU4e9cgWL37MH7 2odl7EGSHliJe9a3r7kioi9vhTCMftabjgUTizZoELyJ7GcpK0ANBzODcsMPTKu+ MwNxGaUt2btuVhCDvFOHLnGeQju0CmydRfUGbf5rnXmy/BU8qObLfjCyRgfE6j96 A/UYt1/AhrjkPzkTva0EkItRtBYK+ACWdF2sDmk= -----END CERTIFICATE-----Generated at Tue Mar 28 01:40:22 2023 by rpki-client on console-fra.rpki-client.org