$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft File: cfd77889f712db89177f6478b03af00c3bad37fa.mft (raw, json) Hash identifier: D2BEg3q2qWvIBj3vTFivlq04YahYgqOBrovpzUJ1aNY= Subject key identifier: 2F:98:71:61:9F:CB:89:CA:20:AC:71:9E:C9:24:DE:52:1B:C0:57:EC Authority key identifier: 3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82 Certificate issuer: /CN=cfd77889f712db89177f6478b03af00c3bad37fa Certificate serial: 220D49 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft Manifest number: 0DB7 Signing time: Thu 28 Mar 2024 11:21:08 +0000 Manifest this update: Thu 28 Mar 2024 10:20:10 +0000 Manifest next update: Sun 31 Mar 2024 12:25:10 +0000 Files and hashes: 1: 12b9a2b97a21985dea9ee5ca11308eacccb565ca.roa (hash: iFgOKbF2+YcekdNwd1jcdTGfwmoKK350c6uVAS6Lh1Y=) 2: cfd77889f712db89177f6478b03af00c3bad37fa.crl (hash: 5Tg65eJ29Y5bbisF1mDbWWkYQy3Y1ok5Cm+uE4ddIbI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.crl rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 11:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231625 (0x220d49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd77889f712db89177f6478b03af00c3bad37fa Validity Not Before: Mar 28 10:20:10 2024 GMT Not After : Mar 31 12:25:10 2024 GMT Subject: CN=654ce93e1e61616b8bd125b500c854fc8485c42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:41:68:ca:48:98:8c:cf:e0:4e:6a:55:ac: 24:77:58:37:d5:3f:f6:bc:3a:ff:fe:d3:0a:75:35: 1c:a8:f7:1a:e7:25:40:33:d1:5c:7b:76:2b:01:7d: 96:c0:bc:c4:8d:77:ab:82:20:34:50:73:a8:d3:cb: 7f:7e:4f:61:3a:05:f7:e6:71:bb:09:f4:59:8b:34: 0c:83:d2:b5:1d:c7:85:10:7f:43:f8:18:e5:94:7d: 9f:e2:43:e4:00:ac:d5:7d:23:eb:b1:b8:ab:a8:19: a1:34:ce:38:f3:b5:8d:71:ab:58:39:ec:d0:07:06: b5:b1:ba:0c:8b:49:2e:44:5d:13:fb:c1:20:e0:91: 2d:83:ce:e1:42:9a:22:c5:80:6a:a1:56:8d:b5:96: a4:43:35:d0:0c:4e:af:2b:2c:e2:8d:ed:41:62:b9: 13:ee:06:95:d7:ec:c2:dc:97:97:93:1f:de:47:ea: d2:d8:95:ba:cf:ed:7e:c1:32:81:d4:57:8c:44:06: b9:ea:fc:d6:3f:13:ee:3c:61:1f:a3:67:dd:94:d8: 14:14:de:56:58:bf:5b:00:85:d6:ed:ab:f3:e1:c9: e1:e3:20:45:43:60:b3:02:ee:8d:a0:40:48:57:7a: aa:6c:a4:d2:8f:87:ca:89:f7:a4:9f:50:6c:5b:df: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:98:71:61:9F:CB:89:CA:20:AC:71:9E:C9:24:DE:52:1B:C0:57:EC X509v3 Authority Key Identifier: keyid:3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6b:81:a9:9c:26:fc:37:d3:82:87:81:2b:e0:04:8a:08:46: 66:32:ad:0a:ae:01:49:1a:fc:f8:1f:00:3f:aa:87:cf:b2:4f: 06:60:94:8d:75:1b:46:0d:14:63:3b:d0:2d:bf:56:2f:6f:9a: 10:04:8e:e5:bf:58:f6:c7:f7:a5:47:e6:9a:cd:5a:db:b7:1a: 78:f8:11:01:28:01:4e:08:e8:e9:23:2a:f9:16:a9:de:9d:01: 0b:4e:e3:fb:d2:c8:bc:e7:d9:07:14:9d:9a:a1:64:9c:93:5b: fb:e4:de:4d:2f:d6:93:ef:9a:89:39:a7:3b:89:e7:2e:fe:e5: 8e:48:30:3f:55:70:16:45:4c:d4:b8:9e:4d:b0:a5:42:29:81: 7f:db:ae:a8:a7:c0:42:6e:42:8e:34:4d:85:87:59:da:de:85: be:b1:15:ac:72:55:25:dd:97:b8:d1:f5:fc:52:b3:2b:dc:2a: 32:1d:c5:00:7b:cf:e7:7a:bf:09:43:83:89:85:68:d0:ed:5f: 0a:33:8e:b8:47:3d:bc:a7:8c:2b:af:75:76:3d:0c:2e:0c:cd: ca:8d:94:73:2a:dc:22:50:c9:d3:50:01:79:41:c4:b5:75:58: 66:20:27:4f:8a:33:ab:f0:ab:88:d3:88:42:48:50:ba:f1:38: b8:2b:a2:41 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDIg1JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm ZDc3ODg5ZjcxMmRiODkxNzdmNjQ3OGIwM2FmMDBjM2JhZDM3ZmEwHhcNMjQwMzI4 MTAyMDEwWhcNMjQwMzMxMTIyNTEwWjAzMTEwLwYDVQQDEyg2NTRjZTkzZTFlNjE2 MTZiOGJkMTI1YjUwMGM4NTRmYzg0ODVjNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAwU5BaMpImIzP4E5qVawkd1g31T/2vDr//tMKdTUcqPca5yVA M9Fce3YrAX2WwLzEjXergiA0UHOo08t/fk9hOgX35nG7CfRZizQMg9K1HceFEH9D +BjllH2f4kPkAKzVfSPrsbirqBmhNM4487WNcatYOezQBwa1sboMi0kuRF0T+8Eg 4JEtg87hQpoixYBqoVaNtZakQzXQDE6vKyzije1BYrkT7gaV1+zC3JeXkx/eR+rS 2JW6z+1+wTKB1FeMRAa56vzWPxPuPGEfo2fdlNgUFN5WWL9bAIXW7avz4cnh4yBF Q2CzAu6NoEBIV3qqbKTSj4fKifekn1BsW9/jRQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFC+YcWGfy4nKIKxxnskk3lIbwFfsMB8GA1UdIwQYMBaAFD3B5zlFMknrRk77 BuEF60/Z/euCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZkNzc4 ODlmNzEyZGI4OTE3N2Y2NDc4YjAzYWYwMGMzYmFkMzdmYS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMWVkNmVjNDctNDY3Zi00YTU2LTk4MDMtZmFhOTU5 ZTRlOGY5L2NmZDc3ODg5ZjcxMmRiODkxNzdmNjQ3OGIwM2FmMDBjM2JhZDM3ZmEu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8xZWQ2ZWM0Ny00NjdmLTRhNTYtOTgwMy1mYWE5 NTllNGU4ZjkvY2ZkNzc4ODlmNzEyZGI4OTE3N2Y2NDc4YjAzYWYwMGMzYmFkMzdm YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBADRrgamcJvw304KHgSvgBIoIRmYyrQquAUka/PgfAD+qh8+y TwZglI11G0YNFGM70C2/Vi9vmhAEjuW/WPbH96VH5prNWtu3Gnj4EQEoAU4I6Okj KvkWqd6dAQtO4/vSyLzn2QcUnZqhZJyTW/vk3k0v1pPvmok5pzuJ5y7+5Y5IMD9V cBZFTNS4nk2wpUIpgX/brqinwEJuQo40TYWHWdrehb6xFaxyVSXdl7jR9fxSsyvc KjIdxQB7z+d6vwlDg4mFaNDtXwozjrhHPbynjCuvdXY9DC4MzcqNlHMq3CJQydNQ AXlBxLV1WGYgJ0+KM6vwq4jTiEJIULrxOLgrokE= -----END CERTIFICATE-----Generated at Thu Mar 28 13:27:49 2024 by rpki-client on console-ams.rpki-client.org