$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft File: cb00b3d70dd9cb79681cd490843163b3a4674f12.mft (raw, json) Hash identifier: MGpJHIuK2Gw5Imqbq3RileKek08k/b6naLcvEycfCGM= Subject key identifier: 77:A5:75:CB:59:1E:28:FF:9D:EE:03:9F:04:18:23:6C:E4:D7:6C:F5 Authority key identifier: 9D:D0:C8:1A:A4:CD:00:87:45:BE:B0:07:4C:E0:52:7D:F3:8B:DA:02 Certificate issuer: /CN=cb00b3d70dd9cb79681cd490843163b3a4674f12 Certificate serial: 1EA031 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb00b3d70dd9cb79681cd490843163b3a4674f12.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft Manifest Number: 0943 Signing time: Fri 31 Mar 2023 11:16:25 +0000 Manifest this update: Fri 31 Mar 2023 10:15:46 +0000 Manifest next update: Mon 03 Apr 2023 11:22:46 +0000 Files and hashes: 1: 8e04c4893cfed6e3ac68eb84caf9468664d28c8a.roa (hash: ratTU25vdhomyW1L7kxNHk7qBRU/N78fgNH5YjjN0hQ=) 2: cb00b3d70dd9cb79681cd490843163b3a4674f12.crl (hash: bA2kXpQe+jDAHRUfjEg9GYUOjv8G568nLyLY+f7F/EM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.crl rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb00b3d70dd9cb79681cd490843163b3a4674f12.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Apr 2023 04:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007089 (0x1ea031) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb00b3d70dd9cb79681cd490843163b3a4674f12 Validity Not Before: Mar 31 10:15:46 2023 GMT Not After : Apr 3 11:22:46 2023 GMT Subject: CN=4a25c6a63635babe64211847ab948a18d8f94472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:47:25:cd:31:63:dd:68:80:77:81:ab:0b:59: 40:e1:c7:f4:e5:68:de:95:74:1a:4f:d4:7e:4b:44: aa:b1:b0:18:40:df:aa:d0:40:78:1b:7c:84:d5:1b: 03:82:ae:7d:11:20:a9:7f:cc:8c:64:0e:8e:0c:56: da:32:ac:08:6e:de:e2:48:da:48:d5:cb:a4:5d:e1: 10:d3:4c:3e:8c:d9:9b:dd:dd:30:d1:76:c9:9f:ef: 28:28:59:f9:98:9c:9d:2e:ac:9a:d8:27:78:d7:ed: 78:53:73:ba:e7:ee:36:4d:b9:e9:b8:1c:54:45:a9: 37:c7:63:89:03:3f:cb:20:27:86:4b:7f:ff:93:29: 59:01:07:b8:1f:85:10:3f:95:d1:cc:12:8f:1e:80: 1a:6b:e1:fa:6a:99:b6:54:04:92:1a:93:25:a6:cc: 86:2b:bd:cb:2e:f7:62:18:a1:19:c6:e9:e3:2c:85: b5:cf:66:7f:e0:a6:09:83:a3:cc:47:bf:a7:16:df: da:65:76:25:d6:16:87:95:16:d6:41:b7:d4:0d:d1: 1f:c4:55:52:bf:11:a3:5c:75:22:92:84:94:d9:a5: e3:19:0c:b8:20:24:6b:e9:f0:a4:fd:cf:82:c6:fe: 09:db:21:47:06:a3:b1:e4:44:3a:b9:c9:43:e3:e8: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A5:75:CB:59:1E:28:FF:9D:EE:03:9F:04:18:23:6C:E4:D7:6C:F5 X509v3 Authority Key Identifier: keyid:9D:D0:C8:1A:A4:CD:00:87:45:BE:B0:07:4C:E0:52:7D:F3:8B:DA:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb00b3d70dd9cb79681cd490843163b3a4674f12.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2269a985-f40e-4452-b4ab-c12239d9e993/cb00b3d70dd9cb79681cd490843163b3a4674f12.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8a:28:b5:da:94:19:bd:32:fb:1b:eb:25:1f:e4:d7:69:2c: dd:de:43:13:44:b7:60:bf:18:50:c4:23:fc:39:e1:a5:ca:4c: 50:0c:33:16:de:51:05:eb:d0:92:4b:f3:ae:90:78:fd:87:c3: c5:3d:13:7f:df:e1:1a:a3:ae:9a:5e:a5:1d:64:56:73:8e:b9: fd:62:76:4d:1b:38:6f:1b:83:76:09:db:46:ed:34:1e:d2:3b: 94:29:f1:2a:39:63:03:b8:42:ae:a5:45:bd:04:70:77:e0:55: a1:d0:1a:57:58:cd:5d:c6:11:4d:cf:d2:d3:eb:8b:a1:6e:b4: cc:ca:b0:74:cc:c7:85:e6:ea:f1:82:85:ec:e9:56:81:f6:0b: fa:f4:e7:b0:cd:41:99:57:fc:4b:a6:23:7a:fa:c0:06:50:ce: f4:51:a2:a5:c0:a3:ac:48:7b:e5:dd:6d:e3:12:0c:49:17:97: ef:49:44:a3:b7:21:2e:f3:de:99:28:31:d0:13:16:83:6f:c1: 09:9c:0c:37:01:86:e8:0c:57:d2:e9:ee:1a:64:fc:94:ab:03: 36:d6:95:d8:90:dc:aa:4f:07:de:31:fe:4c:3a:0f:f3:8a:9e: 1c:d7:2e:0f:f4:67:55:73:da:4e:98:51:f5:0f:b0:a1:87:a0: 21:a4:6b:99 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHqAxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi MDBiM2Q3MGRkOWNiNzk2ODFjZDQ5MDg0MzE2M2IzYTQ2NzRmMTIwHhcNMjMwMzMx MTAxNTQ2WhcNMjMwNDAzMTEyMjQ2WjAzMTEwLwYDVQQDEyg0YTI1YzZhNjM2MzVi YWJlNjQyMTE4NDdhYjk0OGExOGQ4Zjk0NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAg0clzTFj3WiAd4GrC1lA4cf05WjelXQaT9R+S0SqsbAYQN+q 0EB4G3yE1RsDgq59ESCpf8yMZA6ODFbaMqwIbt7iSNpI1cukXeEQ00w+jNmb3d0w 0XbJn+8oKFn5mJydLqya2Cd41+14U3O65+42TbnpuBxURak3x2OJAz/LICeGS3// kylZAQe4H4UQP5XRzBKPHoAaa+H6apm2VASSGpMlpsyGK73LLvdiGKEZxunjLIW1 z2Z/4KYJg6PMR7+nFt/aZXYl1haHlRbWQbfUDdEfxFVSvxGjXHUikoSU2aXjGQy4 ICRr6fCk/c+Cxv4J2yFHBqOx5EQ6uclD4+jRGwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFHeldctZHij/ne4DnwQYI2zk12z1MB8GA1UdIwQYMBaAFJ3QyBqkzQCHRb6w B0zgUn3zi9oCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2IwMGIz ZDcwZGQ5Y2I3OTY4MWNkNDkwODQzMTYzYjNhNDY3NGYxMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjI2OWE5ODUtZjQwZS00NDUyLWI0YWItYzEyMjM5 ZDllOTkzL2NiMDBiM2Q3MGRkOWNiNzk2ODFjZDQ5MDg0MzE2M2IzYTQ2NzRmMTIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yMjY5YTk4NS1mNDBlLTQ0NTItYjRhYi1jMTIy MzlkOWU5OTMvY2IwMGIzZDcwZGQ5Y2I3OTY4MWNkNDkwODQzMTYzYjNhNDY3NGYx Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBACyKKLXalBm9Mvsb6yUf5NdpLN3eQxNEt2C/GFDEI/w54aXK TFAMMxbeUQXr0JJL866QeP2Hw8U9E3/f4RqjrppepR1kVnOOuf1idk0bOG8bg3YJ 20btNB7SO5Qp8So5YwO4Qq6lRb0EcHfgVaHQGldYzV3GEU3P0tPri6FutMzKsHTM x4Xm6vGChezpVoH2C/r057DNQZlX/EumI3r6wAZQzvRRoqXAo6xIe+XdbeMSDEkX l+9JRKO3IS7z3pkoMdATFoNvwQmcDDcBhugMV9Lp7hpk/JSrAzbWldiQ3KpPB94x /kw6D/OKnhzXLg/0Z1Vz2k6YUfUPsKGHoCGka5k= -----END CERTIFICATE-----Generated at Fri Mar 31 11:38:38 2023 by rpki-client on console-fra.rpki-client.org