$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft File: 422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft (raw, json) Hash identifier: NOWH9Uv8deWCXVPAHgyAqWLG/1G/rbYW5JBTadDTNSc= Subject key identifier: C4:C9:FC:49:E3:3F:75:3F:8D:78:AD:A6:D8:34:59:1D:E8:59:74:FD Authority key identifier: 95:BB:CD:72:F2:F6:AA:D0:1F:CD:3B:31:F9:5D:5C:D1:07:0F:AC:35 Certificate issuer: /CN=422dc8daaee10e58ba4d2326d8ac255f9b9994e0 Certificate serial: 1AC99B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft Manifest number: 0DAF Signing time: Thu 28 Mar 2024 15:21:08 +0000 Manifest this update: Thu 28 Mar 2024 14:20:15 +0000 Manifest next update: Sun 31 Mar 2024 15:24:15 +0000 Files and hashes: 1: 3110fdded26d05d5054f988ab77d312a917a28b8.roa (hash: FHUR8+G/RSao/TCS4SlJJdsY/N7O+nMwAllD3YmxwuY=) 2: 422dc8daaee10e58ba4d2326d8ac255f9b9994e0.crl (hash: e5PlWzBmCls/WoqWgmUURPDzJYQMN9KhTa5BTDgdjf0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.crl rsync://repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755547 (0x1ac99b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422dc8daaee10e58ba4d2326d8ac255f9b9994e0 Validity Not Before: Mar 28 14:20:15 2024 GMT Not After : Mar 31 15:24:15 2024 GMT Subject: CN=f5e0e16345e327ed69df5e0243e6e0e9a11e3340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:b2:1d:60:fd:f9:da:07:41:8c:84:ae:18: 80:41:ee:e7:5c:00:dc:0e:0c:ee:b7:26:29:06:d1: 88:02:a8:9f:9a:d4:39:5e:ee:35:55:7b:ee:d0:d2: 8b:97:65:a0:32:73:08:fa:54:52:77:15:b5:17:e6: 62:6c:a6:87:81:54:c0:9e:2d:f3:21:92:0b:d4:e7: 1e:7d:fe:07:61:13:fc:36:ce:b0:e0:dc:c6:5a:71: a3:51:ff:79:98:86:ad:55:15:f3:d3:94:51:c7:cc: 45:38:57:fa:62:86:ad:72:11:b9:ec:13:10:10:dd: 9e:40:1c:a8:a8:db:59:39:42:ca:ca:13:b6:d5:1b: 6e:35:b8:da:82:62:97:26:70:61:87:54:ff:53:e1: 7e:00:85:17:6f:b9:28:a9:3a:f9:91:71:1a:fb:9c: 0b:87:78:28:e0:f4:26:03:f7:c1:e1:f6:28:bd:94: dc:6c:07:13:e5:e3:5c:55:1c:b6:9b:5b:39:83:8b: 7d:80:24:7b:fb:82:99:f2:2e:5f:71:3d:17:c1:bb: 3c:af:50:16:f3:a5:4e:f8:73:5c:f2:39:b2:ee:18: 2e:45:fa:ce:e7:ed:73:4c:45:8d:62:88:04:9d:12: e2:a9:5c:52:34:4b:fc:bc:9c:93:0d:c5:69:82:03: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C9:FC:49:E3:3F:75:3F:8D:78:AD:A6:D8:34:59:1D:E8:59:74:FD X509v3 Authority Key Identifier: keyid:95:BB:CD:72:F2:F6:AA:D0:1F:CD:3B:31:F9:5D:5C:D1:07:0F:AC:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/237dd3f6-48fa-4f1a-9158-deb553600ccf/422dc8daaee10e58ba4d2326d8ac255f9b9994e0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:35:9d:ed:5c:20:d3:c9:32:12:80:15:04:2b:c3:6c:ce:08: fe:0a:e6:60:29:07:8d:2f:05:a0:34:71:5f:b7:08:41:f1:87: b5:2c:3e:f7:29:96:c4:36:84:a9:5f:25:4f:2f:8f:20:54:31: 0b:b5:a6:4d:75:48:12:d1:34:76:bc:f8:e0:b3:3f:92:7d:7d: bc:9f:c2:45:a5:4f:5f:e6:0a:a7:b6:d0:f7:08:cd:3a:e6:ce: 05:13:c2:c1:e2:0a:fb:ef:67:f5:ca:ab:01:9a:9d:c5:21:00: 27:a8:de:bf:e8:43:d2:b6:62:d5:bd:97:ac:7e:96:a7:6d:a6: a2:e8:1a:a7:18:3c:30:f4:36:30:0a:25:4e:9a:97:7e:f0:ba: 6e:93:fa:0e:82:2d:43:e9:fa:39:f9:9d:5f:bb:13:d2:e8:2c: 0c:bd:81:17:a6:90:b8:80:e6:42:92:14:b7:37:d4:a0:f1:37: 86:00:bc:1b:1a:03:ca:cf:e2:a1:f3:b8:7d:88:4c:48:f1:5d: d5:99:7a:c8:5c:42:71:cb:f6:3c:98:2b:2d:20:37:0a:14:57: 6b:b3:81:36:ea:24:b6:20:a3:5a:24:81:db:cc:b8:e3:11:40: 57:dd:ac:84:1c:bd:6d:77:1a:61:4f:8e:12:ae:1c:2f:fa:a8: 09:18:a6:45 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGsmbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy MmRjOGRhYWVlMTBlNThiYTRkMjMyNmQ4YWMyNTVmOWI5OTk0ZTAwHhcNMjQwMzI4 MTQyMDE1WhcNMjQwMzMxMTUyNDE1WjAzMTEwLwYDVQQDEyhmNWUwZTE2MzQ1ZTMy N2VkNjlkZjVlMDI0M2U2ZTBlOWExMWUzMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAp8eyHWD9+doHQYyErhiAQe7nXADcDgzutyYpBtGIAqifmtQ5 Xu41VXvu0NKLl2WgMnMI+lRSdxW1F+ZibKaHgVTAni3zIZIL1Oceff4HYRP8Ns6w 4NzGWnGjUf95mIatVRXz05RRx8xFOFf6YoatchG57BMQEN2eQByoqNtZOULKyhO2 1RtuNbjagmKXJnBhh1T/U+F+AIUXb7koqTr5kXEa+5wLh3go4PQmA/fB4fYovZTc bAcT5eNcVRy2m1s5g4t9gCR7+4KZ8i5fcT0Xwbs8r1AW86VO+HNc8jmy7hguRfrO 5+1zTEWNYogEnRLiqVxSNEv8vJyTDcVpggOYRwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFMTJ/EnjP3U/jXitptg0WR3oWXT9MB8GA1UdIwQYMBaAFJW7zXLy9qrQH807 MfldXNEHD6w1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDIyZGM4 ZGFhZWUxMGU1OGJhNGQyMzI2ZDhhYzI1NWY5Yjk5OTRlMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMjM3ZGQzZjYtNDhmYS00ZjFhLTkxNTgtZGViNTUz NjAwY2NmLzQyMmRjOGRhYWVlMTBlNThiYTRkMjMyNmQ4YWMyNTVmOWI5OTk0ZTAu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yMzdkZDNmNi00OGZhLTRmMWEtOTE1OC1kZWI1 NTM2MDBjY2YvNDIyZGM4ZGFhZWUxMGU1OGJhNGQyMzI2ZDhhYzI1NWY5Yjk5OTRl MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAEA1ne1cINPJMhKAFQQrw2zOCP4K5mApB40vBaA0cV+3CEHx h7UsPvcplsQ2hKlfJU8vjyBUMQu1pk11SBLRNHa8+OCzP5J9fbyfwkWlT1/mCqe2 0PcIzTrmzgUTwsHiCvvvZ/XKqwGancUhACeo3r/oQ9K2YtW9l6x+lqdtpqLoGqcY PDD0NjAKJU6al37wum6T+g6CLUPp+jn5nV+7E9LoLAy9gRemkLiA5kKSFLc31KDx N4YAvBsaA8rP4qHzuH2ITEjxXdWZeshcQnHL9jyYKy0gNwoUV2uzgTbqJLYgo1ok gdvMuOMRQFfdrIQcvW13GmFPjhKuHC/6qAkYpkU= -----END CERTIFICATE-----Generated at Thu Mar 28 16:42:22 2024 by rpki-client on console-fra.rpki-client.org