$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft File: 642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft (raw, json) Hash identifier: BsL1gBq9K/g4AndGPSim1Cj++w253ur/JPSGT+isFFs= Subject key identifier: 86:70:58:10:D3:E5:19:35:3C:19:7F:AD:64:0B:EB:15:D5:88:8B:BC Authority key identifier: 07:30:2A:03:E7:88:6A:FE:6B:0F:C8:5D:D0:EF:E7:D2:05:8C:C3:4E Certificate issuer: /CN=642dbba8f3f8833b1d7a408b1ea952eb0b091111 Certificate serial: 27DE5D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/642dbba8f3f8833b1d7a408b1ea952eb0b091111.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft Manifest number: 0DB2 Signing time: Thu 28 Mar 2024 13:20:44 +0000 Manifest this update: Thu 28 Mar 2024 12:20:08 +0000 Manifest next update: Sun 31 Mar 2024 14:05:08 +0000 Files and hashes: 1: 642dbba8f3f8833b1d7a408b1ea952eb0b091111.crl (hash: rqQ+qDxOrModiw+cY3UNF59eUfOXwbJiaAI67nhyYxE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.crl rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/642dbba8f3f8833b1d7a408b1ea952eb0b091111.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612829 (0x27de5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642dbba8f3f8833b1d7a408b1ea952eb0b091111 Validity Not Before: Mar 28 12:20:08 2024 GMT Not After : Mar 31 14:05:08 2024 GMT Subject: CN=9a292c5342e179655e827411f4b53aef98507335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9b:5d:31:ea:0f:c6:c5:c4:76:c0:3b:c9:00: 4b:3e:84:37:89:73:55:ab:b5:0a:9d:21:e6:01:db: dc:76:72:f8:4b:bb:63:b4:90:18:f6:62:21:11:64: 32:d7:c6:9c:b5:12:a1:4c:4b:b9:4e:ef:0c:49:8c: 95:35:76:29:b7:80:42:fb:5d:bf:82:7c:81:08:34: 0a:69:f5:20:38:70:c6:d6:83:14:a7:9c:eb:a2:e5: 3c:8b:ca:74:94:f6:60:22:15:3c:37:02:e7:1e:f4: 0e:cc:51:ae:4e:8e:de:f9:b5:2c:e7:24:fb:7b:cf: 86:f9:46:23:79:4c:ad:c4:6a:35:17:dc:4b:f5:d1: 80:1a:26:0c:9d:ef:21:85:61:1e:d7:7a:e3:c6:4f: dc:e8:12:e8:4f:70:59:fe:8f:7f:90:c9:be:be:30: 87:3c:cc:67:c5:bf:b0:d3:f1:53:8d:42:7a:d9:d2: 02:12:dc:38:c5:55:1b:23:a5:90:b9:b1:30:e5:67: 14:0b:4e:4b:54:cf:6f:20:65:45:dd:ae:1c:28:10: 74:3d:f5:ad:24:8c:9e:fd:bd:be:56:dd:4d:1c:79: 3c:97:64:5c:0e:34:85:36:dc:69:0a:f4:06:eb:e4: 7a:96:97:b7:2d:d7:86:c4:ab:18:a3:95:06:38:e8: 6c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:58:10:D3:E5:19:35:3C:19:7F:AD:64:0B:EB:15:D5:88:8B:BC X509v3 Authority Key Identifier: keyid:07:30:2A:03:E7:88:6A:FE:6B:0F:C8:5D:D0:EF:E7:D2:05:8C:C3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/642dbba8f3f8833b1d7a408b1ea952eb0b091111.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:17:2d:dc:4b:dd:8a:43:44:97:67:f8:9b:ef:c4:ed:ba:5e: b9:81:54:65:a0:26:67:9c:8f:33:4b:ef:56:c0:29:fd:3e:a9: df:7c:b1:e5:8b:03:26:c2:b3:3a:9c:fa:e9:d2:66:81:4e:1b: 25:f6:ae:6e:dd:08:70:84:cb:f9:16:a7:77:cd:97:3f:b5:a5: bb:11:f9:90:42:bb:7a:00:e6:7d:c1:fe:15:15:89:07:24:d4: 81:8c:ca:e0:d0:79:2f:84:b6:32:06:f1:de:dd:a7:24:da:f2: e3:fe:98:3a:14:ba:79:e7:4c:b7:47:9a:fb:eb:27:f4:d3:78: 4b:ee:55:c8:d8:ec:d6:99:b5:24:c7:60:bb:93:90:e1:68:4c: 0f:0f:50:b2:9b:27:a5:41:a3:3b:31:b6:78:64:91:94:9a:87: fb:3a:3e:c8:05:39:81:3c:c6:50:81:82:58:3b:9b:61:c3:f5: f4:3d:65:35:61:f5:ef:bd:a4:b5:ec:2b:a6:58:d6:7a:33:b9: 27:8c:dc:63:5c:5d:94:60:db:97:e7:20:35:c7:f0:c0:6c:27: ef:ae:01:42:d5:6c:ca:7f:75:28:77:b4:d2:fb:58:77:64:d5: 5c:62:0a:e2:8c:ae:72:5b:0e:fe:d3:c0:9f:fc:3c:ee:01:a9: 7a:11:01:c8 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDJ95dMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0 MmRiYmE4ZjNmODgzM2IxZDdhNDA4YjFlYTk1MmViMGIwOTExMTEwHhcNMjQwMzI4 MTIyMDA4WhcNMjQwMzMxMTQwNTA4WjAzMTEwLwYDVQQDEyg5YTI5MmM1MzQyZTE3 OTY1NWU4Mjc0MTFmNGI1M2FlZjk4NTA3MzM1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAo5tdMeoPxsXEdsA7yQBLPoQ3iXNVq7UKnSHmAdvcdnL4S7tj tJAY9mIhEWQy18actRKhTEu5Tu8MSYyVNXYpt4BC+12/gnyBCDQKafUgOHDG1oMU p5zrouU8i8p0lPZgIhU8NwLnHvQOzFGuTo7e+bUs5yT7e8+G+UYjeUytxGo1F9xL 9dGAGiYMne8hhWEe13rjxk/c6BLoT3BZ/o9/kMm+vjCHPMxnxb+w0/FTjUJ62dIC Etw4xVUbI6WQubEw5WcUC05LVM9vIGVF3a4cKBB0PfWtJIye/b2+Vt1NHHk8l2Rc DjSFNtxpCvQG6+R6lpe3LdeGxKsYo5UGOOhscwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFIZwWBDT5Rk1PBl/rWQL6xXViIu8MB8GA1UdIwQYMBaAFAcwKgPniGr+aw/I XdDv59IFjMNOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjQyZGJi YThmM2Y4ODMzYjFkN2E0MDhiMWVhOTUyZWIwYjA5MTExMS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMmE0NmJkNDAtY2E1OC00Njg2LTkwODYtMGE1YzQ0 YjI5ZDU1LzY0MmRiYmE4ZjNmODgzM2IxZDdhNDA4YjFlYTk1MmViMGIwOTExMTEu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8yYTQ2YmQ0MC1jYTU4LTQ2ODYtOTA4Ni0wYTVj NDRiMjlkNTUvNjQyZGJiYThmM2Y4ODMzYjFkN2E0MDhiMWVhOTUyZWIwYjA5MTEx MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBADsXLdxL3YpDRJdn+JvvxO26XrmBVGWgJmecjzNL71bAKf0+ qd98seWLAybCszqc+unSZoFOGyX2rm7dCHCEy/kWp3fNlz+1pbsR+ZBCu3oA5n3B /hUViQck1IGMyuDQeS+EtjIG8d7dpyTa8uP+mDoUunnnTLdHmvvrJ/TTeEvuVcjY 7NaZtSTHYLuTkOFoTA8PULKbJ6VBozsxtnhkkZSah/s6PsgFOYE8xlCBglg7m2HD 9fQ9ZTVh9e+9pLXsK6ZY1nozuSeM3GNcXZRg25fnIDXH8MBsJ++uAULVbMp/dSh3 tNL7WHdk1VxiCuKMrnJbDv7TwJ/8PO4BqXoRAcg= -----END CERTIFICATE-----Generated at Thu Mar 28 14:01:12 2024 by rpki-client on console-fra.rpki-client.org