$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.mft File: eb390b28179c24ec9435f9593f78cfa52f75f119.mft (raw, json) Hash identifier: 88wp0wWo1G6IXtpeaqgWKHLp27QkJFnVJO86qqXSrrg= Subject key identifier: 85:ED:73:26:59:E6:18:B7:A6:10:35:AB:13:01:5C:44:CD:34:03:C6 Authority key identifier: 04:9A:57:F3:D8:48:B1:46:E4:9B:DF:0B:DE:84:DE:9E:13:91:B8:03 Certificate issuer: /CN=eb390b28179c24ec9435f9593f78cfa52f75f119 Certificate serial: 158C92 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb390b28179c24ec9435f9593f78cfa52f75f119.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.mft Manifest number: 0B09 Signing time: Thu 28 Mar 2024 11:20:18 +0000 Manifest this update: Thu 28 Mar 2024 10:20:10 +0000 Manifest next update: Sun 31 Mar 2024 13:36:10 +0000 Files and hashes: 1: 102fc47597e54e74c8f5311fe687757ae932ff7d.roa (hash: +Oa4HVxU/VbakmGiT9kxx6LBm/nR/CxVDNW071ecjo0=) 2: eb390b28179c24ec9435f9593f78cfa52f75f119.crl (hash: 3WvUC83LmVFghMlvXyGu+rlJvutHfwsKf4jFAPddEb0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.crl rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb390b28179c24ec9435f9593f78cfa52f75f119.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412242 (0x158c92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb390b28179c24ec9435f9593f78cfa52f75f119 Validity Not Before: Mar 28 10:20:10 2024 GMT Not After : Mar 31 13:36:10 2024 GMT Subject: CN=53437a3b3f3b55b6e30e45cea89ea15f6801f3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:77:bd:81:57:7e:3f:e2:54:68:3f:46:b7: 52:74:ab:5b:bd:de:2b:ce:58:c2:58:2e:6b:3c:e9: c7:dc:20:fa:d6:9a:2b:79:c2:65:1e:d7:9f:b4:37: bd:58:36:18:fc:94:e0:72:cd:44:d6:9e:a4:0e:b6: 71:26:75:3b:22:11:38:ed:e0:7a:c7:8b:4a:12:bd: a1:7f:4c:35:b8:61:6e:26:16:c2:de:c9:d2:2f:02: f3:f4:bc:72:cf:72:f8:b7:19:56:9b:05:e0:63:79: 3e:ed:ed:15:42:b2:22:4b:e7:30:c4:53:47:61:55: c1:03:6b:67:22:3e:8d:10:84:1b:77:3d:38:41:9b: 0c:ef:52:da:3b:1d:a1:e9:3d:c2:d3:91:16:86:46: 49:c6:95:30:22:fe:b7:46:87:53:29:1b:2d:f4:dd: bc:3d:96:58:02:32:4f:c9:8a:7e:5d:8c:c1:43:ce: 67:97:50:c6:36:3c:5e:c6:ec:df:81:e0:fb:64:3f: 80:be:97:32:54:8b:e0:55:5f:b7:9b:97:70:63:5e: 88:ab:bb:24:45:6b:3c:bd:e7:54:c4:b2:53:75:81: a4:ab:bf:71:2e:e5:19:f1:a0:fd:4b:72:1b:8a:53: 6b:5e:0d:d3:bc:0b:67:c2:5a:57:ca:95:c3:76:e3: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:ED:73:26:59:E6:18:B7:A6:10:35:AB:13:01:5C:44:CD:34:03:C6 X509v3 Authority Key Identifier: keyid:04:9A:57:F3:D8:48:B1:46:E4:9B:DF:0B:DE:84:DE:9E:13:91:B8:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb390b28179c24ec9435f9593f78cfa52f75f119.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/35f70a2b-28b6-4ed8-9590-dd8645ed7efd/eb390b28179c24ec9435f9593f78cfa52f75f119.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:58:86:d2:c3:4e:48:0d:fc:da:83:17:61:3c:73:14:22:8a: e2:6b:9a:24:06:3d:d3:fd:bc:51:29:b0:3a:f6:34:3f:9d:5e: 66:93:bf:6f:dc:83:be:55:83:a7:d7:a4:54:cd:e8:ec:64:12: 37:59:68:11:55:bd:44:3e:d1:9e:37:76:f6:1d:2a:e1:e4:65: 0f:ce:de:ea:42:a1:e0:2c:cc:75:8e:7a:54:8f:5c:32:d2:3c: 3d:fb:8a:47:6f:b1:48:11:de:91:39:bf:20:82:f9:08:52:45: fe:1a:7f:95:e0:74:18:94:c6:29:cc:cb:55:16:c5:f7:a0:7e: 6d:c1:dd:c3:cf:e1:25:4b:2b:d8:6c:0a:05:71:a9:a7:31:e2: 89:a2:f6:94:97:3a:b5:37:9b:a3:cb:cb:b5:69:f0:21:16:0d: 84:17:38:c2:5e:70:5e:81:27:6f:f9:a7:db:b7:8b:dd:4a:fe: cb:42:47:61:8f:5e:4e:27:be:a0:59:77:1d:c7:42:21:40:ac: 9f:70:b3:23:62:83:78:4c:fc:c0:d9:6b:1b:38:7c:b5:28:7a: 17:c8:e6:3b:1a:ea:e6:4c:55:e2:6d:af:10:73:79:a9:8d:05: 45:7a:17:56:2e:c8:b9:69:2c:7b:6b:d1:b8:12:c2:12:90:8f: 44:3f:79:6c -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDFYySMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVi MzkwYjI4MTc5YzI0ZWM5NDM1Zjk1OTNmNzhjZmE1MmY3NWYxMTkwHhcNMjQwMzI4 MTAyMDEwWhcNMjQwMzMxMTMzNjEwWjAzMTEwLwYDVQQDEyg1MzQzN2EzYjNmM2I1 NWI2ZTMwZTQ1Y2VhODllYTE1ZjY4MDFmM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAlhp3vYFXfj/iVGg/RrdSdKtbvd4rzljCWC5rPOnH3CD61por ecJlHteftDe9WDYY/JTgcs1E1p6kDrZxJnU7IhE47eB6x4tKEr2hf0w1uGFuJhbC 3snSLwLz9Lxyz3L4txlWmwXgY3k+7e0VQrIiS+cwxFNHYVXBA2tnIj6NEIQbdz04 QZsM71LaOx2h6T3C05EWhkZJxpUwIv63RodTKRst9N28PZZYAjJPyYp+XYzBQ85n l1DGNjxexuzfgeD7ZD+AvpcyVIvgVV+3m5dwY16Iq7skRWs8vedUxLJTdYGkq79x LuUZ8aD9S3IbilNrXg3TvAtnwlpXypXDduOFVwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFIXtcyZZ5hi3phA1qxMBXETNNAPGMB8GA1UdIwQYMBaAFASaV/PYSLFG5Jvf C96E3p4TkbgDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWIzOTBi MjgxNzljMjRlYzk0MzVmOTU5M2Y3OGNmYTUyZjc1ZjExOS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvMzVmNzBhMmItMjhiNi00ZWQ4LTk1OTAtZGQ4NjQ1 ZWQ3ZWZkL2ViMzkwYjI4MTc5YzI0ZWM5NDM1Zjk1OTNmNzhjZmE1MmY3NWYxMTku bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zNWY3MGEyYi0yOGI2LTRlZDgtOTU5MC1kZDg2 NDVlZDdlZmQvZWIzOTBiMjgxNzljMjRlYzk0MzVmOTU5M2Y3OGNmYTUyZjc1ZjEx OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBABdYhtLDTkgN/NqDF2E8cxQiiuJrmiQGPdP9vFEpsDr2ND+d XmaTv2/cg75Vg6fXpFTN6OxkEjdZaBFVvUQ+0Z43dvYdKuHkZQ/O3upCoeAszHWO elSPXDLSPD37ikdvsUgR3pE5vyCC+QhSRf4af5XgdBiUxinMy1UWxfegfm3B3cPP 4SVLK9hsCgVxqacx4omi9pSXOrU3m6PLy7Vp8CEWDYQXOMJecF6BJ2/5p9u3i91K /stCR2GPXk4nvqBZdx3HQiFArJ9wsyNig3hM/MDZaxs4fLUoehfI5jsa6uZMVeJt rxBzeamNBUV6F1YuyLlpLHtr0bgSwhKQj0Q/eWw= -----END CERTIFICATE-----Generated at Thu Mar 28 13:27:52 2024 by rpki-client on console-ams.rpki-client.org