$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.mft File: 2ea76d220c43c9256b8900dc081d53de8fab038b.mft (raw, json) Hash identifier: r7Tp8lpj3Ii5QsTsY+6NkX8rCM3+H/pqq2HrQVjHxcU= Subject key identifier: 61:6E:4E:F2:6A:BC:A0:61:C7:EF:8A:A9:D9:CE:2A:6D:60:14:BA:1C Authority key identifier: FE:9D:1C:3F:87:08:E3:6B:A6:B5:55:5B:4C:F0:7B:17:78:EC:CD:9A Certificate issuer: /CN=2ea76d220c43c9256b8900dc081d53de8fab038b Certificate serial: 0F3ACE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea76d220c43c9256b8900dc081d53de8fab038b.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.mft Manifest number: 07A9 Signing time: Thu 28 Mar 2024 20:21:19 +0000 Manifest this update: Thu 28 Mar 2024 19:20:06 +0000 Manifest next update: Sun 31 Mar 2024 21:23:06 +0000 Files and hashes: 1: 2ea76d220c43c9256b8900dc081d53de8fab038b.crl (hash: TEqkWHEhW1FoXZthSV1DAg1XGTlRas2Nr7lCEYlymc8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.crl rsync://repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea76d220c43c9256b8900dc081d53de8fab038b.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 19:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998094 (0xf3ace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ea76d220c43c9256b8900dc081d53de8fab038b Validity Not Before: Mar 28 19:20:06 2024 GMT Not After : Mar 31 21:23:06 2024 GMT Subject: CN=586ed39dfad0486bd0a9c74d8992d90afdf066ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:db:5d:51:5a:e7:6e:e5:09:92:ad:fc:24: f1:b1:0f:a4:5e:1f:ea:c0:6f:b5:92:3f:ed:20:67: 3a:88:2a:f7:da:8d:80:71:cd:eb:aa:71:ac:54:7d: b0:f9:e0:f3:1c:a2:b3:bc:98:54:1c:27:db:9a:ae: 13:31:27:89:02:24:03:6b:31:f4:e6:38:25:23:7a: 2a:ff:69:7f:69:e4:c6:c2:a2:e1:c3:8d:28:15:dc: 65:5b:f4:c4:ba:10:f5:11:ea:a4:c9:f1:38:88:c1: 1d:8c:ca:f9:16:57:20:cd:25:b8:35:15:fe:05:70: 55:4f:5c:12:6d:20:17:38:4b:c0:b4:df:34:bb:0b: 0c:e7:6f:b0:ca:4d:37:7f:8c:f3:72:9a:16:29:38: 51:31:ae:46:2e:ad:74:a5:2d:c1:6a:5d:b4:27:7a: 36:d3:6f:41:00:4c:01:b8:21:b3:ba:25:37:5d:66: 95:83:93:3f:4b:49:68:a2:eb:53:6d:fa:14:b6:9e: 63:c6:6d:e8:14:6e:39:c7:ba:b3:54:89:14:10:7e: 44:a7:ce:91:c7:26:f1:7c:a6:35:d4:b5:a6:9c:5f: d6:f5:2f:02:59:69:1b:ed:2a:d9:b3:be:df:6c:17: 8b:d7:20:03:e0:3d:5f:2a:de:1f:54:2c:a4:a4:e2: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6E:4E:F2:6A:BC:A0:61:C7:EF:8A:A9:D9:CE:2A:6D:60:14:BA:1C X509v3 Authority Key Identifier: keyid:FE:9D:1C:3F:87:08:E3:6B:A6:B5:55:5B:4C:F0:7B:17:78:EC:CD:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea76d220c43c9256b8900dc081d53de8fab038b.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3bd5e4c0-1281-4f35-93a7-886962608c3a/2ea76d220c43c9256b8900dc081d53de8fab038b.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:46:bb:b2:5e:de:f1:2d:cb:bf:d4:f0:41:45:9c:67:c4:a0: b5:7d:79:15:6c:dd:dc:40:86:62:9f:e1:53:a8:ae:54:c7:16: 9d:0b:91:36:64:81:6b:3d:87:e7:3f:3e:7e:73:c7:f6:9f:63: cd:c2:2e:62:d4:f1:f4:94:85:3e:81:89:54:d4:a3:fb:eb:2c: b9:de:7e:60:ce:12:aa:d8:27:f9:68:17:f7:b7:b9:d7:1b:87: dd:c1:73:f4:09:1d:fa:6f:7a:e8:ad:90:5a:8c:bb:ca:28:3e: 30:79:d5:0e:e7:c2:5e:6e:f6:84:fb:b6:39:86:b3:ce:38:93: 38:46:7a:5f:8a:b4:b0:4f:5c:ca:06:12:c6:88:80:d5:a0:5a: 6b:89:95:bc:b6:fd:88:43:a1:77:9a:9d:13:21:c2:6f:06:8f: 07:b0:5b:f0:8a:49:6c:a9:20:d1:96:53:b2:da:6a:51:fc:cb: b6:46:9e:7e:84:3b:36:ae:83:33:39:9a:b1:c2:47:66:0b:3d: a2:bb:82:4c:4e:82:8d:53:62:1c:a4:42:f2:94:bb:d5:81:70: 42:6f:d7:a3:80:54:3d:d0:b4:f0:2e:2b:a1:2f:25:b0:01:d2: 33:83:f8:4e:2c:8f:e1:5d:5e:46:31:90:e2:4f:f0:03:ef:ae: 3e:58:84:cd -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDDzrOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl YTc2ZDIyMGM0M2M5MjU2Yjg5MDBkYzA4MWQ1M2RlOGZhYjAzOGIwHhcNMjQwMzI4 MTkyMDA2WhcNMjQwMzMxMjEyMzA2WjAzMTEwLwYDVQQDEyg1ODZlZDM5ZGZhZDA0 ODZiZDBhOWM3NGQ4OTkyZDkwYWZkZjA2NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtF3bXVFa527lCZKt/CTxsQ+kXh/qwG+1kj/tIGc6iCr32o2A cc3rqnGsVH2w+eDzHKKzvJhUHCfbmq4TMSeJAiQDazH05jglI3oq/2l/aeTGwqLh w40oFdxlW/TEuhD1EeqkyfE4iMEdjMr5FlcgzSW4NRX+BXBVT1wSbSAXOEvAtN80 uwsM52+wyk03f4zzcpoWKThRMa5GLq10pS3Bal20J3o2029BAEwBuCGzuiU3XWaV g5M/S0looutTbfoUtp5jxm3oFG45x7qzVIkUEH5Ep86RxybxfKY11LWmnF/W9S8C WWkb7SrZs77fbBeL1yAD4D1fKt4fVCykpOLs1wIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFGFuTvJqvKBhx++KqdnOKm1gFLocMB8GA1UdIwQYMBaAFP6dHD+HCONrprVV W0zwexd47M2aMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmVhNzZk MjIwYzQzYzkyNTZiODkwMGRjMDgxZDUzZGU4ZmFiMDM4Yi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvM2JkNWU0YzAtMTI4MS00ZjM1LTkzYTctODg2OTYy NjA4YzNhLzJlYTc2ZDIyMGM0M2M5MjU2Yjg5MDBkYzA4MWQ1M2RlOGZhYjAzOGIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy8zYmQ1ZTRjMC0xMjgxLTRmMzUtOTNhNy04ODY5 NjI2MDhjM2EvMmVhNzZkMjIwYzQzYzkyNTZiODkwMGRjMDgxZDUzZGU4ZmFiMDM4 Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAElGu7Je3vEty7/U8EFFnGfEoLV9eRVs3dxAhmKf4VOorlTH Fp0LkTZkgWs9h+c/Pn5zx/afY83CLmLU8fSUhT6BiVTUo/vrLLnefmDOEqrYJ/lo F/e3udcbh93Bc/QJHfpveuitkFqMu8ooPjB51Q7nwl5u9oT7tjmGs844kzhGel+K tLBPXMoGEsaIgNWgWmuJlby2/YhDoXeanRMhwm8GjwewW/CKSWypINGWU7LaalH8 y7ZGnn6EOzaugzM5mrHCR2YLPaK7gkxOgo1TYhykQvKUu9WBcEJv16OAVD3QtPAu K6EvJbAB0jOD+E4sj+FdXkYxkOJP8APvrj5YhM0= -----END CERTIFICATE-----Generated at Thu Mar 28 22:18:39 2024 by rpki-client on console-fra.rpki-client.org