$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft File: bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft (raw, json) Hash identifier: EZ+XSa/j3OmgM8JBELthqgEbG3pRa1v2mhPift00fpo= Subject key identifier: 23:3F:83:CF:ED:E9:38:5D:DF:77:C1:55:20:87:DB:51:1D:2C:45:E1 Authority key identifier: D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90 Certificate issuer: /CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8 Certificate serial: 0EC639 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft Manifest number: 0797 Signing time: Thu 28 Mar 2024 08:20:38 +0000 Manifest this update: Thu 28 Mar 2024 07:20:07 +0000 Manifest next update: Sun 31 Mar 2024 10:20:07 +0000 Files and hashes: 1: 4786bfe9ac1356a671e3817f3a16f369c5277e1a.roa (hash: 3Gmx7/ox7ZfLM2nOCQZWnlrtFPh7ZyXD22HkuK+xxd4=) 2: bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl (hash: w7PKdF0faGO70rapvMINw2lhEBU1fUoWHJiPZAThqQo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968249 (0xec639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8 Validity Not Before: Mar 28 07:20:07 2024 GMT Not After : Mar 31 10:20:07 2024 GMT Subject: CN=74a6bbb771628b76c795d5161540e33bfc41a90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:9f:a7:2d:eb:38:c0:b9:30:1d:a0:71:3f: 7a:f9:14:97:03:0d:f3:fc:50:eb:34:16:67:77:fe: 8b:21:50:d4:a4:00:d3:d5:b2:dd:c7:6a:94:02:b0: a4:b8:5b:fb:f2:ed:26:54:a9:41:7c:02:31:54:b2: 5e:7b:f5:31:3c:77:4f:2d:e4:2f:4f:cc:01:43:81: 8b:08:b8:69:63:d9:2e:5a:ec:60:28:14:1b:f0:5f: 81:6b:d1:9f:1a:1c:49:6d:ad:54:c9:33:4b:a9:18: 11:c0:3f:b9:6d:14:c5:e2:70:10:b0:79:1a:71:ae: 1e:88:90:c2:fd:fe:e3:4a:8d:63:3e:ee:40:e9:50: aa:f0:ef:62:62:3b:74:e7:57:ce:97:23:fd:be:b9: 55:7f:b7:43:c8:ec:38:c9:f1:b1:ac:aa:ae:38:2e: fb:77:4c:04:81:b7:e6:55:4a:32:b3:3e:93:66:89: f6:a6:7a:35:cd:d2:85:7d:88:9d:82:3a:12:e4:46: f3:20:6c:7f:b4:00:62:a9:2e:a4:2e:f8:89:b8:28: 43:bc:a0:b1:1a:ef:10:f4:85:c7:a8:51:1a:5d:ac: 25:a3:6d:7f:3e:2f:45:9f:12:02:ee:39:81:f3:5c: f4:22:5c:64:2b:4d:9a:1e:9e:e3:54:fc:7f:0c:98: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3F:83:CF:ED:E9:38:5D:DF:77:C1:55:20:87:DB:51:1D:2C:45:E1 X509v3 Authority Key Identifier: keyid:D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9c:ef:84:4b:9f:59:a6:8d:19:45:08:c4:3d:25:eb:f5:ef: 63:dd:70:11:36:3c:6a:05:cc:20:72:99:01:99:39:84:86:7c: eb:99:0e:0b:b6:25:9b:6f:5b:bf:32:ad:5d:35:c5:10:af:ed: 92:e9:d1:16:7b:fa:ae:9f:49:ad:be:28:57:55:b1:30:f1:2e: ba:11:7e:eb:06:2f:ea:02:53:fc:46:f8:5c:58:10:16:5d:f0: 79:4a:9e:45:4c:eb:97:ef:bb:c4:ad:e9:4c:e8:a3:ec:67:e9: 4a:a1:0a:94:62:5d:89:6e:54:a0:24:1a:4e:e4:04:63:2d:14: b6:d6:5e:34:bf:9a:5a:41:e8:f5:f3:6f:fe:26:c5:c6:eb:5c: df:63:82:cb:d7:3c:81:9f:56:7c:26:d0:d0:a3:23:a7:de:6c: ad:a9:91:e2:54:47:ad:fe:a7:ee:41:31:3e:0b:ce:17:7b:f1: 6d:07:03:f0:10:94:83:4c:5c:4c:05:17:e2:d4:7f:a5:b0:5c: b2:7f:56:6f:4c:8c:b3:74:35:9d:52:4c:ca:db:2c:5d:79:60: 9f:ff:2b:60:98:26:27:7a:82:54:4f:58:09:ac:6f:8b:a3:1b: 8e:fb:c5:99:35:6e:44:a4:05:94:5b:ff:8a:9b:95:cc:49:37: 4d:af:6f:bc -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDDsY5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJk ODg4OWViNTE2OGE0ZDk5MzMwYzUzM2M3NWUzNWE1NWM3ZGJkZTgwHhcNMjQwMzI4 MDcyMDA3WhcNMjQwMzMxMTAyMDA3WjAzMTEwLwYDVQQDEyg3NGE2YmJiNzcxNjI4 Yjc2Yzc5NWQ1MTYxNTQwZTMzYmZjNDFhOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmYCfpy3rOMC5MB2gcT96+RSXAw3z/FDrNBZnd/6LIVDUpADT 1bLdx2qUArCkuFv78u0mVKlBfAIxVLJee/UxPHdPLeQvT8wBQ4GLCLhpY9kuWuxg KBQb8F+Ba9GfGhxJba1UyTNLqRgRwD+5bRTF4nAQsHkaca4eiJDC/f7jSo1jPu5A 6VCq8O9iYjt051fOlyP9vrlVf7dDyOw4yfGxrKquOC77d0wEgbfmVUoysz6TZon2 pno1zdKFfYidgjoS5EbzIGx/tABiqS6kLviJuChDvKCxGu8Q9IXHqFEaXawlo21/ Pi9FnxIC7jmB81z0IlxkK02aHp7jVPx/DJjjgQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFCM/g8/t6Thd33fBVSCH21EdLEXhMB8GA1UdIwQYMBaAFNYaNFFQeF8d+6Pe jbxgjTvfeByQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmQ4ODg5 ZWI1MTY4YTRkOTkzMzBjNTMzYzc1ZTM1YTU1YzdkYmRlOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNDBkN2I2NjYtMGNmZC00YTg3LTkxZDctOTI4ZmQ4 YWY4NzdjL2JkODg4OWViNTE2OGE0ZDk5MzMwYzUzM2M3NWUzNWE1NWM3ZGJkZTgu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80MGQ3YjY2Ni0wY2ZkLTRhODctOTFkNy05Mjhm ZDhhZjg3N2MvYmQ4ODg5ZWI1MTY4YTRkOTkzMzBjNTMzYzc1ZTM1YTU1YzdkYmRl OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAD2c74RLn1mmjRlFCMQ9Jev172PdcBE2PGoFzCBymQGZOYSG fOuZDgu2JZtvW78yrV01xRCv7ZLp0RZ7+q6fSa2+KFdVsTDxLroRfusGL+oCU/xG +FxYEBZd8HlKnkVM65fvu8St6Uzoo+xn6UqhCpRiXYluVKAkGk7kBGMtFLbWXjS/ mlpB6PXzb/4mxcbrXN9jgsvXPIGfVnwm0NCjI6febK2pkeJUR63+p+5BMT4Lzhd7 8W0HA/AQlINMXEwFF+LUf6WwXLJ/Vm9MjLN0NZ1STMrbLF15YJ//K2CYJid6glRP WAmsb4ujG477xZk1bkSkBZRb/4qblcxJN02vb7w= -----END CERTIFICATE-----Generated at Thu Mar 28 10:47:03 2024 by rpki-client on console-ams.rpki-client.org