$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft File: 702a8ccc0bc2940e8862741717474a0961649f65.mft (raw, json) Hash identifier: zRFtnLeEy3KnRYJRimTn/cNAQ+oeC51ovQAJB3GIHro= Subject key identifier: 04:51:21:4D:55:F6:67:49:DA:3C:C5:E2:0D:59:95:43:D6:08:34:44 Authority key identifier: 2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43 Certificate issuer: /CN=702a8ccc0bc2940e8862741717474a0961649f65 Certificate serial: 28033A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft Manifest number: 0DD3 Signing time: Thu 28 Mar 2024 08:21:18 +0000 Manifest this update: Thu 28 Mar 2024 07:20:07 +0000 Manifest next update: Sun 31 Mar 2024 09:35:07 +0000 Files and hashes: 1: 36311802db91a696bbb98a39e0320733651398f7.roa (hash: n9FvTgx8JMNBp5DwNGaUlTJ2TnUTyv6VC/ArOXgNgJE=) 2: 702a8ccc0bc2940e8862741717474a0961649f65.crl (hash: XAfxHbUdW2oSRmgP5NBUFYPow3mGNscCgezrRTob4As=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.crl rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2622266 (0x28033a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702a8ccc0bc2940e8862741717474a0961649f65 Validity Not Before: Mar 28 07:20:07 2024 GMT Not After : Mar 31 09:35:07 2024 GMT Subject: CN=b9c514c0c0ff491fa8bc9c82c44e31e491cfaefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:db:e9:ab:f1:ea:6a:19:84:b9:dd:e7:9b: 55:44:cd:e6:17:b6:86:a0:4f:2d:c2:78:44:6a:49: 14:e7:6d:86:bf:2d:04:bd:d1:48:32:31:21:5f:09: f0:a1:c8:c8:a1:cc:4a:b5:c5:36:8c:7a:e6:eb:e4: dc:24:6f:09:c6:c4:54:6b:ba:c5:b3:26:81:3b:90: 93:27:72:78:96:2f:87:77:b5:bb:2d:be:bd:eb:3e: 53:a3:43:a7:1d:78:ad:9f:7e:ee:a1:c8:7f:dc:be: 90:d8:4a:ba:a2:5d:58:59:86:b9:bb:67:49:81:9a: a3:7c:45:98:67:46:71:f5:18:c5:6b:41:f6:33:ef: 05:46:aa:df:e3:70:ed:80:ce:a8:06:41:87:f8:7c: e1:4d:69:52:ca:93:be:10:e3:fc:55:c8:b5:17:ad: 36:ec:a9:90:7f:1b:18:89:b2:8b:4e:15:4f:79:4a: ac:cf:e1:17:05:cb:1b:ce:64:33:5e:3f:ea:f1:f4: 13:b0:df:c6:1c:7f:a5:71:b3:e6:e0:15:d6:74:49: 5f:45:7a:c1:0b:3f:46:75:36:db:fd:6a:92:8b:14: fb:2e:54:cc:67:8b:98:6b:ea:49:b1:83:15:f7:58: 4e:ca:9b:16:48:7a:e2:ca:f8:31:d8:10:15:63:14: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:51:21:4D:55:F6:67:49:DA:3C:C5:E2:0D:59:95:43:D6:08:34:44 X509v3 Authority Key Identifier: keyid:2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ec:f7:75:da:3d:90:1f:a5:30:e4:02:5a:06:ab:10:b0:be: b9:99:2a:23:e7:78:cd:e7:96:f4:28:47:26:fb:26:fe:c0:b5: 71:5a:4c:33:cf:e9:3a:24:ae:dc:f2:e2:5c:cc:1a:03:34:9d: 61:ce:b1:cd:f8:eb:30:34:0e:76:d6:11:5f:cd:02:1e:40:c5: 68:21:e1:26:a3:6b:44:00:bb:17:ea:68:b3:58:27:62:30:bf: 0d:df:e8:30:5f:62:23:ff:0c:6c:00:e6:3a:4e:02:22:16:67: 59:cf:9e:e5:1c:a4:87:1c:70:ac:99:a7:9b:8c:7a:42:e3:4d: 83:9b:f0:13:14:85:ad:c0:df:72:2c:98:13:77:30:1e:d3:06: c5:61:8f:63:8b:a7:9d:23:48:e4:05:23:c1:02:55:55:dd:5f: f7:40:0c:8e:cd:5a:1c:28:8f:50:e3:72:43:37:a4:e0:96:d7: 13:3f:3b:da:5a:e9:b4:fa:7d:a7:46:4d:e6:6a:90:8f:82:cc: f4:7f:13:1e:56:79:aa:6c:0f:07:93:19:5d:9c:df:38:d3:07: 19:92:c0:c4:db:8f:ed:ea:76:33:8c:2a:67:c9:fa:8b:b2:a7: 58:40:b1:4d:91:47:a5:f5:a2:d8:6d:61:5f:94:99:04:20:9f: 45:7a:29:cc -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKAM6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw MmE4Y2NjMGJjMjk0MGU4ODYyNzQxNzE3NDc0YTA5NjE2NDlmNjUwHhcNMjQwMzI4 MDcyMDA3WhcNMjQwMzMxMDkzNTA3WjAzMTEwLwYDVQQDEyhiOWM1MTRjMGMwZmY0 OTFmYThiYzljODJjNDRlMzFlNDkxY2ZhZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnX7b6avx6moZhLnd55tVRM3mF7aGoE8twnhEakkU522Gvy0E vdFIMjEhXwnwocjIocxKtcU2jHrm6+TcJG8JxsRUa7rFsyaBO5CTJ3J4li+Hd7W7 Lb696z5To0OnHXitn37uoch/3L6Q2Eq6ol1YWYa5u2dJgZqjfEWYZ0Zx9RjFa0H2 M+8FRqrf43DtgM6oBkGH+HzhTWlSypO+EOP8Vci1F6027KmQfxsYibKLThVPeUqs z+EXBcsbzmQzXj/q8fQTsN/GHH+lcbPm4BXWdElfRXrBCz9GdTbb/WqSixT7LlTM Z4uYa+pJsYMV91hOypsWSHriyvgx2BAVYxR+6wIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFARRIU1V9mdJ2jzF4g1ZlUPWCDREMB8GA1UdIwQYMBaAFCq+OvmZ1AzKrFR+ XL8l+lGvxcBDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAyYThj Y2MwYmMyOTQwZTg4NjI3NDE3MTc0NzRhMDk2MTY0OWY2NS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNGIxOGQ0YjktNmY3ZC00N2RhLWJjMzItZjhiOTZi NjdlMjc5LzcwMmE4Y2NjMGJjMjk0MGU4ODYyNzQxNzE3NDc0YTA5NjE2NDlmNjUu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy80YjE4ZDRiOS02ZjdkLTQ3ZGEtYmMzMi1mOGI5 NmI2N2UyNzkvNzAyYThjY2MwYmMyOTQwZTg4NjI3NDE3MTc0NzRhMDk2MTY0OWY2 NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAEjs93XaPZAfpTDkAloGqxCwvrmZKiPneM3nlvQoRyb7Jv7A tXFaTDPP6Tokrtzy4lzMGgM0nWHOsc346zA0DnbWEV/NAh5AxWgh4Saja0QAuxfq aLNYJ2Iwvw3f6DBfYiP/DGwA5jpOAiIWZ1nPnuUcpIcccKyZp5uMekLjTYOb8BMU ha3A33IsmBN3MB7TBsVhj2OLp50jSOQFI8ECVVXdX/dADI7NWhwoj1DjckM3pOCW 1xM/O9pa6bT6fadGTeZqkI+CzPR/Ex5WeapsDweTGV2c3zjTBxmSwMTbj+3qdjOM KmfJ+ouyp1hAsU2RR6X1othtYV+UmQQgn0V6Kcw= -----END CERTIFICATE-----Generated at Thu Mar 28 11:17:43 2024 by rpki-client on console-fra.rpki-client.org