$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft File: 1a4d699082fbffcb821d7f10efc5a80a2237b902.mft (raw, json) Hash identifier: YWK2ebTPlohbXaerAI56OYGQzGu3jMf0XLx+KK/6dbs= Subject key identifier: 74:6D:B1:AD:86:E1:12:F4:13:89:0A:03:C7:37:4A:76:73:0A:7D:DC Authority key identifier: A9:95:98:04:0E:5B:ED:D3:15:36:F8:EF:5B:31:4A:DC:D7:AD:7E:11 Certificate issuer: /CN=1a4d699082fbffcb821d7f10efc5a80a2237b902 Certificate serial: 134FCC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a4d699082fbffcb821d7f10efc5a80a2237b902.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft Manifest Number: 0944 Signing time: Wed 29 Mar 2023 15:16:18 +0000 Manifest this update: Wed 29 Mar 2023 14:15:50 +0000 Manifest next update: Sat 01 Apr 2023 16:06:50 +0000 Files and hashes: 1: 0fab787d89410a7c1b81e1b651dca2f882b001d6.roa (hash: 0WYSj7SZN3JeF6KSgQwPnCP4Ybu3+/kJmkE7CPA53U8=) 2: 1a4d699082fbffcb821d7f10efc5a80a2237b902.crl (hash: 08CdGsNrlZXaj9AMZlgouChCbeg8f+qt/O3kbKX9oQg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.crl rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a4d699082fbffcb821d7f10efc5a80a2237b902.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Apr 2023 09:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265612 (0x134fcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4d699082fbffcb821d7f10efc5a80a2237b902 Validity Not Before: Mar 29 14:15:50 2023 GMT Not After : Apr 1 16:06:50 2023 GMT Subject: CN=bc8cbfb64813db65c6c92fd83045aa43b17ea257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:bf:dc:7c:65:47:15:14:b3:cd:14:2a:f2: ab:dd:7f:75:6a:34:f9:c1:e2:41:bb:f1:9e:18:bb: d2:aa:87:77:70:6a:3c:1c:e0:a0:fa:cf:27:e2:53: 82:d0:39:4c:74:87:e7:8d:74:0f:05:e6:86:0a:c0: 39:30:90:da:12:e6:75:4c:53:fa:60:ba:82:9c:bf: 33:4d:b8:a2:63:57:29:e0:4e:7e:a3:ed:f4:95:0f: 4f:66:46:8c:c8:7b:70:4d:ee:93:35:0e:3d:80:98: 25:9f:83:8d:7e:18:c7:4b:5b:13:97:14:5c:65:a9: 58:d8:9d:60:79:95:db:cc:79:76:47:f8:ca:73:2c: bc:59:a0:7c:9b:f3:d9:b4:04:c9:19:49:a6:46:07: 52:63:9c:67:ca:1e:d4:81:49:cf:4b:a0:a3:64:60: 8b:3f:21:df:d7:a6:8a:45:f9:69:da:85:06:75:e4: 51:73:18:81:ee:30:b3:cc:cd:f7:97:21:4e:26:87: e7:b8:bb:15:0a:ba:ee:fb:8f:10:46:e9:9e:9a:31: 40:ee:12:fb:eb:4e:c1:c4:0d:8d:50:3e:ea:aa:6f: 7b:38:60:3c:4b:df:d0:cf:0b:54:c4:21:a1:ed:57: 84:57:78:b0:9a:24:dd:75:61:a0:f4:d3:6b:58:1e: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6D:B1:AD:86:E1:12:F4:13:89:0A:03:C7:37:4A:76:73:0A:7D:DC X509v3 Authority Key Identifier: keyid:A9:95:98:04:0E:5B:ED:D3:15:36:F8:EF:5B:31:4A:DC:D7:AD:7E:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a4d699082fbffcb821d7f10efc5a80a2237b902.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5afe2c18-85d5-4b19-adf6-f360d2bcbe56/1a4d699082fbffcb821d7f10efc5a80a2237b902.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6a:eb:29:aa:b7:64:17:38:31:d6:87:f3:61:4c:ca:1a:13: 63:3a:2a:26:61:91:93:99:7f:09:60:2c:4c:0e:1e:64:d8:38: a4:a2:68:49:f5:1c:48:da:34:a7:c7:db:a5:3c:9d:e8:c7:60: 89:0e:3b:b0:d1:e0:d4:0a:77:3e:b1:e5:24:c7:94:2d:bc:76: 32:1a:44:bd:b1:e5:bd:94:63:bb:ad:7a:0d:a6:61:98:44:08: 2c:fb:80:33:fd:66:a3:77:0c:f8:a9:33:a5:90:43:ae:14:2d: 30:6c:49:bb:2d:35:5b:d9:bd:bc:18:62:ba:db:97:43:13:8a: e8:34:fb:fe:3d:fe:e7:76:58:25:92:46:b4:7a:d6:79:d5:29: 21:10:6c:27:87:eb:04:39:9b:42:61:9f:2f:90:96:52:95:e1: 2b:21:91:67:09:44:b3:67:d8:f1:8f:40:b0:34:4a:03:08:6f: f2:3a:48:27:fe:9b:3d:b9:cd:f5:6e:ed:80:92:05:73:4e:ef: 00:6b:af:b3:d6:73:a9:cb:a1:5b:09:ac:29:e6:a6:24:e9:5a: b5:07:10:be:a8:b9:41:ab:0e:28:fc:e4:75:9c:4f:5d:5b:1d: 2c:90:7b:66:b2:7e:6a:67:74:39:ff:24:cb:2b:4f:28:b9:09: de:9d:68:18 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDE0/MMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFh NGQ2OTkwODJmYmZmY2I4MjFkN2YxMGVmYzVhODBhMjIzN2I5MDIwHhcNMjMwMzI5 MTQxNTUwWhcNMjMwNDAxMTYwNjUwWjAzMTEwLwYDVQQDEyhiYzhjYmZiNjQ4MTNk YjY1YzZjOTJmZDgzMDQ1YWE0M2IxN2VhMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmRq/3HxlRxUUs80UKvKr3X91ajT5weJBu/GeGLvSqod3cGo8 HOCg+s8n4lOC0DlMdIfnjXQPBeaGCsA5MJDaEuZ1TFP6YLqCnL8zTbiiY1cp4E5+ o+30lQ9PZkaMyHtwTe6TNQ49gJgln4ONfhjHS1sTlxRcZalY2J1geZXbzHl2R/jK cyy8WaB8m/PZtATJGUmmRgdSY5xnyh7UgUnPS6CjZGCLPyHf16aKRflp2oUGdeRR cxiB7jCzzM33lyFOJofnuLsVCrru+48QRumemjFA7hL7607BxA2NUD7qqm97OGA8 S9/QzwtUxCGh7VeEV3iwmiTddWGg9NNrWB7juwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFHRtsa2G4RL0E4kKA8c3SnZzCn3cMB8GA1UdIwQYMBaAFKmVmAQOW+3TFTb4 71sxStzXrX4RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWE0ZDY5 OTA4MmZiZmZjYjgyMWQ3ZjEwZWZjNWE4MGEyMjM3YjkwMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNWFmZTJjMTgtODVkNS00YjE5LWFkZjYtZjM2MGQy YmNiZTU2LzFhNGQ2OTkwODJmYmZmY2I4MjFkN2YxMGVmYzVhODBhMjIzN2I5MDIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy81YWZlMmMxOC04NWQ1LTRiMTktYWRmNi1mMzYw ZDJiY2JlNTYvMWE0ZDY5OTA4MmZiZmZjYjgyMWQ3ZjEwZWZjNWE4MGEyMjM3Yjkw Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAEhq6ymqt2QXODHWh/NhTMoaE2M6KiZhkZOZfwlgLEwOHmTY OKSiaEn1HEjaNKfH26U8nejHYIkOO7DR4NQKdz6x5STHlC28djIaRL2x5b2UY7ut eg2mYZhECCz7gDP9ZqN3DPipM6WQQ64ULTBsSbstNVvZvbwYYrrbl0MTiug0+/49 /ud2WCWSRrR61nnVKSEQbCeH6wQ5m0Jhny+QllKV4SshkWcJRLNn2PGPQLA0SgMI b/I6SCf+mz25zfVu7YCSBXNO7wBrr7PWc6nLoVsJrCnmpiTpWrUHEL6ouUGrDij8 5HWcT11bHSyQe2ayfmpndDn/JMsrTyi5Cd6daBg= -----END CERTIFICATE-----Generated at Wed Mar 29 15:44:24 2023 by rpki-client on console-ams.rpki-client.org