$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft File: b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft (raw, json) Hash identifier: TCzPspiIonhzBKK+nEZ/CELGARwK4v14lTZEqK3O2wg= Subject key identifier: A1:F8:59:C1:26:A6:C4:5D:3A:E3:74:21:C1:07:2A:C2:8B:B9:84:C2 Authority key identifier: 22:CA:9A:30:9C:FC:9B:FB:1A:68:10:92:BF:45:91:AC:6A:02:DC:FC Certificate issuer: /CN=b3495e150d297a57bdd9c70a5c6b12197ca76f3c Certificate serial: 289B27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft Manifest number: 0DC3 Signing time: Thu 28 Mar 2024 07:20:44 +0000 Manifest this update: Thu 28 Mar 2024 06:20:08 +0000 Manifest next update: Sun 31 Mar 2024 10:13:08 +0000 Files and hashes: 1: b3495e150d297a57bdd9c70a5c6b12197ca76f3c.crl (hash: dR69bd+EeXfXCGH+oM0qiKaumnlPP+b2lZVG0sgC0fM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.crl rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661159 (0x289b27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3495e150d297a57bdd9c70a5c6b12197ca76f3c Validity Not Before: Mar 28 06:20:08 2024 GMT Not After : Mar 31 10:13:08 2024 GMT Subject: CN=eee2b97ce1a0f1117a564ffe0234448c144e6900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:44:e1:f5:4f:ba:7f:58:af:6b:6c:74:6e:f1: 38:bc:2a:01:d5:10:f8:ba:54:79:ce:1e:08:0b:53: 5c:ce:e5:f3:a6:6e:95:ed:48:e6:a1:5d:1d:27:6e: 3c:13:ac:9b:39:4f:a3:c7:aa:b8:45:e3:2f:f9:e7: 7f:35:d7:58:7a:31:3c:6a:6c:8a:ed:fb:fb:b3:06: 7b:95:91:82:0b:20:59:4c:05:14:d9:6e:56:be:53: c6:c4:72:4c:ed:b6:56:26:37:22:6d:04:b6:70:de: 68:67:d0:a5:95:92:30:55:20:c5:49:91:03:ca:9a: 93:61:5e:5b:45:61:0c:ed:75:c5:12:d4:3b:78:d2: 68:90:51:39:74:42:7d:d0:c1:d5:33:1d:e1:7c:bf: 77:08:95:d7:a2:c8:1a:b3:7c:b7:67:62:28:0c:96: b8:28:44:c4:78:ba:8f:09:34:8a:45:09:ec:bd:6f: 90:73:2c:a6:bc:ba:2d:94:23:f4:77:5f:59:24:08: 3f:69:e1:4f:1e:78:3e:ca:6c:4f:a6:4d:e2:02:2b: 33:7d:81:fe:e7:45:e9:ca:09:7c:32:7b:a0:f7:61: 11:7c:e4:a0:f4:d3:ab:75:2d:8a:f1:e4:4a:e2:bc: 29:db:b9:27:20:d1:d8:17:f2:0a:90:80:00:c9:cb: 70:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F8:59:C1:26:A6:C4:5D:3A:E3:74:21:C1:07:2A:C2:8B:B9:84:C2 X509v3 Authority Key Identifier: keyid:22:CA:9A:30:9C:FC:9B:FB:1A:68:10:92:BF:45:91:AC:6A:02:DC:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8f:29:81:27:8a:88:d7:60:5f:49:fe:94:d6:84:93:7d:61: 55:13:60:27:bf:12:9e:a9:2a:b4:d4:92:64:49:b1:ec:56:92: 02:1d:85:27:96:8d:a0:7b:25:12:3c:8c:a7:35:35:da:75:09: 7d:3d:68:c1:d3:6f:3b:fa:29:a5:58:cd:35:54:57:fa:a8:89: 2a:a5:b9:6d:43:f7:ab:db:2a:9b:c5:cd:47:68:56:cf:fd:45: 80:ef:18:a0:dd:3b:e4:77:ba:88:4e:1e:8b:2e:aa:73:70:5e: 5c:e5:f8:5e:bb:03:91:e7:19:ff:2c:db:d3:c5:9b:5d:52:f8: 5f:61:aa:70:ec:ad:32:fd:73:38:ee:cf:d6:08:a6:b2:61:67: 9c:f5:0d:c2:8a:1b:74:80:ed:e6:23:80:ce:d2:e7:55:8a:bf: 5d:93:04:ce:06:7c:7f:9a:68:ab:66:d2:a3:ff:b1:3d:bf:de: 42:44:d2:0c:14:cc:9b:b3:2e:e8:2c:c9:f4:8d:bf:c7:9b:95: 39:6e:64:8c:f0:b3:aa:64:c8:6d:7a:be:24:8a:33:1b:dd:64: 16:29:bf:16:c0:9b:4b:54:70:45:d3:7a:3b:d7:5e:97:8a:8b: a0:56:67:e7:10:a7:35:06:62:0a:5b:d0:f1:bd:0f:cf:63:76: a4:e3:69:f1 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKJsnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz NDk1ZTE1MGQyOTdhNTdiZGQ5YzcwYTVjNmIxMjE5N2NhNzZmM2MwHhcNMjQwMzI4 MDYyMDA4WhcNMjQwMzMxMTAxMzA4WjAzMTEwLwYDVQQDEyhlZWUyYjk3Y2UxYTBm MTExN2E1NjRmZmUwMjM0NDQ4YzE0NGU2OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAhUTh9U+6f1iva2x0bvE4vCoB1RD4ulR5zh4IC1NczuXzpm6V 7UjmoV0dJ248E6ybOU+jx6q4ReMv+ed/NddYejE8amyK7fv7swZ7lZGCCyBZTAUU 2W5WvlPGxHJM7bZWJjcibQS2cN5oZ9CllZIwVSDFSZEDypqTYV5bRWEM7XXFEtQ7 eNJokFE5dEJ90MHVMx3hfL93CJXXosgas3y3Z2IoDJa4KETEeLqPCTSKRQnsvW+Q cyymvLotlCP0d19ZJAg/aeFPHng+ymxPpk3iAiszfYH+50Xpygl8Mnug92ERfOSg 9NOrdS2K8eRK4rwp27knINHYF/IKkIAAyctw6QIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFKH4WcEmpsRdOuN0IcEHKsKLuYTCMB8GA1UdIwQYMBaAFCLKmjCc/Jv7GmgQ kr9FkaxqAtz8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjM0OTVl MTUwZDI5N2E1N2JkZDljNzBhNWM2YjEyMTk3Y2E3NmYzYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvNzJkYTA4NzAtZmUwMi00NmIxLWEwMTQtZjY3MjE0 NWY5NDRhL2IzNDk1ZTE1MGQyOTdhNTdiZGQ5YzcwYTVjNmIxMjE5N2NhNzZmM2Mu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy83MmRhMDg3MC1mZTAyLTQ2YjEtYTAxNC1mNjcy MTQ1Zjk0NGEvYjM0OTVlMTUwZDI5N2E1N2JkZDljNzBhNWM2YjEyMTk3Y2E3NmYz Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAI2PKYEniojXYF9J/pTWhJN9YVUTYCe/Ep6pKrTUkmRJsexW kgIdhSeWjaB7JRI8jKc1Ndp1CX09aMHTbzv6KaVYzTVUV/qoiSqluW1D96vbKpvF zUdoVs/9RYDvGKDdO+R3uohOHosuqnNwXlzl+F67A5HnGf8s29PFm11S+F9hqnDs rTL9czjuz9YIprJhZ5z1DcKKG3SA7eYjgM7S51WKv12TBM4GfH+aaKtm0qP/sT2/ 3kJE0gwUzJuzLugsyfSNv8eblTluZIzws6pkyG16viSKMxvdZBYpvxbAm0tUcEXT ejvXXpeKi6BWZ+cQpzUGYgpb0PG9D89jdqTjafE= -----END CERTIFICATE-----Generated at Thu Mar 28 08:12:22 2024 by rpki-client on console-ams.rpki-client.org