$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft (raw, json) Hash identifier: FoyJzbMRJsstpzlyitrXcaMERFnTfN7PQ+sXc/doeqw= Subject key identifier: F0:D7:EA:34:93:6C:2D:0C:40:D2:31:C2:64:5D:07:8B:AA:BF:C5:88 Authority key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Certificate issuer: /CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Certificate serial: 3665E1C7B9BD0CBA8A615D2A96849C4DF246A7DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft Manifest number: 88 Signing time: Thu 21 Nov 2024 11:05:56 +0000 Manifest this update: Thu 21 Nov 2024 11:00:56 +0000 Manifest next update: Wed 27 Nov 2024 03:10:56 +0000 Files and hashes: 1: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl (hash: rWoLjfC1KoEqqyphEHqBSbfcYTzUJIHFn8rfy/o1zec=) 2: AS22884.roa (hash: ZVqnuujg/EyoNDkzYIYJPR9kJf9LvxAnozMtuseQEmM=) 3: AS17072.roa (hash: sflSUrR5DSVboIctFpOEWCCTfVEm166knwtRDxJQr8A=) 4: AS28414.roa (hash: hG+EHS+f7EtALuSSTl5iVLK2ytAcMU9IL3+3wn1eiIM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:65:e1:c7:b9:bd:0c:ba:8a:61:5d:2a:96:84:9c:4d:f2:46:a7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Validity Not Before: Nov 21 11:00:56 2024 GMT Not After : Nov 27 03:10:56 2024 GMT Subject: CN=F0D7EA34936C2D0C40D231C2645D078BAABFC588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:57:69:95:54:ca:59:5f:eb:ad:29:d0:05: 12:a8:fc:aa:98:92:ba:45:4d:b3:2b:95:17:19:10: ca:04:3b:8b:72:4f:1b:88:72:6a:51:c8:ac:01:a3: ad:13:90:00:9e:3f:85:d6:c2:1c:da:2a:ef:7b:7d: ee:b0:44:4c:7a:97:23:d7:5c:54:e0:10:54:a4:32: 8e:1e:97:48:d3:0c:f7:0f:df:76:c9:88:b7:6b:bc: 22:a4:0d:59:96:94:fa:9d:7b:33:5b:d8:26:60:9b: 29:3f:6a:de:70:c2:65:13:f9:44:c1:d8:98:9b:98: 8e:2c:de:7c:f4:65:64:06:a7:21:83:f3:f3:76:44: 71:fc:0f:52:3c:77:13:f1:a8:06:cc:48:9e:2a:db: 13:3a:e7:e9:8d:10:b6:62:29:bd:5f:34:13:76:4a: 71:7a:50:47:2c:04:0f:11:6a:ed:79:f4:58:46:c1: d1:6b:5f:52:7d:64:3b:60:70:21:bd:e4:f2:94:b3: d0:55:a9:14:b8:45:48:ad:dd:29:6d:a2:0e:fc:f6: 72:93:6c:01:d4:93:03:ba:75:fd:da:1c:60:7a:ce: 89:71:ca:96:0e:be:09:6d:2f:23:ec:d0:7c:84:ad: 4e:58:3c:ef:77:cd:1f:40:c2:6d:3b:13:07:fa:0a: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D7:EA:34:93:6C:2D:0C:40:D2:31:C2:64:5D:07:8B:AA:BF:C5:88 X509v3 Authority Key Identifier: keyid:8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d8:ac:21:59:a7:63:a8:71:73:c7:2d:d9:53:1b:e9:80:21: 46:02:c0:84:3b:06:ee:89:89:85:ed:dc:51:06:a7:b0:b5:17: 50:c1:0e:b7:5e:d4:16:45:f1:ff:a6:8e:be:79:32:0d:59:7f: 22:fa:fa:07:8c:6b:1b:93:07:51:77:dc:ca:f2:ee:46:c4:03: 8e:6f:63:8e:ae:8d:05:df:0e:63:bc:06:ee:78:f0:d5:ea:a1: 45:e7:37:14:a6:a5:56:55:44:c8:f6:eb:b8:e4:40:51:3f:43: 1d:64:00:dd:01:f8:a5:03:fb:69:80:43:23:8d:e1:00:cd:00: 6b:4b:6d:15:07:d6:64:c1:13:74:e7:2c:c9:35:e3:90:ee:81: cf:90:cd:07:6c:ff:9a:4a:bc:f4:47:36:b3:a7:35:e3:c2:21: a9:5e:ca:47:0f:84:87:25:a0:bc:ff:f4:c3:39:9a:4d:b3:99: ad:47:07:5c:2b:bf:ec:78:56:86:9d:3d:fb:df:ac:6e:31:7c: d7:9e:f9:77:15:b9:7b:a3:72:a4:b6:91:f1:64:b7:f1:a8:d2: 2a:a0:73:2b:7c:76:33:e2:b7:e8:be:09:1a:66:95:83:69:e7: 6f:c9:2b:f7:de:ce:af:36:44:1c:0b:90:bd:f5:0d:78:94:45: 12:3f:da:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNmXhx7m9DLqKYV0qloScTfJGp90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYzQTI1Qzk3NUY1 OEFBMEJGRjAeFw0yNDExMjExMTAwNTZaFw0yNDExMjcwMzEwNTZaMDMxMTAvBgNV BAMTKEYwRDdFQTM0OTM2QzJEMEM0MEQyMzFDMjY0NUQwNzhCQUFCRkM1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocVdplVTKWV/rrSnQBRKo/KqY krpFTbMrlRcZEMoEO4tyTxuIcmpRyKwBo60TkACeP4XWwhzaKu97fe6wREx6lyPX XFTgEFSkMo4el0jTDPcP33bJiLdrvCKkDVmWlPqdezNb2CZgmyk/at5wwmUT+UTB 2JibmI4s3nz0ZWQGpyGD8/N2RHH8D1I8dxPxqAbMSJ4q2xM65+mNELZiKb1fNBN2 SnF6UEcsBA8Rau159FhGwdFrX1J9ZDtgcCG95PKUs9BVqRS4RUit3Sltog789nKT bAHUkwO6df3aHGB6zolxypYOvgltLyPs0HyErU5YPO93zR9Awm07Ewf6CvupAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8NfqNJNsLQxA0jHCZF0Hi6q/xYgwHwYDVR0j BBgwFoAUiq8cMSwkESUsf3djolyXX1iqC/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0 OTc2MjFEMjMxMDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEy NTJDN0Y3NzYzQTI1Qzk3NUY1OEFBMEJGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUFGMUMzMTJDMjQxMTI1MkM3 Rjc3NjNBMjVDOTc1RjU4QUEwQkZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFFMTU4MTZERjA3NDk3NjIxRDIz MTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzhBQUYxQzMxMkMyNDExMjUyQzdGNzc2 M0EyNUM5NzVGNThBQTBCRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf2KwhWadjqHFzxy3ZUxvpgCFG AsCEOwbuiYmF7dxRBqewtRdQwQ63XtQWRfH/po6+eTINWX8i+voHjGsbkwdRd9zK 8u5GxAOOb2OOro0F3w5jvAbuePDV6qFF5zcUpqVWVUTI9uu45EBRP0MdZADdAfil A/tpgEMjjeEAzQBrS20VB9ZkwRN05yzJNeOQ7oHPkM0HbP+aSrz0RzazpzXjwiGp XspHD4SHJaC8//TDOZpNs5mtRwdcK7/seFaGnT3736xuMXzXnvl3Fbl7o3KktpHx ZLfxqNIqoHMrfHYz4rfovgkaZpWDaedvySv33s6vNkQcC5C99Q14lEUSP9oA -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org