$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft File: 28887717a8e1f32108301ee3e38a142b28faa4de.mft (raw, json) Hash identifier: B8F1AbY5whfYNLqHVxioxo23PhiNrc7/N3I3lUBB9bk= Subject key identifier: FA:B9:AC:51:D1:87:57:80:C8:60:04:2E:B4:AC:43:15:3C:33:F0:38 Authority key identifier: 5E:9D:C3:C6:08:5E:E3:72:2B:21:37:D7:EF:73:AA:E6:2D:DA:00:76 Certificate issuer: /CN=28887717a8e1f32108301ee3e38a142b28faa4de Certificate serial: 289A45 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28887717a8e1f32108301ee3e38a142b28faa4de.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft Manifest number: 0DFB Signing time: Fri 29 Mar 2024 07:21:14 +0000 Manifest this update: Fri 29 Mar 2024 06:20:07 +0000 Manifest next update: Mon 01 Apr 2024 09:20:07 +0000 Files and hashes: 1: 28887717a8e1f32108301ee3e38a142b28faa4de.crl (hash: AndqpIruKrGcsoS9Fptu6ONuXEaiozr5rAhjiX7txzM=) 2: 823aa574bb9edc7ddfa232df4b2429552f6247e5.roa (hash: fG6k59xgs5CYLYtu5wBi1hz5XqlD4Vg+yd1SZ1iVyxI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.crl rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28887717a8e1f32108301ee3e38a142b28faa4de.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660933 (0x289a45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28887717a8e1f32108301ee3e38a142b28faa4de Validity Not Before: Mar 29 06:20:07 2024 GMT Not After : Apr 1 09:20:07 2024 GMT Subject: CN=9b9c9cddbc255a5f7e3d80045f083122c2e55ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:2d:b1:01:39:29:27:d2:7e:a7:3b:66:e2: 39:13:2b:4c:c0:12:ff:8b:2c:3e:1d:24:08:81:b9: 2a:7a:3d:81:08:67:61:79:52:58:91:a4:53:0a:68: 03:bf:23:d6:77:73:8a:fa:24:55:89:76:2f:f8:81: 49:a5:21:5d:12:58:a8:8e:08:28:d7:d4:80:f1:68: 9a:d8:df:54:07:4d:15:50:1f:b4:e7:05:e0:ea:aa: 4b:78:84:70:d5:29:85:8a:6f:10:78:94:86:b9:de: e0:09:8e:7e:a0:fd:c3:e7:78:c4:8f:2a:9e:3b:64: 9f:f0:d9:64:72:d3:b8:1c:aa:7f:51:58:70:70:45: 5b:73:aa:c6:6f:f2:7e:0a:79:c1:5a:67:bf:fd:cd: ac:82:5e:01:7d:e5:04:67:ac:15:32:3c:45:3f:e4: 33:79:c9:f2:dd:79:ec:82:f0:eb:e5:8a:1e:07:86: 98:9e:5e:b1:c7:c2:2f:8e:6f:d8:32:27:c2:55:2e: 6f:2d:be:d7:c6:e8:6c:b6:c5:4b:22:e1:41:50:bf: 62:67:18:84:e7:c5:75:fa:b2:e6:5f:a0:66:20:d4: 35:99:aa:9c:a9:53:1a:f7:3a:a0:ce:34:a7:6f:42: a3:fb:10:c8:7d:1a:d5:2f:61:85:6b:f8:1a:40:c8: 70:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B9:AC:51:D1:87:57:80:C8:60:04:2E:B4:AC:43:15:3C:33:F0:38 X509v3 Authority Key Identifier: keyid:5E:9D:C3:C6:08:5E:E3:72:2B:21:37:D7:EF:73:AA:E6:2D:DA:00:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28887717a8e1f32108301ee3e38a142b28faa4de.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a68d2b6c-8a3e-40ed-892a-b68cb0472e61/28887717a8e1f32108301ee3e38a142b28faa4de.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9f:ea:83:23:f3:c0:ef:84:b4:e7:e6:03:f5:09:14:c6:48: 92:e8:ef:2e:f1:d8:8a:c0:34:7c:58:af:cd:5d:5a:dc:ff:c2: 55:3c:16:dc:e6:36:9b:04:e5:f9:8b:07:00:92:9a:00:64:f4: 39:3d:96:c8:c5:97:a5:70:6a:59:a2:f3:49:59:c0:71:29:c1: df:30:3a:1c:5e:ff:94:75:3a:47:bd:9e:b5:f9:9d:ec:78:a8: e9:ee:71:e6:d1:be:7e:95:38:af:45:11:57:a8:5f:a0:dd:ad: 6c:50:72:3a:09:61:9f:45:df:0f:6f:51:f4:fc:9c:41:de:a4: cd:14:d8:3a:b6:d2:e5:32:a8:0f:7b:1d:3f:d4:bd:57:f1:0a: 50:a8:21:d4:b9:08:28:83:48:53:78:46:df:ff:29:fa:83:4f: a1:4f:81:b8:9b:6a:92:42:b1:c8:a6:98:16:a9:6e:bc:70:ef: 7d:b5:20:db:5b:2c:ec:de:67:ee:08:cc:aa:8f:96:bc:58:ef: ba:ef:87:c1:88:27:1b:5c:d6:63:d5:15:f3:b4:20:56:26:a5: f0:6a:4a:57:ce:68:e7:21:f3:a9:19:45:86:af:f2:bb:16:a4: e1:3f:3e:fe:51:09:c6:a6:89:2c:a0:f0:a4:1f:f8:e1:c5:8f: 45:b6:fa:8c -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKJpFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4 ODg3NzE3YThlMWYzMjEwODMwMWVlM2UzOGExNDJiMjhmYWE0ZGUwHhcNMjQwMzI5 MDYyMDA3WhcNMjQwNDAxMDkyMDA3WjAzMTEwLwYDVQQDEyg5YjljOWNkZGJjMjU1 YTVmN2UzZDgwMDQ1ZjA4MzEyMmMyZTU1ZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArJstsQE5KSfSfqc7ZuI5EytMwBL/iyw+HSQIgbkqej2BCGdh eVJYkaRTCmgDvyPWd3OK+iRViXYv+IFJpSFdEliojggo19SA8Wia2N9UB00VUB+0 5wXg6qpLeIRw1SmFim8QeJSGud7gCY5+oP3D53jEjyqeO2Sf8NlkctO4HKp/UVhw cEVbc6rGb/J+CnnBWme//c2sgl4BfeUEZ6wVMjxFP+Qzecny3XnsgvDr5YoeB4aY nl6xx8Ivjm/YMifCVS5vLb7XxuhstsVLIuFBUL9iZxiE58V1+rLmX6BmINQ1maqc qVMa9zqgzjSnb0Kj+xDIfRrVL2GFa/gaQMhwQwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPq5rFHRh1eAyGAELrSsQxU8M/A4MB8GA1UdIwQYMBaAFF6dw8YIXuNyKyE3 1+9zquYt2gB2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjg4ODc3 MTdhOGUxZjMyMTA4MzAxZWUzZTM4YTE0MmIyOGZhYTRkZS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTY4ZDJiNmMtOGEzZS00MGVkLTg5MmEtYjY4Y2Iw NDcyZTYxLzI4ODg3NzE3YThlMWYzMjEwODMwMWVlM2UzOGExNDJiMjhmYWE0ZGUu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hNjhkMmI2Yy04YTNlLTQwZWQtODkyYS1iNjhj YjA0NzJlNjEvMjg4ODc3MTdhOGUxZjMyMTA4MzAxZWUzZTM4YTE0MmIyOGZhYTRk ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAAef6oMj88DvhLTn5gP1CRTGSJLo7y7x2IrANHxYr81dWtz/ wlU8FtzmNpsE5fmLBwCSmgBk9Dk9lsjFl6Vwalmi80lZwHEpwd8wOhxe/5R1Oke9 nrX5nex4qOnucebRvn6VOK9FEVeoX6DdrWxQcjoJYZ9F3w9vUfT8nEHepM0U2Dq2 0uUyqA97HT/UvVfxClCoIdS5CCiDSFN4Rt//KfqDT6FPgbibapJCscimmBapbrxw 7321INtbLOzeZ+4IzKqPlrxY77rvh8GIJxtc1mPVFfO0IFYmpfBqSlfOaOch86kZ RYav8rsWpOE/Pv5RCcamiSyg8KQf+OHFj0W2+ow= -----END CERTIFICATE-----Generated at Fri Mar 29 08:11:25 2024 by rpki-client on console-fra.rpki-client.org