$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft File: 28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft (raw, json) Hash identifier: Ypwgy30EWcZOGtRnkGPa+lB+2pfBlikutBp4eRCxkoY= Subject key identifier: F2:23:DB:9D:D7:DC:58:BD:6D:A2:AD:4B:E3:25:95:38:10:CA:96:E1 Authority key identifier: 9C:B8:1C:93:F1:3D:AF:49:79:00:65:67:FE:3A:0C:6C:58:EC:EE:B3 Certificate issuer: /CN=28411e73cb2042bb1a9c78b47807e0acd5a97e06 Certificate serial: 1E8BBD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28411e73cb2042bb1a9c78b47807e0acd5a97e06.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft Manifest number: 0DBD Signing time: Thu 28 Mar 2024 12:21:26 +0000 Manifest this update: Thu 28 Mar 2024 11:20:06 +0000 Manifest next update: Sun 31 Mar 2024 12:44:06 +0000 Files and hashes: 1: 28411e73cb2042bb1a9c78b47807e0acd5a97e06.crl (hash: MWCS1ai5XNc2aPYlMWE79/1dCrmS98qklWhGYkuk2Y0=) 2: 289b877dd7dcdb7124312a2b3fd06a621e583ab2.roa (hash: N5zM/ByZ5SXYwHEhcNKrD1ajVtZ8wM0AwB23mKCvRxo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.crl rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28411e73cb2042bb1a9c78b47807e0acd5a97e06.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001853 (0x1e8bbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28411e73cb2042bb1a9c78b47807e0acd5a97e06 Validity Not Before: Mar 28 11:20:06 2024 GMT Not After : Mar 31 12:44:06 2024 GMT Subject: CN=e7909e6d23d43784a525c6ddbe30cd1e3d8a86f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:45:bb:01:e3:f1:45:d7:16:56:ec:2b:e3: b2:a7:d4:e3:3d:3d:8b:3b:fc:6f:8f:d5:62:8b:87: de:75:35:0d:2e:4a:e5:15:2b:40:ff:b3:c5:69:ef: d4:75:e0:2f:0f:76:47:50:3c:b7:9c:24:05:48:ce: aa:09:51:5e:47:f6:e1:2b:30:56:2e:1b:03:ef:04: ca:66:c2:e8:41:44:d2:55:d7:bc:41:a8:25:f4:cd: 96:60:d8:77:3c:f0:f3:56:45:d2:c9:a2:48:74:98: 36:52:7a:07:07:c9:32:4f:c3:48:d5:7c:a3:00:0f: 4c:75:56:03:59:96:b8:71:40:d2:b5:43:4f:9d:b0: 29:2e:3e:7c:4e:5e:ba:77:d1:e0:78:50:9d:2d:3b: fa:df:4b:bb:35:1f:e8:16:41:48:90:93:64:55:0e: 62:d5:fe:c0:0c:12:d3:3e:24:35:c6:05:ec:ad:dd: ea:f4:14:8f:0e:01:40:45:7a:2f:3d:b0:d7:58:b8: 45:eb:6f:a5:03:30:99:db:0e:f8:3c:9e:ac:b1:80: 0a:03:d9:34:be:b5:41:8a:8c:de:e1:77:81:d7:ad: 1e:6e:3b:29:d7:46:38:a2:8e:cc:6b:45:70:16:a8: 2f:d9:21:60:fe:2f:2b:c0:84:8b:a7:ff:db:f1:66: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:23:DB:9D:D7:DC:58:BD:6D:A2:AD:4B:E3:25:95:38:10:CA:96:E1 X509v3 Authority Key Identifier: keyid:9C:B8:1C:93:F1:3D:AF:49:79:00:65:67:FE:3A:0C:6C:58:EC:EE:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28411e73cb2042bb1a9c78b47807e0acd5a97e06.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/a796e152-570e-4337-b98c-3b5f820ddf95/28411e73cb2042bb1a9c78b47807e0acd5a97e06.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c4:fd:eb:fd:6c:6c:01:ae:f4:24:b6:7d:d5:ca:55:bd:4d: a9:37:87:8c:98:77:36:92:23:52:b6:0d:fb:d9:06:fb:69:ce: e1:8d:51:84:eb:3d:10:a1:55:89:f9:4e:5e:83:1e:9e:52:55: 98:8b:89:1d:5d:a9:ad:af:cc:2a:58:b5:2a:66:d3:9d:d6:0d: 61:18:5f:4c:31:8d:94:6f:be:c7:f9:f7:47:54:ac:fb:35:ec: ba:0f:a8:32:45:d3:17:d0:1c:92:3c:2d:70:ac:b8:24:26:4a: 30:b8:cf:c6:11:12:61:21:98:60:6f:e2:91:e2:50:46:49:ad: bb:b4:a2:29:71:76:e7:4d:db:2a:10:82:7a:d0:2b:64:32:e6: 8a:d4:f5:bc:15:1e:b3:97:0d:5d:7f:18:b2:9e:2b:6b:f0:f6: 7c:d3:05:c1:04:54:27:cf:f2:9d:a8:28:63:c3:a2:ad:c9:75: a2:9a:99:e3:54:f1:86:e3:90:53:2f:70:e1:0f:da:1a:1f:f3: 04:ab:56:44:8e:90:4d:95:58:65:7a:5b:f5:d0:2a:84:e3:6d: f7:93:df:62:4a:3e:49:ec:2b:e2:a3:14:70:5d:dc:21:e0:c0: 47:6f:27:a5:77:11:aa:95:f7:5f:14:75:f6:20:b2:3e:e7:29: 28:4f:45:99 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDHou9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4 NDExZTczY2IyMDQyYmIxYTljNzhiNDc4MDdlMGFjZDVhOTdlMDYwHhcNMjQwMzI4 MTEyMDA2WhcNMjQwMzMxMTI0NDA2WjAzMTEwLwYDVQQDEyhlNzkwOWU2ZDIzZDQz Nzg0YTUyNWM2ZGRiZTMwY2QxZTNkOGE4NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAoTFFuwHj8UXXFlbsK+Oyp9TjPT2LO/xvj9Vii4fedTUNLkrl FStA/7PFae/UdeAvD3ZHUDy3nCQFSM6qCVFeR/bhKzBWLhsD7wTKZsLoQUTSVde8 Qagl9M2WYNh3PPDzVkXSyaJIdJg2UnoHB8kyT8NI1XyjAA9MdVYDWZa4cUDStUNP nbApLj58Tl66d9HgeFCdLTv630u7NR/oFkFIkJNkVQ5i1f7ADBLTPiQ1xgXsrd3q 9BSPDgFARXovPbDXWLhF62+lAzCZ2w74PJ6ssYAKA9k0vrVBioze4XeB160ebjsp 10Y4oo7Ma0VwFqgv2SFg/i8rwISLp//b8WYLowIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPIj253X3Fi9baKtS+MllTgQypbhMB8GA1UdIwQYMBaAFJy4HJPxPa9JeQBl Z/46DGxY7O6zMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjg0MTFl NzNjYjIwNDJiYjFhOWM3OGI0NzgwN2UwYWNkNWE5N2UwNi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYTc5NmUxNTItNTcwZS00MzM3LWI5OGMtM2I1Zjgy MGRkZjk1LzI4NDExZTczY2IyMDQyYmIxYTljNzhiNDc4MDdlMGFjZDVhOTdlMDYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9hNzk2ZTE1Mi01NzBlLTQzMzctYjk4Yy0zYjVm ODIwZGRmOTUvMjg0MTFlNzNjYjIwNDJiYjFhOWM3OGI0NzgwN2UwYWNkNWE5N2Uw Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHfE/ev9bGwBrvQktn3VylW9Tak3h4yYdzaSI1K2DfvZBvtp zuGNUYTrPRChVYn5Tl6DHp5SVZiLiR1dqa2vzCpYtSpm053WDWEYX0wxjZRvvsf5 90dUrPs17LoPqDJF0xfQHJI8LXCsuCQmSjC4z8YREmEhmGBv4pHiUEZJrbu0oilx dudN2yoQgnrQK2Qy5orU9bwVHrOXDV1/GLKeK2vw9nzTBcEEVCfP8p2oKGPDoq3J daKameNU8YbjkFMvcOEP2hof8wSrVkSOkE2VWGV6W/XQKoTjbfeT32JKPknsK+Kj FHBd3CHgwEdvJ6V3EaqV918UdfYgsj7nKShPRZk= -----END CERTIFICATE-----Generated at Thu Mar 28 14:02:52 2024 by rpki-client on console-fra.rpki-client.org