$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.mft File: de93432676ab661c9f6b67fc5e19797b9d6adb1c.mft (raw, json) Hash identifier: FFGoEdGc9EE91hCWiL1BEr84aibw/A2m3QJksvnluQY= Subject key identifier: 20:B8:03:D7:E5:73:93:C4:0D:59:F7:07:70:30:BA:87:86:41:02:F6 Authority key identifier: 10:63:8C:28:01:B7:B3:49:58:07:A1:30:E9:B1:47:9C:1F:AC:62:20 Certificate issuer: /CN=de93432676ab661c9f6b67fc5e19797b9d6adb1c Certificate serial: 1975D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.mft Manifest number: 0CF5 Signing time: Thu 28 Mar 2024 03:20:36 +0000 Manifest this update: Thu 28 Mar 2024 02:20:09 +0000 Manifest next update: Sun 31 Mar 2024 04:47:09 +0000 Files and hashes: 1: ab10f3be79f9f877a5e501ecf8d3d6cb4d2f81a7.roa (hash: hEd4hYDgk/ZcXcSCk8bDcqrabwRtx7GXuqxod2UaKdM=) 2: de93432676ab661c9f6b67fc5e19797b9d6adb1c.crl (hash: i0PpfkEgHJukNlXWiSsttEGjfPDjUnc6btJnQeMYjwk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.crl rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668565 (0x1975d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de93432676ab661c9f6b67fc5e19797b9d6adb1c Validity Not Before: Mar 28 02:20:09 2024 GMT Not After : Mar 31 04:47:09 2024 GMT Subject: CN=ee3736b2a5e3b7c90c1aae75fee407917e26693d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:84:40:b4:74:f7:c4:2e:c6:57:59:b8:94:56: a4:8b:44:7a:19:78:f2:f6:a9:51:ec:33:60:c0:f2: 6c:20:7a:1b:28:70:c5:9f:7f:2c:fe:bf:c2:87:f4: a6:a8:c4:77:c8:00:98:6f:3e:72:c2:a4:bc:af:e5: 6c:2b:76:77:50:50:aa:89:22:b5:b2:c6:f8:d2:da: df:8a:4c:60:5b:52:5a:a1:1a:ab:5e:9c:be:01:c8: 56:b1:40:5e:dc:06:fb:f6:e2:2f:7b:cc:24:44:14: fd:4e:9c:d0:c3:9b:98:1a:bc:56:4e:7e:a0:19:1b: 73:c9:98:8b:d2:f3:e2:6d:da:4f:75:40:72:15:af: da:a1:88:96:17:bd:8b:d2:90:c4:fd:a6:10:41:32: 55:74:f1:90:86:f4:86:8c:16:e3:a6:e4:46:66:85: ee:49:88:46:6d:a7:84:3c:bf:24:ce:82:42:eb:1f: 44:ff:40:95:67:b1:c1:75:0f:06:9a:a6:f8:c2:a2: ef:00:f6:f0:f1:ec:78:d5:76:25:bc:5d:d1:90:a8: 0e:ea:e6:e3:1d:c4:9d:05:73:7c:a7:5a:1c:96:57: d2:53:4e:46:b6:7f:2b:3d:f8:d4:46:df:22:c5:d7: 89:b5:9c:ea:36:ca:1f:86:61:4f:23:fc:7b:de:bd: 11:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B8:03:D7:E5:73:93:C4:0D:59:F7:07:70:30:BA:87:86:41:02:F6 X509v3 Authority Key Identifier: keyid:10:63:8C:28:01:B7:B3:49:58:07:A1:30:E9:B1:47:9C:1F:AC:62:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de93432676ab661c9f6b67fc5e19797b9d6adb1c.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/b96d5280-8292-437e-a444-7d5b843877d4/de93432676ab661c9f6b67fc5e19797b9d6adb1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:56:a4:36:ff:02:57:eb:e7:1d:38:7b:9a:cb:40:8d:4d:d9: 68:af:a7:30:3f:08:83:68:ce:82:63:cc:81:60:64:c6:c2:31: f0:f5:59:6e:63:1c:02:f0:82:d8:9e:c4:7a:ab:d2:75:00:96: 07:e5:f9:2b:69:15:3b:ed:f3:35:42:bd:d3:7c:45:8c:ed:84: 5b:11:a0:71:28:fa:53:72:87:93:32:36:9f:3d:c0:53:eb:6c: 2c:a7:f6:57:4c:f7:b0:e3:32:e2:6e:5f:8b:cd:d0:18:69:a6: 7f:3d:87:f0:b2:27:be:a9:06:13:3f:8e:ff:05:7d:0b:a5:6b: 45:98:57:05:30:2d:52:dc:77:44:a3:ae:95:67:d9:91:9d:6d: 1c:67:16:61:f9:87:1c:f3:c4:5e:38:37:7e:71:4f:68:5e:d3: 05:79:5c:98:b2:21:e3:84:7e:ea:b8:0f:45:0c:ea:48:fd:e7: 3b:1b:3e:2e:b1:28:06:da:9c:8e:69:92:23:94:e4:74:25:43: c8:42:c1:89:40:17:6a:6d:4e:71:30:01:3e:3f:05:c8:50:03: 03:57:ce:04:cc:8f:4d:7c:26:9e:8d:2d:cd:74:b0:54:f5:a2: 4b:06:f4:3c:0c:e4:49:d3:9e:71:d8:3d:b8:9d:6f:96:fc:49: 5e:8e:b8:16 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGXXVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRl OTM0MzI2NzZhYjY2MWM5ZjZiNjdmYzVlMTk3OTdiOWQ2YWRiMWMwHhcNMjQwMzI4 MDIyMDA5WhcNMjQwMzMxMDQ0NzA5WjAzMTEwLwYDVQQDEyhlZTM3MzZiMmE1ZTNi N2M5MGMxYWFlNzVmZWU0MDc5MTdlMjY2OTNkMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAiYRAtHT3xC7GV1m4lFaki0R6GXjy9qlR7DNgwPJsIHobKHDF n38s/r/Ch/SmqMR3yACYbz5ywqS8r+VsK3Z3UFCqiSK1ssb40trfikxgW1JaoRqr Xpy+AchWsUBe3Ab79uIve8wkRBT9TpzQw5uYGrxWTn6gGRtzyZiL0vPibdpPdUBy Fa/aoYiWF72L0pDE/aYQQTJVdPGQhvSGjBbjpuRGZoXuSYhGbaeEPL8kzoJC6x9E /0CVZ7HBdQ8Gmqb4wqLvAPbw8ex41XYlvF3RkKgO6ubjHcSdBXN8p1ocllfSU05G tn8rPfjURt8ixdeJtZzqNsofhmFPI/x73r0RMwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFCC4A9flc5PEDVn3B3AwuoeGQQL2MB8GA1UdIwQYMBaAFBBjjCgBt7NJWAeh MOmxR5wfrGIgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGU5MzQz MjY3NmFiNjYxYzlmNmI2N2ZjNWUxOTc5N2I5ZDZhZGIxYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYjk2ZDUyODAtODI5Mi00MzdlLWE0NDQtN2Q1Yjg0 Mzg3N2Q0L2RlOTM0MzI2NzZhYjY2MWM5ZjZiNjdmYzVlMTk3OTdiOWQ2YWRiMWMu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iOTZkNTI4MC04MjkyLTQzN2UtYTQ0NC03ZDVi ODQzODc3ZDQvZGU5MzQzMjY3NmFiNjYxYzlmNmI2N2ZjNWUxOTc5N2I5ZDZhZGIx Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAA9WpDb/Alfr5x04e5rLQI1N2WivpzA/CINozoJjzIFgZMbC MfD1WW5jHALwgtiexHqr0nUAlgfl+StpFTvt8zVCvdN8RYzthFsRoHEo+lNyh5My Np89wFPrbCyn9ldM97DjMuJuX4vN0Bhppn89h/CyJ76pBhM/jv8FfQula0WYVwUw LVLcd0SjrpVn2ZGdbRxnFmH5hxzzxF44N35xT2he0wV5XJiyIeOEfuq4D0UM6kj9 5zsbPi6xKAbanI5pkiOU5HQlQ8hCwYlAF2ptTnEwAT4/BchQAwNXzgTMj018Jp6N Lc10sFT1oksG9DwM5EnTnnHYPbidb5b8SV6OuBY= -----END CERTIFICATE-----Generated at Thu Mar 28 04:37:45 2024 by rpki-client on console-fra.rpki-client.org