$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft File: 4ae50a1688a42b708c8e50cedee53ca7debfc796.mft (raw, json) Hash identifier: RHhWFwPMmjpzLbvTXHpw3Gk8axwYw/shvBu9jlHf09g= Subject key identifier: 20:2A:E3:F3:D8:94:A4:49:9F:CB:D7:7D:6E:3E:96:8B:A5:01:A8:89 Authority key identifier: 73:B6:D3:4D:66:F3:3D:4F:60:12:97:F0:A3:32:47:F8:56:32:11:9E Certificate issuer: /CN=4ae50a1688a42b708c8e50cedee53ca7debfc796 Certificate serial: 15B1B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ae50a1688a42b708c8e50cedee53ca7debfc796.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft Manifest number: 0B21 Signing time: Thu 28 Mar 2024 14:20:55 +0000 Manifest this update: Thu 28 Mar 2024 13:20:08 +0000 Manifest next update: Sun 31 Mar 2024 16:56:08 +0000 Files and hashes: 1: 4ae50a1688a42b708c8e50cedee53ca7debfc796.crl (hash: rTNmgGKl4uWdsCDg/2fgU9gVajq3HGbbBNxRNysl5QU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.crl rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ae50a1688a42b708c8e50cedee53ca7debfc796.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421750 (0x15b1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae50a1688a42b708c8e50cedee53ca7debfc796 Validity Not Before: Mar 28 13:20:08 2024 GMT Not After : Mar 31 16:56:08 2024 GMT Subject: CN=9b9a8b81c7753211f0b8d661a4e5bd7b8be1492b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:62:2d:65:56:2b:11:46:b4:26:a9:e8:78: 77:04:26:69:e9:b1:09:f5:ba:0c:1b:b8:57:ad:93: e6:83:48:0d:02:02:91:44:76:0e:b3:96:19:c8:2a: 27:ec:22:fc:c2:56:de:7e:c7:b0:8a:5b:23:94:3d: 90:a2:71:1f:6a:6a:81:ae:dc:55:94:d0:54:06:1d: e1:9a:22:9c:b8:30:59:2d:57:d5:1b:b8:d9:eb:14: 12:b7:85:db:48:18:7c:ef:a6:28:c0:40:7d:8a:1b: c4:ab:a0:07:2c:d7:44:0f:31:ac:cc:1e:bc:ba:ab: 78:32:0c:36:57:2f:ab:b0:5c:05:80:4e:82:06:8b: 46:f7:13:4e:c4:f7:6c:33:3c:7a:b2:98:33:0e:45: 29:c5:c3:81:11:07:d3:85:2a:e2:f4:46:8c:6c:ef: c4:a6:89:37:06:87:e6:d1:ec:4b:b5:23:d8:33:94: 5e:b0:e2:e5:bf:8d:bb:3e:72:5b:cb:c9:25:17:47: 75:99:78:4c:69:79:28:cf:b1:e0:32:50:d9:25:d4: e2:cb:ce:0b:39:83:2b:ea:c2:e4:29:d9:37:7d:25: ca:69:b2:fa:60:ab:3e:ea:d2:e5:df:d3:79:bc:10: a5:7e:ca:52:8b:25:07:46:32:be:b6:81:58:ff:ec: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2A:E3:F3:D8:94:A4:49:9F:CB:D7:7D:6E:3E:96:8B:A5:01:A8:89 X509v3 Authority Key Identifier: keyid:73:B6:D3:4D:66:F3:3D:4F:60:12:97:F0:A3:32:47:F8:56:32:11:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ae50a1688a42b708c8e50cedee53ca7debfc796.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7c:ff:79:65:03:54:75:53:1e:ca:28:b6:f1:78:86:f5:b8: b4:19:be:7f:78:18:15:70:00:6f:9b:8b:07:df:26:19:b3:4b: bd:96:ef:d8:d5:91:d0:2e:44:24:0f:72:3b:cc:14:66:3e:a0: aa:9c:57:44:6a:9f:7a:57:1d:f4:e0:09:b7:0d:c5:72:7f:6a: 0d:28:31:28:df:30:43:f1:9d:7f:1f:63:98:e5:21:b0:04:27: 09:43:63:3c:e5:bc:18:54:9f:e9:a8:ba:4e:d3:85:db:04:3f: ab:21:af:1b:66:48:0d:a3:1d:2b:e9:d5:0c:39:50:61:e3:67: 1b:f0:97:b3:6e:27:16:35:53:0f:5d:d9:9c:7d:bc:1d:b6:a4: c8:16:6e:93:d5:cf:5c:ec:e2:ed:73:6e:ca:70:31:d4:57:48: 15:25:e8:c4:25:1e:d7:23:ea:b3:d4:9d:c1:42:b5:b1:04:b1: 6b:d8:3f:0b:76:71:f9:88:7b:56:3f:c8:4b:cb:d3:2c:1d:00: d7:7a:04:60:34:70:4a:1d:3b:df:3b:c0:53:04:8e:04:10:f8: 52:0f:19:ca:ac:01:a6:bb:a6:af:61:39:7e:5f:74:9b:b8:37: b2:2c:eb:63:bc:07:31:45:fe:1b:b1:fb:fa:e0:75:25:30:87: 2e:3d:8b:36 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDFbG2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh ZTUwYTE2ODhhNDJiNzA4YzhlNTBjZWRlZTUzY2E3ZGViZmM3OTYwHhcNMjQwMzI4 MTMyMDA4WhcNMjQwMzMxMTY1NjA4WjAzMTEwLwYDVQQDEyg5YjlhOGI4MWM3NzUz MjExZjBiOGQ2NjFhNGU1YmQ3YjhiZTE0OTJiMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAs81iLWVWKxFGtCap6Hh3BCZp6bEJ9boMG7hXrZPmg0gNAgKR RHYOs5YZyCon7CL8wlbefsewilsjlD2QonEfamqBrtxVlNBUBh3hmiKcuDBZLVfV G7jZ6xQSt4XbSBh876YowEB9ihvEq6AHLNdEDzGszB68uqt4Mgw2Vy+rsFwFgE6C BotG9xNOxPdsMzx6spgzDkUpxcOBEQfThSri9EaMbO/Epok3Bofm0exLtSPYM5Re sOLlv427PnJby8klF0d1mXhMaXkoz7HgMlDZJdTiy84LOYMr6sLkKdk3fSXKabL6 YKs+6tLl39N5vBClfspSiyUHRjK+toFY/+xTXwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFCAq4/PYlKRJn8vXfW4+loulAaiJMB8GA1UdIwQYMBaAFHO2001m8z1PYBKX 8KMyR/hWMhGeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGFlNTBh MTY4OGE0MmI3MDhjOGU1MGNlZGVlNTNjYTdkZWJmYzc5Ni5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYmIwYzU1YTktNGFmNi00NWM5LTgyNDktZDg3OGQy NGU1ZTMyLzRhZTUwYTE2ODhhNDJiNzA4YzhlNTBjZWRlZTUzY2E3ZGViZmM3OTYu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iYjBjNTVhOS00YWY2LTQ1YzktODI0OS1kODc4 ZDI0ZTVlMzIvNGFlNTBhMTY4OGE0MmI3MDhjOGU1MGNlZGVlNTNjYTdkZWJmYzc5 Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAAB8/3llA1R1Ux7KKLbxeIb1uLQZvn94GBVwAG+biwffJhmz S72W79jVkdAuRCQPcjvMFGY+oKqcV0Rqn3pXHfTgCbcNxXJ/ag0oMSjfMEPxnX8f Y5jlIbAEJwlDYzzlvBhUn+mouk7ThdsEP6shrxtmSA2jHSvp1Qw5UGHjZxvwl7Nu JxY1Uw9d2Zx9vB22pMgWbpPVz1zs4u1zbspwMdRXSBUl6MQlHtcj6rPUncFCtbEE sWvYPwt2cfmIe1Y/yEvL0ywdANd6BGA0cEodO987wFMEjgQQ+FIPGcqsAaa7pq9h OX5fdJu4N7Is62O8BzFF/hux+/rgdSUwhy49izY= -----END CERTIFICATE-----Generated at Thu Mar 28 16:04:21 2024 by rpki-client on console-ams.rpki-client.org