$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft File: 33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft (raw, json) Hash identifier: Lu3i2MKo/0apSj6LJDRGHfmX6fn1RDTYjNZ0PLvcWK0= Subject key identifier: 1D:08:F0:AD:B1:F6:7B:96:AA:9B:E6:B6:38:6E:3C:A1:70:6B:67:9A Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93 Certificate issuer: /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8 Certificate serial: 28DA07 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft Manifest number: 0DEC Signing time: Fri 29 Mar 2024 07:20:41 +0000 Manifest this update: Fri 29 Mar 2024 06:20:07 +0000 Manifest next update: Mon 01 Apr 2024 09:27:07 +0000 Files and hashes: 1: 1c804dd68267f6f8206451247793521840ddfd68.roa (hash: qa+2FyeutgO3mgdGlhuNZZUN6/9bMO4vUrMtI1JGEYA=) 2: 33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl (hash: L9S4XgRAkuOzpRJyiIrlY3B7y4I6G7SJNQ1vufsWcNo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677255 (0x28da07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8 Validity Not Before: Mar 29 06:20:07 2024 GMT Not After : Apr 1 09:27:07 2024 GMT Subject: CN=0c6c0526edc6370941848addbbc04b9517f3ebdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:31:e7:f6:28:7c:d0:be:86:30:ac:af:b7: fb:ca:73:31:f6:a8:ef:e5:e8:22:0f:d7:c9:cf:ad: d5:bd:a8:58:ea:ec:2e:93:29:99:d4:85:3a:23:6d: f6:ff:64:1e:be:7b:d8:80:4b:19:88:79:5d:f5:e9: 02:08:c3:c7:43:b1:ff:c0:da:7b:27:cd:84:f4:a1: cb:79:7a:ec:fa:5d:4e:fa:b0:b4:0d:2e:fe:4e:78: 5b:1d:80:51:83:53:f9:04:cd:c4:1d:7f:b2:7b:02: 1c:d0:bd:e8:3c:25:b4:0a:be:ea:55:b6:66:6e:2f: f9:89:89:0c:b7:55:ca:b1:36:9d:bf:33:5e:af:38: 1b:ec:9b:e4:ea:13:ab:16:9f:dd:7d:35:e6:67:37: 2d:c0:06:f7:98:37:0f:67:f2:c6:79:d9:1e:e2:5c: 0c:06:ec:65:99:d1:0e:a3:f0:77:e4:22:b9:43:5a: 89:98:f6:6c:56:79:93:a9:0b:0a:3f:23:7c:52:59: a2:8f:d5:36:9b:27:49:ae:78:4d:a0:93:65:8c:96: 40:c1:94:f2:ff:6d:92:5f:5e:a4:15:f9:71:0f:1b: 0f:10:75:dd:6e:17:05:aa:d2:23:ff:9c:e8:e9:12: 8d:2f:b2:64:7f:ae:21:31:2f:25:4f:e8:93:8e:1f: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:08:F0:AD:B1:F6:7B:96:AA:9B:E6:B6:38:6E:3C:A1:70:6B:67:9A X509v3 Authority Key Identifier: keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:02:a3:11:e2:70:51:20:c1:92:ab:b4:91:13:32:f6:25:a6: 87:8d:21:63:a1:79:23:18:f6:f1:9c:37:54:38:24:41:ee:f5: 8b:75:b5:29:53:43:fd:b6:9f:8a:2e:c3:d8:e1:45:16:88:bf: bf:5c:6c:cd:f5:1e:63:b7:d5:1b:00:69:03:05:19:f9:84:39: b3:21:ef:73:9e:7e:07:e8:6b:d4:90:94:5a:56:55:f7:44:14: 6e:9e:28:bc:8b:7d:57:07:3f:d7:33:7d:30:15:6a:51:42:07: b9:85:7e:70:bc:3b:d3:0b:6a:00:7e:7f:d7:6b:26:2f:ec:25: e2:04:82:3c:22:50:26:f4:4e:50:f3:cd:9d:a6:e6:05:08:9e: 28:00:e6:74:7f:85:b6:57:12:e0:06:d8:b7:b5:0e:ae:11:bc: 7d:79:a1:22:14:c5:99:07:a2:b1:79:e0:f4:42:30:0a:6b:63: b5:46:24:07:7f:a8:eb:e2:b3:9b:ae:cc:7e:36:d4:44:a5:38: bd:5c:7d:80:e4:cf:4d:2d:2f:26:fc:0c:67:9e:ce:0c:83:74: ea:cd:8b:1c:4d:08:40:02:99:f9:4b:77:24:f9:5c:c8:70:d6: 8f:73:98:14:d5:f9:2e:ae:d0:a7:19:06:df:8a:cb:ac:74:3c: f3:1f:46:f9 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDKNoHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz Y2MzYmRkNGVkZmM0OThkMmM5MjQ3ODNhNDBjOWZmMjU1MTIwYjgwHhcNMjQwMzI5 MDYyMDA3WhcNMjQwNDAxMDkyNzA3WjAzMTEwLwYDVQQDEygwYzZjMDUyNmVkYzYz NzA5NDE4NDhhZGRiYmMwNGI5NTE3ZjNlYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtwox5/YofNC+hjCsr7f7ynMx9qjv5egiD9fJz63VvahY6uwu kymZ1IU6I232/2QevnvYgEsZiHld9ekCCMPHQ7H/wNp7J82E9KHLeXrs+l1O+rC0 DS7+TnhbHYBRg1P5BM3EHX+yewIc0L3oPCW0Cr7qVbZmbi/5iYkMt1XKsTadvzNe rzgb7Jvk6hOrFp/dfTXmZzctwAb3mDcPZ/LGedke4lwMBuxlmdEOo/B35CK5Q1qJ mPZsVnmTqQsKPyN8Ulmij9U2mydJrnhNoJNljJZAwZTy/22SX16kFflxDxsPEHXd bhcFqtIj/5zo6RKNL7Jkf64hMS8lT+iTjh9jNwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFB0I8K2x9nuWqpvmtjhuPKFwa2eaMB8GA1UdIwQYMBaAFNGqfDUMMnUcXXct +8TNjbNXzHCTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNjYzNi ZGQ0ZWRmYzQ5OGQyYzkyNDc4M2E0MGM5ZmYyNTUxMjBiOC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYmMyMDEwYzMtNDE1Yy00MjgwLWJiMzEtNzZhY2Mw MmVkOTdkLzMzY2MzYmRkNGVkZmM0OThkMmM5MjQ3ODNhNDBjOWZmMjU1MTIwYjgu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iYzIwMTBjMy00MTVjLTQyODAtYmIzMS03NmFj YzAyZWQ5N2QvMzNjYzNiZGQ0ZWRmYzQ5OGQyYzkyNDc4M2E0MGM5ZmYyNTUxMjBi OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAFcCoxHicFEgwZKrtJETMvYlpoeNIWOheSMY9vGcN1Q4JEHu 9Yt1tSlTQ/22n4ouw9jhRRaIv79cbM31HmO31RsAaQMFGfmEObMh73Oefgfoa9SQ lFpWVfdEFG6eKLyLfVcHP9czfTAValFCB7mFfnC8O9MLagB+f9drJi/sJeIEgjwi UCb0TlDzzZ2m5gUInigA5nR/hbZXEuAG2Le1Dq4RvH15oSIUxZkHorF54PRCMApr Y7VGJAd/qOvis5uuzH421ESlOL1cfYDkz00tLyb8DGeezgyDdOrNixxNCEACmflL dyT5XMhw1o9zmBTV+S6u0KcZBt+Ky6x0PPMfRvk= -----END CERTIFICATE-----Generated at Fri Mar 29 08:39:24 2024 by rpki-client on console-ams.rpki-client.org