$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft File: 132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft (raw, json) Hash identifier: ngF+IkAD+jR/+rFca7MVWrVBsUMoe57C3MMXDp8YNUE= Subject key identifier: F8:1D:CC:93:60:C7:1D:B8:D9:36:EB:F3:51:38:7B:B6:DB:65:CB:8D Authority key identifier: 50:F9:00:34:5B:2F:F6:D1:61:4A:38:08:71:C0:E8:3C:C0:5A:A7:6E Certificate issuer: /CN=132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc Certificate serial: 0D9454 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft Manifest Number: 06F8 Signing time: Sat 25 Mar 2023 14:15:50 +0000 Manifest this update: Sat 25 Mar 2023 13:15:42 +0000 Manifest next update: Tue 28 Mar 2023 16:23:42 +0000 Files and hashes: 1: 132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.crl (hash: wOTfT5JDC231Ica2OIjOwz98xYnMPpHemtp8VroGyKE=) 2: 2dda2e5ed611da7b3c4a3b0eba0672cb725987d8.roa (hash: TqtysDha38hwneqjaqGOq1ctNRSSzs4Pm+RJnbvs35I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.crl rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Mar 2023 12:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889940 (0xd9454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc Validity Not Before: Mar 25 13:15:42 2023 GMT Not After : Mar 28 16:23:42 2023 GMT Subject: CN=041db0bab9d7f24db1dee0a105e9a1a22547b612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:6d:bd:77:25:7a:e4:82:2a:b2:75:ec:f4: 7b:77:d1:94:e6:86:0d:bc:13:15:a2:71:d5:98:fe: 16:e2:b6:1e:32:9b:05:e8:9a:b3:79:67:06:af:a7: 45:5e:d6:33:b3:2c:6c:be:f7:fd:4d:df:e7:ff:7a: 8a:c9:84:ab:9c:5a:09:8e:71:44:2b:ab:eb:3c:54: 07:c4:76:e1:4e:3c:ff:e5:26:52:97:c9:20:aa:94: ca:a7:a7:c8:8e:80:28:da:89:02:3b:1d:a5:25:d3: 75:8e:1f:73:6d:77:c3:34:a2:3a:65:7d:34:01:73: 98:c8:58:23:da:d0:76:8a:9f:17:87:9d:8b:c7:96: d6:77:40:85:11:db:c4:87:ae:16:30:99:32:93:4f: 46:88:18:90:40:1b:0b:d0:c9:ab:7a:23:f0:87:ed: 3f:8e:2a:3a:f8:0f:56:c9:6d:a5:ad:af:e4:a5:83: 57:4c:e5:a0:aa:56:32:67:e4:6a:1b:6e:47:b7:07: fb:04:16:56:81:b2:c3:b3:db:55:7c:b6:c8:09:e9: 4b:6c:89:ac:43:da:53:6d:2e:f6:05:0d:67:ad:e5: b6:6d:d7:31:8c:9c:1a:5c:da:47:8a:a0:cb:02:eb: a7:17:a9:b7:d4:47:93:16:26:f5:1d:41:dc:89:6f: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1D:CC:93:60:C7:1D:B8:D9:36:EB:F3:51:38:7B:B6:DB:65:CB:8D X509v3 Authority Key Identifier: keyid:50:F9:00:34:5B:2F:F6:D1:61:4A:38:08:71:C0:E8:3C:C0:5A:A7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/bff948f2-4ac8-42d0-8d7d-747ca26c469a/132cb45dee060a4a2b1d7dcc385c1cf1956f9ecc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:29:ca:65:c4:e9:a5:ef:c0:4b:3a:91:91:62:5c:a7:12:41: 84:08:a9:e6:07:e6:dd:e9:fe:fc:e0:2b:44:3b:52:14:dc:1f: 8d:ba:4b:16:5a:7a:3c:53:bf:b4:67:03:9e:6e:ed:c8:86:ad: 62:11:84:a1:e6:36:0e:ec:fe:a6:8e:e4:ae:a8:e8:78:8c:a9: e4:9e:5c:0a:d2:f4:68:59:00:36:6b:4d:ad:09:a4:a5:15:c6: 54:31:8a:15:de:fb:2d:cd:79:3f:09:ef:d5:d5:91:55:7a:dd: d1:0d:ba:05:f5:24:fd:be:9f:fa:54:77:35:e3:e8:fa:2d:07: 7e:9f:38:d7:ea:b2:d3:47:ec:d8:f6:c0:01:6b:c9:01:25:be: f4:e4:3e:f1:e9:c9:53:2f:f9:ac:f4:ba:1f:f2:32:71:d9:bb: 04:0a:c3:61:72:13:b6:9d:bc:52:df:3d:cc:4a:d0:89:1b:14: 98:8f:2d:fa:2a:91:f9:64:15:36:08:7e:8e:00:35:4f:67:62: 2b:fc:88:da:70:4a:27:74:eb:8c:68:b1:92:1c:5d:a6:96:fa: 7d:f7:60:35:a7:05:5f:f1:20:b8:ed:f3:e4:82:81:f4:22:59: 9c:1d:db:47:b4:ef:c6:01:3f:b6:25:15:f6:51:6e:94:87:14: 7f:90:98:b8 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDDZRUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz MmNiNDVkZWUwNjBhNGEyYjFkN2RjYzM4NWMxY2YxOTU2ZjllY2MwHhcNMjMwMzI1 MTMxNTQyWhcNMjMwMzI4MTYyMzQyWjAzMTEwLwYDVQQDEygwNDFkYjBiYWI5ZDdm MjRkYjFkZWUwYTEwNWU5YTFhMjI1NDdiNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAmydtvXcleuSCKrJ17PR7d9GU5oYNvBMVonHVmP4W4rYeMpsF 6JqzeWcGr6dFXtYzsyxsvvf9Td/n/3qKyYSrnFoJjnFEK6vrPFQHxHbhTjz/5SZS l8kgqpTKp6fIjoAo2okCOx2lJdN1jh9zbXfDNKI6ZX00AXOYyFgj2tB2ip8Xh52L x5bWd0CFEdvEh64WMJkyk09GiBiQQBsL0MmreiPwh+0/jio6+A9WyW2lra/kpYNX TOWgqlYyZ+RqG25Htwf7BBZWgbLDs9tVfLbICelLbImsQ9pTbS72BQ1nreW2bdcx jJwaXNpHiqDLAuunF6m31EeTFib1HUHciW/fswIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPgdzJNgxx242Tbr81E4e7bbZcuNMB8GA1UdIwQYMBaAFFD5ADRbL/bRYUo4 CHHA6DzAWqduMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTMyY2I0 NWRlZTA2MGE0YTJiMWQ3ZGNjMzg1YzFjZjE5NTZmOWVjYy5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvYmZmOTQ4ZjItNGFjOC00MmQwLThkN2QtNzQ3Y2Ey NmM0NjlhLzEzMmNiNDVkZWUwNjBhNGEyYjFkN2RjYzM4NWMxY2YxOTU2ZjllY2Mu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9iZmY5NDhmMi00YWM4LTQyZDAtOGQ3ZC03NDdj YTI2YzQ2OWEvMTMyY2I0NWRlZTA2MGE0YTJiMWQ3ZGNjMzg1YzFjZjE5NTZmOWVj Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAHYpymXE6aXvwEs6kZFiXKcSQYQIqeYH5t3p/vzgK0Q7UhTc H426SxZaejxTv7RnA55u7ciGrWIRhKHmNg7s/qaO5K6o6HiMqeSeXArS9GhZADZr Ta0JpKUVxlQxihXe+y3NeT8J79XVkVV63dENugX1JP2+n/pUdzXj6PotB36fONfq stNH7Nj2wAFryQElvvTkPvHpyVMv+az0uh/yMnHZuwQKw2FyE7advFLfPcxK0Ikb FJiPLfoqkflkFTYIfo4ANU9nYiv8iNpwSid064xosZIcXaaW+n33YDWnBV/xILjt 8+SCgfQiWZwd20e078YBP7YlFfZRbpSHFH+QmLg= -----END CERTIFICATE-----Generated at Sat Mar 25 14:45:38 2023 by rpki-client on console-ams.rpki-client.org