$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft File: 5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft (raw, json) Hash identifier: boDaVjvUVeldmpAtPWRDNyG28pefvhtkJ6fYnI68doo= Subject key identifier: F0:59:11:6D:5E:5E:52:F9:9F:56:87:B6:27:CB:02:90:C0:E1:B9:E2 Authority key identifier: CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2 Certificate issuer: /CN=5b47b6cde47ec1302602cbd54ca436ff801d70b0 Certificate serial: 149786 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft Manifest Number: 0937 Signing time: Wed 29 Mar 2023 10:16:20 +0000 Manifest this update: Wed 29 Mar 2023 09:15:49 +0000 Manifest next update: Sat 01 Apr 2023 12:13:49 +0000 Files and hashes: 1: 4cf8038c986df361af19ce5dea7841456622d7e3.roa (hash: O0KYPRjtXzXh8SmIrKkdZtGgAD/l3piVLEMGubflIj4=) 2: 5b47b6cde47ec1302602cbd54ca436ff801d70b0.crl (hash: KV9SKmI+JXvre54rP9YSXIWalqgPXsWxMLpYuL32+Qc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.crl rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Apr 2023 09:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349510 (0x149786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b47b6cde47ec1302602cbd54ca436ff801d70b0 Validity Not Before: Mar 29 09:15:49 2023 GMT Not After : Apr 1 12:13:49 2023 GMT Subject: CN=cf2cd1bb99dd8446ddb1db43f7cd5cff6342102e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:f9:a0:4e:d7:3b:30:a6:3a:db:ba:c4:95: 3c:90:30:82:38:d4:36:4d:68:a2:e9:c5:3b:9b:33: 77:15:a8:0c:d2:2a:c8:e8:9b:cd:07:7f:8c:a0:b8: 58:84:f8:01:ac:18:05:eb:15:be:6d:40:c7:a7:07: 5f:cb:71:f2:77:56:6d:07:14:7e:10:f3:cc:ef:71: 21:ca:00:cc:75:ff:54:69:b4:48:09:d8:45:f5:8c: 12:08:53:73:ec:b7:2a:6f:8c:a4:05:34:d8:c6:c5: b9:5f:45:7c:50:3e:0e:2f:dc:69:7c:67:74:dc:08: df:23:d7:ae:d8:be:a7:41:00:9f:fb:8d:c8:03:82: 69:31:70:10:c7:55:08:d1:6b:aa:ae:00:62:38:73: 6c:27:96:10:fd:b8:92:18:57:c1:d1:bb:e9:9c:e7: 1f:f2:83:e9:2e:29:b8:36:c0:42:c0:04:47:30:5f: ca:07:99:73:ce:dd:3c:53:8e:8f:1f:d6:34:dc:f3: 1d:17:35:8a:4f:15:22:a4:68:a8:a6:91:83:57:1b: b4:74:0f:39:0f:50:11:d0:b3:79:d8:62:65:d8:3f: 97:97:3c:d0:1a:2b:9b:3f:ed:14:6e:3f:16:77:61: a4:97:ab:73:e7:c5:6b:c6:f5:91:25:99:1f:1f:95: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:59:11:6D:5E:5E:52:F9:9F:56:87:B6:27:CB:02:90:C0:E1:B9:E2 X509v3 Authority Key Identifier: keyid:CF:66:E5:DF:99:59:33:8E:91:C8:BF:D9:49:F3:57:38:62:A1:3B:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b47b6cde47ec1302602cbd54ca436ff801d70b0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/d1d3de3a-dddf-4eda-8660-127fe4ca9ee8/5b47b6cde47ec1302602cbd54ca436ff801d70b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8b:d7:bd:59:e8:3e:18:45:9f:1f:36:ab:fa:22:1c:eb:28: 7e:93:af:61:da:f1:44:69:49:a1:37:c2:67:e0:43:e8:4c:fc: 1e:52:df:3d:e6:44:51:3d:81:34:0f:87:e7:b4:66:5f:24:3c: 17:fe:1b:86:24:2c:31:db:8c:98:fb:b2:9f:5f:5f:9f:ad:56: f0:3e:fd:4a:57:08:37:d9:d6:a4:d4:90:b3:a5:28:d9:e2:1c: 88:f0:a3:e7:30:eb:5c:a1:e4:16:23:9e:20:99:c0:3e:f9:7c: 03:f4:56:92:c3:e6:81:10:81:40:0b:6b:dd:db:33:58:5d:8f: d6:74:d9:1b:bd:99:34:16:7e:e1:63:ab:ab:e5:69:b8:81:3d: 4c:ef:af:d7:f8:44:d4:9c:0a:11:22:2f:19:c2:ad:c0:f7:07: ff:81:d9:2e:70:3f:b0:71:66:02:95:2d:65:9e:15:3c:72:a7: 86:31:4d:10:00:2a:67:6a:20:3c:24:ac:04:4f:b4:00:20:7a: 36:24:13:fc:4d:60:4d:52:b9:10:5a:86:c4:4b:52:11:f8:27: b5:1d:b8:b7:e6:a3:8c:7f:87:2d:6b:be:3d:40:b6:0b:2a:ff: f1:94:f6:22:f9:6e:6c:68:19:81:72:87:0e:b4:20:d7:36:00: 11:72:e2:05 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDFJeGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi NDdiNmNkZTQ3ZWMxMzAyNjAyY2JkNTRjYTQzNmZmODAxZDcwYjAwHhcNMjMwMzI5 MDkxNTQ5WhcNMjMwNDAxMTIxMzQ5WjAzMTEwLwYDVQQDEyhjZjJjZDFiYjk5ZGQ4 NDQ2ZGRiMWRiNDNmN2NkNWNmZjYzNDIxMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAuwj5oE7XOzCmOtu6xJU8kDCCONQ2TWii6cU7mzN3FagM0irI 6JvNB3+MoLhYhPgBrBgF6xW+bUDHpwdfy3Hyd1ZtBxR+EPPM73EhygDMdf9UabRI CdhF9YwSCFNz7Lcqb4ykBTTYxsW5X0V8UD4OL9xpfGd03AjfI9eu2L6nQQCf+43I A4JpMXAQx1UI0WuqrgBiOHNsJ5YQ/biSGFfB0bvpnOcf8oPpLim4NsBCwARHMF/K B5lzzt08U46PH9Y03PMdFzWKTxUipGioppGDVxu0dA85D1AR0LN52GJl2D+XlzzQ GiubP+0Ubj8Wd2Gkl6tz58VrxvWRJZkfH5XMrQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFPBZEW1eXlL5n1aHtifLApDA4bniMB8GA1UdIwQYMBaAFM9m5d+ZWTOOkci/ 2UnzVzhioTuiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWI0N2I2 Y2RlNDdlYzEzMDI2MDJjYmQ1NGNhNDM2ZmY4MDFkNzBiMC5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZDFkM2RlM2EtZGRkZi00ZWRhLTg2NjAtMTI3ZmU0 Y2E5ZWU4LzViNDdiNmNkZTQ3ZWMxMzAyNjAyY2JkNTRjYTQzNmZmODAxZDcwYjAu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9kMWQzZGUzYS1kZGRmLTRlZGEtODY2MC0xMjdm ZTRjYTllZTgvNWI0N2I2Y2RlNDdlYzEzMDI2MDJjYmQ1NGNhNDM2ZmY4MDFkNzBi MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBACyL171Z6D4YRZ8fNqv6IhzrKH6Tr2Ha8URpSaE3wmfgQ+hM /B5S3z3mRFE9gTQPh+e0Zl8kPBf+G4YkLDHbjJj7sp9fX5+tVvA+/UpXCDfZ1qTU kLOlKNniHIjwo+cw61yh5BYjniCZwD75fAP0VpLD5oEQgUALa93bM1hdj9Z02Ru9 mTQWfuFjq6vlabiBPUzvr9f4RNScChEiLxnCrcD3B/+B2S5wP7BxZgKVLWWeFTxy p4YxTRAAKmdqIDwkrARPtAAgejYkE/xNYE1SuRBahsRLUhH4J7UduLfmo4x/hy1r vj1Atgsq//GU9iL5bmxoGYFyhw60INc2ABFy4gU= -----END CERTIFICATE-----Generated at Wed Mar 29 10:49:23 2023 by rpki-client on console-fra.rpki-client.org