$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft File: 228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft (raw, json) Hash identifier: rL3hbb7nNDEbNYB54R+EqQn3R1SstprP2q1YoEw4ECA= Subject key identifier: D5:13:61:D9:06:9E:FA:F1:C1:AF:CB:BB:71:F3:E5:EF:0B:F8:BB:47 Authority key identifier: AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61 Certificate issuer: /CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9 Certificate serial: 1958D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft Manifest number: 0D25 Signing time: Wed 27 Mar 2024 22:21:38 +0000 Manifest this update: Wed 27 Mar 2024 21:20:16 +0000 Manifest next update: Sun 31 Mar 2024 00:59:16 +0000 Files and hashes: 1: 228f4088c9ec4b56bc838a3499f768d5cf73bab9.crl (hash: rQSmVpKpcGbHuZlbMYjhZ7ilme8iNhJ5hd5YWz9DGf0=) 2: bcad812db3357ade25d5fbba3ec501a2079e6a05.roa (hash: ThO8f8HpdTx+8AUuiaaIPncufatiqPd9i79uCaKZs8w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.crl rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 30 Mar 2024 16:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661144 (0x1958d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9 Validity Not Before: Mar 27 21:20:16 2024 GMT Not After : Mar 31 00:59:16 2024 GMT Subject: CN=e9b232d693e8d0610e8a4d8199fa8f40327b0ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:d8:f4:f6:19:8b:e8:42:33:b3:8b:dc:54: 6e:9b:b9:ba:34:6c:b7:f4:a9:e8:20:a1:dc:3d:86: de:7a:7c:f4:25:0d:a7:8e:3e:58:94:b6:a8:46:bb: 62:df:08:77:fc:8a:01:d5:7c:39:e4:ae:6b:f8:ee: c8:6d:f2:88:a6:bd:a2:f4:80:4e:36:7f:dc:f2:38: b6:62:56:f4:96:46:7c:52:59:98:8a:0b:6e:0f:fb: 98:dd:14:37:97:de:78:aa:dc:e9:fd:ac:9e:ed:54: bd:4a:cf:f7:92:ac:19:66:02:1b:63:25:e7:5d:ef: ea:b5:6a:3b:51:84:8c:1c:8d:bc:96:5c:35:33:77: 62:a6:95:4f:c4:e4:87:8b:12:28:84:06:a4:e9:24: b0:17:94:62:35:d9:7b:31:d9:a0:25:29:f7:20:86: cd:e2:4c:ae:54:ee:5d:6f:d5:3f:1c:4f:09:5a:35: 31:45:b7:9a:00:90:50:50:9f:3d:56:f3:ba:f5:1c: d4:9e:73:49:1c:f3:4e:95:22:cb:10:8f:4e:94:43: 9d:03:2e:36:c3:b7:ba:bd:fc:b1:9e:b3:f9:f1:64: f5:8e:16:4b:c4:7f:80:75:ff:e5:63:47:39:8c:3b: 21:7b:c2:2b:26:9d:2b:f8:3a:45:75:1d:f8:cf:57: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:13:61:D9:06:9E:FA:F1:C1:AF:CB:BB:71:F3:E5:EF:0B:F8:BB:47 X509v3 Authority Key Identifier: keyid:AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5e:2f:73:a5:47:8c:64:63:75:16:bf:af:fa:f1:88:87:94: e7:cb:22:9e:f2:69:c9:2d:04:24:10:b5:9c:81:ac:10:10:0a: 34:a5:dd:a6:bb:c3:40:c1:4a:c4:b1:59:57:f4:3c:5a:bd:0c: 66:90:91:bd:51:88:df:39:f3:85:51:b8:03:0b:4c:d5:2b:40: 59:4e:d7:72:6d:79:4f:50:2f:fd:d8:49:04:67:8d:7a:b0:70: 74:fb:c8:15:3f:de:bd:b4:6b:5c:12:fb:09:d9:a4:f5:1c:77: 4e:9b:ae:14:4a:30:30:32:f7:06:a5:ad:b0:15:bb:be:f7:7a: 32:f4:96:55:b4:cb:ea:23:0a:2a:61:8d:37:25:f1:d1:69:95: 6a:cc:05:8e:aa:79:7b:4e:7e:0f:17:69:f5:bd:14:13:d7:45: 09:eb:88:79:25:b7:ff:36:bb:13:e5:a4:5e:c2:37:0b:bc:c3: 21:79:73:59:a6:bd:8c:24:e0:0b:50:09:6c:60:73:6c:a6:36: 57:65:7b:d4:40:a7:64:a9:5b:7f:7a:a5:68:78:5d:08:80:7b: 94:b8:21:d6:32:c6:30:22:25:62:68:17:fb:52:15:51:e1:bd: b9:57:5c:a7:45:b3:eb:b2:a1:1e:e9:9a:bc:20:0f:e3:87:6e: ff:38:8b:86 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGVjYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy OGY0MDg4YzllYzRiNTZiYzgzOGEzNDk5Zjc2OGQ1Y2Y3M2JhYjkwHhcNMjQwMzI3 MjEyMDE2WhcNMjQwMzMxMDA1OTE2WjAzMTEwLwYDVQQDEyhlOWIyMzJkNjkzZThk MDYxMGU4YTRkODE5OWZhOGY0MDMyN2IwYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzs/Y9PYZi+hCM7OL3FRum7m6NGy39KnoIKHcPYbeenz0JQ2n jj5YlLaoRrti3wh3/IoB1Xw55K5r+O7IbfKIpr2i9IBONn/c8ji2Ylb0lkZ8UlmY igtuD/uY3RQ3l954qtzp/aye7VS9Ss/3kqwZZgIbYyXnXe/qtWo7UYSMHI28llw1 M3dippVPxOSHixIohAak6SSwF5RiNdl7MdmgJSn3IIbN4kyuVO5db9U/HE8JWjUx RbeaAJBQUJ89VvO69RzUnnNJHPNOlSLLEI9OlEOdAy42w7e6vfyxnrP58WT1jhZL xH+Adf/lY0c5jDshe8IrJp0r+DpFdR34z1egoQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFNUTYdkGnvrxwa/Lu3Hz5e8L+LtHMB8GA1UdIwQYMBaAFK++qQNjicXbVC+m AI63XFf0iophMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjI4ZjQw ODhjOWVjNGI1NmJjODM4YTM0OTlmNzY4ZDVjZjczYmFiOS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZjI4OTY5ODQtYzEyZC00OWI5LWE0MjUtZjUyY2Zk YTMxZGNlLzIyOGY0MDg4YzllYzRiNTZiYzgzOGEzNDk5Zjc2OGQ1Y2Y3M2JhYjku bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mMjg5Njk4NC1jMTJkLTQ5YjktYTQyNS1mNTJj ZmRhMzFkY2UvMjI4ZjQwODhjOWVjNGI1NmJjODM4YTM0OTlmNzY4ZDVjZjczYmFi OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBADleL3OlR4xkY3UWv6/68YiHlOfLIp7yacktBCQQtZyBrBAQ CjSl3aa7w0DBSsSxWVf0PFq9DGaQkb1RiN8584VRuAMLTNUrQFlO13JteU9QL/3Y SQRnjXqwcHT7yBU/3r20a1wS+wnZpPUcd06brhRKMDAy9walrbAVu773ejL0llW0 y+ojCiphjTcl8dFplWrMBY6qeXtOfg8XafW9FBPXRQnriHklt/82uxPlpF7CNwu8 wyF5c1mmvYwk4AtQCWxgc2ymNldle9RAp2SpW396pWh4XQiAe5S4IdYyxjAiJWJo F/tSFVHhvblXXKdFs+uyoR7pmrwgD+OHbv84i4Y= -----END CERTIFICATE-----Generated at Thu Mar 28 00:12:13 2024 by rpki-client on console-fra.rpki-client.org