$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft File: 607fc82565ae5a4b66f47f984bbdb94c47122332.mft (raw, json) Hash identifier: 3XeEkvjhvPeOkkfeBQX3uMUozgVltw6gh8zBR9kUpuE= Subject key identifier: 42:CC:BF:62:76:D2:4A:44:02:2B:9D:EE:2C:49:36:D0:B0:6B:9D:EE Authority key identifier: 87:83:5D:5D:6F:E4:82:16:F9:60:AF:88:F7:61:B2:7A:3B:60:C1:7B Certificate issuer: /CN=607fc82565ae5a4b66f47f984bbdb94c47122332 Certificate serial: 1B0708 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/607fc82565ae5a4b66f47f984bbdb94c47122332.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft Manifest number: 0DBC Signing time: Thu 28 Mar 2024 14:21:19 +0000 Manifest this update: Thu 28 Mar 2024 13:20:08 +0000 Manifest next update: Sun 31 Mar 2024 16:04:08 +0000 Files and hashes: 1: 607fc82565ae5a4b66f47f984bbdb94c47122332.crl (hash: 8jrFQeIyL+B/+OPDGAMwKa56fFOzr+lt8ZdIL2jp/dU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.crl rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/607fc82565ae5a4b66f47f984bbdb94c47122332.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 31 Mar 2024 12:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771272 (0x1b0708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607fc82565ae5a4b66f47f984bbdb94c47122332 Validity Not Before: Mar 28 13:20:08 2024 GMT Not After : Mar 31 16:04:08 2024 GMT Subject: CN=e8aa5104b07a10795327857e982d95f5daf50210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0f:31:a6:2e:94:93:38:98:65:7b:1b:5b:a3: 0a:86:3a:28:a3:93:ae:23:f7:22:0b:5a:62:fa:8e: f5:52:fb:e5:1c:48:40:b4:2d:e7:b3:c8:d5:65:9b: 2f:e7:56:13:eb:b7:1f:6f:d5:f3:79:5c:5c:8f:57: 11:45:02:33:5f:07:3f:69:64:32:8e:6d:09:df:46: a6:9f:8a:9e:b1:5d:54:b2:c1:ed:e7:ac:0e:c8:6c: d0:0e:9c:6d:b7:7a:9d:a8:8a:38:98:02:e0:71:61: 51:0b:c9:b2:b0:70:8c:5b:25:58:64:05:20:5b:00: f5:df:18:78:97:2b:e9:af:97:5d:ad:08:98:1d:08: 45:8c:f0:64:4e:66:90:a4:11:26:d6:a9:26:10:94: 18:d2:ff:cc:63:ae:b8:63:0e:b9:66:8e:1a:00:df: 36:9e:f0:b8:ea:6c:95:e7:59:47:c7:1a:b9:78:a5: 45:56:3c:ef:16:85:ea:e3:23:86:1d:e3:c9:4e:6a: ee:60:6d:4c:60:f7:81:5b:03:61:83:44:d4:74:b8: d3:03:41:fc:e6:4a:6a:25:f6:6b:63:73:50:f9:c4: 37:77:69:ca:f5:20:e1:af:d0:66:65:00:50:27:8c: 25:35:fc:c7:eb:06:d5:e1:f8:f1:c9:28:18:b4:61: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:BF:62:76:D2:4A:44:02:2B:9D:EE:2C:49:36:D0:B0:6B:9D:EE X509v3 Authority Key Identifier: keyid:87:83:5D:5D:6F:E4:82:16:F9:60:AF:88:F7:61:B2:7A:3B:60:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/607fc82565ae5a4b66f47f984bbdb94c47122332.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:87:ec:80:03:9a:94:ab:90:37:e6:f6:e6:2f:db:e2:03:b1: 56:3e:d2:c0:4a:16:27:85:d1:b1:ac:2b:b7:7c:23:6f:77:42: 41:49:08:56:9e:75:bf:38:56:f4:a2:c0:b7:a6:18:d2:64:4a: 5a:66:c7:85:c1:60:18:80:06:d1:0a:cf:6e:f5:fb:75:28:2e: d9:5e:f3:4e:18:1c:08:d6:5c:e4:53:bf:6c:c3:29:ed:be:a3: c0:2c:46:b0:a4:41:52:86:c1:55:8f:d8:86:7e:9d:cc:c6:f5: 7d:87:e8:46:65:f8:13:6b:0d:d5:ac:83:84:6f:ed:be:0a:f6: bc:93:cb:1f:3e:80:56:0d:1b:a6:03:f0:fe:ad:1e:de:59:1f: 86:3e:ff:c7:b8:74:51:20:34:f6:5e:d5:da:d9:eb:89:55:91: 9c:b0:a8:ec:91:b9:06:34:1e:c5:bf:57:f4:c5:2b:fe:d0:99: f4:32:ed:9a:97:af:bd:fc:b1:5d:c5:bd:06:3a:51:09:e5:b3: bf:e6:75:1e:b4:d8:5e:09:9b:ec:90:30:18:f7:c3:0f:41:b3: 7d:27:a6:a0:ac:85:66:37:d8:da:31:7a:3a:e4:dc:79:49:fd: cd:ae:ef:1a:27:b3:d8:69:06:9f:40:2d:b7:99:54:b2:57:a4: 84:f9:b4:95 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDGwcIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw N2ZjODI1NjVhZTVhNGI2NmY0N2Y5ODRiYmRiOTRjNDcxMjIzMzIwHhcNMjQwMzI4 MTMyMDA4WhcNMjQwMzMxMTYwNDA4WjAzMTEwLwYDVQQDEyhlOGFhNTEwNGIwN2Ex MDc5NTMyNzg1N2U5ODJkOTVmNWRhZjUwMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAiQ8xpi6UkziYZXsbW6MKhjooo5OuI/ciC1pi+o71UvvlHEhA tC3ns8jVZZsv51YT67cfb9XzeVxcj1cRRQIzXwc/aWQyjm0J30amn4qesV1UssHt 56wOyGzQDpxtt3qdqIo4mALgcWFRC8mysHCMWyVYZAUgWwD13xh4lyvpr5ddrQiY HQhFjPBkTmaQpBEm1qkmEJQY0v/MY664Yw65Zo4aAN82nvC46myV51lHxxq5eKVF VjzvFoXq4yOGHePJTmruYG1MYPeBWwNhg0TUdLjTA0H85kpqJfZrY3NQ+cQ3d2nK 9SDhr9BmZQBQJ4wlNfzH6wbV4fjxySgYtGH4HQIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFELMv2J20kpEAiud7ixJNtCwa53uMB8GA1UdIwQYMBaAFIeDXV1v5IIW+WCv iPdhsno7YMF7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjA3ZmM4 MjU2NWFlNWE0YjY2ZjQ3Zjk4NGJiZGI5NGM0NzEyMjMzMi5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZmE2MGM5ZDgtOGFiMC00ZTRhLTk3YzgtYTI1Y2Q5 NjdhOTg2LzYwN2ZjODI1NjVhZTVhNGI2NmY0N2Y5ODRiYmRiOTRjNDcxMjIzMzIu bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9mYTYwYzlkOC04YWIwLTRlNGEtOTdjOC1hMjVj ZDk2N2E5ODYvNjA3ZmM4MjU2NWFlNWE0YjY2ZjQ3Zjk4NGJiZGI5NGM0NzEyMjMz Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAKGH7IADmpSrkDfm9uYv2+IDsVY+0sBKFieF0bGsK7d8I293 QkFJCFaedb84VvSiwLemGNJkSlpmx4XBYBiABtEKz271+3UoLtle804YHAjWXORT v2zDKe2+o8AsRrCkQVKGwVWP2IZ+nczG9X2H6EZl+BNrDdWsg4Rv7b4K9ryTyx8+ gFYNG6YD8P6tHt5ZH4Y+/8e4dFEgNPZe1drZ64lVkZywqOyRuQY0HsW/V/TFK/7Q mfQy7ZqXr738sV3FvQY6UQnls7/mdR602F4Jm+yQMBj3ww9Bs30npqCshWY32Nox ejrk3HlJ/c2u7xons9hpBp9ALbeZVLJXpIT5tJU= -----END CERTIFICATE-----Generated at Thu Mar 28 16:44:01 2024 by rpki-client on console-fra.rpki-client.org