$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft File: 2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft (raw, json) Hash identifier: h5ccvlsIlimuMQ2suPj+TUj+ZQnQyUIXqLuPXhV0Yss= Subject key identifier: 05:72:EB:53:65:5D:EE:BF:02:A8:EB:AC:C9:21:AB:B5:0E:C1:51:AE Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89 Certificate issuer: /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89 Certificate serial: 1AC7B987E4B1F45B3AE346028DDAF1D0D18D23F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft Manifest number: AA Signing time: Fri 31 Jan 2025 00:13:29 +0000 Manifest this update: Fri 31 Jan 2025 00:08:29 +0000 Manifest next update: Wed 05 Feb 2025 13:11:29 +0000 Files and hashes: 1: 2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl (hash: ip9eo+uD8VrOqH80WkEjt/Faulg20GdHkZ7uzOMMsrI=) 2: 3139302e35352e302e302f31362d3234203d3e203237373437.roa (hash: ENJV2F+0O7Dxff9zuqlWbnbRmCLSPs4RxTQrhdBUeg4=) 3: 3138362e31382e302e302f31352d3234203d3e203237373437.roa (hash: q0XcO23G2Mf6JYepGeDj6uXqFCo2xuLRcC8GprZ2/7I=) 4: 3138312e34342e302e302f31342d3234203d3e203237373437.roa (hash: ZJcsUu4ZPKNhB9Hmci7GxDH0Pqai0QlwnnZHMXrk9yw=) 5: 3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa (hash: 3ovTVsu52KdgBUc8ATeM7B6hfxPmXrHdq9Dfn/4U8Bk=) 6: 3230302e3131352e3231362e302f32312d3234203d3e203237373437.roa (hash: eQqgC1DvE9FXC1M7CZpQax0dF8eOjIbRQEsf0Ri9h70=) 7: 3230302e3131352e3231302e302f32342d3234203d3e20323733323430.roa (hash: FrnV9T10oQzRg2hBjf0eyYhXj6vwz8Zc5q2lwQjJEJ8=) 8: 3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa (hash: LihKo9lnySxkdLiDNp2f5mouRJILEhbY1MbZ0j7ZzY8=) 9: 3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa (hash: II8dD5QI9+TCH9r2tHRipbxyOt6AriXk2UPq47RCeO8=) 10: 3138362e32322e302e302f31352d3234203d3e203237373437.roa (hash: Y2M6YEX3j8JGp+Ci2KhCa9HAyt9PHhAZEy7bOiwEXpk=) 11: 323830303a3831303a3a2f32382d3634203d3e203237373437.roa (hash: g+8vAThyUF/GV7IxZLLLQRetffahHIjDqXqzmANXL0w=) 12: 3230302e3132352e36342e302f31382d3234203d3e203237373437.roa (hash: dVF/g6EdjIFaMPjTRvKngCmMXPH7jl/QsZdMVS4e0fc=) 13: 3136382e3139342e3138302e302f32322d3234203d3e203237373437.roa (hash: ShL9oUHS9j2u3UHxzoXKZ83Uas25qGoS5fVZniU7wQQ=) 14: 3230302e3131352e3230382e302f32342d3234203d3e203237373437.roa (hash: 3gg240Eeqp/wwUUnRpcsHK/1JnP5LrG2QdtuZ6T/Byw=) 15: 3230302e3131352e3231322e302f32322d3234203d3e203237373437.roa (hash: Fp7hCL+dqKexOGXZ+fp4eU6LNLcbl6zYig6hPK30P2Y=) 16: 3230302e3131352e3139322e302f32302d3234203d3e203237373437.roa (hash: o14bkOemmFmYHPSeTY0f0QTvP04v03mLItLyruDxXto=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c7:b9:87:e4:b1:f4:5b:3a:e3:46:02:8d:da:f1:d0:d1:8d:23:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89 Validity Not Before: Jan 31 00:08:29 2025 GMT Not After : Feb 5 13:11:29 2025 GMT Subject: CN=0572EB53655DEEBF02A8EBACC921ABB50EC151AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9f:9d:c8:1d:d6:10:a7:6c:59:b2:44:69:a9: 63:b2:02:75:d5:11:81:19:80:ff:2e:05:09:39:4d: 93:82:e7:eb:22:a7:85:e7:58:7d:07:1d:92:55:38: 3e:19:b2:09:eb:5d:f3:a1:07:d4:3f:21:3f:17:98: 61:2f:86:4c:cd:a3:ac:ab:86:20:93:b4:f1:1b:0c: 5b:76:25:6b:06:dd:d9:4b:34:24:bf:25:9c:f2:08: 7e:eb:1f:0c:32:b4:6c:37:ef:dd:6f:1a:f5:6c:e5: 5d:5c:b3:96:8b:61:39:d8:42:37:73:93:d8:29:8d: 0b:4a:1f:d2:7a:39:c8:36:e6:a4:b0:86:e6:c8:e9: 85:80:b7:1e:88:ff:15:51:79:fa:f3:99:df:1d:43: bf:e2:3f:bb:6e:96:97:45:99:3b:12:43:a4:94:b1: aa:29:00:49:4a:96:17:36:24:6d:8a:0b:6c:cf:ec: 3b:b4:3e:55:b3:fd:3e:ff:68:ab:cb:40:ef:c2:62: db:7a:2b:20:c7:21:02:0b:49:c0:54:7a:c6:cb:16: 84:02:1e:07:55:fe:08:8f:61:70:8f:9e:de:ee:c4: eb:cd:2e:6d:59:58:47:9e:71:32:86:d4:0a:fd:e3: 16:0a:42:25:e9:8f:f3:2d:1a:76:65:cf:c9:e1:73: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:EB:53:65:5D:EE:BF:02:A8:EB:AC:C9:21:AB:B5:0E:C1:51:AE X509v3 Authority Key Identifier: keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4b:30:d8:38:2c:2c:55:a7:14:74:31:a6:5f:b4:ce:78:b6: 5c:67:53:a5:bb:b3:8f:62:f9:12:79:1d:ad:eb:8f:4e:80:1b: ff:01:a7:31:97:e7:f5:7c:05:7a:d4:eb:da:da:5a:91:7a:4a: c6:71:ef:6d:ea:d3:30:5e:d1:31:39:8b:1b:57:54:10:eb:a3: 24:07:d7:89:43:b2:79:f6:26:e6:98:f0:2f:51:fb:42:be:2a: cd:b4:48:26:82:d2:08:a4:38:87:fa:68:c3:96:eb:8e:d0:ef: 70:57:dd:8e:7f:6d:a2:eb:ad:4d:8b:43:9b:09:72:a4:13:a6: 7d:ee:c5:5c:ac:5a:d0:78:20:0f:a1:ff:30:3d:1b:b5:3f:41: f0:20:5d:cd:36:bc:b9:e3:c1:89:26:20:99:db:b3:6e:b7:a0: 0a:da:1c:e1:3a:a5:3f:f4:19:99:2c:86:ea:5e:fe:f7:01:e0: e5:be:02:57:9e:2d:d4:39:3c:24:54:c7:67:71:88:78:06:9a: 55:34:1e:a0:22:9a:2c:d0:d6:f5:84:ef:5e:a5:e0:17:2d:2f: 0f:89:73:91:31:6f:43:61:ad:8c:ea:e5:b0:5a:87:7c:5e:59: 19:ed:01:83:57:c4:57:dd:5c:61:86:43:57:13:16:fb:70:60: 96:05:b2:32 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGse5h+Sx9Fs640YCjdrx0NGNI/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMwOTk2QjJDQTUxNjlDRUEyQ0U1Qjk5RUFFMjREQkVD REEzN0M4OTAeFw0yNTAxMzEwMDA4MjlaFw0yNTAyMDUxMzExMjlaMDMxMTAvBgNV BAMTKDA1NzJFQjUzNjU1REVFQkYwMkE4RUJBQ0M5MjFBQkI1MEVDMTUxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdn53IHdYQp2xZskRpqWOyAnXV EYEZgP8uBQk5TZOC5+sip4XnWH0HHZJVOD4ZsgnrXfOhB9Q/IT8XmGEvhkzNo6yr hiCTtPEbDFt2JWsG3dlLNCS/JZzyCH7rHwwytGw3791vGvVs5V1cs5aLYTnYQjdz k9gpjQtKH9J6Ocg25qSwhubI6YWAtx6I/xVRefrzmd8dQ7/iP7tulpdFmTsSQ6SU saopAElKlhc2JG2KC2zP7Du0PlWz/T7/aKvLQO/CYtt6KyDHIQILScBUesbLFoQC HgdV/giPYXCPnt7uxOvNLm1ZWEeecTKG1Ar94xYKQiXpj/MtGnZlz8nhczSXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUBXLrU2Vd7r8CqOusySGrtQ7BUa4wHwYDVR0j BBgwFoAULAmWsspRac6izluZ6uJNvs2jfIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNURFMTAxOTNFQTY5ODI1QTgwRDY2RkY2Q0RBNkEwNzUx NUU4NjI5MzUwNkRBQTlCNTU5Q0Y3NDJFOEFEODQ3LzAvMkMwOTk2QjJDQTUxNjlD RUEyQ0U1Qjk5RUFFMjREQkVDREEzN0M4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzA5OTZCMkNBNTE2OUNFQTJD RTVCOTlFQUUyNERCRUNEQTM3Qzg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDVERTEwMTkzRUE2OTgyNUE4MEQ2NkZGNkNEQTZBMDc1MTVFODYyOTM1 MDZEQUE5QjU1OUNGNzQyRThBRDg0Ny8wLzJDMDk5NkIyQ0E1MTY5Q0VBMkNFNUI5 OUVBRTI0REJFQ0RBMzdDODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeSzDYOCwsVacUdDGmX7TOeLZc Z1Olu7OPYvkSeR2t649OgBv/Aacxl+f1fAV61Ova2lqRekrGce9t6tMwXtExOYsb V1QQ66MkB9eJQ7J59ibmmPAvUftCvirNtEgmgtIIpDiH+mjDluuO0O9wV92Of22i 661Ni0ObCXKkE6Z97sVcrFrQeCAPof8wPRu1P0HwIF3NNry548GJJiCZ27Nut6AK 2hzhOqU/9BmZLIbqXv73AeDlvgJXni3UOTwkVMdncYh4BppVNB6gIpos0Nb1hO9e peAXLS8PiXORMW9DYa2M6uWwWod8XlkZ7QGDV8RX3VxhhkNXExb7cGCWBbIy -----END CERTIFICATE-----Generated at Tue Apr 29 02:33:00 2025 by rpki-client