$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft File: DDF05B9E6D023218FFA149930FC0EB8E62772690.mft (raw, json) Hash identifier: aZ7TsscPO5qF6qaW8injTY7oUxtgOYe6oqWQR33FrFU= Subject key identifier: B4:7E:06:AA:5F:84:D4:22:7A:5D:8B:3C:09:1B:2A:6B:19:D6:A9:8E Authority key identifier: DD:F0:5B:9E:6D:02:32:18:FF:A1:49:93:0F:C0:EB:8E:62:77:26:90 Certificate issuer: /CN=DDF05B9E6D023218FFA149930FC0EB8E62772690 Certificate serial: 483DD9D6EE20C349DD48CAB750C862B25C9752A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.cer Subject info access: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft Manifest number: 24 Signing time: Tue 09 Jan 2024 08:00:01 +0000 Manifest this update: Tue 09 Jan 2024 07:55:01 +0000 Manifest next update: Wed 10 Jan 2024 10:04:01 +0000 Files and hashes: 1: DDF05B9E6D023218FFA149930FC0EB8E62772690.crl (hash: HJFUsnSrjO6/dTF4PGjSMdFAGiPNDcKQOBQhS0M08Kc=) 2: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: 8PvLykYFGWNetz/G7y//H7hbVdNKRVVCsO4F3lma7Ik=) 3: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: zg1A82tMuaPrNdO25RI7wsohb+idq9lALMj6YZ1Fj3M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.crl rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 10:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3d:d9:d6:ee:20:c3:49:dd:48:ca:b7:50:c8:62:b2:5c:97:52:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF05B9E6D023218FFA149930FC0EB8E62772690 Validity Not Before: Jan 9 07:55:01 2024 GMT Not After : Jan 10 10:04:01 2024 GMT Subject: CN=B47E06AA5F84D4227A5D8B3C091B2A6B19D6A98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:e1:ff:9c:f9:f5:78:dd:13:bf:2a:88:68: 0b:51:8b:84:16:91:3d:8a:25:75:71:ca:ee:84:92: aa:b6:23:21:e3:92:17:5a:f5:c1:40:e0:e0:4e:c9: d5:36:bf:63:bb:f9:74:15:a9:ed:35:6d:90:c1:5b: 4c:6a:2d:1d:0f:06:08:05:5c:dd:ac:96:97:28:41: 9b:c7:4c:9f:8a:f6:15:d1:e5:0b:ef:97:8f:4c:bb: e9:bf:44:67:fc:2f:12:95:da:90:59:68:64:26:31: 2b:01:dd:c1:ed:3c:30:01:16:5b:bc:8d:6c:b2:ba: f8:b7:71:cb:a0:16:dd:43:96:3d:81:c8:32:03:f0: b7:ef:59:0e:dd:eb:55:6f:dd:7e:fd:05:91:c1:ec: 66:2f:e1:f5:3b:d8:23:14:5d:e9:9c:fe:52:56:a5: 9c:f8:30:26:de:52:01:11:fc:d9:8f:e9:84:cd:9e: 5f:f7:12:60:ca:b4:1d:67:a0:29:85:49:99:51:7b: f1:99:ac:a7:53:bd:24:e4:52:74:01:84:84:4d:08: 07:d7:61:b0:e5:c2:54:6d:4e:10:ff:aa:00:9a:34: 09:48:6c:c1:7b:5d:69:99:d4:1b:6b:65:c2:9f:bd: 25:9a:28:d1:0c:26:8e:c9:bc:4a:bf:46:13:60:50: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7E:06:AA:5F:84:D4:22:7A:5D:8B:3C:09:1B:2A:6B:19:D6:A9:8E X509v3 Authority Key Identifier: keyid:DD:F0:5B:9E:6D:02:32:18:FF:A1:49:93:0F:C0:EB:8E:62:77:26:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ea:33:29:02:4e:a6:c3:f7:e1:84:a6:fd:f7:99:7f:d5:67: 82:6f:b4:5b:dd:72:ff:83:46:85:81:c2:0b:cf:de:2b:b4:0f: 0b:76:80:f8:3c:fb:1c:34:d0:16:40:67:7a:10:cb:2e:dd:51: 82:7c:0a:49:17:67:b4:85:4d:43:70:5d:c5:f1:47:21:a9:2b: 30:40:d3:97:9d:1e:76:8d:78:65:60:11:83:a4:97:cf:f5:f7: 5d:07:4f:f8:70:0e:6d:e5:87:af:6e:56:bc:d2:38:83:9b:06: 8c:58:0c:0e:ee:3d:97:60:5e:29:3f:55:80:ee:69:a5:e1:41: 7a:92:76:05:d3:b3:58:1d:8b:11:b3:f5:e8:9e:c4:01:e3:15: 24:52:bc:ec:1a:7f:1f:21:e8:6c:49:ca:b4:ea:ee:3c:ba:05: d4:17:97:0d:ce:33:5e:df:93:73:3f:35:ee:14:26:03:fb:74: bc:98:2e:57:97:08:01:1c:0b:ab:12:ca:d5:c0:60:38:0d:76: 17:29:8a:a0:2f:60:2c:a6:4d:c0:42:1a:e4:a8:5e:28:db:df: a6:f2:77:6e:37:9e:a7:b8:d0:d4:1d:85:6f:a3:c7:e4:15:59: b3:2a:bd:67:8b:1b:93:2e:78:33:e0:de:1d:9b:3c:81:19:df: 85:cc:35:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSD3Z1u4gw0ndSMq3UMhislyXUqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGMDVCOUU2RDAyMzIxOEZGQTE0OTkzMEZDMEVCOEU2 Mjc3MjY5MDAeFw0yNDAxMDkwNzU1MDFaFw0yNDAxMTAxMDA0MDFaMDMxMTAvBgNV BAMTKEI0N0UwNkFBNUY4NEQ0MjI3QTVEOEIzQzA5MUIyQTZCMTlENkE5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8T+H/nPn1eN0TvyqIaAtRi4QW kT2KJXVxyu6Ekqq2IyHjkhda9cFA4OBOydU2v2O7+XQVqe01bZDBW0xqLR0PBggF XN2slpcoQZvHTJ+K9hXR5Qvvl49Mu+m/RGf8LxKV2pBZaGQmMSsB3cHtPDABFlu8 jWyyuvi3ccugFt1Dlj2ByDID8LfvWQ7d61Vv3X79BZHB7GYv4fU72CMUXemc/lJW pZz4MCbeUgER/NmP6YTNnl/3EmDKtB1noCmFSZlRe/GZrKdTvSTkUnQBhIRNCAfX YbDlwlRtThD/qgCaNAlIbMF7XWmZ1BtrZcKfvSWaKNEMJo7JvEq/RhNgUE9pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtH4Gql+E1CJ6XYs8CRsqaxnWqY4wHwYDVR0j BBgwFoAU3fBbnm0CMhj/oUmTD8DrjmJ3JpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290 YVEvMC9EREYwNUI5RTZEMDIzMjE4RkZBMTQ5OTMwRkMwRUI4RTYyNzcyNjkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RERjA1QjlFNkQwMjMyMThG RkExNDk5MzBGQzBFQjhFNjI3NzI2OTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290YVEvMC9E REYwNUI5RTZEMDIzMjE4RkZBMTQ5OTMwRkMwRUI4RTYyNzcyNjkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcOozKQJOpsP34YSm/feZf9Vngm+0W91y/4NGhYHCC8/eK7QPC3aA+Dz7HDTQ FkBnehDLLt1RgnwKSRdntIVNQ3BdxfFHIakrMEDTl50edo14ZWARg6SXz/X3XQdP +HAObeWHr25WvNI4g5sGjFgMDu49l2BeKT9VgO5ppeFBepJ2BdOzWB2LEbP16J7E AeMVJFK87Bp/HyHobEnKtOruPLoF1BeXDc4zXt+Tcz817hQmA/t0vJguV5cIARwL qxLK1cBgOA12FymKoC9gLKZNwEIa5KheKNvfpvJ3bjeep7jQ1B2Fb6PH5BVZsyq9 Z4sbky54M+DeHZs8gRnfhcw10A== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:43 2024 by rpki-client on console.sobornost.net