$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.mft File: 8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.mft (raw, json) Hash identifier: S+nYVsBW+aXl6jlb8Pyxa1J20OpU332pg2gbNVB/6kQ= Subject key identifier: FF:F2:42:A8:6C:BE:80:A7:39:AC:0C:8B:97:1D:EA:7E:4B:A3:68:7D Authority key identifier: 8A:31:00:E8:7C:E0:6C:0F:63:F6:CC:C1:10:C5:C9:17:FD:7C:EB:F7 Certificate issuer: /CN=8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7 Certificate serial: 1397B8354ED6872CEAEE1F261727209B8533F24E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.mft Manifest number: 010A Signing time: Tue 09 Jan 2024 11:40:00 +0000 Manifest this update: Tue 09 Jan 2024 11:35:00 +0000 Manifest next update: Wed 10 Jan 2024 11:43:00 +0000 Files and hashes: 1: 3137302e37392e3230302e302f32332d3233203d3e20323636333034.roa (hash: B3j5BeDIvMWu9eQvrlcatZ7t2hT+HqYxlwC8kYZSaTE=) 2: 8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.crl (hash: u2iRW6NkiDJt4yklLGi0zBO3spT15CEGXQITjcEv5Ok=) 3: 323830343a333563303a3a2f33322d3332203d3e20323636333034.roa (hash: AKeCLS/fobwOW8VVPC9QpXXTYzDDlW8SWluAhrYrhDk=) 4: 3137302e37392e3230322e302f32332d3233203d3e20323636333034.roa (hash: Vkj+PLfAWSFAYm2HFr7Wdu+ckr1r8tBKV2yFFRjoJYc=) 5: 3137302e37392e3230302e302f32342d3234203d3e20323636333034.roa (hash: iocg3XFiFTVYqAh+zipiGQT6mxfkCsw0pGM8bsNgycs=) 6: 3137302e37392e3230302e302f32322d3232203d3e20323636333034.roa (hash: RK/ZUH33a/cdZTHFmC4VQZqOket9Et1+WEqihtN2CHU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.crl rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 11:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:97:b8:35:4e:d6:87:2c:ea:ee:1f:26:17:27:20:9b:85:33:f2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7 Validity Not Before: Jan 9 11:35:00 2024 GMT Not After : Jan 10 11:43:00 2024 GMT Subject: CN=FFF242A86CBE80A739AC0C8B971DEA7E4BA3687D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:5a:83:9d:c0:d0:75:fd:86:e7:5f:2f:2d: c8:b4:28:17:d8:6f:b5:c0:ef:8a:16:f7:49:47:e6: 79:a5:1c:1f:c4:4d:65:7c:ae:28:65:39:16:95:cd: 4a:ca:7a:5b:d7:99:e9:16:0e:e7:f2:2c:6d:f0:59: d5:a8:42:5d:40:f9:b9:ae:8a:81:61:b7:ef:d6:f0: 2e:cf:f8:b4:1c:ab:a7:87:db:a1:2a:6e:e8:63:0a: bd:c4:26:c3:e0:2e:33:0c:de:fa:9a:18:11:51:70: 5a:f6:00:be:e1:60:82:cb:dc:e7:25:50:20:4d:b5: 0e:3f:30:b5:a1:e6:35:68:5e:c4:d2:3b:ad:7f:64: cc:28:2c:4d:5b:16:d6:e0:ff:c7:1a:32:66:a9:a0: 56:ff:9b:58:95:05:96:bc:f6:e7:0d:f1:ba:97:ec: fe:7b:61:a2:d9:9c:9e:07:df:e4:4f:d9:28:3b:8f: ce:87:27:c7:12:7f:5a:d9:bf:55:a6:a8:88:ea:b9: 7f:83:6e:f3:93:35:76:6a:63:6e:07:0c:d7:5f:9d: f9:12:fb:d3:a7:ce:a9:8d:1a:37:4f:12:80:6a:80: aa:53:ec:5f:1c:65:dd:4c:ce:d9:8b:a7:a8:9e:06: 07:95:87:30:c3:d6:3f:1c:c6:8a:3b:0b:69:b6:6e: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F2:42:A8:6C:BE:80:A7:39:AC:0C:8B:97:1D:EA:7E:4B:A3:68:7D X509v3 Authority Key Identifier: keyid:8A:31:00:E8:7C:E0:6C:0F:63:F6:CC:C1:10:C5:C9:17:FD:7C:EB:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8A3100E87CE06C0F63F6CCC110C5C917FD7CEBF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b3:70:1b:f4:53:85:95:fd:27:c6:ae:7c:cb:15:76:00:84: 3d:ae:97:31:be:ac:17:9e:62:3c:40:42:13:91:64:4b:d2:88: ed:40:07:4f:22:01:cf:fd:37:bd:8b:98:73:1a:e7:ba:68:ae: c8:6e:50:73:3c:94:47:09:80:c1:d6:8e:8e:c5:a8:ea:91:34: 2f:32:8a:36:92:34:a9:de:89:1e:61:e6:f1:96:5b:2a:cd:e6: 59:90:ac:cb:3f:5b:75:c3:7b:5a:90:a4:e5:d7:a1:00:8a:22: d8:94:14:ed:42:7b:13:cd:3d:fb:41:3e:14:16:bb:e0:a7:8c: ed:ad:fc:8a:8f:a5:61:5a:f5:69:7a:49:5c:5c:76:97:e0:c6: 3a:38:ca:9c:a5:f0:b1:9c:b8:22:14:a4:24:dc:8e:59:b1:85: 65:02:e1:3a:ce:0d:69:81:2c:c7:5a:5f:f8:6e:ad:0a:96:b6: 59:4f:5c:bd:46:41:de:1e:30:1d:fc:4c:fe:e5:24:b6:99:dd: c6:b2:d6:69:bb:b9:6d:3e:93:d0:64:3b:9b:bd:7c:4e:e0:77: f2:cb:c0:0c:f1:0a:2f:4a:5e:65:4d:4e:0a:83:01:53:43:89: 60:f5:69:f8:e2:78:ea:24:32:9a:a1:35:14:e7:eb:04:50:3a: 7f:65:00:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE5e4NU7Whyzq7h8mFycgm4Uz8k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEzMTAwRTg3Q0UwNkMwRjYzRjZDQ0MxMTBDNUM5MTdG RDdDRUJGNzAeFw0yNDAxMDkxMTM1MDBaFw0yNDAxMTAxMTQzMDBaMDMxMTAvBgNV BAMTKEZGRjI0MkE4NkNCRTgwQTczOUFDMEM4Qjk3MURFQTdFNEJBMzY4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKFqDncDQdf2G518vLci0KBfY b7XA74oW90lH5nmlHB/ETWV8rihlORaVzUrKelvXmekWDufyLG3wWdWoQl1A+bmu ioFht+/W8C7P+LQcq6eH26EqbuhjCr3EJsPgLjMM3vqaGBFRcFr2AL7hYILL3Ocl UCBNtQ4/MLWh5jVoXsTSO61/ZMwoLE1bFtbg/8caMmapoFb/m1iVBZa89ucN8bqX 7P57YaLZnJ4H3+RP2Sg7j86HJ8cSf1rZv1WmqIjquX+DbvOTNXZqY24HDNdfnfkS +9OnzqmNGjdPEoBqgKpT7F8cZd1MztmLp6ieBgeVhzDD1j8cxoo7C2m2bgB1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU//JCqGy+gKc5rAyLlx3qfkujaH0wHwYDVR0j BBgwFoAUijEA6HzgbA9j9szBEMXJF/186/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq ZkIvMC84QTMxMDBFODdDRTA2QzBGNjNGNkNDQzExMEM1QzkxN0ZEN0NFQkY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBMzEwMEU4N0NFMDZDMEY2 M0Y2Q0NDMTEwQzVDOTE3RkQ3Q0VCRjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC84 QTMxMDBFODdDRTA2QzBGNjNGNkNDQzExMEM1QzkxN0ZEN0NFQkY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARbNwG/RThZX9J8aufMsVdgCEPa6XMb6sF55iPEBCE5FkS9KI7UAHTyIBz/03 vYuYcxrnumiuyG5QczyURwmAwdaOjsWo6pE0LzKKNpI0qd6JHmHm8ZZbKs3mWZCs yz9bdcN7WpCk5dehAIoi2JQU7UJ7E809+0E+FBa74KeM7a38io+lYVr1aXpJXFx2 l+DGOjjKnKXwsZy4IhSkJNyOWbGFZQLhOs4NaYEsx1pf+G6tCpa2WU9cvUZB3h4w HfxM/uUktpndxrLWabu5bT6T0GQ7m718TuB38svADPEKL0peZU1OCoMBU0OJYPVp +OJ46iQymqE1FOfrBFA6f2UAgg== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:27 2024 by rpki-client on console.sobornost.net