$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.mft File: 549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.mft (raw, json) Hash identifier: TN8x5GBep5wTxa0fbSV6U/m1XaTk5Jkyq4qZOCsEOa0= Subject key identifier: 1A:AF:9B:3D:F4:37:C2:7D:63:8F:C0:9B:67:47:0B:4E:18:17:CE:DC Authority key identifier: 54:9B:96:CD:BE:DD:FA:CD:C6:11:B9:A0:90:3F:B4:23:3E:3F:FD:C3 Certificate issuer: /CN=549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3 Certificate serial: 75C83A00942361F31F8E1061489E24A7B84A4278 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer Subject info access: rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.mft Manifest number: 0211 Signing time: Tue 09 Jan 2024 02:58:24 +0000 Manifest this update: Tue 09 Jan 2024 02:53:24 +0000 Manifest next update: Wed 10 Jan 2024 04:01:24 +0000 Files and hashes: 1: 34352e3138372e35382e302f32342d3234203d3e20323639353436.roa (hash: z8feYwvzFJkS0WaSMlQKnPo1dUqsl0kCoyXms7Hn4K4=) 2: 34352e3138372e35372e302f32342d3234203d3e20323639353436.roa (hash: 4vxoPSXp8lXBS6xYcthFZmBCVLYL2gSQvAQaC+/3Ca8=) 3: 34352e3138372e35362e302f32342d3234203d3e20323639353436.roa (hash: IjqADkVhJ0FS9bROMvKXFsqs8xq3OL9Cejb5stS3MIU=) 4: 34352e3138372e35362e302f32322d3232203d3e20323639353436.roa (hash: wtidwEDbWW6FJZiaUTJce0HGzfxld3hRSIwEJt5ruyo=) 5: 323830343a363634383a3a2f33322d3332203d3e20323639353436.roa (hash: CPv2RIxprjDt0ctC5J5b+b7yj+A/GLUeFLWMGy352lE=) 6: 34352e3138372e35362e302f32332d3233203d3e20323639353436.roa (hash: xgMJxR//XAcM//H0cQE0YO9dpghOZN3rHhjl+JDCYz4=) 7: 34352e3138372e35392e302f32342d3234203d3e20323639353436.roa (hash: PT8tw0iVK+nCQv6CaqHeD2H7nLmxMeq3XR0E+y+oKlk=) 8: 34352e3138372e35382e302f32332d3233203d3e20323639353436.roa (hash: 93WLNLsdQsnMl7QyxR6MrRhzlfBCplWYTFXtwWlpVt4=) 9: 549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.crl (hash: fNR/SAydVmUmu3IWM8ewkac5hYBmux7zhjxbcbNUVro=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.crl rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c8:3a:00:94:23:61:f3:1f:8e:10:61:48:9e:24:a7:b8:4a:42:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3 Validity Not Before: Jan 9 02:53:24 2024 GMT Not After : Jan 10 04:01:24 2024 GMT Subject: CN=1AAF9B3DF437C27D638FC09B67470B4E1817CEDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:b1:18:8a:04:1d:94:fa:c3:d3:cb:65:b5: b7:be:b2:70:f2:ba:18:28:82:ae:c1:3b:f8:d9:b8: f6:67:a5:bd:52:73:1f:a5:45:f1:93:72:78:16:4c: 07:44:7a:33:6d:b4:74:4a:11:0e:ae:18:8d:3c:7c: cd:8b:4b:f5:e5:ae:71:b3:96:68:49:f2:1f:85:c4: 93:e9:0b:d6:9c:be:68:b8:df:2d:7d:37:42:58:f6: a6:df:ec:c9:4e:db:c0:ab:2a:7c:04:20:2f:aa:47: 5e:d4:88:23:5a:38:c2:91:88:89:01:f4:cf:bb:88: c8:5b:02:67:3f:da:41:a4:ab:e6:0c:0b:f8:ab:b1: 90:9f:21:09:c9:d7:16:43:3f:83:b8:c0:30:69:f4: 44:aa:f5:d7:a9:2c:c1:e2:5a:d9:e4:da:5c:04:e0: 49:22:3b:52:a0:bf:6c:8d:20:dd:31:55:4a:fe:58: e7:5a:63:de:bc:3d:64:25:d6:90:35:ca:ae:08:35: 88:b9:4f:26:14:68:a6:98:3a:70:7b:4f:c0:a3:bc: 23:81:07:bb:6b:a2:53:fd:8a:d4:94:d1:7f:a9:2d: 6d:d8:10:63:3f:95:cb:9e:8c:56:a0:c3:5f:d9:9c: 0f:d8:72:37:aa:a7:5b:29:e9:1b:9b:7d:d8:ad:64: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AF:9B:3D:F4:37:C2:7D:63:8F:C0:9B:67:47:0B:4E:18:17:CE:DC X509v3 Authority Key Identifier: keyid:54:9B:96:CD:BE:DD:FA:CD:C6:11:B9:A0:90:3F:B4:23:3E:3F:FD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b6:7e:70:29:ca:2d:a3:cb:f0:31:86:ec:28:7a:bc:2b:0d: ce:a3:fd:84:89:76:1b:3f:4e:f2:9a:8e:86:26:d1:d3:71:b0: 69:f2:a7:64:06:6d:3f:8c:52:21:4b:d7:36:ae:29:c6:e9:1b: 86:cc:95:fe:b4:c1:bb:fb:c9:76:4c:a5:f4:4c:61:58:47:3b: 80:f2:c4:a2:5c:cd:66:29:04:1b:89:11:f6:b8:21:1e:98:bb: 54:6f:7e:05:75:73:ca:a4:6d:ba:c7:c1:c2:59:0f:03:b3:8e: 2a:de:16:d7:b0:f5:06:1d:bb:fd:ec:c2:00:fa:51:0a:a8:d7: 84:87:19:81:bc:77:ca:4b:a3:a7:22:fe:f6:a0:4a:77:36:86: 81:3a:44:15:12:cc:c2:65:88:e8:96:b3:fb:56:c2:ad:fd:36: 27:5c:f9:06:e8:87:bb:5f:d0:e7:9c:e1:a3:a7:37:32:48:e6: 0d:0b:7c:d8:3c:ab:ea:fa:7c:ce:b9:89:e9:c1:cb:fb:68:bb: dc:d6:86:d4:95:f1:41:76:54:24:4d:fb:7b:de:82:a4:0e:58: 3a:08:c8:48:06:41:ca:21:c8:4f:fc:74:6d:2c:b1:c9:d1:36: 4a:f6:da:43:47:fb:54:84:b1:ed:89:fc:cc:08:5d:71:c3:66: 38:39:c0:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdcg6AJQjYfMfjhBhSJ4kp7hKQngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ5Qjk2Q0RCRURERkFDREM2MTFCOUEwOTAzRkI0MjMz RTNGRkRDMzAeFw0yNDAxMDkwMjUzMjRaFw0yNDAxMTAwNDAxMjRaMDMxMTAvBgNV BAMTKDFBQUY5QjNERjQzN0MyN0Q2MzhGQzA5QjY3NDcwQjRFMTgxN0NFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CbEYigQdlPrD08tltbe+snDy uhgogq7BO/jZuPZnpb1Scx+lRfGTcngWTAdEejNttHRKEQ6uGI08fM2LS/XlrnGz lmhJ8h+FxJPpC9acvmi43y19N0JY9qbf7MlO28CrKnwEIC+qR17UiCNaOMKRiIkB 9M+7iMhbAmc/2kGkq+YMC/irsZCfIQnJ1xZDP4O4wDBp9ESq9depLMHiWtnk2lwE 4EkiO1Kgv2yNIN0xVUr+WOdaY968PWQl1pA1yq4INYi5TyYUaKaYOnB7T8CjvCOB B7trolP9itSU0X+pLW3YEGM/lcuejFagw1/ZnA/Ycjeqp1sp6RubfditZFlTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGq+bPfQ3wn1jj8CbZ0cLThgXztwwHwYDVR0j BBgwFoAUVJuWzb7d+s3GEbmgkD+0Iz4//cMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhQRHZaZ3BuNXdQelZlVWU3bUp4NlZXNEduUUVreFVrOXRRclJ0QUZU OHEvMC81NDlCOTZDREJFRERGQUNEQzYxMUI5QTA5MDNGQjQyMzNFM0ZGREMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0OUI5NkNEQkVEREZBQ0RD NjExQjlBMDkwM0ZCNDIzM0UzRkZEQzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzhQRHZaZ3BuNXdQelZlVWU3bUp4NlZXNEduUUVreFVrOXRRclJ0QUZUOHEvMC81 NDlCOTZDREJFRERGQUNEQzYxMUI5QTA5MDNGQjQyMzNFM0ZGREMzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAObZ+cCnKLaPL8DGG7Ch6vCsNzqP9hIl2Gz9O8pqOhibR03GwafKnZAZtP4xS IUvXNq4pxukbhsyV/rTBu/vJdkyl9ExhWEc7gPLEolzNZikEG4kR9rghHpi7VG9+ BXVzyqRtusfBwlkPA7OOKt4W17D1Bh27/ezCAPpRCqjXhIcZgbx3ykujpyL+9qBK dzaGgTpEFRLMwmWI6Jaz+1bCrf02J1z5BuiHu1/Q55zho6c3MkjmDQt82Dyr6vp8 zrmJ6cHL+2i73NaG1JXxQXZUJE37e96CpA5YOgjISAZByiHIT/x0bSyxydE2Svba Q0f7VISx7Yn8zAhdccNmODnADg== -----END CERTIFICATE-----Generated at Tue Jan 9 05:55:17 2024 by rpki-client on console.sobornost.net