$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.mft File: A698EEF1D908F4D05C52C434D64D84AA126409A2.mft (raw, json) Hash identifier: GSrrxKfOLweYGiRlgpNPDIgJ5VhlQ2X7Si0rtVBYQ7Y= Subject key identifier: 37:65:3B:F7:CD:13:35:B0:2B:63:35:29:BA:E7:17:59:41:93:7C:CB Authority key identifier: A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2 Certificate issuer: /CN=A698EEF1D908F4D05C52C434D64D84AA126409A2 Certificate serial: 1BF7C8B94AE0B601F47C6E58478A4DA9ED268F13 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.mft Manifest number: 020D Signing time: Tue 09 Jan 2024 06:34:10 +0000 Manifest this update: Tue 09 Jan 2024 06:29:10 +0000 Manifest next update: Wed 10 Jan 2024 09:12:10 +0000 Files and hashes: 1: 34352e3136342e3139312e302f32342d3234203d3e20323638363238.roa (hash: qxM2oGrdsfRyoiX5myjeXC9gjqsRBwSAewWFSTAMMcg=) 2: 34352e3136342e3139302e302f32342d3234203d3e20323638363238.roa (hash: CyF5zp79ZrR4krb/Jb+zYvZRhroYJdjhnVZAR6yhQtQ=) 3: 34352e3136342e3138392e302f32342d3234203d3e20323638363238.roa (hash: dw6S8TjWdLeQP/J9ryM6BcN9QbK/y4VueIskZQQTBkE=) 4: 34352e3136342e3138382e302f32342d3234203d3e20323638363238.roa (hash: aDMbPoeYJi7J5pAnrwxpmfpf9+4Y50KIPm2aQ+hZmAw=) 5: 34352e3136342e3138382e302f32332d3233203d3e20323638363238.roa (hash: mMATIafwX5IEVIxCPHP+rWaC5aqlC/mP02VPOw360Qg=) 6: 34352e3136342e3139302e302f32332d3233203d3e20323638363238.roa (hash: nBHEO5fQeXjQ4QxABHaRN+YAuDjS9+SBTjcsGInbdUU=) 7: 3230382e35322e3136322e302f32332d3233203d3e20323638363238.roa (hash: 3/rn8tQgi2peKCQGaoMBPFhhoCKL6BR6BZ+9q1qRYTs=) 8: 323830343a353431383a3a2f33322d3332203d3e20323638363238.roa (hash: 2+8ZFxLLvVbJtCp6pBLsIS6UrU2n1x5sWCR3q2eQBow=) 9: 34352e3136342e3138382e302f32322d3232203d3e20323638363238.roa (hash: 6tLTuj1Madx2W+moR4GMYr8EXlwqyNo7YYKAsgg1GhA=) 10: A698EEF1D908F4D05C52C434D64D84AA126409A2.crl (hash: FSTxc0AO6W+Y7+M6PeapApqVlMvp6PlxE4ywn/2rS2Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 06:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f7:c8:b9:4a:e0:b6:01:f4:7c:6e:58:47:8a:4d:a9:ed:26:8f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A698EEF1D908F4D05C52C434D64D84AA126409A2 Validity Not Before: Jan 9 06:29:10 2024 GMT Not After : Jan 10 09:12:10 2024 GMT Subject: CN=37653BF7CD1335B02B633529BAE7175941937CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:1c:fa:ba:e3:a9:62:54:62:25:18:87:8b: 94:ce:6a:80:6f:27:56:f6:d9:d6:d0:4d:db:df:b2: ca:88:1a:b3:cb:79:e1:8d:c6:c0:04:61:31:5a:e1: a6:c0:cf:e4:e4:d3:20:9e:e5:fa:13:f2:ae:7c:6f: 85:a4:58:8d:b0:29:a3:fd:23:81:f4:d3:63:26:8e: 48:63:3b:98:1b:7e:8a:ae:99:a4:73:5a:1d:02:d0: 62:22:03:b5:4d:99:58:a8:bf:c0:1a:9e:37:ed:eb: c0:c0:80:17:ca:22:38:82:f9:44:47:6c:e9:cd:04: a8:1f:7a:02:4f:9c:47:eb:82:81:a4:1c:d7:f1:10: 17:ea:75:d0:85:9a:40:9f:45:5e:33:b7:35:ea:74: c5:3a:0b:f5:09:3f:68:0b:6b:e8:3b:c2:db:cc:3a: 0b:be:1f:e4:d1:8a:6d:44:d2:c2:c6:05:76:9a:7a: 3b:76:6d:99:9e:98:93:af:54:2b:28:82:12:8b:64: e3:71:ac:b4:52:ab:a9:8a:e7:8b:7a:ec:b9:7f:c8: 6c:9b:6d:8f:f0:1b:07:8c:38:3f:60:e7:b2:fb:d2: 38:de:65:b5:88:9e:85:51:14:22:66:14:2d:7a:df: 1c:24:25:b0:1d:20:34:d1:0e:8b:f7:d2:04:31:78: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:3B:F7:CD:13:35:B0:2B:63:35:29:BA:E7:17:59:41:93:7C:CB X509v3 Authority Key Identifier: keyid:A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ac:5a:79:71:f8:c1:93:67:e0:1c:f1:85:08:72:58:5e:56: b5:1d:05:66:4e:69:5d:7b:61:e7:ab:28:5f:e8:77:07:39:b2: 56:16:18:81:b2:4f:28:c2:db:02:fd:7c:aa:fc:2d:83:b1:c1: 07:06:3a:96:7b:08:76:f6:dd:78:0b:eb:e5:56:c6:94:d5:8a: 00:33:ce:af:fd:63:b8:3b:16:aa:7e:46:bd:6c:de:97:b9:02: 83:e3:ff:67:8f:73:d4:eb:e8:2f:82:8e:22:4c:82:11:9c:63: 8e:ed:f5:2f:91:f8:63:d0:21:8e:3f:de:9f:50:60:aa:ee:ab: 8c:0f:c1:ad:34:6e:46:2d:86:7b:e7:c9:66:f7:d7:17:02:e5: b8:b5:89:d4:ad:e4:07:d5:ea:ef:7d:f8:63:ea:3e:66:34:cf: 2f:27:87:39:00:ad:ba:37:d9:20:64:c8:7c:10:6e:c5:7b:7e: 29:a8:3a:25:e2:67:48:a9:22:52:49:55:ef:23:49:54:b7:73: 71:b2:3e:91:b1:95:b5:fb:a0:a1:fe:dc:36:6e:e2:3c:8c:e9: ca:80:49:83:a4:19:86:b4:0c:13:8f:86:e8:e8:6b:ff:ed:8f: b7:2e:09:51:d0:d1:74:bc:14:0d:05:65:33:1c:5c:d0:ae:ab: 56:43:76:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG/fIuUrgtgH0fG5YR4pNqe0mjxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY5OEVFRjFEOTA4RjREMDVDNTJDNDM0RDY0RDg0QUEx MjY0MDlBMjAeFw0yNDAxMDkwNjI5MTBaFw0yNDAxMTAwOTEyMTBaMDMxMTAvBgNV BAMTKDM3NjUzQkY3Q0QxMzM1QjAyQjYzMzUyOUJBRTcxNzU5NDE5MzdDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl9Rz6uuOpYlRiJRiHi5TOaoBv J1b22dbQTdvfssqIGrPLeeGNxsAEYTFa4abAz+Tk0yCe5foT8q58b4WkWI2wKaP9 I4H002MmjkhjO5gbfoqumaRzWh0C0GIiA7VNmViov8Aanjft68DAgBfKIjiC+URH bOnNBKgfegJPnEfrgoGkHNfxEBfqddCFmkCfRV4ztzXqdMU6C/UJP2gLa+g7wtvM Ogu+H+TRim1E0sLGBXaaejt2bZmemJOvVCsoghKLZONxrLRSq6mK54t67Ll/yGyb bY/wGweMOD9g57L70jjeZbWInoVRFCJmFC163xwkJbAdIDTRDov30gQxeIVvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUN2U7980TNbArYzUpuucXWUGTfMswHwYDVR0j BBgwFoAUppju8dkI9NBcUsQ01k2EqhJkCaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMC9BNjk4RUVGMUQ5MDhGNEQwNUM1MkM0MzRENjREODRBQTEyNjQwOUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E2OThFRUYxRDkwOEY0RDA1 QzUyQzQzNEQ2NEQ4NEFBMTI2NDA5QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMC9B Njk4RUVGMUQ5MDhGNEQwNUM1MkM0MzRENjREODRBQTEyNjQwOUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS6xaeXH4wZNn4BzxhQhyWF5WtR0FZk5pXXth56soX+h3BzmyVhYYgbJPKMLb Av18qvwtg7HBBwY6lnsIdvbdeAvr5VbGlNWKADPOr/1juDsWqn5GvWzel7kCg+P/ Z49z1OvoL4KOIkyCEZxjju31L5H4Y9Ahjj/en1Bgqu6rjA/BrTRuRi2Ge+fJZvfX FwLluLWJ1K3kB9Xq7334Y+o+ZjTPLyeHOQCtujfZIGTIfBBuxXt+Kag6JeJnSKki UklV7yNJVLdzcbI+kbGVtfugof7cNm7iPIzpyoBJg6QZhrQME4+G6Ohr/+2Pty4J UdDRdLwUDQVlMxxc0K6rVkN29A== -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:48 2024 by rpki-client on console.sobornost.net