$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.mft File: A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.mft (raw, json) Hash identifier: HnC9uxTMdk9T8FI1vQIK4sPiEo3qyOt1wtXV8ucnGyg= Subject key identifier: D0:8C:DD:18:62:66:CD:39:94:1F:C8:52:4D:41:58:30:C1:4B:69:22 Authority key identifier: A2:8C:39:40:8C:13:CA:9D:E2:7B:AE:FC:F4:DD:6F:B6:6B:0B:E7:2B Certificate issuer: /CN=A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B Certificate serial: 1155D67D2810A45EE9B5CBF589FBCCDE489CAC31 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.mft Manifest number: 24 Signing time: Tue 09 Jan 2024 05:35:26 +0000 Manifest this update: Tue 09 Jan 2024 05:30:26 +0000 Manifest next update: Wed 10 Jan 2024 08:23:26 +0000 Files and hashes: 1: 3138362e3235302e31362e302f32332d3234203d3e20323632383033.roa (hash: UNn6ZqTFleUMcsYjexhp09d9N34NYxsSe3J4etHOW1o=) 2: 323830343a3235303a3a2f33332d3336203d3e20323632383033.roa (hash: 6zgmTwaCJ8LkLoOwsKEwjbrUfAPR9FC8YoDxSLcDbFQ=) 3: 3138362e3235302e31382e302f32332d3234203d3e20323632383033.roa (hash: jydmTNjCT9Vo/vytuXkjvSAPMj3ZeJJMryIZ7VnwF80=) 4: 3138362e3235302e32302e302f32332d3234203d3e20323632383033.roa (hash: ia/9t+lYTN+S+Si2qTgfPfuIsDgLx0pf1zsRM+lpC7o=) 5: 323830343a3235303a633030303a3a2f33342d3336203d3e20323632383033.roa (hash: MANAFHIU/I/aK3pcF2Q/8zGVStkFyaeAATgvI+FWIgc=) 6: A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.crl (hash: z21C+t2gzkp5lBiUKzTdEJ8Kf7N1cnfDRb1HuOi/5/U=) 7: 323830343a3235303a383030303a3a2f33342d3336203d3e20323632383033.roa (hash: 6U+XI9gTn6M0y2o9YWXfxZJHtZkP7Pv8Siwmw1aOKSA=) 8: 3138362e3235302e32332e302f32342d3234203d3e20323632383033.roa (hash: fy/vS9dpkmUUsuh2tBndrJycaT8T2fA+FhqzAsQkydI=) 9: 3138362e3235302e32322e302f32342d3234203d3e20323632383033.roa (hash: fZZQgNqQoncx7cknq4Ylu9lCQl57mt4+jRZvQi1TPV8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.crl rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 06:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:55:d6:7d:28:10:a4:5e:e9:b5:cb:f5:89:fb:cc:de:48:9c:ac:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B Validity Not Before: Jan 9 05:30:26 2024 GMT Not After : Jan 10 08:23:26 2024 GMT Subject: CN=D08CDD186266CD39941FC8524D415830C14B6922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:b6:05:71:c8:6d:19:b8:8a:a7:3b:44:ae: 69:6b:d7:20:70:9e:ac:a7:23:fe:dd:cd:5b:c7:50: fd:5e:a1:74:4f:05:4f:d6:fa:44:ba:4a:6b:22:e9: 01:15:3b:b3:c5:b8:8d:6b:13:78:b2:ad:16:89:f6: 8e:46:d2:5e:89:5a:b4:de:e3:d4:6e:f7:6b:9d:e8: 0e:d4:8f:f4:e1:1b:d8:1c:39:a1:3d:3a:e2:68:2b: f8:4c:da:92:16:8e:b0:77:d7:6e:00:f1:16:5b:fc: cc:fb:3f:aa:6e:f3:a9:ce:46:a4:fb:90:3e:30:87: 3b:88:9d:f7:dc:9d:cc:e1:90:7e:2d:06:42:eb:9f: fa:09:ce:55:6f:d2:7b:b9:57:8e:b7:1f:22:fe:ec: 99:0e:3a:49:8d:8c:8f:f1:e4:fe:cd:b0:ab:5a:c6: b3:cb:d3:22:2d:f0:15:b2:6a:f2:b6:fa:7f:e8:a4: 4e:e6:d3:a1:b6:9e:7a:fa:f7:a4:a1:52:c2:7a:7b: 3f:4b:e8:12:95:01:c9:b7:43:d0:0b:dd:60:2f:30: 23:b1:06:c7:78:2b:43:74:b3:e1:18:c3:ce:0e:de: 68:37:07:69:5a:b3:8e:80:60:15:13:5a:33:8b:30: 13:4b:49:5b:b6:77:c7:f3:68:ee:36:cd:54:82:11: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8C:DD:18:62:66:CD:39:94:1F:C8:52:4D:41:58:30:C1:4B:69:22 X509v3 Authority Key Identifier: keyid:A2:8C:39:40:8C:13:CA:9D:E2:7B:AE:FC:F4:DD:6F:B6:6B:0B:E7:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/A28C39408C13CA9DE27BAEFCF4DD6FB66B0BE72B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:97:d6:83:c9:0f:e0:9a:38:bb:46:14:da:b2:c5:f1:ec:d7: b3:5b:98:fb:ce:3d:cb:4b:71:e8:06:e5:d5:17:3e:3d:de:04: 9a:de:f9:f1:74:d3:c7:d6:2a:4a:f7:a1:79:70:e9:a9:87:94: 9a:7b:ef:b3:18:72:7e:3d:5c:02:43:37:ca:c2:25:f0:5c:bd: ca:e5:a2:bb:f0:df:67:52:fc:69:e5:15:1a:d0:c7:99:a2:2f: 1d:f4:7f:58:22:72:f4:6f:cb:71:29:8f:46:d2:54:e8:eb:9d: 6b:1c:61:ff:5d:9c:e3:a7:f6:0f:b9:0e:d2:91:6e:c7:9a:21: 60:00:a6:53:19:9d:7a:8c:5e:1e:81:24:04:41:0b:b5:e8:c2: 05:df:97:e1:ca:e3:4b:16:7d:0f:8e:06:df:a8:21:10:60:e0: 18:ac:b9:fb:0b:d9:4e:a0:78:10:51:08:dc:d6:aa:23:ac:de: 72:d2:22:c1:33:c3:28:04:74:5e:e3:f9:e4:01:14:07:be:b2: 13:05:0c:e2:06:7c:16:96:33:5d:2b:49:01:67:51:0f:66:32: 74:39:5d:65:fb:39:f7:f8:20:93:97:ee:b1:e8:f2:1a:f8:31: a0:ea:04:5f:6e:c9:00:e4:e5:4b:4b:47:e6:94:79:05:e0:9e: c5:4d:75:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEVXWfSgQpF7ptcv1ifvM3kicrDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI4QzM5NDA4QzEzQ0E5REUyN0JBRUZDRjRERDZGQjY2 QjBCRTcyQjAeFw0yNDAxMDkwNTMwMjZaFw0yNDAxMTAwODIzMjZaMDMxMTAvBgNV BAMTKEQwOENERDE4NjI2NkNEMzk5NDFGQzg1MjRENDE1ODMwQzE0QjY5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxrYFcchtGbiKpztErmlr1yBw nqynI/7dzVvHUP1eoXRPBU/W+kS6Smsi6QEVO7PFuI1rE3iyrRaJ9o5G0l6JWrTe 49Ru92ud6A7Uj/ThG9gcOaE9OuJoK/hM2pIWjrB3124A8RZb/Mz7P6pu86nORqT7 kD4whzuInffcnczhkH4tBkLrn/oJzlVv0nu5V463HyL+7JkOOkmNjI/x5P7NsKta xrPL0yIt8BWyavK2+n/opE7m06G2nnr696ShUsJ6ez9L6BKVAcm3Q9AL3WAvMCOx Bsd4K0N0s+EYw84O3mg3B2las46AYBUTWjOLMBNLSVu2d8fzaO42zVSCEQQHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0IzdGGJmzTmUH8hSTUFYMMFLaSIwHwYDVR0j BBgwFoAUoow5QIwTyp3ie6789N1vtmsL5yswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1U24xZE5zR1Bq UEovMC9BMjhDMzk0MDhDMTNDQTlERTI3QkFFRkNGNERENkZCNjZCMEJFNzJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyOEMzOTQwOEMxM0NBOURF MjdCQUVGQ0Y0REQ2RkI2NkIwQkU3MkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FkYWtnUGRnbUU3TjhMWnRFakJOcGhmbXNxaXBqZ2V1U24xZE5zR1BqUEovMC9B MjhDMzk0MDhDMTNDQTlERTI3QkFFRkNGNERENkZCNjZCMEJFNzJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxpfWg8kP4Jo4u0YU2rLF8ezXs1uY+849y0tx6Abl1Rc+Pd4Emt758XTTx9Yq SveheXDpqYeUmnvvsxhyfj1cAkM3ysIl8Fy9yuWiu/DfZ1L8aeUVGtDHmaIvHfR/ WCJy9G/LcSmPRtJU6Oudaxxh/12c46f2D7kO0pFux5ohYACmUxmdeoxeHoEkBEEL tejCBd+X4crjSxZ9D44G36ghEGDgGKy5+wvZTqB4EFEI3NaqI6zectIiwTPDKAR0 XuP55AEUB76yEwUM4gZ8FpYzXStJAWdRD2YydDldZfs59/ggk5fusejyGvgxoOoE X27JAOTlS0tH5pR5BeCexU11Gg== -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:16 2024 by rpki-client on console.sobornost.net