$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft File: F2956E37351B36DB889EB71E79F2AD375B315A2C.mft (raw, json) Hash identifier: krZfphmoZwbT0Jsn7m+QF+OBxaJRXw8J4VTVmHN0HJk= Subject key identifier: CE:4E:D1:41:AB:17:C2:53:1E:B4:CD:C1:AD:36:C6:B8:D1:F4:D5:43 Authority key identifier: F2:95:6E:37:35:1B:36:DB:88:9E:B7:1E:79:F2:AD:37:5B:31:5A:2C Certificate issuer: /CN=F2956E37351B36DB889EB71E79F2AD375B315A2C Certificate serial: 68BFC4E47E4C5FFA549618D26CB5197C8822EAC2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.cer Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft Manifest number: 2A Signing time: Tue 09 Jan 2024 10:04:57 +0000 Manifest this update: Tue 09 Jan 2024 09:59:57 +0000 Manifest next update: Wed 10 Jan 2024 13:51:57 +0000 Files and hashes: 1: 3137302e37392e3137322e302f32322d3232203d3e20323636333033.roa (hash: yHYgWFnJXzj4jgm673vH5cCv8wn7n/XfwWZqOZEcX6g=) 2: 323830343a333562633a3a2f33322d3332203d3e20323636333033.roa (hash: T572wIyiOXD087gSgn6jysB3+KrNw0xNME5ImeW7/d8=) 3: F2956E37351B36DB889EB71E79F2AD375B315A2C.crl (hash: mw5RC5IJV8wg0KqPFOJfip5Cm23awiOQHEWmFzEkIhI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.crl rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 12:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bf:c4:e4:7e:4c:5f:fa:54:96:18:d2:6c:b5:19:7c:88:22:ea:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2956E37351B36DB889EB71E79F2AD375B315A2C Validity Not Before: Jan 9 09:59:57 2024 GMT Not After : Jan 10 13:51:57 2024 GMT Subject: CN=CE4ED141AB17C2531EB4CDC1AD36C6B8D1F4D543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5d:c3:84:0d:aa:6c:99:e1:ac:91:b8:fd:b3: 0e:f7:32:b4:ee:5c:92:10:24:c4:7c:f5:5f:93:8b: a2:70:5d:2b:e3:65:b0:33:7d:3e:01:9b:1b:c7:46: db:08:d3:97:e9:4b:0a:ad:5a:4f:6a:b0:fe:3e:bf: d2:69:10:f8:e6:5d:ac:85:0f:77:e7:93:b5:13:77: e2:77:83:0b:98:5b:1c:99:f0:b9:79:2f:fe:6e:12: 11:84:d3:26:c5:47:f8:3a:60:4d:d7:06:27:fd:b2: 33:14:15:4f:b9:af:4b:e5:a3:35:55:b8:46:7b:68: 0d:d8:84:59:cd:23:fb:8b:6b:c9:0e:f6:cb:24:46: 75:ab:26:75:2a:1e:23:bc:ae:81:d7:49:d9:8b:b0: 4f:b4:a4:4d:ac:a4:1b:82:2e:52:55:da:d9:a6:c4: f8:e7:ad:8c:de:1d:1b:6a:24:fe:56:f6:41:b0:bb: aa:36:ed:30:c8:63:14:f7:4f:40:64:db:b6:db:a2: 44:c4:c2:fd:05:be:15:5f:56:c8:35:63:a2:39:d4: 58:13:8b:1f:7a:e4:52:78:46:a9:3c:b9:50:0b:a5: ee:3d:77:86:af:ed:c7:33:ad:a9:b3:bf:b4:e6:78: 92:02:ed:69:e1:42:37:91:31:c9:5e:6d:3b:3e:e3: 8a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4E:D1:41:AB:17:C2:53:1E:B4:CD:C1:AD:36:C6:B8:D1:F4:D5:43 X509v3 Authority Key Identifier: keyid:F2:95:6E:37:35:1B:36:DB:88:9E:B7:1E:79:F2:AD:37:5B:31:5A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/F2956E37351B36DB889EB71E79F2AD375B315A2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:3d:6c:22:c3:ce:d8:db:a8:d7:07:02:61:20:59:16:ed:dd: cd:6a:73:e2:2f:9d:aa:6f:8b:46:f7:29:d2:75:be:38:a5:f1: 0b:d5:64:c3:21:16:47:32:12:7c:26:13:bf:3e:b4:26:e5:d1: ba:14:3f:a8:38:98:6d:96:9a:a0:b0:d0:b8:6b:1e:61:e0:b9: 7e:df:cc:22:e0:37:5c:ff:f5:98:2c:97:dd:36:d2:17:ce:b4: d5:25:04:47:0b:a4:b9:bb:57:32:18:1d:58:47:be:84:bf:b0: cb:5b:31:4b:38:e0:47:9a:89:cd:16:22:0a:2e:aa:f0:75:22: aa:59:41:94:66:38:41:89:ad:59:c0:0e:97:b4:f6:9d:99:c7: 97:4e:df:ad:42:f7:39:84:f3:51:2f:54:31:4d:86:68:bc:6e: 3b:91:fb:a7:5b:80:cf:e0:d4:9b:c1:c9:16:4e:b1:48:eb:8d: 89:2e:7b:1e:5b:6e:6b:e6:21:05:75:fc:3d:34:d3:e1:77:91: 43:32:78:a4:a0:fb:e2:61:b2:2a:3e:bb:4e:25:c8:50:d9:6a: d8:23:36:7e:f5:b7:31:8e:3f:78:ba:83:f9:c8:bb:ba:20:64: 60:4a:37:b5:54:3d:19:29:10:05:a6:3c:90:5b:4b:b2:71:a1: d0:31:de:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaL/E5H5MX/pUlhjSbLUZfIgi6sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTZFMzczNTFCMzZEQjg4OUVCNzFFNzlGMkFEMzc1 QjMxNUEyQzAeFw0yNDAxMDkwOTU5NTdaFw0yNDAxMTAxMzUxNTdaMDMxMTAvBgNV BAMTKENFNEVEMTQxQUIxN0MyNTMxRUI0Q0RDMUFEMzZDNkI4RDFGNEQ1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsXcOEDapsmeGskbj9sw73MrTu XJIQJMR89V+Ti6JwXSvjZbAzfT4BmxvHRtsI05fpSwqtWk9qsP4+v9JpEPjmXayF D3fnk7UTd+J3gwuYWxyZ8Ll5L/5uEhGE0ybFR/g6YE3XBif9sjMUFU+5r0vlozVV uEZ7aA3YhFnNI/uLa8kO9sskRnWrJnUqHiO8roHXSdmLsE+0pE2spBuCLlJV2tmm xPjnrYzeHRtqJP5W9kGwu6o27TDIYxT3T0Bk27bbokTEwv0FvhVfVsg1Y6I51FgT ix965FJ4Rqk8uVALpe49d4av7cczramzv7TmeJIC7WnhQjeRMclebTs+44r3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzk7RQasXwlMetM3BrTbGuNH01UMwHwYDVR0j BBgwFoAU8pVuNzUbNtuInrceefKtN1sxWiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF NFQvMC9GMjk1NkUzNzM1MUIzNkRCODg5RUI3MUU3OUYyQUQzNzVCMzE1QTJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyOTU2RTM3MzUxQjM2REI4 ODlFQjcxRTc5RjJBRDM3NUIzMTVBMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC9G Mjk1NkUzNzM1MUIzNkRCODg5RUI3MUU3OUYyQUQzNzVCMzE1QTJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtj1sIsPO2Nuo1wcCYSBZFu3dzWpz4i+dqm+LRvcp0nW+OKXxC9VkwyEWRzIS fCYTvz60JuXRuhQ/qDiYbZaaoLDQuGseYeC5ft/MIuA3XP/1mCyX3TbSF8601SUE RwukubtXMhgdWEe+hL+wy1sxSzjgR5qJzRYiCi6q8HUiqllBlGY4QYmtWcAOl7T2 nZnHl07frUL3OYTzUS9UMU2GaLxuO5H7p1uAz+DUm8HJFk6xSOuNiS57Hltua+Yh BXX8PTTT4XeRQzJ4pKD74mGyKj67TiXIUNlq2CM2fvW3MY4/eLqD+ci7uiBkYEo3 tVQ9GSkQBaY8kFtLsnGh0DHePw== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:33 2024 by rpki-client on console.sobornost.net