$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.mft File: 2CDB1B0F649BDAD0B722D2123205665D270BFEDF.mft (raw, json) Hash identifier: aNL4lu9a9XCduSI8YvdA8QLxVhqTKyVwH7IrztXwKTA= Subject key identifier: 94:04:6A:37:2B:DE:22:FB:94:CC:5D:66:16:31:08:82:1D:31:C2:B9 Authority key identifier: 2C:DB:1B:0F:64:9B:DA:D0:B7:22:D2:12:32:05:66:5D:27:0B:FE:DF Certificate issuer: /CN=2CDB1B0F649BDAD0B722D2123205665D270BFEDF Certificate serial: 5490BDDD86E220E0F3A3907849C627AF6BE125E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.cer Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.mft Manifest number: 028A Signing time: Tue 09 Jan 2024 13:14:00 +0000 Manifest this update: Tue 09 Jan 2024 13:09:00 +0000 Manifest next update: Wed 10 Jan 2024 13:14:00 +0000 Files and hashes: 1: 323830343a3232303a3a2f33322d3438203d3e20323632373931.roa (hash: LCkA8wUnfeFIdotNXKqOAfVLcVificvTI49NYelF3es=) 2: 3136382e302e3130382e302f32322d3234203d3e20323632373931.roa (hash: Qq4nCO16HC8tpGyn9chXRDWlwxk/8BZvl5tHObG9CO0=) 3: 3138362e3233332e3139322e302f32312d3234203d3e20323632373931.roa (hash: oWAMsbreLslxypHqp3aW3QsQEIyIvS3HEr7s5o+Uvuo=) 4: 2CDB1B0F649BDAD0B722D2123205665D270BFEDF.crl (hash: vHx+W2COhapkfsbLKlbsiWxAKHuuM3dMrJlbKN4FAnU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.crl rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 13:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:90:bd:dd:86:e2:20:e0:f3:a3:90:78:49:c6:27:af:6b:e1:25:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CDB1B0F649BDAD0B722D2123205665D270BFEDF Validity Not Before: Jan 9 13:09:00 2024 GMT Not After : Jan 16 13:14:00 2024 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:41:6b:98:22:7f:09:3a:6e:6d:c9:eb:31: 2c:1f:df:2d:83:5a:b6:05:28:d8:8f:8a:29:da:e3: 28:a3:4b:15:d7:b8:6c:a0:31:d3:88:11:0f:f1:29: 12:68:52:7e:47:2d:f1:4d:a9:bf:25:37:a6:2a:9b: dd:9d:98:ac:29:c1:05:1d:4e:b9:94:53:0f:aa:8c: 14:2c:70:77:40:fe:5a:ea:d9:69:42:4b:79:e6:55: 3b:33:00:50:cd:87:e3:c6:1c:19:3b:67:cb:23:7a: 56:10:f6:68:c3:5b:34:d7:67:6e:e5:b9:cf:c1:de: 37:bc:57:a5:8e:5a:43:77:eb:fe:d4:41:6d:6e:0c: cb:e3:52:3b:17:f3:ea:c7:59:5a:7d:70:8e:02:ca: 3b:d8:34:04:07:42:36:ad:ce:40:1c:ff:5c:05:4f: e7:aa:f2:9a:38:bd:0e:b9:b9:5b:50:99:86:f2:0a: db:be:df:f2:18:43:18:56:96:4d:5f:79:a3:82:a0: 09:64:88:57:58:5c:4c:85:50:0e:e8:fc:95:37:af: 45:1b:97:25:41:9f:95:4a:df:88:26:13:b3:99:62: 59:65:71:20:03:8d:69:21:4b:f9:9a:50:ae:8e:1c: 96:94:63:85:0b:e6:e9:51:a4:97:74:8d:b9:a9:77: 61:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:04:6A:37:2B:DE:22:FB:94:CC:5D:66:16:31:08:82:1D:31:C2:B9 X509v3 Authority Key Identifier: keyid:2C:DB:1B:0F:64:9B:DA:D0:B7:22:D2:12:32:05:66:5D:27:0B:FE:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:eb:7c:af:b8:63:91:2e:dd:a4:e4:5a:c6:97:70:65:e2:7f: 69:d3:5d:f9:67:18:08:50:81:cc:d4:3f:0b:8b:63:a0:76:be: d6:c9:2c:9d:0f:70:44:f5:51:64:4a:14:2d:11:e3:68:9a:b0: 3a:74:73:92:94:d1:30:46:99:e6:95:99:db:37:ac:f5:97:75: 12:08:97:b0:50:b7:3d:a7:57:0e:49:6c:5e:04:e1:41:66:50: d8:1e:04:2d:a9:5b:ba:b8:e8:ab:6e:26:58:40:78:2a:93:5b: 46:a0:6f:b1:c0:03:c8:09:27:ed:ff:4b:5b:65:25:8e:bf:87: 23:0b:06:dc:36:c1:f6:c6:8a:96:c4:23:3c:3e:ff:88:88:2d: 01:c5:44:01:86:0c:49:2f:74:cd:3e:e7:69:85:47:37:bf:c7: 25:e0:c7:b1:5b:31:b5:c5:98:68:5c:91:3f:e9:31:61:23:7e: b5:3c:3f:b1:88:41:6a:bb:86:60:c9:df:74:38:aa:d3:17:48: bb:c1:a3:55:e6:18:20:e0:c4:88:9c:8a:d5:bd:4f:97:5d:ca: b4:b3:d5:cc:9c:4d:cc:40:06:f1:e9:47:7c:a3:23:ab:6f:a8: ae:dc:75:2b:7e:0d:7e:e8:c8:3f:dd:24:9a:eb:5f:a4:a3:10: f9:2a:a6:27 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUVJC93YbiIODzo5B4ScYnr2vhJeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNEQjFCMEY2NDlCREFEMEI3MjJEMjEyMzIwNTY2NUQy NzBCRkVERjAeFw0yNDAxMDkxMzA5MDBaFw0yNDAxMTYxMzE0MDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NGODQxNkI5ODIyN0YwOTNB NkU2REM5RUIzMTJDMUZERjJEODM1QUI2MDUyOEQ4OEY4QTI5REFFMzI4QTM0QjE1 RDdCODZDQTAzMUQzODgxMTBGRjEyOTEyNjg1MjdFNDcyREYxNERBOUJGMjUzN0E2 MkE5QkREOUQ5OEFDMjlDMTA1MUQ0RUI5OTQ1MzBGQUE4QzE0MkM3MDc3NDBGRTVB RUFEOTY5NDI0Qjc5RTY1NTNCMzMwMDUwQ0Q4N0UzQzYxQzE5M0I2N0NCMjM3QTU2 MTBGNjY4QzM1QjM0RDc2NzZFRTVCOUNGQzFERTM3QkM1N0E1OEU1QTQzNzdFQkZF RDQ0MTZENkUwQ0NCRTM1MjNCMTdGM0VBQzc1OTVBN0Q3MDhFMDJDQTNCRDgzNDA0 MDc0MjM2QURDRTQwMUNGRjVDMDU0RkU3QUFGMjlBMzhCRDBFQjlCOTVCNTA5OTg2 RjIwQURCQkVERkYyMTg0MzE4NTY5NjRENUY3OUEzODJBMDA5NjQ4ODU3NTg1QzRD ODU1MDBFRThGQzk1MzdBRjQ1MUI5NzI1NDE5Rjk1NEFERjg4MjYxM0IzOTk2MjU5 NjU3MTIwMDM4RDY5MjE0QkY5OUE1MEFFOEUxQzk2OTQ2Mzg1MEJFNkU5NTFBNDk3 NzQ4REI5QTk3NzYxMEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzPhBa5gifwk6bm3J6zEsH98tg1q2BSjYj4op2uMoo0sV17hsoDHT iBEP8SkSaFJ+Ry3xTam/JTemKpvdnZisKcEFHU65lFMPqowULHB3QP5a6tlpQkt5 5lU7MwBQzYfjxhwZO2fLI3pWEPZow1s012du5bnPwd43vFeljlpDd+v+1EFtbgzL 41I7F/Pqx1lafXCOAso72DQEB0I2rc5AHP9cBU/nqvKaOL0OublbUJmG8grbvt/y GEMYVpZNX3mjgqAJZIhXWFxMhVAO6PyVN69FG5clQZ+VSt+IJhOzmWJZZXEgA41p IUv5mlCujhyWlGOFC+bpUaSXdI25qXdhDwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FJQEajcr3iL7lMxdZhYxCIIdMcK5MB8GA1UdIwQYMBaAFCzbGw9km9rQtyLSEjIF Zl0nC/7fMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNvbURCM3p4SlcxZTdu TVp0SlpWb2VlazJKVE1MMzR4MXgycTF0S25tZ1hRLzAvMkNEQjFCMEY2NDlCREFE MEI3MjJEMjEyMzIwNTY2NUQyNzBCRkVERi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMC8yQ0RCMUIwRjY0OUJEQUQwQjcyMkQyMTIzMjA1NjY1RDI3MEJG RURGLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNvbURCM3p4SlcxZTduTVp0SlpW b2VlazJKVE1MMzR4MXgycTF0S25tZ1hRLzAvMkNEQjFCMEY2NDlCREFEMEI3MjJE MjEyMzIwNTY2NUQyNzBCRkVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALnrfK+4Y5Eu3aTkWsaXcGXi f2nTXflnGAhQgczUPwuLY6B2vtbJLJ0PcET1UWRKFC0R42iasDp0c5KU0TBGmeaV mds3rPWXdRIIl7BQtz2nVw5JbF4E4UFmUNgeBC2pW7q46KtuJlhAeCqTW0agb7HA A8gJJ+3/S1tlJY6/hyMLBtw2wfbGipbEIzw+/4iILQHFRAGGDEkvdM0+52mFRze/ xyXgx7FbMbXFmGhckT/pMWEjfrU8P7GIQWq7hmDJ33Q4qtMXSLvBo1XmGCDgxIic itW9T5ddyrSz1cycTcxABvHpR3yjI6tvqK7cdSt+DX7oyD/dJJrrX6SjEPkqpic= -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:10 2024 by rpki-client on console.sobornost.net