$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.mft File: C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.mft (raw, json) Hash identifier: 2cLIIGcH0ry9nmm42Nh01JtDPypdpdLb6hJZrSYJAjw= Subject key identifier: 01:A4:55:73:BE:A6:64:5B:FE:2A:4A:A6:03:AD:22:3A:30:CD:43:2C Authority key identifier: C8:2C:99:8B:F3:39:7F:BB:50:59:03:EB:A3:CF:0D:96:C7:DB:0B:7E Certificate issuer: /CN=C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E Certificate serial: 0237CFD93A56CC0692495C17979B848544F265C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.mft Manifest number: 0161 Signing time: Mon 08 Jan 2024 10:23:03 +0000 Manifest this update: Mon 08 Jan 2024 10:18:03 +0000 Manifest next update: Tue 09 Jan 2024 11:18:03 +0000 Files and hashes: 1: 34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa (hash: nOdXMohlnUrkhmlDPlfZqq2m6bSRs2r5LAo9kCwGzXY=) 2: 34352e3136352e3130372e302f32342d3234203d3e20323638363733.roa (hash: juIUNCWphg/LxXVYtPXuveZRZ3Bq7vnrrLywsxMou2E=) 3: 34352e3136352e3130352e302f32342d3234203d3e20323638363733.roa (hash: YiwFAZ9NZwBe0J41eFGgsBqir9ey8apUYKFXTF0SG8c=) 4: 34352e3136352e3130342e302f32322d3232203d3e20323638363733.roa (hash: vKh4o0UrKa7rUqNRaVc5pMBsmxnh2ROLXMtXkGtKrVs=) 5: 34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa (hash: 07RdICqSQ1n0dyi/9U/GrrN3w1j6jC9joVlD9os5QWs=) 6: 323830343a353464383a3a2f33322d3332203d3e20323638363733.roa (hash: TevLd5xygX2RmSDBw/84z7HWaz4XN55CT+IY61O0ONQ=) 7: C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.crl (hash: QrCoTPuoeUwJyh41/TTfjGwlDkiOstsE5TylfIggSo8=) 8: 34352e3136352e3130342e302f32332d3233203d3e20323638363733.roa (hash: M6B+Bn6NOHWcSjTwkrGSN9S8O+yjOq/pr9YR91Yu0tw=) 9: 34352e3136352e3130362e302f32332d3233203d3e20323638363733.roa (hash: 2ACTzGcnrGpnhNpoJrr4PibHVg/XMGl+utebznicf5M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.crl rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 09 Jan 2024 06:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:37:cf:d9:3a:56:cc:06:92:49:5c:17:97:9b:84:85:44:f2:65:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E Validity Not Before: Jan 8 10:18:03 2024 GMT Not After : Jan 9 11:18:03 2024 GMT Subject: CN=01A45573BEA6645BFE2A4AA603AD223A30CD432C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:0e:48:9d:13:3b:00:06:6d:8d:fc:e5:b7: 0d:b6:06:65:9c:19:44:2e:9c:43:48:36:2b:ca:04: 78:10:d5:82:5f:46:33:ca:c8:17:82:37:a5:b9:13: c1:12:ed:ba:58:26:e1:96:5c:cf:39:81:e5:d9:06: 71:03:1d:b5:48:56:ec:03:1e:60:dd:33:5d:9f:01: 5c:52:36:fd:4a:ff:79:bb:86:2d:a2:ce:a3:f4:a6: c9:04:e3:84:50:aa:2a:27:ee:6d:36:fc:6c:7a:07: 06:04:b3:b9:e0:31:a1:40:35:aa:0b:bf:a9:cd:4e: cc:7f:53:73:5d:c2:7f:0a:8d:7b:4a:f6:34:a3:21: 42:f7:13:bd:46:93:f1:5a:10:9d:9c:97:13:33:89: f2:e9:c0:7d:44:cd:c1:98:6e:af:cc:a8:43:65:b3: ed:d8:ab:3f:db:7d:8c:68:1b:38:e5:f3:14:18:32: 95:b1:9d:2a:1a:26:fd:16:06:ac:d9:87:d4:a8:13: 90:e4:aa:d7:6e:fc:bf:20:e9:eb:a1:85:c1:4b:c9: c9:df:3b:32:ce:40:7e:0f:b3:48:41:bf:e5:9f:b1: 97:a5:c5:84:89:98:b9:ea:85:83:8f:c2:30:b6:2a: e7:26:98:fb:03:18:e3:77:8a:5a:77:2f:ab:2a:1a: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A4:55:73:BE:A6:64:5B:FE:2A:4A:A6:03:AD:22:3A:30:CD:43:2C X509v3 Authority Key Identifier: keyid:C8:2C:99:8B:F3:39:7F:BB:50:59:03:EB:A3:CF:0D:96:C7:DB:0B:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/C82C998BF3397FBB505903EBA3CF0D96C7DB0B7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b0:a2:88:41:f8:41:06:12:8b:0e:7f:e7:17:cc:05:7e:72: 02:e4:a3:4e:69:70:a8:db:2b:80:0d:96:60:fc:3b:dc:a8:21: 95:e6:9c:62:24:25:bb:56:ee:ef:19:ee:ef:20:20:70:0a:0f: 5f:8e:29:cc:2a:25:fb:7d:12:be:b6:ec:84:38:7c:8c:f5:08: 6f:bc:fb:a5:0b:e8:3e:93:f7:8f:73:cc:89:0b:fd:1d:b6:b0: bf:aa:56:d0:99:03:47:08:f9:63:b8:76:cf:57:c6:23:ab:bf: b9:d5:84:6b:7e:b1:a3:d5:1e:14:51:06:44:c7:c7:50:44:4e: c8:41:81:3e:df:8d:ea:44:ad:21:3d:84:9f:a2:30:36:8f:9b: 88:5c:38:94:0e:82:e1:96:b4:55:6d:d3:2a:d8:28:c8:5a:f6: d8:dd:e9:3e:8f:08:7d:f0:fe:a5:ab:37:cb:ea:45:5d:cb:2d: e9:36:e6:49:a6:a1:77:25:31:d4:d9:e2:e0:34:a5:c5:35:ed: e4:4a:16:a0:53:b7:58:ac:d1:ab:77:2f:c7:df:79:ec:99:af: 7a:af:0b:ea:c3:7a:4b:ee:6e:2c:d2:87:e1:57:f7:51:e6:a1: aa:5d:76:ee:93:da:50:97:05:4b:b8:70:77:c3:45:67:58:c0: e8:6d:ad:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAjfP2TpWzAaSSVwXl5uEhUTyZcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgyQzk5OEJGMzM5N0ZCQjUwNTkwM0VCQTNDRjBEOTZD N0RCMEI3RTAeFw0yNDAxMDgxMDE4MDNaFw0yNDAxMDkxMTE4MDNaMDMxMTAvBgNV BAMTKDAxQTQ1NTczQkVBNjY0NUJGRTJBNEFBNjAzQUQyMjNBMzBDRDQzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoQ5InRM7AAZtjfzltw22BmWc GUQunENINivKBHgQ1YJfRjPKyBeCN6W5E8ES7bpYJuGWXM85geXZBnEDHbVIVuwD HmDdM12fAVxSNv1K/3m7hi2izqP0pskE44RQqion7m02/Gx6BwYEs7ngMaFANaoL v6nNTsx/U3Ndwn8KjXtK9jSjIUL3E71Gk/FaEJ2clxMzifLpwH1EzcGYbq/MqENl s+3Yqz/bfYxoGzjl8xQYMpWxnSoaJv0WBqzZh9SoE5Dkqtdu/L8g6euhhcFLycnf OzLOQH4Ps0hBv+WfsZelxYSJmLnqhYOPwjC2KucmmPsDGON3ilp3L6sqGtcLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAaRVc76mZFv+KkqmA60iOjDNQywwHwYDVR0j BBgwFoAUyCyZi/M5f7tQWQPro88NlsfbC34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVh5UHd5c2FoU01iZXppQkNwalN2NjFqak55UjFkVzlqZ3FzYVAyWk1X Q2EvMC9DODJDOTk4QkYzMzk3RkJCNTA1OTAzRUJBM0NGMEQ5NkM3REIwQjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4MkM5OThCRjMzOTdGQkI1 MDU5MDNFQkEzQ0YwRDk2QzdEQjBCN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVh5UHd5c2FoU01iZXppQkNwalN2NjFqak55UjFkVzlqZ3FzYVAyWk1XQ2EvMC9D ODJDOTk4QkYzMzk3RkJCNTA1OTAzRUJBM0NGMEQ5NkM3REIwQjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq7CiiEH4QQYSiw5/5xfMBX5yAuSjTmlwqNsrgA2WYPw73KghleacYiQlu1bu 7xnu7yAgcAoPX44pzCol+30SvrbshDh8jPUIb7z7pQvoPpP3j3PMiQv9Hbawv6pW 0JkDRwj5Y7h2z1fGI6u/udWEa36xo9UeFFEGRMfHUEROyEGBPt+N6kStIT2En6Iw No+biFw4lA6C4Za0VW3TKtgoyFr22N3pPo8IffD+pas3y+pFXcst6TbmSaahdyUx 1Nni4DSlxTXt5EoWoFO3WKzRq3cvx9957Jmveq8L6sN6S+5uLNKH4Vf3Ueahql12 7pPaUJcFS7hwd8NFZ1jA6G2tjA== -----END CERTIFICATE-----Generated at Mon Jan 8 13:03:34 2024 by rpki-client on console.sobornost.net