$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft File: 70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft (raw, json) Hash identifier: X2kmV/L0x/5oNA0SHtNeWUTdcYMykemGBFq/VbSJbRA= Subject key identifier: A7:31:88:DF:5D:ED:F2:0A:5E:BB:C6:01:8F:2B:A2:B1:B8:26:E5:84 Authority key identifier: 70:E1:6C:82:EF:43:3C:86:72:E0:C2:0D:79:62:F1:7F:A0:3B:D3:A1 Certificate issuer: /CN=70E16C82EF433C8672E0C20D7962F17FA03BD3A1 Certificate serial: 1A74F6E5CEF29F0ABD0FAE9A62C636983B179719 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.cer Subject info access: rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft Manifest number: 0234 Signing time: Tue 09 Jan 2024 08:13:54 +0000 Manifest this update: Tue 09 Jan 2024 08:08:54 +0000 Manifest next update: Wed 10 Jan 2024 09:35:54 +0000 Files and hashes: 1: 70E16C82EF433C8672E0C20D7962F17FA03BD3A1.crl (hash: MKzpCfbgEG+eBiMPnjd2H30cyLbD0poexzIszm0WfLI=) 2: 323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (hash: kfl/hysEEXGb8+vFL+z3X2Xo6Nzns4MT1bo4knh+zEo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.crl rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 09:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:74:f6:e5:ce:f2:9f:0a:bd:0f:ae:9a:62:c6:36:98:3b:17:97:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70E16C82EF433C8672E0C20D7962F17FA03BD3A1 Validity Not Before: Jan 9 08:08:54 2024 GMT Not After : Jan 10 09:35:54 2024 GMT Subject: CN=A73188DF5DEDF20A5EBBC6018F2BA2B1B826E584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:3c:ef:03:f9:67:c5:61:72:4b:f8:f1:94: 0b:53:d1:b2:cc:f1:4b:99:fb:67:b0:4b:c3:02:30: 2d:ce:7c:62:e0:3f:01:71:24:a4:db:a0:70:6e:48: db:19:b1:51:6f:7a:88:46:a9:df:bb:86:09:47:43: 6b:8b:c9:6f:a2:3f:4e:76:30:47:36:46:f0:96:f7: e8:57:69:80:52:6e:73:a5:0f:df:5c:59:5a:5d:1e: 6e:ef:a4:f6:02:d7:00:d1:86:90:61:af:21:16:82: a2:68:5c:43:80:fa:1b:04:f0:02:a6:20:91:4f:05: d6:94:18:7c:67:06:c7:d2:85:45:f2:37:28:7c:62: 30:53:01:c4:08:7e:60:ab:ea:63:a7:a3:5d:10:cc: 80:51:9f:eb:f7:32:4d:d8:b6:61:aa:1e:28:b2:c2: e3:56:af:da:de:4d:aa:7c:54:a8:4d:ea:23:f1:6b: f1:c7:c6:94:50:72:62:eb:6c:00:53:b8:a0:60:10: c4:e1:f7:75:d0:cc:73:7a:18:d4:3e:ae:88:94:f6: a5:ac:12:c6:00:b0:57:44:a9:fb:db:b1:21:bd:7f: cf:4a:ea:31:5b:87:22:8b:cc:dc:fd:9d:9e:0e:ca: a2:d7:be:c1:9a:c3:0f:bd:98:95:25:c4:2f:78:cd: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:31:88:DF:5D:ED:F2:0A:5E:BB:C6:01:8F:2B:A2:B1:B8:26:E5:84 X509v3 Authority Key Identifier: keyid:70:E1:6C:82:EF:43:3C:86:72:E0:C2:0D:79:62:F1:7F:A0:3B:D3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/70E16C82EF433C8672E0C20D7962F17FA03BD3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8d:78:ed:c7:47:3d:01:4f:cf:fe:83:6f:a3:79:78:a8:3a: 5f:f7:93:2b:bd:b3:e5:87:6c:66:41:45:2a:e0:02:58:f2:be: 2a:f7:93:d5:cb:bf:1f:89:7e:d1:e2:b1:2e:47:35:4b:61:e2: 22:c5:eb:35:fa:17:12:3e:4d:e4:03:2a:ec:49:b7:fa:c4:17: f7:a6:65:a5:24:b6:24:04:47:dd:b1:3e:64:a0:bd:ac:da:2f: 99:f4:08:84:eb:0e:30:1f:e2:65:06:e4:03:54:d3:c5:6d:e4: 76:ed:5a:7e:d0:6a:c5:46:dd:69:33:7f:fd:c9:08:45:6d:16: dd:26:f5:a0:5a:2f:25:6c:5d:fd:1d:34:c3:40:f2:4e:e7:7e: 04:c9:05:cf:06:42:1c:bb:05:dd:51:3e:f7:a3:93:eb:23:93: 61:4e:14:db:8d:91:a0:5c:93:f7:9c:54:d8:68:69:0c:be:23: 5b:27:97:df:f1:7f:19:98:b0:0d:46:1d:95:85:81:62:8b:89: 5b:88:1b:b4:d2:3a:da:dd:bf:ab:15:79:72:3e:3e:b1:1a:92: b9:a7:56:4c:4b:a2:fa:27:01:6c:f3:e3:b3:a8:5b:9b:0d:ff: eb:b3:ea:4b:07:84:95:f1:ad:0c:c9:cf:d2:81:5a:ab:23:a8: 13:76:93:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGnT25c7ynwq9D66aYsY2mDsXlxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFMTZDODJFRjQzM0M4NjcyRTBDMjBENzk2MkYxN0ZB MDNCRDNBMTAeFw0yNDAxMDkwODA4NTRaFw0yNDAxMTAwOTM1NTRaMDMxMTAvBgNV BAMTKEE3MzE4OERGNURFREYyMEE1RUJCQzYwMThGMkJBMkIxQjgyNkU1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJzzvA/lnxWFyS/jxlAtT0bLM 8UuZ+2ewS8MCMC3OfGLgPwFxJKTboHBuSNsZsVFveohGqd+7hglHQ2uLyW+iP052 MEc2RvCW9+hXaYBSbnOlD99cWVpdHm7vpPYC1wDRhpBhryEWgqJoXEOA+hsE8AKm IJFPBdaUGHxnBsfShUXyNyh8YjBTAcQIfmCr6mOno10QzIBRn+v3Mk3YtmGqHiiy wuNWr9reTap8VKhN6iPxa/HHxpRQcmLrbABTuKBgEMTh93XQzHN6GNQ+roiU9qWs EsYAsFdEqfvbsSG9f89K6jFbhyKLzNz9nZ4OyqLXvsGaww+9mJUlxC94zXhJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpzGI313t8gpeu8YBjyuisbgm5YQwHwYDVR0j BBgwFoAUcOFsgu9DPIZy4MINeWLxf6A706EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWFGNUxBSHM4bTFFV3Bza2ZmcEh3bmlDWTZkY1BIOUtLUzZjWUtjblRw SEIvMC83MEUxNkM4MkVGNDMzQzg2NzJFMEMyMEQ3OTYyRjE3RkEwM0JEM0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcwRTE2QzgyRUY0MzNDODY3 MkUwQzIwRDc5NjJGMTdGQTAzQkQzQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWFGNUxBSHM4bTFFV3Bza2ZmcEh3bmlDWTZkY1BIOUtLUzZjWUtjblRwSEIvMC83 MEUxNkM4MkVGNDMzQzg2NzJFMEMyMEQ3OTYyRjE3RkEwM0JEM0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqo147cdHPQFPz/6Db6N5eKg6X/eTK72z5YdsZkFFKuACWPK+KveT1cu/H4l+ 0eKxLkc1S2HiIsXrNfoXEj5N5AMq7Em3+sQX96ZlpSS2JARH3bE+ZKC9rNovmfQI hOsOMB/iZQbkA1TTxW3kdu1aftBqxUbdaTN//ckIRW0W3Sb1oFovJWxd/R00w0Dy Tud+BMkFzwZCHLsF3VE+96OT6yOTYU4U242RoFyT95xU2GhpDL4jWyeX3/F/GZiw DUYdlYWBYouJW4gbtNI62t2/qxV5cj4+sRqSuadWTEui+icBbPPjs6hbmw3/67Pq SweElfGtDMnP0oFaqyOoE3aTug== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:44 2024 by rpki-client on console.sobornost.net