$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft File: 3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft (raw, json) Hash identifier: VnJo1G3zdrnWETuZR/Mc5RV9iYTEeM5h6Xe7sSdskDg= Subject key identifier: C4:D0:60:26:3A:EC:65:24:CE:DB:80:85:58:88:15:46:50:06:F6:B3 Authority key identifier: 3D:C4:EF:0A:2B:33:6F:8F:53:61:AC:AB:D8:52:7F:04:BC:5E:D5:C9 Certificate issuer: /CN=3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9 Certificate serial: 6CB7E4CDA8C73A702911C872C15B1D887442D907 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft Manifest number: 01CE Signing time: Tue 09 Jan 2024 13:55:40 +0000 Manifest this update: Tue 09 Jan 2024 13:50:40 +0000 Manifest next update: Wed 10 Jan 2024 16:29:40 +0000 Files and hashes: 1: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: NaAcjvzOLekJmrrKhkqvfdr1RwQnpkNywAUxwIXIEQI=) 2: 323830343a343030343a3a2f33322d3336203d3e20323635393238.roa (hash: XLS8kF5S52VGLuERwT+eVDY2bx4XzuEIDguORwq7zrg=) 3: 3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.crl (hash: KbLk8qVJuLwzqCtU67BptkMQLimJbzy01IHQnaJBJ7k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.crl rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 16:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b7:e4:cd:a8:c7:3a:70:29:11:c8:72:c1:5b:1d:88:74:42:d9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9 Validity Not Before: Jan 9 13:50:40 2024 GMT Not After : Jan 10 16:29:40 2024 GMT Subject: CN=C4D060263AEC6524CEDB8085588815465006F6B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f0:93:c4:59:d1:bc:34:b3:d4:cd:8f:f6:82: fd:82:ab:e5:2e:7c:a8:e6:a4:f6:e6:0f:36:5e:7d: 3b:e0:0f:cd:d1:15:ae:9c:7e:55:4f:29:66:be:9e: 24:42:8b:fe:4d:d0:ae:39:cf:a5:3d:35:ae:40:f1: f0:52:48:c8:28:ef:01:25:ce:09:1f:53:da:57:7c: ed:ca:7c:dc:29:bf:33:a6:0c:0d:bd:d5:94:08:06: e3:e4:2f:31:fe:d0:70:a5:9d:ab:9e:54:0e:47:66: 8e:7c:40:44:ea:84:c4:63:77:61:48:dd:71:b8:e8: 45:67:bf:36:bd:a7:64:d1:b2:52:02:07:a5:42:4c: 44:16:9b:6f:c4:7e:dc:55:ea:ba:f4:fd:bd:cb:5e: e2:03:f7:6b:57:11:8d:45:af:4a:0d:b8:d5:3a:3a: 16:58:ff:70:81:b2:c3:a0:27:e4:e9:6f:64:e8:22: fc:8a:74:f2:bf:f8:88:4f:98:b0:a6:fd:a0:56:dd: b3:16:7b:e6:f8:81:79:3e:8b:85:8c:c3:4f:3c:4c: 4b:08:fb:a5:ff:f8:87:dc:7f:c4:89:84:e5:4d:cb: c4:78:64:65:37:86:14:b9:40:66:bb:4e:a1:ad:fa: 65:aa:41:f9:ef:3a:7f:07:53:25:3b:d9:d5:d6:2c: 30:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D0:60:26:3A:EC:65:24:CE:DB:80:85:58:88:15:46:50:06:F6:B3 X509v3 Authority Key Identifier: keyid:3D:C4:EF:0A:2B:33:6F:8F:53:61:AC:AB:D8:52:7F:04:BC:5E:D5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:42:90:49:52:1e:82:a4:d6:de:3c:a1:23:cf:64:e4:74: 6e:40:24:6b:fb:13:83:89:2e:e0:4f:14:6a:57:4c:29:18:0e: 2f:ff:5f:01:aa:07:15:51:1e:ee:0f:e4:17:1d:17:b5:3a:32: 51:1e:63:eb:be:68:9a:d9:26:c9:1d:02:bc:26:f0:8d:36:c9: 48:c5:01:dc:fd:1d:97:80:e8:20:2b:62:c3:8b:ae:54:01:c0: d8:45:ae:ea:38:7b:a5:1a:cd:8a:45:64:cd:59:84:7c:6e:69: 54:dd:9a:d6:0e:0e:bf:cf:c0:20:80:fd:ea:49:c5:84:ba:55: 90:b8:7c:96:5c:70:f8:dc:66:85:97:4d:29:49:72:f0:b0:1d: d7:fe:59:47:e1:3a:d9:2b:d2:0e:bb:a5:09:6f:18:7e:66:25: a7:68:02:66:fa:d0:1a:80:28:de:4b:e1:20:c9:dd:30:07:43: bd:5a:96:41:8c:ac:7d:1f:1f:ae:2d:81:74:49:19:0c:3a:fe: 83:0f:53:95:4b:dd:49:d8:b4:8e:4a:a0:9b:90:41:b5:33:d0: 25:58:71:f3:71:b2:35:0e:8a:52:28:f2:d5:40:13:cb:41:c5: f9:62:1e:6d:69:10:ee:c2:26:08:c4:84:34:c5:45:08:f5:4d: 73:f7:bd:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbLfkzajHOnApEchywVsdiHRC2QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDNEVGMEEyQjMzNkY4RjUzNjFBQ0FCRDg1MjdGMDRC QzVFRDVDOTAeFw0yNDAxMDkxMzUwNDBaFw0yNDAxMTAxNjI5NDBaMDMxMTAvBgNV BAMTKEM0RDA2MDI2M0FFQzY1MjRDRURCODA4NTU4ODgxNTQ2NTAwNkY2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo8JPEWdG8NLPUzY/2gv2Cq+Uu fKjmpPbmDzZefTvgD83RFa6cflVPKWa+niRCi/5N0K45z6U9Na5A8fBSSMgo7wEl zgkfU9pXfO3KfNwpvzOmDA291ZQIBuPkLzH+0HClnaueVA5HZo58QETqhMRjd2FI 3XG46EVnvza9p2TRslICB6VCTEQWm2/EftxV6rr0/b3LXuID92tXEY1Fr0oNuNU6 OhZY/3CBssOgJ+Tpb2ToIvyKdPK/+IhPmLCm/aBW3bMWe+b4gXk+i4WMw088TEsI +6X/+Ifcf8SJhOVNy8R4ZGU3hhS5QGa7TqGt+mWqQfnvOn8HUyU72dXWLDCZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxNBgJjrsZSTO24CFWIgVRlAG9rMwHwYDVR0j BBgwFoAUPcTvCiszb49TYayr2FJ/BLxe1ckwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNa SmkvMC8zREM0RUYwQTJCMzM2RjhGNTM2MUFDQUJEODUyN0YwNEJDNUVENUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNEQzRFRjBBMkIzMzZGOEY1 MzYxQUNBQkQ4NTI3RjA0QkM1RUQ1QzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNaSmkvMC8z REM0RUYwQTJCMzM2RjhGNTM2MUFDQUJEODUyN0YwNEJDNUVENUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW2NCkElSHoKk1t48oSPPZOR0bkAka/sTg4ku4E8UaldMKRgOL/9fAaoHFVEe 7g/kFx0XtToyUR5j675omtkmyR0CvCbwjTbJSMUB3P0dl4DoICtiw4uuVAHA2EWu 6jh7pRrNikVkzVmEfG5pVN2a1g4Ov8/AIID96knFhLpVkLh8llxw+NxmhZdNKUly 8LAd1/5ZR+E62SvSDrulCW8YfmYlp2gCZvrQGoAo3kvhIMndMAdDvVqWQYysfR8f ri2BdEkZDDr+gw9TlUvdSdi0jkqgm5BBtTPQJVhx83GyNQ6KUijy1UATy0HF+WIe bWkQ7sImCMSENMVFCPVNc/e9UQ== -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:16 2024 by rpki-client on console.sobornost.net