$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.mft File: 8C82F765CC710D7E2CA750E73CF161ADF599A011.mft (raw, json) Hash identifier: pW50f0n5tFx+S39JU55Qt5Ez+myJvgs46qT99WmjHB4= Subject key identifier: 88:A3:58:8E:7C:FE:7F:30:EE:27:5B:7C:D2:C6:53:BC:78:C4:99:A5 Authority key identifier: 8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11 Certificate issuer: /CN=8C82F765CC710D7E2CA750E73CF161ADF599A011 Certificate serial: 2E0CA9A7220458CBFDE06401EBD3BBFADA0DE791 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.mft Manifest number: 0169 Signing time: Tue 09 Jan 2024 07:04:04 +0000 Manifest this update: Tue 09 Jan 2024 06:59:04 +0000 Manifest next update: Wed 10 Jan 2024 07:32:04 +0000 Files and hashes: 1: 8C82F765CC710D7E2CA750E73CF161ADF599A011.crl (hash: 2TdQk98dk2UpWifeC6xBPqUndp1N8cZ4Jeb9P+ahqO8=) 2: 3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa (hash: 37l0DV1E9XuJ3HzQ3wZEmBGJYg3zetv6WNuE3gwlYVU=) 3: 323830343a313934633a3a2f33322d3332203d3e203631373835.roa (hash: mRXy7iwvXjAYDO8LB/5B39ON8KL6EevLurf3/YHwdeM=) 4: 3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa (hash: ZjbhMDtPrOKaFmnCq8eYL7Y1NEkbZuvF4i95rDhUYbM=) 5: 3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa (hash: /ddB/3BBmnIvm5mZqxFeGAsI3cVnG9FHyoOPqpNidl0=) 6: 3230312e3133312e3135322e302f32342d3234203d3e203631373835.roa (hash: FgDQtlYKj5xjyjM5mIB2aqJGo1WHF5P74JhWGzs3HmI=) 7: 3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa (hash: Dy87a7bA2k0EODMQCzS2xZhI97EA9hC4d+j+7JOWJzo=) 8: 3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa (hash: IQfloOkTG3UTlmlM91kiXjwICugldj+mJ1KoZ3kaoO4=) 9: 3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa (hash: pGkvbX1ZOhheI9Z0kMJmlDYToFl9tTJgWvHdtMuRuQk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.crl rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 07:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0c:a9:a7:22:04:58:cb:fd:e0:64:01:eb:d3:bb:fa:da:0d:e7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C82F765CC710D7E2CA750E73CF161ADF599A011 Validity Not Before: Jan 9 06:59:04 2024 GMT Not After : Jan 10 07:32:04 2024 GMT Subject: CN=88A3588E7CFE7F30EE275B7CD2C653BC78C499A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:f7:74:18:be:df:3f:47:d2:84:01:c1:26: b0:4a:5e:f9:17:a8:61:ba:6e:2e:c1:aa:0b:ab:85: 0c:74:5d:3f:15:e2:b2:f7:85:4f:f2:21:6c:ae:58: c3:e5:17:dc:77:52:e3:c2:fb:88:d3:63:a0:07:3a: 97:80:ef:8c:3e:c6:1f:fd:0a:87:d9:c8:24:98:8d: 35:7b:bd:37:30:ec:3c:81:da:57:55:3e:db:74:0a: 9e:a4:ee:08:a1:3c:83:e9:46:db:a8:f1:c1:1c:89: 4e:52:7e:1c:7a:27:1f:60:a2:61:32:40:70:25:80: 35:1c:b9:39:2c:89:0a:ee:5b:36:47:48:6c:2a:22: 1f:1a:30:9c:14:6b:e9:f4:0c:66:82:b3:dc:a5:8c: 4e:6c:f2:51:8b:55:b6:62:6f:20:91:cc:f5:71:ad: 05:11:0b:ed:59:bf:71:21:21:4d:84:91:7b:2b:42: b3:7e:19:ca:21:63:e4:54:97:57:9d:4c:17:e3:5a: 66:7a:cd:29:c1:4a:f4:ed:03:04:72:b4:fc:75:ca: 44:ff:e9:29:44:9d:e8:a1:3b:b0:56:80:f7:60:7a: d4:07:ea:53:04:be:cd:d2:35:6f:7e:9d:52:09:d8: c6:c5:d5:a5:6e:c0:94:db:2b:79:eb:14:21:56:2b: b8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A3:58:8E:7C:FE:7F:30:EE:27:5B:7C:D2:C6:53:BC:78:C4:99:A5 X509v3 Authority Key Identifier: keyid:8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1a:28:5d:65:b9:7e:46:b1:75:90:34:87:19:78:66:ee:df: 9f:34:a8:b6:b3:78:f3:9a:14:87:51:4a:32:ad:18:12:af:ca: 33:a2:77:44:e6:d8:0d:b9:78:c1:b1:f9:63:0e:60:80:ec:c3: 97:2e:d1:c8:0d:f3:bb:e4:92:33:06:dc:46:df:a8:67:bd:65: fe:09:36:63:9e:06:79:06:64:43:e1:1e:23:c7:ab:c3:f3:c0: 84:61:b4:1a:a6:6c:d6:02:f2:ae:6e:45:10:1b:56:f9:39:06: 5e:f8:f6:5d:64:e3:da:c3:b1:00:b7:7e:84:a3:aa:92:55:50: 4c:30:72:8c:73:b6:95:69:41:19:25:e3:a7:16:25:35:da:47: 6e:93:45:a4:c2:de:17:a5:01:78:ec:f9:6c:23:ac:e5:db:aa: 04:f8:1a:6c:8a:3b:7d:93:66:56:c2:e2:cf:97:9e:71:79:a8: 07:c5:60:58:2d:cf:e2:c2:c2:5f:49:76:dc:a4:3a:83:55:02: bf:d9:f4:5c:40:a1:2b:9d:93:db:53:e3:a9:f2:fe:99:1d:71: 49:0c:9b:af:01:1f:86:2e:ad:69:28:11:37:4f:ce:aa:c4:94: 5d:02:6d:92:42:fe:b2:d4:bf:d4:6c:14:b3:6b:2d:fd:2e:81: cd:78:cb:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULgyppyIEWMv94GQB69O7+toN55EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4MkY3NjVDQzcxMEQ3RTJDQTc1MEU3M0NGMTYxQURG NTk5QTAxMTAeFw0yNDAxMDkwNjU5MDRaFw0yNDAxMTAwNzMyMDRaMDMxMTAvBgNV BAMTKDg4QTM1ODhFN0NGRTdGMzBFRTI3NUI3Q0QyQzY1M0JDNzhDNDk5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlvd0GL7fP0fShAHBJrBKXvkX qGG6bi7BqgurhQx0XT8V4rL3hU/yIWyuWMPlF9x3UuPC+4jTY6AHOpeA74w+xh/9 CofZyCSYjTV7vTcw7DyB2ldVPtt0Cp6k7gihPIPpRtuo8cEciU5Sfhx6Jx9gomEy QHAlgDUcuTksiQruWzZHSGwqIh8aMJwUa+n0DGaCs9yljE5s8lGLVbZibyCRzPVx rQURC+1Zv3EhIU2EkXsrQrN+GcohY+RUl1edTBfjWmZ6zSnBSvTtAwRytPx1ykT/ 6SlEneihO7BWgPdgetQH6lMEvs3SNW9+nVIJ2MbF1aVuwJTbK3nrFCFWK7j9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiKNYjnz+fzDuJ1t80sZTvHjEmaUwHwYDVR0j BBgwFoAUjIL3ZcxxDX4sp1DnPPFhrfWZoBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjRyUE5CWDdzcEt3OVZFRkd0czViR3JnTWhnWWdtcFEzUzZRVWZkTjd2 NDUvMS84QzgyRjc2NUNDNzEwRDdFMkNBNzUwRTczQ0YxNjFBREY1OTlBMDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDODJGNzY1Q0M3MTBEN0Uy Q0E3NTBFNzNDRjE2MUFERjU5OUEwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjRyUE5CWDdzcEt3OVZFRkd0czViR3JnTWhnWWdtcFEzUzZRVWZkTjd2NDUvMS84 QzgyRjc2NUNDNzEwRDdFMkNBNzUwRTczQ0YxNjFBREY1OTlBMDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkxooXWW5fkaxdZA0hxl4Zu7fnzSotrN485oUh1FKMq0YEq/KM6J3RObYDbl4 wbH5Yw5ggOzDly7RyA3zu+SSMwbcRt+oZ71l/gk2Y54GeQZkQ+EeI8erw/PAhGG0 GqZs1gLyrm5FEBtW+TkGXvj2XWTj2sOxALd+hKOqklVQTDByjHO2lWlBGSXjpxYl NdpHbpNFpMLeF6UBeOz5bCOs5duqBPgabIo7fZNmVsLiz5eecXmoB8VgWC3P4sLC X0l23KQ6g1UCv9n0XEChK52T21PjqfL+mR1xSQybrwEfhi6taSgRN0/OqsSUXQJt kkL+stS/1GwUs2st/S6BzXjLCA== -----END CERTIFICATE-----Generated at Tue Jan 9 13:43:50 2024 by rpki-client on console.sobornost.net