$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.mft File: 9D28D657B942A6DA857BB23C8B6684ABC7261738.mft (raw, json) Hash identifier: QxWxp+5Owp46UNNsLQ5692wC8g3Vww3w6JFtOzZLEP4= Subject key identifier: B1:4E:0F:6E:2A:91:AD:7B:11:88:F7:CF:A2:48:4E:17:F6:78:4A:91 Authority key identifier: 9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38 Certificate issuer: /CN=9D28D657B942A6DA857BB23C8B6684ABC7261738 Certificate serial: 74F40E23FEA99216B6AF0FA95169758CDC1DDB71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.mft Manifest number: 0219 Signing time: Tue 09 Jan 2024 00:07:10 +0000 Manifest this update: Tue 09 Jan 2024 00:02:10 +0000 Manifest next update: Wed 10 Jan 2024 02:39:10 +0000 Files and hashes: 1: 323830343a323232633a3130303a3a2f34302d3430203d3e20323634353936.roa (hash: JeCtm4eN+bqTnHg/EwEXvYg0GnShZBfp+JGRK7jV1HM=) 2: 323830343a323232633a3330303a3a2f34302d3430203d3e20323634353936.roa (hash: d7G16+VuNd67dvxDEjvootsIRmggJV336nGAlpO6Zp4=) 3: 9D28D657B942A6DA857BB23C8B6684ABC7261738.crl (hash: xRyxsRZaHTQrpg1sAZ3EEnaK/QCjiK8sbOk3xgIfZ5U=) 4: 3133382e35392e34302e302f32322d3234203d3e20323634353936.roa (hash: ApSpt1OcwAx+8kXXLW7m/PwKVOv00ciTGaStREOlX3s=) 5: 323830343a323232633a3230303a3a2f34302d3430203d3e20323634353936.roa (hash: 89aeE1SG1u4Uunjbp6bQ9x8poXCDxqjaOWvjKL1s92Y=) 6: 323830343a323232633a3a2f33322d3335203d3e20323634353936.roa (hash: +EFzVuLo/wPAdXRitclaR7+lyLfeCqBRcWzTC2FSqRc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.crl rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 01:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f4:0e:23:fe:a9:92:16:b6:af:0f:a9:51:69:75:8c:dc:1d:db:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D28D657B942A6DA857BB23C8B6684ABC7261738 Validity Not Before: Jan 9 00:02:10 2024 GMT Not After : Jan 10 02:39:10 2024 GMT Subject: CN=B14E0F6E2A91AD7B1188F7CFA2484E17F6784A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:be:f8:26:6c:cb:6b:67:6f:4d:2f:26:7c: 47:8e:19:09:a3:70:fc:56:03:5c:d2:47:07:5b:1c: 9b:3f:a5:ed:f6:db:c4:ef:96:38:f2:5d:d2:bb:59: 64:bb:f1:9b:35:1f:27:de:59:ed:81:e0:be:d6:28: f4:e3:81:94:13:b2:7e:39:29:91:97:05:c8:cc:39: df:8a:a6:77:5f:7a:1a:e8:5e:90:6a:0c:55:71:7d: 20:db:0c:52:32:36:f4:26:2d:c6:5f:55:a4:12:64: 09:22:37:cf:2d:d6:1d:1c:13:63:35:f2:33:19:30: 43:f6:cc:29:33:40:18:a8:16:4b:d4:49:05:ec:4c: 3c:12:db:7b:1f:1d:34:da:cd:1b:b7:10:cb:6b:ed: 9e:d9:68:6d:4c:54:97:3c:41:16:a7:31:5b:a8:68: 3d:78:3b:31:9c:74:d6:21:8a:21:e2:1c:06:28:92: d6:25:41:72:06:d0:65:1e:b7:6f:53:06:71:d7:48: d4:7a:9e:9c:65:59:91:02:43:5d:b6:26:ac:76:41: 2f:ca:6f:ad:68:1c:75:2e:ed:04:12:4a:28:92:93: d6:1c:47:20:13:6e:2f:f4:0a:28:85:41:dd:8d:7a: d7:2a:41:81:66:37:35:03:ae:f1:6c:c4:90:74:bd: 1b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4E:0F:6E:2A:91:AD:7B:11:88:F7:CF:A2:48:4E:17:F6:78:4A:91 X509v3 Authority Key Identifier: keyid:9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e4:14:bf:df:1d:77:25:a2:20:6d:e6:ce:8f:32:3e:8d:63: 9a:fe:08:df:f7:2a:fc:49:70:f3:9c:04:2c:a3:08:e2:22:1f: e4:3d:5d:88:b9:15:91:5f:df:59:c5:a1:45:25:ca:db:6a:25: 75:a0:4b:ef:29:7f:4e:be:53:41:5a:17:a4:a2:46:b0:53:ba: 2d:87:11:d3:72:46:f9:ea:4e:e8:9a:29:3e:77:5f:96:f8:96: f0:21:f0:b5:cd:a1:13:01:f4:77:1e:40:03:92:ad:6e:be:51: 9a:6e:dd:bd:07:93:fd:9d:e6:14:d2:89:1b:5a:8a:f8:51:c9: 75:2c:2c:3c:ac:a8:18:b9:a6:e9:02:84:79:80:bf:d3:0d:4b: 20:a3:f0:3d:51:5f:9a:c3:29:83:91:17:b9:76:67:47:01:30: 83:22:03:08:1b:ab:7f:0b:29:3c:aa:64:8f:57:a7:4b:47:86: a3:ea:a0:b8:49:d9:db:24:a7:a9:38:a5:7c:da:0f:84:c0:4f: 76:83:0f:47:8e:ed:21:97:fb:72:d4:4a:f5:c0:5b:e4:c9:ee: 75:50:25:30:9a:b7:5f:de:7d:60:b5:b1:be:8b:85:c8:39:3a: bc:e4:b2:6c:7e:37:ef:bd:56:63:45:77:b5:48:e2:c0:75:51: be:32:d8:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdPQOI/6pkha2rw+pUWl1jNwd23EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyOEQ2NTdCOTQyQTZEQTg1N0JCMjNDOEI2Njg0QUJD NzI2MTczODAeFw0yNDAxMDkwMDAyMTBaFw0yNDAxMTAwMjM5MTBaMDMxMTAvBgNV BAMTKEIxNEUwRjZFMkE5MUFEN0IxMTg4RjdDRkEyNDg0RTE3RjY3ODRBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgb74JmzLa2dvTS8mfEeOGQmj cPxWA1zSRwdbHJs/pe3228TvljjyXdK7WWS78Zs1HyfeWe2B4L7WKPTjgZQTsn45 KZGXBcjMOd+KpndfehroXpBqDFVxfSDbDFIyNvQmLcZfVaQSZAkiN88t1h0cE2M1 8jMZMEP2zCkzQBioFkvUSQXsTDwS23sfHTTazRu3EMtr7Z7ZaG1MVJc8QRanMVuo aD14OzGcdNYhiiHiHAYoktYlQXIG0GUet29TBnHXSNR6npxlWZECQ122Jqx2QS/K b61oHHUu7QQSSiiSk9YcRyATbi/0CiiFQd2NetcqQYFmNzUDrvFsxJB0vRvvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsU4PbiqRrXsRiPfPokhOF/Z4SpEwHwYDVR0j BBgwFoAUnSjWV7lCptqFe7I8i2aEq8cmFzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVRO VlovMC85RDI4RDY1N0I5NDJBNkRBODU3QkIyM0M4QjY2ODRBQkM3MjYxNzM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEMjhENjU3Qjk0MkE2REE4 NTdCQjIzQzhCNjY4NEFCQzcyNjE3MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVROVlovMC85 RDI4RDY1N0I5NDJBNkRBODU3QkIyM0M4QjY2ODRBQkM3MjYxNzM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoOQUv98ddyWiIG3mzo8yPo1jmv4I3/cq/Elw85wELKMI4iIf5D1diLkVkV/f WcWhRSXK22oldaBL7yl/Tr5TQVoXpKJGsFO6LYcR03JG+epO6JopPndflviW8CHw tc2hEwH0dx5AA5Ktbr5Rmm7dvQeT/Z3mFNKJG1qK+FHJdSwsPKyoGLmm6QKEeYC/ 0w1LIKPwPVFfmsMpg5EXuXZnRwEwgyIDCBurfwspPKpkj1enS0eGo+qguEnZ2ySn qTilfNoPhMBPdoMPR47tIZf7ctRK9cBb5MnudVAlMJq3X959YLWxvouFyDk6vOSy bH43771WY0V3tUjiwHVRvjLY4Q== -----END CERTIFICATE-----Generated at Tue Jan 9 02:15:13 2024 by rpki-client on console.sobornost.net