$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft File: 4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft (raw, json) Hash identifier: V5qLfzRE3xy7WL0QtaIVs2MfT1pNizlgBNIwxebXa7E= Subject key identifier: 3D:4D:59:85:66:D4:9E:B8:5D:E9:7C:E8:12:E8:9E:FF:4D:F5:D4:17 Authority key identifier: 4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B Certificate issuer: /CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B Certificate serial: 70324DF4B7ECD23E46FD595176C4C70476A5D577 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer Subject info access: rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft Manifest number: 01F9 Signing time: Mon 08 Jan 2024 21:56:44 +0000 Manifest this update: Mon 08 Jan 2024 21:51:44 +0000 Manifest next update: Wed 10 Jan 2024 00:32:44 +0000 Files and hashes: 1: 323830343a6235343a323330303a3a2f34302d3430203d3e203532373635.roa (hash: MdwdjWZb4D9TqvqPJFyFaFsgTtVxVt21unLCWb9+0XU=) 2: 3137302e3233392e37322e302f32322d3234203d3e203532373635.roa (hash: 3gXWiQOWxdjkLbHhMnMykoXoihGOJNhu6bQMlpwLxKo=) 3: 3137372e33392e3132342e302f32322d3234203d3e203532373635.roa (hash: Ar2fxbS/+J2w1UiYiP2rIuYZ8+qjjDuyo2CgNIw0BRY=) 4: 4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl (hash: bL0SyxWOrs/fCur9Z2S8mqoLuFzSPw8sJchHsMK4LuI=) 5: 323830343a6235343a323230303a3a2f34302d3430203d3e203532373635.roa (hash: RfczIXv7LGNhRZgIdzmcTk/2qPcnyyXa6QOWGtQsUq4=) 6: 3137372e33392e3132302e302f32322d3234203d3e203532373635.roa (hash: c4T4Wv3XD7IChx2GzjNw++VfBo4rqMqw4RM9oRYeAgU=) 7: 323830343a6235343a3a2f33322d3332203d3e203532373635.roa (hash: pAVnOpkUPDqWvifMeo3rdb4SQ+cKNgF+cMQP3dZk/00=) 8: 323830343a6235343a383230303a3a2f34302d3430203d3e203532373635.roa (hash: sfcjKjNK7waoPbn2HXIq3paLx3sLaSwpQf0EjCX/eiI=) 9: 323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa (hash: S9SnI5ZnwqfAZRZ0eYE3gF74i9060x13XMXGVorflP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 09 Jan 2024 23:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:32:4d:f4:b7:ec:d2:3e:46:fd:59:51:76:c4:c7:04:76:a5:d5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D940BDC678200585FEFFC647CA6E5EE6F32CD8B Validity Not Before: Jan 8 21:51:44 2024 GMT Not After : Jan 10 00:32:44 2024 GMT Subject: CN=3D4D598566D49EB85DE97CE812E89EFF4DF5D417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fb:0a:1f:8b:9b:be:ac:bf:0b:57:4d:3b:b5: 2b:32:df:84:92:f5:f3:f3:fe:b0:ed:d3:79:f3:60: 57:25:13:56:3e:37:35:d8:ca:87:ee:bf:83:5f:ae: 51:b5:37:91:73:bd:71:91:34:c0:be:98:e5:3c:62: 95:33:5a:62:53:a9:08:8d:63:c2:69:02:cc:90:5b: 15:f6:b7:99:09:72:86:01:11:19:d5:ae:13:92:3d: 06:f8:09:c2:0c:82:87:3b:82:58:24:f6:fd:29:4c: ae:cf:f8:de:35:08:92:ff:95:93:f8:20:71:67:68: 09:d1:ad:cf:77:db:58:db:ae:7e:39:80:b0:8b:14: 17:b9:42:37:76:75:5e:bc:48:d6:13:bf:a8:7e:9b: 7d:d3:1f:77:2f:97:7b:fb:9b:a8:7e:c6:57:ab:43: 20:01:70:00:b8:0f:b5:6b:c1:39:46:d4:a5:cb:7d: a4:de:b9:07:87:f2:3e:8f:8d:38:1c:9f:5d:1e:72: 92:8e:45:81:79:cd:6c:c7:4d:13:fd:33:89:5b:f1: 2e:eb:9b:a2:ca:bc:1c:ad:89:da:3f:50:0b:2d:ad: b2:41:d2:c6:db:dc:b3:70:ff:c9:bb:71:30:ce:27: 74:e0:de:66:d2:97:ce:46:ac:98:28:3d:73:84:58: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4D:59:85:66:D4:9E:B8:5D:E9:7C:E8:12:E8:9E:FF:4D:F5:D4:17 X509v3 Authority Key Identifier: keyid:4D:94:0B:DC:67:82:00:58:5F:EF:FC:64:7C:A6:E5:EE:6F:32:CD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/4D940BDC678200585FEFFC647CA6E5EE6F32CD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:61:87:63:b4:0e:ff:b8:df:4d:89:b4:1d:94:38:9a:c5:e6: 77:41:51:15:3d:d0:72:36:9a:e3:ad:c6:b1:16:5f:58:0f:71: a6:de:3a:f4:37:8a:e7:94:30:cd:58:81:14:09:08:8d:07:f6: 26:f0:82:0c:23:35:10:0a:a2:f8:5e:87:c9:17:22:2e:2d:e5: 56:6c:a9:6a:71:ee:f6:c9:5d:06:2e:41:fd:92:e3:f9:1f:55: 7e:f4:ac:be:56:75:09:29:54:ab:d5:e9:94:f9:3f:e6:bc:88: ea:45:41:63:4c:a9:ac:28:4e:b3:fd:17:bd:e0:6e:a7:89:5a: bb:26:0c:44:1f:19:7b:60:33:3d:c1:b2:e7:70:07:a9:63:a5: ce:65:16:5f:f0:10:58:2e:3f:46:89:b2:be:51:66:a9:ed:44: e6:a1:18:50:a5:37:5b:2a:d7:5a:31:a0:c1:23:36:c2:b8:9b: 61:1a:50:b5:fb:ea:89:8a:78:b6:7c:e2:18:f7:93:f8:26:4e: b6:34:7e:dd:c5:dc:71:66:49:a1:9f:0c:b7:b1:b4:11:2f:72: b5:b5:82:b4:83:4a:02:53:31:fb:af:a0:e1:09:ad:0b:cb:0a: e2:dd:c9:59:73:c0:5e:d3:96:4b:d3:8c:1b:f6:5e:73:95:92: d8:c3:53:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcDJN9Lfs0j5G/VlRdsTHBHal1XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ5NDBCREM2NzgyMDA1ODVGRUZGQzY0N0NBNkU1RUU2 RjMyQ0Q4QjAeFw0yNDAxMDgyMTUxNDRaFw0yNDAxMTAwMDMyNDRaMDMxMTAvBgNV BAMTKDNENEQ1OTg1NjZENDlFQjg1REU5N0NFODEyRTg5RUZGNERGNUQ0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+wofi5u+rL8LV007tSsy34SS 9fPz/rDt03nzYFclE1Y+NzXYyofuv4NfrlG1N5FzvXGRNMC+mOU8YpUzWmJTqQiN Y8JpAsyQWxX2t5kJcoYBERnVrhOSPQb4CcIMgoc7glgk9v0pTK7P+N41CJL/lZP4 IHFnaAnRrc9321jbrn45gLCLFBe5Qjd2dV68SNYTv6h+m33TH3cvl3v7m6h+xler QyABcAC4D7VrwTlG1KXLfaTeuQeH8j6PjTgcn10ecpKORYF5zWzHTRP9M4lb8S7r m6LKvBytido/UAstrbJB0sbb3LNw/8m7cTDOJ3Tg3mbSl85GrJgoPXOEWB8HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPU1ZhWbUnrhd6XzoEuie/0311BcwHwYDVR0j BBgwFoAUTZQL3GeCAFhf7/xkfKbl7m8yzYswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFl U1kvMC80RDk0MEJEQzY3ODIwMDU4NUZFRkZDNjQ3Q0E2RTVFRTZGMzJDRDhCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREOTQwQkRDNjc4MjAwNTg1 RkVGRkM2NDdDQTZFNUVFNkYzMkNEOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFlU1kvMC80 RDk0MEJEQzY3ODIwMDU4NUZFRkZDNjQ3Q0E2RTVFRTZGMzJDRDhCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhmGHY7QO/7jfTYm0HZQ4msXmd0FRFT3Qcjaa463GsRZfWA9xpt469DeK55Qw zViBFAkIjQf2JvCCDCM1EAqi+F6HyRciLi3lVmypanHu9sldBi5B/ZLj+R9VfvSs vlZ1CSlUq9XplPk/5ryI6kVBY0yprChOs/0XveBup4lauyYMRB8Ze2AzPcGy53AH qWOlzmUWX/AQWC4/RomyvlFmqe1E5qEYUKU3WyrXWjGgwSM2wribYRpQtfvqiYp4 tnziGPeT+CZOtjR+3cXccWZJoZ8Mt7G0ES9ytbWCtINKAlMx+6+g4QmtC8sK4t3J WXPAXtOWS9OMG/Zec5WS2MNTqw== -----END CERTIFICATE-----Generated at Tue Jan 9 00:21:00 2024 by rpki-client on console.sobornost.net