$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft File: D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft (raw, json) Hash identifier: dbqcYoBcLf3kUqfRUvlzaKf8aZQiqgbqdh+sNMnMDL0= Subject key identifier: 24:FD:F5:38:68:47:4B:14:14:5B:07:82:AF:45:98:A5:F3:9F:B3:9F Authority key identifier: D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9 Certificate issuer: /CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9 Certificate serial: 6728C6C1E347195A7BEA810212692B897A28B62F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft Manifest number: 0202 Signing time: Tue 09 Jan 2024 06:29:09 +0000 Manifest this update: Tue 09 Jan 2024 06:24:09 +0000 Manifest next update: Wed 10 Jan 2024 07:19:09 +0000 Files and hashes: 1: 323830343a326539343a383030303a3a2f33332d3333203d3e203532373830.roa (hash: ywbbgB82O0+qSwzOEq9uEhI914mbygOMC5wywlaERqU=) 2: 323830343a326539343a3a2f33332d3334203d3e203532373830.roa (hash: p2vhqVRFPyHcedbaKtwu9lbMOpPO6brEajMmW4gWa80=) 3: 3137372e33392e3230342e302f32332d3234203d3e203532373830.roa (hash: s44tVcuz1/aJmUuXjkNeNHV89ceGo1qMyaoEYnwkpOE=) 4: D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl (hash: oZJDy+UDYLUw9uezwHluSFrEeZQZyi9A08FDQO8Z96w=) 5: 323830343a326539343a383330303a3a2f34302d3430203d3e203532373830.roa (hash: zB93rI7pVSldojN+Ei9y0Fmk8dLpyfX4Ka3XxLk7uGc=) 6: 3136382e3230352e38362e302f32332d3234203d3e203532373830.roa (hash: hMG/Kzlblogxy/+/rwj5/9YTeaaPZMHnfmuZbrc/CJE=) 7: 323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa (hash: /ddX3U8NXjIBjYhZo96FeZgwX0jOgNoPbcGNDwwGg8M=) 8: 3136382e3230352e38342e302f32332d3236203d3e203532373830.roa (hash: JygmHiFd0qTBVj+En84HnPP6U7UPqh8Yc2PM4oQYSik=) 9: 3137372e33392e3230362e302f32332d3234203d3e203532373830.roa (hash: jkKrXcb7KSi47j+e/S5jGzunrvEGYKsH8Oq8Q72nyKk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Jan 2024 06:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:28:c6:c1:e3:47:19:5a:7b:ea:81:02:12:69:2b:89:7a:28:b6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9 Validity Not Before: Jan 9 06:24:09 2024 GMT Not After : Jan 10 07:19:09 2024 GMT Subject: CN=24FDF53868474B14145B0782AF4598A5F39FB39F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:56:aa:97:5a:f8:0a:22:dc:08:1e:88:86: 38:a1:01:18:81:e3:86:08:ba:4e:20:aa:ab:2b:3f: f9:ae:61:f5:e6:25:a7:66:69:8d:8d:a5:21:a3:51: eb:58:96:e8:73:45:dc:3b:fc:8d:a0:bc:29:88:c2: 61:bc:13:2f:8e:ca:2c:32:74:4c:83:3e:77:4f:bf: 30:55:b1:86:f6:4a:a3:49:89:5c:5f:b5:f5:86:df: 67:60:33:1d:8b:98:48:58:ac:0b:c8:5d:64:b5:9e: 51:22:a8:32:c5:1b:39:a0:95:58:1b:c7:59:3c:7e: 19:6c:00:98:22:8a:7a:c1:d0:9b:04:b8:24:5f:d1: b1:0b:88:48:4b:44:d6:7c:34:5f:a5:d9:0b:41:3e: d2:1a:38:75:6b:1d:bd:b7:04:18:f9:98:1e:fe:36: e0:9c:5c:0e:70:d6:d4:bd:83:9a:04:6a:1b:70:52: ea:93:34:ab:c8:ab:04:3a:2b:6d:37:d0:db:5f:74: c9:09:d8:30:1e:6c:8b:c7:18:22:9b:ef:ec:53:29: 9a:2c:43:22:dc:e1:71:f7:70:20:a3:02:f0:35:7c: 17:ab:84:ce:4f:ae:71:2a:de:e4:dc:1d:7b:37:65: 40:1a:f3:ce:6e:9f:dd:ca:73:46:b5:57:4c:6b:45: 57:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FD:F5:38:68:47:4B:14:14:5B:07:82:AF:45:98:A5:F3:9F:B3:9F X509v3 Authority Key Identifier: keyid:D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:28:f1:b5:cb:5c:93:53:a1:a6:26:5f:cb:f6:88:d8:eb:6b: 0e:58:0c:91:6d:e1:c3:2f:e2:28:76:0f:48:a6:3a:06:bf:e7: e2:ef:25:94:e5:73:73:e6:a0:83:ee:06:37:b7:48:51:98:f0: 4b:3f:35:30:0f:36:2b:0b:82:08:8b:17:c5:4d:bb:b0:aa:42: 6f:a2:ac:8f:85:b3:03:20:43:6a:9a:b0:8a:42:ff:ee:c5:58: be:0e:02:a7:57:fc:6f:8d:36:7c:a9:73:1e:5c:40:4c:b5:98: 1a:3c:1a:96:fb:96:45:cf:1c:71:7b:21:10:a2:07:59:89:1f: 95:6e:2c:27:49:97:c4:e8:72:c4:66:3e:16:80:a9:29:36:fa: 53:5a:b1:6f:23:c3:6b:e8:b7:62:39:a5:6a:f2:d8:7f:a6:4e: b4:52:d7:05:e8:33:4a:6a:60:aa:16:52:58:80:05:91:56:a3: 52:02:e5:a4:eb:f2:61:46:a8:d3:d1:92:a2:1f:55:ff:37:bf: bb:7d:d0:dc:fe:40:98:e5:19:e5:e8:f4:f3:e1:b0:e5:6a:f4: 36:d3:2f:03:57:e4:e9:bb:67:65:c0:9a:a9:74:91:0f:c6:a0: dc:a2:90:3c:bd:83:56:86:0a:e3:54:6e:66:34:68:8d:31:4f: fa:89:82:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZyjGweNHGVp76oECEmkriXooti8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFMzU1REJGRkU0QzExQzU2NTVBRDkyQ0VENDFBODJF ODNFRURFOTAeFw0yNDAxMDkwNjI0MDlaFw0yNDAxMTAwNzE5MDlaMDMxMTAvBgNV BAMTKDI0RkRGNTM4Njg0NzRCMTQxNDVCMDc4MkFGNDU5OEE1RjM5RkIzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXlaql1r4CiLcCB6IhjihARiB 44YIuk4gqqsrP/muYfXmJadmaY2NpSGjUetYluhzRdw7/I2gvCmIwmG8Ey+Oyiwy dEyDPndPvzBVsYb2SqNJiVxftfWG32dgMx2LmEhYrAvIXWS1nlEiqDLFGzmglVgb x1k8fhlsAJgiinrB0JsEuCRf0bELiEhLRNZ8NF+l2QtBPtIaOHVrHb23BBj5mB7+ NuCcXA5w1tS9g5oEahtwUuqTNKvIqwQ6K2030NtfdMkJ2DAebIvHGCKb7+xTKZos QyLc4XH3cCCjAvA1fBerhM5PrnEq3uTcHXs3ZUAa885un93Kc0a1V0xrRVc1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJP31OGhHSxQUWweCr0WYpfOfs58wHwYDVR0j BBgwFoAU1eNV2//kwRxWVa2SztQagug+7ekwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr dkMvMC9ENUUzNTVEQkZGRTRDMTFDNTY1NUFEOTJDRUQ0MUE4MkU4M0VFREU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1RTM1NURCRkZFNEMxMUM1 NjU1QUQ5MkNFRDQxQTgyRTgzRUVERTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhrdkMvMC9E NUUzNTVEQkZGRTRDMTFDNTY1NUFEOTJDRUQ0MUE4MkU4M0VFREU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjyjxtctck1OhpiZfy/aI2OtrDlgMkW3hwy/iKHYPSKY6Br/n4u8llOVzc+ag g+4GN7dIUZjwSz81MA82KwuCCIsXxU27sKpCb6Ksj4WzAyBDapqwikL/7sVYvg4C p1f8b402fKlzHlxATLWYGjwalvuWRc8ccXshEKIHWYkflW4sJ0mXxOhyxGY+FoCp KTb6U1qxbyPDa+i3YjmlavLYf6ZOtFLXBegzSmpgqhZSWIAFkVajUgLlpOvyYUao 09GSoh9V/ze/u33Q3P5AmOUZ5ej08+Gw5Wr0NtMvA1fk6btnZcCaqXSRD8ag3KKQ PL2DVoYK41RuZjRojTFP+omCUg== -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:55 2024 by rpki-client on console.sobornost.net