$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft File: AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft (raw, json) Hash identifier: YkIZnFZvNtfYAKYKoonIV2iycR4BvDO9fyqnq+qTf0Y= Subject key identifier: 24:63:D0:84:D9:55:D6:4A:8F:3F:BB:7D:D5:9C:A7:0A:E1:0F:11:F7 Authority key identifier: AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00 Certificate issuer: /CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00 Certificate serial: 4B052EAE2246262350044546E286FE9C9F4C57D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer Subject info access: rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft Manifest number: EC Signing time: Sat 28 Sep 2024 04:43:03 +0000 Manifest this update: Sat 28 Sep 2024 04:38:03 +0000 Manifest next update: Sun 29 Sep 2024 04:50:03 +0000 Files and hashes: 1: 3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa (hash: O/qHNecssVRYbjZulTpy095JErTkyj5kg7hkcQNt5tE=) 2: AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl (hash: xQM451bSOV1gZJPUk3xpksNXPDHcL5coNzo7JWFYQdc=) 3: 3137372e37322e3135362e302f32322d3332203d3e203532383231.roa (hash: UsmNJMkM0SxDwYyq2HRU5y7FaPmFEPQqoTvFTByUrdo=) 4: 323830343a323561343a3a2f33322d313238203d3e203532383231.roa (hash: vGZtWWS5AEZQpMfNacnb+qPe45FThe3Jq4bvoGAIzLg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 04:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:05:2e:ae:22:46:26:23:50:04:45:46:e2:86:fe:9c:9f:4c:57:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00 Validity Not Before: Sep 28 04:38:03 2024 GMT Not After : Sep 29 04:50:03 2024 GMT Subject: CN=2463D084D955D64A8F3FBB7DD59CA70AE10F11F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:71:33:bd:3b:fe:7a:8e:3b:c7:c6:5e:88: 63:b9:75:6d:0b:b5:07:b9:36:f6:a6:0f:40:c4:8e: 98:3d:7c:24:8c:e6:48:4e:0b:f2:a2:d4:27:22:6b: 2b:b7:0d:40:a4:cb:51:6b:9d:6f:f3:c0:43:f0:6b: cb:ff:18:36:ae:3b:34:79:6a:ce:ae:79:c5:5d:64: c5:b7:f0:74:7e:54:bb:60:2f:1e:dc:19:13:fb:50: f0:3f:cd:d3:e1:67:0e:c5:f7:86:65:1a:f0:5e:f6: 1b:05:54:4c:1f:16:58:d7:99:db:ab:31:9f:f8:29: d2:e9:71:ec:0d:2e:6e:e3:ba:3a:ef:45:61:6f:65: 69:3f:d2:b7:f8:e4:3a:e6:0a:f9:69:25:8f:f7:eb: 10:05:ae:e2:4b:28:d8:d1:e8:89:41:14:37:92:57: df:7d:46:83:62:ba:02:7c:bd:27:db:bd:76:de:61: 02:a4:c1:c0:59:d9:04:6f:d4:44:91:d3:36:65:c6: 1f:ce:e5:67:f3:89:d0:cc:24:37:c6:ff:aa:51:90: 1a:76:8b:60:e3:8a:b9:aa:8b:94:64:a1:f1:15:01: 08:b1:aa:d8:da:e8:ed:5c:4b:15:bd:cb:4a:3f:07: 34:1f:ac:32:27:36:30:7d:e6:27:e6:63:09:0a:5a: 43:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:63:D0:84:D9:55:D6:4A:8F:3F:BB:7D:D5:9C:A7:0A:E1:0F:11:F7 X509v3 Authority Key Identifier: keyid:AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:cb:d6:2f:51:39:53:08:f6:91:ef:81:c7:4d:6b:a7:89:ee: b3:e4:bf:6f:34:4f:6d:1e:18:e9:6d:18:35:ec:bd:fe:e3:5c: 82:ad:db:cf:ee:21:91:8c:c5:cd:9d:d2:22:e5:cd:e8:6b:be: 67:e3:a9:2a:ec:0b:9e:78:93:18:4d:e5:23:16:72:c7:20:3e: 31:10:59:2c:fa:8b:62:a6:5b:79:74:a3:d5:fb:fe:b8:c9:0e: a6:47:e2:06:ed:c2:3f:b9:8b:51:09:9a:f3:dd:fa:7c:cf:31: 98:93:0d:0e:0a:d4:d2:c2:6b:51:25:27:ce:7a:13:56:8e:82: d7:14:06:68:68:e6:53:66:bd:83:b7:1e:5e:45:2d:9e:7d:d9: b9:73:7b:17:a9:8f:a1:84:06:85:03:1d:a8:53:61:8c:37:cb: d6:77:ce:c4:94:4e:fc:2a:58:98:97:35:a5:6b:32:40:9a:52: 4b:37:31:74:4c:ee:6c:5f:5f:65:a9:31:ec:59:34:ca:28:3d: 89:1b:71:90:a9:74:e1:fc:b8:eb:53:09:1b:0b:38:a5:2d:ab: 2a:95:3f:e1:53:92:09:25:ee:55:e8:57:97:d6:80:dd:d5:fe: 34:95:63:31:8f:22:b0:42:65:1a:76:8b:04:29:88:7d:bb:53: 88:ff:b5:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSwUuriJGJiNQBEVG4ob+nJ9MV9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwOTA2ODZCNjNDNERERTIwOEI0NDVFMENBQ0QzRjQz ODZFOEQwMDAeFw0yNDA5MjgwNDM4MDNaFw0yNDA5MjkwNDUwMDNaMDMxMTAvBgNV BAMTKDI0NjNEMDg0RDk1NUQ2NEE4RjNGQkI3REQ1OUNBNzBBRTEwRjExRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqnEzvTv+eo47x8ZeiGO5dW0L tQe5NvamD0DEjpg9fCSM5khOC/Ki1Cciayu3DUCky1FrnW/zwEPwa8v/GDauOzR5 as6uecVdZMW38HR+VLtgLx7cGRP7UPA/zdPhZw7F94ZlGvBe9hsFVEwfFljXmdur MZ/4KdLpcewNLm7jujrvRWFvZWk/0rf45DrmCvlpJY/36xAFruJLKNjR6IlBFDeS V999RoNiugJ8vSfbvXbeYQKkwcBZ2QRv1ESR0zZlxh/O5WfzidDMJDfG/6pRkBp2 i2Djirmqi5RkofEVAQixqtja6O1cSxW9y0o/BzQfrDInNjB95ifmYwkKWkOJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJGPQhNlV1kqPP7t91ZynCuEPEfcwHwYDVR0j BBgwFoAUqgkGhrY8Td4gi0ReDKzT9DhujQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlNnRFkxaVhWa1VaRGt0dUJoTTZlU2h4Q0tMR3J0VGVWNjFnY0NiUnFi SmUvMS9BQTA5MDY4NkI2M0M0RERFMjA4QjQ0NUUwQ0FDRDNGNDM4NkU4RDAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDkwNjg2QjYzQzREREUy MDhCNDQ1RTBDQUNEM0Y0Mzg2RThEMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlNnRFkxaVhWa1VaRGt0dUJoTTZlU2h4Q0tMR3J0VGVWNjFnY0NiUnFiSmUvMS9B QTA5MDY4NkI2M0M0RERFMjA4QjQ0NUUwQ0FDRDNGNDM4NkU4RDAwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA8vWL1E5Uwj2ke+Bx01rp4nus+S/bzRPbR4Y6W0YNey9/uNcgq3bz+4hkYzF zZ3SIuXN6Gu+Z+OpKuwLnniTGE3lIxZyxyA+MRBZLPqLYqZbeXSj1fv+uMkOpkfi Bu3CP7mLUQma8936fM8xmJMNDgrU0sJrUSUnznoTVo6C1xQGaGjmU2a9g7ceXkUt nn3ZuXN7F6mPoYQGhQMdqFNhjDfL1nfOxJRO/CpYmJc1pWsyQJpSSzcxdEzubF9f Zakx7Fk0yig9iRtxkKl04fy461MJGws4pS2rKpU/4VOSCSXuVehXl9aA3dX+NJVj MY8isEJlGnaLBCmIfbtTiP+1qA== -----END CERTIFICATE-----Generated at Sat Sep 28 05:42:27 2024 by rpki-client on console-fra.rpki-client.org