$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.mft File: 4776A70EE9A520B971C4FA451A8D34474E09DF98.mft (raw, json) Hash identifier: YB3avUxWC3tdWYjJf+ERpcmvfTPjY/UTSKQcpUEAxZc= Subject key identifier: 3B:BA:24:40:DE:B1:F3:BB:6B:8D:6F:CC:F9:ED:12:C2:A0:A5:FD:71 Authority key identifier: 47:76:A7:0E:E9:A5:20:B9:71:C4:FA:45:1A:8D:34:47:4E:09:DF:98 Certificate issuer: /CN=4776A70EE9A520B971C4FA451A8D34474E09DF98 Certificate serial: 2CEA25391ACD391BCEBDD2CD3CCD248BE0DFBEE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.cer Subject info access: rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.mft Manifest number: 01CC Signing time: Sat 21 Oct 2023 11:36:32 +0000 Manifest this update: Sat 21 Oct 2023 11:31:32 +0000 Manifest next update: Sun 22 Oct 2023 14:58:32 +0000 Files and hashes: 1: 3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa (hash: b7fe0Lq2DB8/hFXIuujxEyLBEGcdNFx0Mi/Uff9MQi4=) 2: 3138372e39352e3230392e302f32342d3234203d3e20323730353434.roa (hash: pLNIBtw989Fdw2mszrdgy74mXSxpIbkor/zxr55L1yE=) 3: 3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa (hash: szqC5Xh4RQPHGcOgU0AZ0dl79RO7KQzG3opjo16cPqo=) 4: 3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa (hash: LG7ndZJDtlFwMCAZXQrRy0fLNyvdqaFlEdofZMKIveA=) 5: 3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa (hash: HHcxSPlZp6nt47ek1Lk0Mg42UH67q70HMATxhHLLwZk=) 6: 323830343a366439633a3a2f33322d313238203d3e20323730353434.roa (hash: C/n2Odn+NMZo5N+R57oDCqHLKWFszTsI6xvTOd8QZLQ=) 7: 3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa (hash: M7ftPsQD7QDa5bexS8Ol6nFXYxQVwJLl9kh3wW3OHK0=) 8: 4776A70EE9A520B971C4FA451A8D34474E09DF98.crl (hash: rwtTDexHRp5eaeAOZe2ryd2xkKZJbQSTZtcryxWRvJw=) 9: 3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa (hash: vRb25Hp7J3dJyUG91bL7YIytLHDlb3FudwfHK8iIhfw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.crl rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Oct 2023 14:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ea:25:39:1a:cd:39:1b:ce:bd:d2:cd:3c:cd:24:8b:e0:df:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776A70EE9A520B971C4FA451A8D34474E09DF98 Validity Not Before: Oct 21 11:31:32 2023 GMT Not After : Oct 22 14:58:32 2023 GMT Subject: CN=3BBA2440DEB1F3BB6B8D6FCCF9ED12C2A0A5FD71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:9e:fe:c9:ba:3f:c3:2e:bd:62:96:71:ba: 18:ff:6e:49:d8:ff:b3:ee:2c:80:b7:2e:44:9d:8e: 8f:92:81:c9:67:e4:ca:a0:06:af:15:27:3a:71:d3: e4:3b:f6:61:f5:8e:80:0c:d7:64:41:26:01:d6:c2: 7b:25:82:5a:fc:fd:76:11:43:2f:1d:a0:cd:61:9f: bd:19:ee:f2:40:71:1a:dc:fb:5f:34:fd:53:27:95: f0:92:17:dd:61:20:99:c2:ac:80:6e:b3:13:1d:de: ab:df:16:e9:05:34:31:00:23:1f:8a:8a:76:ae:fb: 62:e1:42:ec:2f:d5:2d:97:8c:9f:93:4a:d0:0b:e2: be:78:d0:06:d0:8b:6b:ca:c5:dd:65:85:6f:fa:b1: 98:1c:70:15:76:4b:ba:89:fd:ee:5f:24:14:e6:11: 6d:59:a8:12:71:74:32:2b:bb:47:dd:02:9a:2c:09: 0d:a2:a5:64:00:a3:75:7a:6b:c0:15:a0:63:dc:6b: 01:49:0f:75:b7:73:cb:ac:25:40:f1:aa:8f:53:ee: f2:2f:9d:be:e0:52:a6:cd:6c:c2:3f:65:d4:9b:2f: 82:65:4b:34:7a:e5:32:0b:22:a6:58:20:1d:62:f3: 66:e7:66:ef:dd:fc:ba:70:2d:e7:bf:db:2d:9e:bd: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:24:40:DE:B1:F3:BB:6B:8D:6F:CC:F9:ED:12:C2:A0:A5:FD:71 X509v3 Authority Key Identifier: keyid:47:76:A7:0E:E9:A5:20:B9:71:C4:FA:45:1A:8D:34:47:4E:09:DF:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/4776A70EE9A520B971C4FA451A8D34474E09DF98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e3:63:6b:59:52:fd:38:8b:44:88:f9:08:18:24:97:0b:15: 48:ee:cd:ea:16:a6:bf:fe:3b:03:93:62:9b:d6:67:a9:50:9d: 36:65:8e:31:b9:4a:4f:b8:c5:77:3f:f3:9b:b0:50:d0:e3:92: 4f:40:12:e8:58:2e:17:2d:7d:2b:c3:bd:35:9b:26:12:94:19: be:5b:cd:7f:ab:a8:ed:ef:d7:05:dd:87:c7:62:f8:7b:57:4c: 2e:ba:63:2d:57:92:94:e1:94:d2:12:b7:26:65:ed:e6:bd:d5: bf:9a:e4:4d:42:08:60:9a:6b:8b:ef:07:5a:08:86:c9:fc:d1: 81:c5:84:31:46:28:3b:07:fc:0e:ad:7d:ad:c7:c1:e6:34:77: e9:a0:b4:eb:b6:34:38:2e:21:25:4e:4d:97:60:80:16:32:3a: 7e:09:c8:67:df:a3:76:31:98:41:7b:34:33:10:a2:a4:20:ff: b7:f9:8a:f0:c1:64:da:c3:35:a8:4f:f5:71:f4:80:6c:a3:e9: a8:0d:d0:33:1a:b2:f0:b6:9a:74:43:56:c3:39:ee:fc:4d:c3: e3:92:6c:21:72:e1:92:44:5a:b9:71:e9:72:76:13:8d:28:16: 2d:31:31:9f:10:47:b7:fa:ce:8a:6a:92:87:98:9d:66:74:83: 84:a4:92:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULOolORrNORvOvdLNPM0ki+DfvuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3NkE3MEVFOUE1MjBCOTcxQzRGQTQ1MUE4RDM0NDc0 RTA5REY5ODAeFw0yMzEwMjExMTMxMzJaFw0yMzEwMjIxNDU4MzJaMDMxMTAvBgNV BAMTKDNCQkEyNDQwREVCMUYzQkI2QjhENkZDQ0Y5RUQxMkMyQTBBNUZENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMJ7+ybo/wy69YpZxuhj/bknY /7PuLIC3LkSdjo+Sgcln5MqgBq8VJzpx0+Q79mH1joAM12RBJgHWwnslglr8/XYR Qy8doM1hn70Z7vJAcRrc+180/VMnlfCSF91hIJnCrIBusxMd3qvfFukFNDEAIx+K inau+2LhQuwv1S2XjJ+TStAL4r540AbQi2vKxd1lhW/6sZgccBV2S7qJ/e5fJBTm EW1ZqBJxdDIru0fdAposCQ2ipWQAo3V6a8AVoGPcawFJD3W3c8usJUDxqo9T7vIv nb7gUqbNbMI/ZdSbL4JlSzR65TILIqZYIB1i82bnZu/d/LpwLee/2y2evYr1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO7okQN6x87trjW/M+e0SwqCl/XEwHwYDVR0j BBgwFoAUR3anDumlILlxxPpFGo00R04J35gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWtVOVBRa1JGY0JQTnFFNVY5RzRuSEY0c0V3UWppNnp0RHF4cTVHVjN3 YzgvMC80Nzc2QTcwRUU5QTUyMEI5NzFDNEZBNDUxQThEMzQ0NzRFMDlERjk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3NzZBNzBFRTlBNTIwQjk3 MUM0RkE0NTFBOEQzNDQ3NEUwOURGOTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWtVOVBRa1JGY0JQTnFFNVY5RzRuSEY0c0V3UWppNnp0RHF4cTVHVjN3YzgvMC80 Nzc2QTcwRUU5QTUyMEI5NzFDNEZBNDUxQThEMzQ0NzRFMDlERjk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVeNja1lS/TiLRIj5CBgklwsVSO7N6hamv/47A5Nim9ZnqVCdNmWOMblKT7jF dz/zm7BQ0OOST0AS6FguFy19K8O9NZsmEpQZvlvNf6uo7e/XBd2Hx2L4e1dMLrpj LVeSlOGU0hK3JmXt5r3Vv5rkTUIIYJpri+8HWgiGyfzRgcWEMUYoOwf8Dq19rcfB 5jR36aC067Y0OC4hJU5Nl2CAFjI6fgnIZ9+jdjGYQXs0MxCipCD/t/mK8MFk2sM1 qE/1cfSAbKPpqA3QMxqy8LaadENWwznu/E3D45JsIXLhkkRauXHpcnYTjSgWLTEx nxBHt/rOimqSh5idZnSDhKSSkw== -----END CERTIFICATE-----Generated at Sat Oct 21 12:25:12 2023 by rpki-client on console-fra.rpki-client.org