$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.mft File: C42FE5312BD8A91F2735F094C65D949782FBC27C.mft (raw, json) Hash identifier: VeqnYvF92RcR1//oco8BdX6a49cTiJDPpzUgGK8UL/o= Subject key identifier: 89:66:14:43:CE:77:93:66:F5:79:D3:66:29:79:AD:99:42:10:AC:EC Authority key identifier: C4:2F:E5:31:2B:D8:A9:1F:27:35:F0:94:C6:5D:94:97:82:FB:C2:7C Certificate issuer: /CN=C42FE5312BD8A91F2735F094C65D949782FBC27C Certificate serial: 2D242ED60C0727816CAA669B6BC56784154A4F08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.cer Subject info access: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.mft Manifest number: 08 Signing time: Sun 10 Dec 2023 07:53:37 +0000 Manifest this update: Sun 10 Dec 2023 07:48:37 +0000 Manifest next update: Mon 11 Dec 2023 11:02:37 +0000 Files and hashes: 1: 34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (hash: rHqdERuEaY6lDS3bL3uja2fnjmmDZDB3rkK4llzbrG4=) 2: 34352e3136312e32302e302f32322d3232203d3e20323638343430.roa (hash: uAEkZOkr+N0fjfgsWuFP9iqbfHAAMNWDHgnWc1iB+g4=) 3: 34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (hash: 5U/UCx4q4+4drttNQSLigiuXQ0K7u+IFWhzIJuwSYOs=) 4: 34352e3136312e32322e302f32342d3234203d3e20323638343430.roa (hash: ShVOap+RAzBTggXt1nlQKW8nuiXHxc7veeSus9OZv7k=) 5: 323830343a353134303a383030303a3a2f33332d3333203d3e20323638343430.roa (hash: I/SksjjKTjb7JYrrTBU/V1R1/BJ1ULMJaT6reORhV2w=) 6: 323830343a353134303a3a2f33332d3333203d3e20323638343430.roa (hash: 2tEk2gJ5d83nge1b6Tr3PM1Iie1k0256hMYX3KUtqeY=) 7: 34352e3136312e32302e302f32332d3233203d3e20323638343430.roa (hash: V8nyU0NGJxJ410RRCSbx0ngJ4RvY0MXmpT1Xn5G9BF0=) 8: 34352e3136312e32312e302f32342d3234203d3e20323638343430.roa (hash: /M/N4/F7FNTeI3gbENPovIvS1m1Yd/pkGH+c8BD3rEQ=) 9: 34352e3136312e32322e302f32332d3233203d3e20323638343430.roa (hash: OA/zPVtZeyvlEF6dTaWkYOJm6tbLNBJKfdRkBZRFcY4=) 10: C42FE5312BD8A91F2735F094C65D949782FBC27C.crl (hash: 4ORc696CKjnTRmWEYx6qtobnU/xPScmtZ5GlHytiD9c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.crl rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Dec 2023 10:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:24:2e:d6:0c:07:27:81:6c:aa:66:9b:6b:c5:67:84:15:4a:4f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C42FE5312BD8A91F2735F094C65D949782FBC27C Validity Not Before: Dec 10 07:48:37 2023 GMT Not After : Dec 11 11:02:37 2023 GMT Subject: CN=89661443CE779366F579D3662979AD994210ACEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:e3:9b:04:28:6a:9f:06:45:b7:3f:2b:37: a0:17:da:da:bc:e8:6a:0a:e8:64:66:4c:f2:53:9f: 5a:0e:b1:8c:44:b3:ae:57:21:86:07:41:e8:87:1d: e9:c3:b3:bb:de:46:15:fb:27:75:6f:19:0f:84:80: 9d:80:1c:40:91:ad:69:ad:77:b1:e8:a3:6f:9f:ce: 1b:6e:e5:94:5e:44:93:6b:4e:bc:59:e6:86:08:b6: be:08:14:f5:e7:30:b3:62:86:4e:b4:7f:0f:ab:36: c2:59:3c:a9:68:53:05:f9:e3:39:ad:18:93:9e:7d: 80:32:10:a7:88:6d:9c:cb:d5:e6:dd:f1:13:ef:c8: 10:7c:8b:18:16:0d:01:fb:db:d9:d0:7f:cf:f0:a3: d9:28:9b:99:b2:92:3e:55:bb:42:24:bc:95:1f:3d: 82:3c:db:36:82:82:3f:62:c9:a8:03:2d:eb:8d:17: be:39:7b:1d:08:08:e5:ff:7c:81:1e:b6:b6:7f:38: 51:b4:76:4c:84:47:84:16:d2:48:cb:3a:ff:22:06: 19:43:87:06:ad:2f:c4:ec:f1:19:dd:46:98:40:80: b5:d2:5b:1c:9f:90:b4:44:c6:96:ef:37:a1:c9:42: 9e:2e:2e:e8:fc:cf:29:57:6f:a0:7f:70:5f:84:e5: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:66:14:43:CE:77:93:66:F5:79:D3:66:29:79:AD:99:42:10:AC:EC X509v3 Authority Key Identifier: keyid:C4:2F:E5:31:2B:D8:A9:1F:27:35:F0:94:C6:5D:94:97:82:FB:C2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C42FE5312BD8A91F2735F094C65D949782FBC27C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:81:a9:9f:c3:ee:bd:09:bc:a8:ff:3c:88:47:f3:3f:f5:b7: 87:4f:23:3f:12:3d:b4:17:a4:cf:cf:6e:0e:82:25:31:aa:7e: 4e:5b:b3:7b:ae:88:d4:8a:57:1c:e3:6b:4c:35:c2:b7:fa:f7: d1:64:a1:a6:cb:67:de:3a:ed:0e:72:ed:d7:a7:0e:34:15:98: 71:d2:49:f4:48:a4:f9:d1:07:a0:af:ef:3c:10:af:f4:c5:53: c6:72:73:58:86:f8:b8:93:6a:84:cf:3a:c4:03:39:c4:4d:6f: 38:cd:18:4f:19:a5:28:b9:27:82:69:00:8c:1e:c1:af:c2:68: 9b:27:70:1d:37:32:c4:7d:26:f2:36:f5:4a:fa:e5:22:c8:f9: 28:98:14:fa:50:9b:64:de:ad:0d:28:bb:68:a9:a0:7d:39:f1: e8:55:0e:40:3f:91:81:47:d2:ff:75:b8:ba:9a:67:f0:93:57: af:53:45:75:84:4a:1c:a4:59:bb:3e:eb:94:d4:32:f8:29:2b: 6e:42:33:76:12:7d:ca:d7:a0:7f:0d:f7:97:99:53:83:81:d9: 9e:94:2c:b4:d7:0f:ba:6c:43:17:40:e4:b3:d1:f1:52:97:52: 30:13:29:12:09:27:ea:c2:c1:74:40:89:3f:2c:f7:58:73:63: 13:87:01:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULSQu1gwHJ4Fsqmaba8VnhBVKTwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQyRkU1MzEyQkQ4QTkxRjI3MzVGMDk0QzY1RDk0OTc4 MkZCQzI3QzAeFw0yMzEyMTAwNzQ4MzdaFw0yMzEyMTExMTAyMzdaMDMxMTAvBgNV BAMTKDg5NjYxNDQzQ0U3NzkzNjZGNTc5RDM2NjI5NzlBRDk5NDIxMEFDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznuObBChqnwZFtz8rN6AX2tq8 6GoK6GRmTPJTn1oOsYxEs65XIYYHQeiHHenDs7veRhX7J3VvGQ+EgJ2AHECRrWmt d7Hoo2+fzhtu5ZReRJNrTrxZ5oYItr4IFPXnMLNihk60fw+rNsJZPKloUwX54zmt GJOefYAyEKeIbZzL1ebd8RPvyBB8ixgWDQH729nQf8/wo9kom5mykj5Vu0IkvJUf PYI82zaCgj9iyagDLeuNF745ex0ICOX/fIEetrZ/OFG0dkyER4QW0kjLOv8iBhlD hwatL8Ts8RndRphAgLXSWxyfkLRExpbvN6HJQp4uLuj8zylXb6B/cF+E5cVzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiWYUQ853k2b1edNmKXmtmUIQrOwwHwYDVR0j BBgwFoAUxC/lMSvYqR8nNfCUxl2Ul4L7wnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl MlkvMC9DNDJGRTUzMTJCRDhBOTFGMjczNUYwOTRDNjVEOTQ5NzgyRkJDMjdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M0MkZFNTMxMkJEOEE5MUYy NzM1RjA5NEM2NUQ5NDk3ODJGQkMyN0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRlMlkvMC9D NDJGRTUzMTJCRDhBOTFGMjczNUYwOTRDNjVEOTQ5NzgyRkJDMjdDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdYGpn8PuvQm8qP88iEfzP/W3h08jPxI9tBekz89uDoIlMap+Tluze66I1IpX HONrTDXCt/r30WShpstn3jrtDnLt16cONBWYcdJJ9Eik+dEHoK/vPBCv9MVTxnJz WIb4uJNqhM86xAM5xE1vOM0YTxmlKLkngmkAjB7Br8JomydwHTcyxH0m8jb1Svrl Isj5KJgU+lCbZN6tDSi7aKmgfTnx6FUOQD+RgUfS/3W4uppn8JNXr1NFdYRKHKRZ uz7rlNQy+CkrbkIzdhJ9ytegfw33l5lTg4HZnpQstNcPumxDF0Dks9HxUpdSMBMp Egkn6sLBdECJPyz3WHNjE4cBSg== -----END CERTIFICATE-----Generated at Sun Dec 10 08:41:24 2023 by rpki-client on console-ams.rpki-client.org