$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft File: 025F1CD695A03927B6C43B9CCE128361E24CC47C.mft (raw, json) Hash identifier: iKNbNGgyTh+JSdHJf6hTMta1BJqI19RukebvP6SAGSk= Subject key identifier: 23:E0:C8:6A:8C:57:D9:B3:6C:4E:CE:A2:A4:AC:38:CC:EB:45:B1:0E Authority key identifier: 02:5F:1C:D6:95:A0:39:27:B6:C4:3B:9C:CE:12:83:61:E2:4C:C4:7C Certificate issuer: /CN=025F1CD695A03927B6C43B9CCE128361E24CC47C Certificate serial: 3A4448ED840C7CF5823C877750DA9B7AC9438E03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft Manifest number: 1F Signing time: Mon 25 Nov 2024 18:58:53 +0000 Manifest this update: Mon 25 Nov 2024 18:53:53 +0000 Manifest next update: Tue 26 Nov 2024 21:14:53 +0000 Files and hashes: 1: 025F1CD695A03927B6C43B9CCE128361E24CC47C.crl (hash: KHiParMnIAwN04zSk/HRlex+ohRPtd8i+xwiTtEQJiY=) 2: 3137302e38312e37362e302f32322d3332203d3e20323636333934.roa (hash: wvA5Hzn+0u7XENCLypkz0h5GItMUCoBMCPVnh3nV9W4=) 3: 323830343a333732633a3a2f33322d313238203d3e20323636333934.roa (hash: K6wPwmTo00RyeVoQrDt24ww2pkC9ts/mzsDgqaFom3o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.crl rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 21:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:44:48:ed:84:0c:7c:f5:82:3c:87:77:50:da:9b:7a:c9:43:8e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025F1CD695A03927B6C43B9CCE128361E24CC47C Validity Not Before: Nov 25 18:53:53 2024 GMT Not After : Nov 26 21:14:53 2024 GMT Subject: CN=23E0C86A8C57D9B36C4ECEA2A4AC38CCEB45B10E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:46:6f:df:03:41:19:6e:e0:9d:67:a9:65: 29:99:79:2f:51:7a:17:cd:f2:46:d5:84:fe:ab:e2: bb:d1:f8:18:eb:c1:b0:cc:27:45:46:e3:8b:84:1b: 47:49:cd:82:25:49:fa:36:1d:0e:07:66:ac:fe:08: 4e:3b:9f:64:a6:60:6a:76:cf:09:3e:2d:57:c6:d0: 87:e3:09:3c:52:0c:a2:4c:bf:33:29:84:88:13:3c: b0:e3:49:1b:d2:47:95:9a:e1:50:56:a2:b2:e8:57: d8:7e:8b:5e:09:97:66:77:45:44:1b:38:4d:e1:48: 13:25:02:c3:06:1a:ba:8c:f9:b7:e6:07:48:2a:de: 17:13:58:f4:f8:e1:8d:66:5b:da:37:3d:4b:53:4a: 24:2f:b7:13:2a:26:f7:72:a8:fc:40:7e:4f:ad:1d: 8c:52:f2:67:8b:3b:74:7a:1d:10:ef:77:8a:12:d2: 4b:7f:ca:a5:16:b0:23:eb:7b:7b:b5:a5:93:92:72: 6b:d8:3c:f8:53:d8:39:11:39:10:08:bc:7d:9c:18: 62:c4:2a:b7:37:55:ff:28:f6:8f:5e:8d:35:1c:6a: d0:26:8d:7c:4b:91:1f:96:c8:8e:af:21:fe:16:2e: d3:d9:d7:08:02:b4:77:62:92:03:15:a2:79:f6:38: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E0:C8:6A:8C:57:D9:B3:6C:4E:CE:A2:A4:AC:38:CC:EB:45:B1:0E X509v3 Authority Key Identifier: keyid:02:5F:1C:D6:95:A0:39:27:B6:C4:3B:9C:CE:12:83:61:E2:4C:C4:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:07:0f:38:84:3e:66:5d:91:be:90:02:fc:cc:a1:3a:1d:42: d5:d3:63:1c:86:6d:2b:50:fe:97:86:8d:d8:0b:38:c2:7e:76: f3:1e:66:c7:d0:8c:8a:97:ca:83:53:ff:9e:8c:ed:31:ce:06: 97:78:41:d2:e4:fd:b5:67:a6:44:02:94:e0:7a:dd:54:4e:7e: 02:cc:36:8d:24:72:70:0d:06:75:f3:5a:2b:f0:94:64:5a:e0: 4d:21:87:4a:dd:52:63:d5:a9:b8:aa:5b:5a:28:a4:28:49:28: 00:0f:fe:9f:eb:6b:5c:42:8e:95:d2:c5:54:fc:4e:21:1a:58: 28:98:82:a0:47:ef:8f:ad:e7:f6:f9:d8:50:63:bd:66:b7:65: 7b:49:80:59:5e:58:9f:01:60:ae:62:b7:4e:40:f2:5d:a9:80: e7:03:36:ec:cf:93:00:af:d6:2b:0e:1a:0c:05:01:36:9e:34: 86:29:0a:d1:8c:d7:df:02:ab:dd:7b:65:8c:15:75:58:21:cc: ca:9c:cc:bb:2c:91:65:e6:b4:c3:07:2e:2b:d2:e3:4e:f0:11: b4:9a:8e:03:42:90:dc:47:06:64:01:69:eb:56:4e:df:44:2b: 63:e3:75:9e:94:37:ee:2d:27:83:11:2f:e5:cc:fb:51:0f:7e: 88:f0:d4:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOkRI7YQMfPWCPId3UNqbeslDjgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1RjFDRDY5NUEwMzkyN0I2QzQzQjlDQ0UxMjgzNjFF MjRDQzQ3QzAeFw0yNDExMjUxODUzNTNaFw0yNDExMjYyMTE0NTNaMDMxMTAvBgNV BAMTKDIzRTBDODZBOEM1N0Q5QjM2QzRFQ0VBMkE0QUMzOENDRUI0NUIxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JkZv3wNBGW7gnWepZSmZeS9R ehfN8kbVhP6r4rvR+BjrwbDMJ0VG44uEG0dJzYIlSfo2HQ4HZqz+CE47n2SmYGp2 zwk+LVfG0IfjCTxSDKJMvzMphIgTPLDjSRvSR5Wa4VBWorLoV9h+i14Jl2Z3RUQb OE3hSBMlAsMGGrqM+bfmB0gq3hcTWPT44Y1mW9o3PUtTSiQvtxMqJvdyqPxAfk+t HYxS8meLO3R6HRDvd4oS0kt/yqUWsCPre3u1pZOScmvYPPhT2DkRORAIvH2cGGLE Krc3Vf8o9o9ejTUcatAmjXxLkR+WyI6vIf4WLtPZ1wgCtHdikgMVonn2OP01AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI+DIaoxX2bNsTs6ipKw4zOtFsQ4wHwYDVR0j BBgwFoAUAl8c1pWgOSe2xDuczhKDYeJMxHwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRmdTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNM QWYvMC8wMjVGMUNENjk1QTAzOTI3QjZDNDNCOUNDRTEyODM2MUUyNENDNDdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyNUYxQ0Q2OTVBMDM5MjdC NkM0M0I5Q0NFMTI4MzYxRTI0Q0M0N0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRmdTRrYTE2NU5ZbVNVMTdYaXgzVGFWRldxbjM4WWJ1dGN4REFQWkNMQWYvMC8w MjVGMUNENjk1QTAzOTI3QjZDNDNCOUNDRTEyODM2MUUyNENDNDdDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsAcPOIQ+Zl2RvpAC/MyhOh1C1dNjHIZtK1D+l4aN2As4wn528x5mx9CMipfK g1P/noztMc4Gl3hB0uT9tWemRAKU4HrdVE5+Asw2jSRycA0GdfNaK/CUZFrgTSGH St1SY9WpuKpbWiikKEkoAA/+n+trXEKOldLFVPxOIRpYKJiCoEfvj63n9vnYUGO9 Zrdle0mAWV5YnwFgrmK3TkDyXamA5wM27M+TAK/WKw4aDAUBNp40hikK0YzX3wKr 3XtljBV1WCHMypzMuyyRZea0wwcuK9LjTvARtJqOA0KQ3EcGZAFp61ZO30QrY+N1 npQ37i0ngxEv5cz7UQ9+iPDUFg== -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:30 2024 by rpki-client on console-ams.rpki-client.org