$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft File: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft (raw, json) Hash identifier: tU9Tei1Di/w/T9W43BA33EXxnHNc754e+8MffQBCbJw= Subject key identifier: 90:5D:00:F1:E6:5D:CC:1A:C9:59:BB:6B:97:B3:88:3D:C7:79:F5:8E Authority key identifier: 8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF Certificate issuer: /CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF Certificate serial: 6090F15AE2DA428B2743A0C3247911ABC74E1C88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 16:56:29 +0000 Manifest this update: Fri 22 Nov 2024 16:51:29 +0000 Manifest next update: Sat 23 Nov 2024 17:43:29 +0000 Files and hashes: 1: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl (hash: y9WGd7f4VvHbjPH3u5Gk1nCEnhc6om/lBaXiPlcMLf8=) 2: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: rNNxgec91Th0VdVpWYJrCKlVyhM4MAr7EnSMDazLB4M=) 3: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: IDv8ydkbWDszmddR5Lm2hO9qj2kSxy/I5GR8S/zBFqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 17:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:90:f1:5a:e2:da:42:8b:27:43:a0:c3:24:79:11:ab:c7:4e:1c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF Validity Not Before: Nov 22 16:51:29 2024 GMT Not After : Nov 23 17:43:29 2024 GMT Subject: CN=905D00F1E65DCC1AC959BB6B97B3883DC779F58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:d3:cc:c2:98:8a:08:f8:e3:a3:74:a8:50: c5:b1:c4:df:4b:f1:8c:40:6c:86:2a:22:7e:0f:ba: d8:c9:0e:f6:c5:85:81:69:5f:10:34:85:b8:46:4a: ec:d6:33:8f:ea:37:29:87:93:82:c1:d6:29:06:56: 45:33:01:2e:1e:bb:cb:9e:36:0b:95:95:06:f1:1d: 7e:aa:08:20:20:e7:b7:2b:f2:b1:aa:bc:24:24:d9: 3c:18:d0:d6:f4:77:90:5b:6e:a6:9a:a9:34:33:9d: 72:a4:1f:6c:34:54:93:29:72:f2:e9:2a:18:1d:e4: 99:5e:f7:95:07:b5:a5:7f:06:d3:87:aa:10:f7:95: 23:81:76:74:f7:60:d2:c0:76:5b:4a:46:56:8b:59: ec:ae:03:1d:01:84:00:78:27:a7:9e:aa:6e:82:81: e6:09:4a:32:da:8b:6b:47:ce:12:39:df:cf:22:a7: c3:be:b2:c9:65:cb:f6:e2:1d:9e:83:c9:f7:ec:83: 8e:d1:23:1f:0e:8f:dd:36:ac:e8:be:1e:0b:57:62: 11:ea:01:4b:cb:cc:d1:40:31:99:b1:4a:d7:ad:de: c4:b7:a1:a4:a6:7c:94:4b:ee:20:3e:c2:69:c1:7c: 10:b6:e1:9a:24:de:c1:9a:c4:39:63:17:33:5c:5f: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:00:F1:E6:5D:CC:1A:C9:59:BB:6B:97:B3:88:3D:C7:79:F5:8E X509v3 Authority Key Identifier: keyid:8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5f:79:42:e9:88:bb:dc:27:1b:68:de:98:a5:b9:af:b8:ab: bd:d3:5e:eb:09:a2:76:09:23:9e:69:3b:75:e6:6b:81:2d:49: d0:6b:91:62:b1:a9:a4:86:d6:c0:dd:4a:2a:9f:24:4e:10:c9: 79:09:b6:c0:bf:d9:1a:21:90:ea:e8:49:5d:40:9f:f9:23:94: fb:ca:47:15:d6:08:da:4c:37:a8:a9:74:0b:42:b6:3d:1f:09: 69:58:66:28:a3:f5:b6:ee:55:5e:34:dd:dc:b7:5d:16:36:9f: e5:05:25:75:58:96:4e:9a:cb:dd:a9:78:3a:ce:00:ff:04:d2: 61:8e:be:8b:1a:84:2e:c3:a5:76:c9:e8:1e:b6:7a:19:ac:46: 6a:fc:89:03:3f:9f:2d:66:53:21:2d:f9:3c:8e:96:d9:01:61: a1:74:cd:c7:73:8b:ab:c1:1c:20:ad:31:a4:d7:3c:13:64:13: fb:f9:e2:b5:6c:51:e9:ad:26:e8:6b:5c:4b:b8:1d:73:7f:4a: ca:88:88:08:90:61:2d:72:4b:34:d1:93:3a:94:57:e3:33:8f: c0:62:6a:d6:17:8d:76:59:36:c2:21:c6:51:dd:29:6b:e5:c5: a0:41:14:c6:2c:8e:39:a8:87:4a:01:9e:3d:78:05:31:ca:35: 7f:f5:d7:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYJDxWuLaQosnQ6DDJHkRq8dOHIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEExMTQxNjRCQkE5QkM0QjNBNTBBNzI5MTE2QkM3NTc0 RDJDRDZFRjAeFw0yNDExMjIxNjUxMjlaFw0yNDExMjMxNzQzMjlaMDMxMTAvBgNV BAMTKDkwNUQwMEYxRTY1RENDMUFDOTU5QkI2Qjk3QjM4ODNEQzc3OUY1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rtPMwpiKCPjjo3SoUMWxxN9L 8YxAbIYqIn4PutjJDvbFhYFpXxA0hbhGSuzWM4/qNymHk4LB1ikGVkUzAS4eu8ue NguVlQbxHX6qCCAg57cr8rGqvCQk2TwY0Nb0d5BbbqaaqTQznXKkH2w0VJMpcvLp Khgd5Jle95UHtaV/BtOHqhD3lSOBdnT3YNLAdltKRlaLWeyuAx0BhAB4J6eeqm6C geYJSjLai2tHzhI5388ip8O+sslly/biHZ6Dyffsg47RIx8Oj902rOi+HgtXYhHq AUvLzNFAMZmxStet3sS3oaSmfJRL7iA+wmnBfBC24Zok3sGaxDljFzNcXwsvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkF0A8eZdzBrJWbtrl7OIPcd59Y4wHwYDVR0j BBgwFoAUihFBZLupvEs6UKcpEWvHV00s1u8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290 YVEvMS84QTExNDE2NEJCQTlCQzRCM0E1MEE3MjkxMTZCQzc1NzREMkNENkVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBMTE0MTY0QkJBOUJDNEIz QTUwQTcyOTExNkJDNzU3NEQyQ0Q2RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290YVEvMS84 QTExNDE2NEJCQTlCQzRCM0E1MEE3MjkxMTZCQzc1NzREMkNENkVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVF95QumIu9wnG2jemKW5r7irvdNe6wmidgkjnmk7deZrgS1J0GuRYrGppIbW wN1KKp8kThDJeQm2wL/ZGiGQ6uhJXUCf+SOU+8pHFdYI2kw3qKl0C0K2PR8JaVhm KKP1tu5VXjTd3LddFjaf5QUldViWTprL3al4Os4A/wTSYY6+ixqELsOldsnoHrZ6 GaxGavyJAz+fLWZTIS35PI6W2QFhoXTNx3OLq8EcIK0xpNc8E2QT+/nitWxR6a0m 6GtcS7gdc39KyoiICJBhLXJLNNGTOpRX4zOPwGJq1heNdlk2wiHGUd0pa+XFoEEU xiyOOaiHSgGePXgFMco1f/XXTg== -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:18 2024 by rpki-client on console-fra.rpki-client.org