$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.mft File: C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.mft (raw, json) Hash identifier: l1DGY1l/n+E9jomiFY0HvdeUGU5DC9u1SKHkHY/tTN4= Subject key identifier: 4E:F8:9F:D8:7C:4D:08:FC:AF:34:6D:42:30:55:10:56:9A:9F:CB:3F Authority key identifier: C9:B2:EC:A5:8E:E7:8A:CB:4F:2E:6B:6E:1D:C2:A1:85:8E:60:FC:0D Certificate issuer: /CN=C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D Certificate serial: 3641F110E83824EB80B93E251BD0F66C6C88DDB3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.mft Manifest number: 64 Signing time: Wed 26 Jun 2024 04:14:29 +0000 Manifest this update: Wed 26 Jun 2024 04:09:29 +0000 Manifest next update: Thu 27 Jun 2024 04:53:29 +0000 Files and hashes: 1: 323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (hash: iFsJKUwRBk2cedRCXWoiNhprgvPkEJdMJJ+lafelYyo=) 2: 34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (hash: koTdrHGlMz9rmStKY/iFIOQMOfDMd/F7zEeNRBx2GhY=) 3: C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.crl (hash: Ab/of99cYdhZUfQ+DvS/EmLFtxvTR5ySajMhWGVcP4E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.crl rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 04:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:41:f1:10:e8:38:24:eb:80:b9:3e:25:1b:d0:f6:6c:6c:88:dd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D Validity Not Before: Jun 26 04:09:29 2024 GMT Not After : Jun 27 04:53:29 2024 GMT Subject: CN=4EF89FD87C4D08FCAF346D42305510569A9FCB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:88:06:67:e8:05:5a:01:f2:98:02:20:a6: 41:9e:4d:b4:7b:c0:b2:af:49:02:59:38:be:59:5b: ad:2e:46:2a:d3:09:fd:13:6a:8e:6f:40:9c:e3:01: 44:ad:6f:28:2c:4e:33:b4:ed:21:7e:e4:17:0d:b4: a1:49:a0:ee:c9:0c:42:84:b9:ca:2d:0d:46:84:74: b5:0a:96:30:3d:b5:2d:e7:fa:3a:27:9b:dd:c0:e5: ef:54:86:33:a1:23:04:66:1c:c6:91:fe:b2:b7:4e: bb:12:ea:86:d6:8b:fc:74:40:b7:50:f9:67:03:3f: 71:a2:d1:a5:56:a1:3b:ce:d2:33:96:19:a0:57:1b: 8b:cb:f6:30:b3:2d:e9:90:d5:89:cc:b4:ac:5d:ea: 97:35:59:20:dd:57:f7:d9:36:b5:74:9d:67:32:08: 26:0b:49:c2:35:53:16:86:9f:cc:f3:e7:99:aa:cc: ef:27:25:6b:0f:33:92:7d:ab:ef:eb:f4:ea:71:a6: 96:77:11:70:ed:ea:f8:f3:c1:55:26:27:ed:53:3e: dd:c7:54:ad:6f:4f:11:c6:3f:ec:4d:28:49:bb:4c: 6c:f2:5c:1c:22:5c:ed:f1:a8:41:3e:5b:f5:31:ff: ce:0d:d7:1c:ca:a1:5b:86:0f:57:40:ce:da:17:bf: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F8:9F:D8:7C:4D:08:FC:AF:34:6D:42:30:55:10:56:9A:9F:CB:3F X509v3 Authority Key Identifier: keyid:C9:B2:EC:A5:8E:E7:8A:CB:4F:2E:6B:6E:1D:C2:A1:85:8E:60:FC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/1/C9B2ECA58EE78ACB4F2E6B6E1DC2A1858E60FC0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:13:a8:0d:c8:7a:2b:ef:28:fc:da:33:ab:89:74:05:88:e8: 4e:7e:c9:7f:9e:f9:47:82:00:c0:10:79:4e:a6:b1:c1:53:09: 98:96:20:2e:ff:8c:a5:50:c7:06:31:0c:1d:47:dd:a5:c4:03: 7b:95:cc:9c:e1:4d:ed:98:e8:8f:02:ea:c1:42:74:21:26:69: 37:c5:ea:9c:43:e6:74:06:c5:f9:74:ba:27:c2:0f:2a:58:9a: 02:5c:9d:db:20:58:e2:ab:22:d4:33:bc:2b:ef:28:e6:1d:1b: 94:83:40:4a:c1:c0:3f:70:2a:75:4c:55:dc:bd:c0:86:c6:7d: f3:92:c9:24:4f:9b:22:2e:9a:17:2c:51:16:08:0f:a3:d7:92: 4d:df:95:55:24:f4:d1:05:2d:25:9f:de:f5:da:d4:b3:67:e4: 85:01:60:59:b1:61:aa:19:7a:65:e9:88:d4:92:d7:cf:0e:57: ae:14:f7:04:c5:da:8d:49:80:7d:4b:38:a4:83:4a:58:1f:3f: 91:de:13:0b:3e:bc:40:17:5b:4a:fb:d3:a2:e6:d2:c3:78:1a: 8c:9e:bf:ae:db:c6:13:77:ed:87:56:45:70:33:95:55:3c:96: 36:53:60:1b:a9:32:6b:c7:ce:fc:76:8d:f1:00:25:a0:d8:f0: 0a:40:a6:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNkHxEOg4JOuAuT4lG9D2bGyI3bMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCMkVDQTU4RUU3OEFDQjRGMkU2QjZFMURDMkExODU4 RTYwRkMwRDAeFw0yNDA2MjYwNDA5MjlaFw0yNDA2MjcwNDUzMjlaMDMxMTAvBgNV BAMTKDRFRjg5RkQ4N0M0RDA4RkNBRjM0NkQ0MjMwNTUxMDU2OUE5RkNCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENYgGZ+gFWgHymAIgpkGeTbR7 wLKvSQJZOL5ZW60uRirTCf0Tao5vQJzjAUStbygsTjO07SF+5BcNtKFJoO7JDEKE ucotDUaEdLUKljA9tS3n+jonm93A5e9UhjOhIwRmHMaR/rK3TrsS6obWi/x0QLdQ +WcDP3Gi0aVWoTvO0jOWGaBXG4vL9jCzLemQ1YnMtKxd6pc1WSDdV/fZNrV0nWcy CCYLScI1UxaGn8zz55mqzO8nJWsPM5J9q+/r9OpxppZ3EXDt6vjzwVUmJ+1TPt3H VK1vTxHGP+xNKEm7TGzyXBwiXO3xqEE+W/Ux/84N1xzKoVuGD1dAztoXv+Y7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTvif2HxNCPyvNG1CMFUQVpqfyz8wHwYDVR0j BBgwFoAUybLspY7nistPLmtuHcKhhY5g/A0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBXQ3lMTUIxSjdvZEhTdVpjNDJrc0JveEg5RVJSQWpvc3h5Tnl1R2hk b3gvMS9DOUIyRUNBNThFRTc4QUNCNEYyRTZCNkUxREMyQTE4NThFNjBGQzBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjJFQ0E1OEVFNzhBQ0I0 RjJFNkI2RTFEQzJBMTg1OEU2MEZDMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBXQ3lMTUIxSjdvZEhTdVpjNDJrc0JveEg5RVJSQWpvc3h5Tnl1R2hkb3gvMS9D OUIyRUNBNThFRTc4QUNCNEYyRTZCNkUxREMyQTE4NThFNjBGQzBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMxOoDch6K+8o/Nozq4l0BYjoTn7Jf575R4IAwBB5TqaxwVMJmJYgLv+MpVDH BjEMHUfdpcQDe5XMnOFN7ZjojwLqwUJ0ISZpN8XqnEPmdAbF+XS6J8IPKliaAlyd 2yBY4qsi1DO8K+8o5h0blINASsHAP3AqdUxV3L3AhsZ985LJJE+bIi6aFyxRFggP o9eSTd+VVST00QUtJZ/e9drUs2fkhQFgWbFhqhl6ZemI1JLXzw5XrhT3BMXajUmA fUs4pINKWB8/kd4TCz68QBdbSvvToubSw3gajJ6/rtvGE3fth1ZFcDOVVTyWNlNg G6kya8fO/HaN8QAloNjwCkCm+A== -----END CERTIFICATE-----Generated at Wed Jun 26 08:11:33 2024 by rpki-client on console-ams.rpki-client.org