$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft File: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft (raw, json) Hash identifier: bxoJjMVszAsmHwDN7XApU4vQT/KUvl8nehK0TaG2RCc= Subject key identifier: FE:DD:F4:A9:5B:42:6F:CE:D5:09:87:96:72:98:2D:F6:AA:24:64:B6 Authority key identifier: 8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F Certificate issuer: /CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Certificate serial: 29F985DAB6135DF1EA21E5634A40A3308C951452 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 08:32:14 +0000 Manifest this update: Fri 22 Nov 2024 08:27:14 +0000 Manifest next update: Sat 23 Nov 2024 11:13:14 +0000 Files and hashes: 1: 323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (hash: prAFBdhyKDnBfI5cMju+t24I41GYGzzkg1blaMdIRlA=) 2: 3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (hash: hBWHeig5cLHS037n5B4J2klIa9VNddMqXmeJX50Pp3w=) 3: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl (hash: ulYwjEwuL/EjlzgMQpgbaUGFjOFDbfOLJ1M2qIcH+Lg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 11:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f9:85:da:b6:13:5d:f1:ea:21:e5:63:4a:40:a3:30:8c:95:14:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Validity Not Before: Nov 22 08:27:14 2024 GMT Not After : Nov 23 11:13:14 2024 GMT Subject: CN=FEDDF4A95B426FCED509879672982DF6AA2464B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:61:5c:c5:f9:2b:02:e1:1c:89:5d:d7:1e: a0:1f:81:e0:a9:c4:de:34:ab:f1:73:b5:77:63:cb: a5:fe:24:80:4e:24:b4:99:f9:21:ff:5d:9a:26:60: 21:79:4b:a5:df:ba:b6:ce:04:70:0e:0a:52:3f:ed: 60:e0:5e:5c:7b:a4:b4:cd:5d:a5:8c:97:6f:9d:98: fc:5c:f5:d9:a5:27:ca:79:ec:6b:50:21:eb:08:16: c8:6e:94:60:5c:f1:56:4b:f4:94:1b:f2:42:75:09: c0:ff:de:11:68:2b:89:3b:91:32:88:6c:c9:33:8a: d9:75:d5:d8:e0:81:7e:5a:e4:3c:45:fc:74:f1:11: 2f:0b:5c:1a:a7:6f:22:48:1b:37:3a:1d:8b:59:60: 0a:57:78:14:8d:09:b5:e5:cd:78:e7:4a:5e:28:26: ef:23:a9:0e:e0:12:ff:a7:2b:b2:b7:47:5d:d7:a2: 59:6e:7a:1c:de:65:52:82:84:40:58:5f:88:e5:05: 96:4e:a1:eb:d7:62:3e:79:e4:93:a7:8b:72:3a:0d: 53:e0:85:b9:fe:60:dd:f0:07:8b:bf:95:b7:02:0e: c0:c3:ff:53:86:f5:6c:07:1f:05:9a:ca:0c:42:df: 2e:28:b1:c5:93:1f:ca:19:56:74:ef:a4:22:1c:ee: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DD:F4:A9:5B:42:6F:CE:D5:09:87:96:72:98:2D:F6:AA:24:64:B6 X509v3 Authority Key Identifier: keyid:8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:cf:b0:c6:cc:64:5d:e4:42:cb:f8:f7:c9:46:e7:79:7c:fa: 7a:5a:9b:3d:44:5e:fc:d2:87:a2:69:07:fa:dc:9d:d7:06:82: 22:01:7e:a9:f4:97:16:93:c2:2b:20:41:19:75:c2:5b:60:7e: e9:69:f4:8f:9f:e2:6c:32:3d:d9:bb:d7:d5:84:8f:31:ce:0f: 30:ac:28:3e:d7:ee:dc:91:94:32:4f:01:09:ee:3c:21:e7:7e: 25:ae:12:a1:66:6d:fe:c9:8f:86:0f:e4:39:98:b9:fe:29:ea: 18:b4:54:fe:30:f6:d1:39:21:b9:67:b3:c8:c3:e2:87:1f:cd: 09:e1:f7:6b:42:92:e3:fa:2c:17:d8:95:bc:32:0a:29:bf:2a: 33:4c:54:dc:2a:a3:a2:da:77:5a:5f:fa:df:84:ab:e5:17:41: 77:b2:07:e0:8e:74:b8:19:86:14:07:01:e9:54:b7:48:47:8a: 63:31:68:ac:ab:12:d5:fe:0e:bc:f9:5c:62:17:be:47:3c:f0: d1:42:3c:95:71:17:95:e6:76:58:ad:6d:95:ae:21:51:17:e1: d6:2c:53:30:2c:c9:4a:59:9d:f0:e5:1d:27:9d:a3:9e:29:37: 91:d3:2b:e0:ed:72:14:e6:d9:8f:61:aa:72:2f:89:39:fa:d4: 19:3a:ba:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKfmF2rYTXfHqIeVjSkCjMIyVFFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVDN0Q1QTkwMTZBQUVGQzQxMEVENDY2RTAwQjE0RUJE Q0U2RUU3RjAeFw0yNDExMjIwODI3MTRaFw0yNDExMjMxMTEzMTRaMDMxMTAvBgNV BAMTKEZFRERGNEE5NUI0MjZGQ0VENTA5ODc5NjcyOTgyREY2QUEyNDY0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMGFcxfkrAuEciV3XHqAfgeCp xN40q/FztXdjy6X+JIBOJLSZ+SH/XZomYCF5S6XfurbOBHAOClI/7WDgXlx7pLTN XaWMl2+dmPxc9dmlJ8p57GtQIesIFshulGBc8VZL9JQb8kJ1CcD/3hFoK4k7kTKI bMkzitl11djggX5a5DxF/HTxES8LXBqnbyJIGzc6HYtZYApXeBSNCbXlzXjnSl4o Ju8jqQ7gEv+nK7K3R13XolluehzeZVKChEBYX4jlBZZOoevXYj555JOni3I6DVPg hbn+YN3wB4u/lbcCDsDD/1OG9WwHHwWaygxC3y4oscWTH8oZVnTvpCIc7s/NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/t30qVtCb87VCYeWcpgt9qokZLYwHwYDVR0j BBgwFoAUjsfVqQFqrvxBDtRm4AsU69zm7n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1 aXMvMS84RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQzdENUE5MDE2QUFFRkM0 MTBFRDQ2NkUwMEIxNEVCRENFNkVFN0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1aXMvMS84 RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv8+wxsxkXeRCy/j3yUbneXz6elqbPURe/NKHomkH+tyd1waCIgF+qfSXFpPC KyBBGXXCW2B+6Wn0j5/ibDI92bvX1YSPMc4PMKwoPtfu3JGUMk8BCe48Ied+Ja4S oWZt/smPhg/kOZi5/inqGLRU/jD20TkhuWezyMPihx/NCeH3a0KS4/osF9iVvDIK Kb8qM0xU3Cqjotp3Wl/634Sr5RdBd7IH4I50uBmGFAcB6VS3SEeKYzForKsS1f4O vPlcYhe+Rzzw0UI8lXEXleZ2WK1tla4hURfh1ixTMCzJSlmd8OUdJ52jnik3kdMr 4O1yFObZj2Gqci+JOfrUGTq6hQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org