$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft File: 60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft (raw, json) Hash identifier: LkCeR9nPYfQ9ZrMv+9T59012o0XVoLPpwMmYdfSylrs= Subject key identifier: 48:F8:4D:61:88:78:1F:95:E5:18:F9:0E:E1:EA:7D:94:13:3D:BF:E1 Authority key identifier: 60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2 Certificate issuer: /CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2 Certificate serial: 7BEC7196BA143F126CD178157CD96D424BFBE148 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft Manifest number: D9 Signing time: Tue 26 Nov 2024 03:17:32 +0000 Manifest this update: Tue 26 Nov 2024 03:12:32 +0000 Manifest next update: Wed 27 Nov 2024 05:12:32 +0000 Files and hashes: 1: 60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl (hash: vP1rN8ruO82LS+Y3ztsNrLaBPTsXvn4TbK8XFxbVsz0=) 2: 3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (hash: HPZdA2dCwhdvPU5dP5QoH0m+ITDwmF2MOO2w8okzFPU=) 3: 3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa (hash: q59nYU2N6cYlI7UxR2A/ZJBy55kM8BhWtnJR5fjoP48=) 4: 323830343a313631343a3a2f33322d3336203d3e20323633323636.roa (hash: O1ZdgJEWGK+f3kNKwnNet+gUN2zvNC9SRkIbkgGZyxM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 05:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ec:71:96:ba:14:3f:12:6c:d1:78:15:7c:d9:6d:42:4b:fb:e1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2 Validity Not Before: Nov 26 03:12:32 2024 GMT Not After : Nov 27 05:12:32 2024 GMT Subject: CN=48F84D6188781F95E518F90EE1EA7D94133DBFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:e3:08:76:f4:88:e1:a3:7e:41:01:fd:3e: 8a:2c:63:8c:fd:f6:9f:c6:0f:86:a1:c5:a1:3f:8d: 40:a4:ec:05:69:f6:00:57:d7:73:34:46:ac:3a:ee: ae:ef:78:e1:19:8d:40:c6:b2:80:9b:32:27:10:c4: 10:bb:fd:64:4a:de:19:64:22:aa:72:20:85:ef:8d: db:21:68:ce:85:b1:bc:6a:ca:f6:32:38:6b:ef:04: 52:b3:59:ac:00:6d:b2:5b:52:e8:83:b7:4e:4a:b8: 76:27:29:fd:fd:39:41:66:d0:bd:66:bb:2e:78:86: f6:4e:35:46:7b:91:dd:40:56:05:86:e8:ec:75:92: 66:38:77:c8:49:e3:1f:57:c3:bb:46:65:12:a6:94: 65:a1:c2:55:dc:31:77:de:9e:9e:7d:6a:50:40:f7: 7e:20:85:4c:6f:7f:df:77:85:18:a4:e4:90:08:75: 88:cc:f8:a8:f8:4a:10:3c:6f:a7:8e:23:e4:c2:1d: 3c:e6:53:8a:18:86:4a:df:87:a4:b0:8c:f7:8a:05: 16:62:b7:87:17:02:7f:91:77:7e:2d:f5:7a:04:50: 09:33:9a:78:df:f4:b7:8d:dc:98:44:9f:eb:ee:d1: f4:55:5b:51:38:e8:22:67:19:e8:96:97:8d:18:55: c2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:4D:61:88:78:1F:95:E5:18:F9:0E:E1:EA:7D:94:13:3D:BF:E1 X509v3 Authority Key Identifier: keyid:60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b8:ca:c1:45:e9:d0:f5:9d:2d:fd:5e:d7:a1:e2:d8:a9:c8: 15:3e:6f:f9:2f:6d:52:e0:16:a1:d0:a1:17:4b:88:46:44:2e: 25:88:7d:06:27:f9:fb:ce:3c:16:7d:0c:21:d9:b8:df:ba:fd: 1b:e1:c1:fc:7d:80:df:b1:09:f6:af:5d:38:ee:25:d3:45:b1: c4:82:59:bb:12:55:a5:8b:67:77:71:c8:f1:2e:05:06:84:23: f0:90:da:cb:39:c2:4e:4d:53:7c:57:3e:d7:9b:9c:78:29:7c: e3:34:91:ad:6a:62:8f:7d:25:a4:ac:af:d4:2e:54:f2:c9:73: 11:0f:93:79:ab:a3:a8:53:36:30:d7:dc:33:2a:84:55:04:1b: 31:20:7c:2c:fb:30:c8:d4:cb:6c:a8:e3:e8:c9:ac:af:9d:7a: d9:bd:6d:2b:61:da:39:06:2a:ac:84:47:a1:34:7c:8a:64:cd: a8:d9:46:3b:f5:41:35:b0:f4:69:0e:a2:de:77:d2:94:23:ae: ec:bb:77:07:44:2f:84:bf:8b:a5:42:2a:1c:71:51:11:f0:fb: a8:d7:cc:80:50:d6:ac:74:f9:bc:ee:c8:84:18:8a:84:cd:9f: 0d:75:04:df:10:42:bb:1d:01:66:45:74:d1:41:f0:18:27:54: d5:59:ee:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe+xxlroUPxJs0XgVfNltQkv74UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBMjdGMDQyQjU3RjRFODcyODU1RjUzNTNFMEE2NDMy REFDNEFGMjAeFw0yNDExMjYwMzEyMzJaFw0yNDExMjcwNTEyMzJaMDMxMTAvBgNV BAMTKDQ4Rjg0RDYxODg3ODFGOTVFNTE4RjkwRUUxRUE3RDk0MTMzREJGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TOMIdvSI4aN+QQH9PoosY4z9 9p/GD4ahxaE/jUCk7AVp9gBX13M0Rqw67q7veOEZjUDGsoCbMicQxBC7/WRK3hlk IqpyIIXvjdshaM6FsbxqyvYyOGvvBFKzWawAbbJbUuiDt05KuHYnKf39OUFm0L1m uy54hvZONUZ7kd1AVgWG6Ox1kmY4d8hJ4x9Xw7tGZRKmlGWhwlXcMXfenp59alBA 934ghUxvf993hRik5JAIdYjM+Kj4ShA8b6eOI+TCHTzmU4oYhkrfh6SwjPeKBRZi t4cXAn+Rd34t9XoEUAkzmnjf9LeN3JhEn+vu0fRVW1E46CJnGeiWl40YVcJ/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSPhNYYh4H5XlGPkO4ep9lBM9v+EwHwYDVR0j BBgwFoAUYKJ/BCtX9OhyhV9TU+CmQy2sSvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlVXajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1Jn ZTIvMC82MEEyN0YwNDJCNTdGNEU4NzI4NTVGNTM1M0UwQTY0MzJEQUM0QUYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQTI3RjA0MkI1N0Y0RTg3 Mjg1NUY1MzUzRTBBNjQzMkRBQzRBRjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlVXajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1JnZTIvMC82 MEEyN0YwNDJCNTdGNEU4NzI4NTVGNTM1M0UwQTY0MzJEQUM0QUYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN7jKwUXp0PWdLf1e16Hi2KnIFT5v+S9tUuAWodChF0uIRkQuJYh9Bif5+848 Fn0MIdm437r9G+HB/H2A37EJ9q9dOO4l00WxxIJZuxJVpYtnd3HI8S4FBoQj8JDa yznCTk1TfFc+15uceCl84zSRrWpij30lpKyv1C5U8slzEQ+TeaujqFM2MNfcMyqE VQQbMSB8LPswyNTLbKjj6Mmsr5162b1tK2HaOQYqrIRHoTR8imTNqNlGO/VBNbD0 aQ6i3nfSlCOu7Lt3B0QvhL+LpUIqHHFREfD7qNfMgFDWrHT5vO7IhBiKhM2fDXUE 3xBCux0BZkV00UHwGCdU1VnuVw== -----END CERTIFICATE-----Generated at Tue Nov 26 04:35:40 2024 by rpki-client on console-fra.rpki-client.org