$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft File: AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft (raw, json) Hash identifier: 1Th0ftW9QTosHYbxHQvp2YFB69YtE7wl9qyitOFhHow= Subject key identifier: A6:80:EF:5D:F7:9B:00:89:62:F7:75:5E:4E:01:BE:3D:64:F7:58:B8 Authority key identifier: AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD Certificate issuer: /CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD Certificate serial: 65730373647A845795186D770BF6C46942A88D90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft Manifest number: 78 Signing time: Mon 01 Jul 2024 10:25:59 +0000 Manifest this update: Mon 01 Jul 2024 10:20:59 +0000 Manifest next update: Tue 02 Jul 2024 10:45:59 +0000 Files and hashes: 1: 323830343a343261383a3a2f33322d313238203d3e20323637353137.roa (hash: zQkb324/Mcrk+871vBVIopJIBrlw1dACgkdwH7rrt8E=) 2: AAF5B81D61057C224A29F86F6C466A2DE486BFFD.crl (hash: wHR0qvPVXlgpRDDSwnOY5/hf3+sYKqEDRO7+AmOGwqg=) 3: 3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa (hash: RF6h7gnA4aeF1+n7QFT0bhkIUWJd+63DKBJP2hTIW2g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.crl rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 10:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:73:03:73:64:7a:84:57:95:18:6d:77:0b:f6:c4:69:42:a8:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD Validity Not Before: Jul 1 10:20:59 2024 GMT Not After : Jul 2 10:45:59 2024 GMT Subject: CN=A680EF5DF79B008962F7755E4E01BE3D64F758B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:4f:74:4c:9c:8a:81:dc:42:af:94:50:9b: 69:44:de:f5:9c:e3:23:99:40:33:7a:a0:3d:5d:49: 06:70:d5:8a:43:be:b2:80:6b:a2:21:79:d8:a5:22: d2:a8:83:41:35:5f:a0:d3:6f:d8:23:46:2e:c7:a2: c8:8a:a2:7d:e4:ad:0a:d6:07:b1:9c:fd:f2:6f:54: 34:ee:5b:6c:12:99:c6:92:c6:f6:ae:7c:02:97:e7: b9:cb:81:94:1c:ee:24:fc:4b:3b:26:a8:b7:b0:df: a9:8d:61:29:f6:59:4b:12:10:f0:19:5f:22:e5:21: 4c:0e:06:18:e1:8a:32:08:49:12:99:81:a4:32:b0: ec:aa:49:00:1f:0e:ed:de:bd:10:95:38:30:a1:4b: f1:95:ae:23:bd:ee:dc:73:3e:e0:f8:f8:97:9a:be: 56:6b:4c:24:cd:0f:78:97:d2:c7:d9:f9:86:48:cf: 35:5b:fe:df:3b:e2:dd:ca:ad:3e:e5:72:07:99:2c: d9:37:16:52:17:94:cf:f1:4a:3d:da:e5:e3:60:b9: a8:79:c7:a8:0a:a3:d5:3d:19:ff:f2:25:39:6c:e9: 07:de:70:c4:6e:7b:5c:7b:ae:52:7e:62:ea:fa:03: bc:5e:96:fc:cb:53:26:f0:42:6e:0d:dd:4d:67:46: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:80:EF:5D:F7:9B:00:89:62:F7:75:5E:4E:01:BE:3D:64:F7:58:B8 X509v3 Authority Key Identifier: keyid:AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:16:f8:2b:4c:12:5c:3e:6e:5c:2d:2a:32:a8:e6:2d:80:f5: 37:10:6c:53:6b:3a:27:c0:57:f7:d7:5e:fa:64:b4:2d:fb:42: 59:bb:0c:55:92:d3:c3:d2:f0:02:a4:99:24:b2:78:e8:f4:29: 5b:49:a0:5e:f1:6e:76:58:8d:ce:c6:85:4b:61:b9:8e:d1:38: 71:73:c1:4e:b5:f6:7e:c2:5f:c9:84:f2:4c:83:81:c0:75:33: ad:44:7b:29:df:48:67:14:39:46:1f:27:39:1d:4f:5f:da:6c: 63:76:78:50:2b:a6:32:e2:3c:c6:df:7c:1a:dd:ae:00:68:e5: 31:d7:77:96:4f:94:67:83:21:5f:75:7c:ef:06:3a:ef:7e:e3: 5e:45:96:41:9c:bb:65:23:d7:5a:d2:3b:83:68:8f:85:f5:69: d3:f1:9e:66:ad:68:5c:ac:2f:c3:cb:c7:3d:9c:e7:f8:86:7b: a7:01:d8:e2:ee:5e:0b:5c:4f:c5:61:9c:a9:b0:ce:65:59:78: 8d:bd:0e:e2:39:d5:2c:2d:68:a8:e7:17:7b:bc:98:69:22:d5: d1:0c:cf:81:f0:f2:20:5e:76:33:5b:c8:83:7e:67:b8:25:96: 6f:53:4b:95:03:45:f6:c0:00:72:1e:ec:8a:1b:88:99:2d:58: ad:78:48:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZXMDc2R6hFeVGG13C/bEaUKojZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFGNUI4MUQ2MTA1N0MyMjRBMjlGODZGNkM0NjZBMkRF NDg2QkZGRDAeFw0yNDA3MDExMDIwNTlaFw0yNDA3MDIxMDQ1NTlaMDMxMTAvBgNV BAMTKEE2ODBFRjVERjc5QjAwODk2MkY3NzU1RTRFMDFCRTNENjRGNzU4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZk90TJyKgdxCr5RQm2lE3vWc 4yOZQDN6oD1dSQZw1YpDvrKAa6IhedilItKog0E1X6DTb9gjRi7HosiKon3krQrW B7Gc/fJvVDTuW2wSmcaSxvaufAKX57nLgZQc7iT8SzsmqLew36mNYSn2WUsSEPAZ XyLlIUwOBhjhijIISRKZgaQysOyqSQAfDu3evRCVODChS/GVriO97txzPuD4+Jea vlZrTCTND3iX0sfZ+YZIzzVb/t874t3KrT7lcgeZLNk3FlIXlM/xSj3a5eNguah5 x6gKo9U9Gf/yJTls6QfecMRue1x7rlJ+Yur6A7xelvzLUybwQm4N3U1nRv+nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpoDvXfebAIli93VeTgG+PWT3WLgwHwYDVR0j BBgwFoAUqvW4HWEFfCJKKfhvbEZqLeSGv/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmFUbkplbnVScENmVjNIQjFGV2NkRkdDZVh3V3Q2ZDlmYnJwMjVKNXVM YUcvMS9BQUY1QjgxRDYxMDU3QzIyNEEyOUY4NkY2QzQ2NkEyREU0ODZCRkZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBRjVCODFENjEwNTdDMjI0 QTI5Rjg2RjZDNDY2QTJERTQ4NkJGRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmFUbkplbnVScENmVjNIQjFGV2NkRkdDZVh3V3Q2ZDlmYnJwMjVKNXVMYUcvMS9B QUY1QjgxRDYxMDU3QzIyNEEyOUY4NkY2QzQ2NkEyREU0ODZCRkZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiBb4K0wSXD5uXC0qMqjmLYD1NxBsU2s6J8BX99de+mS0LftCWbsMVZLTw9Lw AqSZJLJ46PQpW0mgXvFudliNzsaFS2G5jtE4cXPBTrX2fsJfyYTyTIOBwHUzrUR7 Kd9IZxQ5Rh8nOR1PX9psY3Z4UCumMuI8xt98Gt2uAGjlMdd3lk+UZ4MhX3V87wY6 737jXkWWQZy7ZSPXWtI7g2iPhfVp0/GeZq1oXKwvw8vHPZzn+IZ7pwHY4u5eC1xP xWGcqbDOZVl4jb0O4jnVLC1oqOcXe7yYaSLV0QzPgfDyIF52M1vIg35nuCWWb1NL lQNF9sAAch7sihuImS1YrXhI3A== -----END CERTIFICATE-----Generated at Mon Jul 1 11:00:23 2024 by rpki-client on console-fra.rpki-client.org