$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: dUd0sI40GPRM/2TiihEbnades+HZZMDge5IHXp21G+g= Subject key identifier: 99:85:D6:F2:DD:2C:4D:4C:F2:99:54:74:E6:7C:5F:3F:BF:D5:79:5E Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 1780BDB0FD88D6F25526914D202129E2B9A002D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 13:10:11 +0000 Manifest this update: Fri 22 Nov 2024 13:05:11 +0000 Manifest next update: Sat 23 Nov 2024 13:39:11 +0000 Files and hashes: 1: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: 0OhrXKtTiBYAK11HsB8qco57JY6qzuGzWbyR/yxEabg=) 2: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: b/K0G0tNZ/ZOaykgVcBL07AMpYKelPBRwxs6vuVrm7o=) 3: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: LnEpQRuYLbskh0bThXudX1ipJkLZK326gFk4Qfyw/Ss=) 4: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: 5V0xp4ss7RkLddrgOwZInAE6DZD5WhwTc5uxdERC9Wc=) 5: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: HjLmIIkSyrACvSOgMlbocTcFWT+/s85976mzX76M0Jk=) 6: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: ZLemH/UzHE4DAW8EqvM9H+l39/WbIeYTcT5zsIqw2Bg=) 7: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: WY1rsVTISM0s/hdYvwreaR81nOXFx/voVw4AWTmdxCg=) 8: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: /EYGVqMcM30rMfJ61qfD2E7NsunrOhFPjGagIDX9VrQ=) 9: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: blbEGzPL4CciNz+hb39XvvHIezp7NQjG9SWcZa3L+N0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 13:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:80:bd:b0:fd:88:d6:f2:55:26:91:4d:20:21:29:e2:b9:a0:02:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Nov 22 13:05:11 2024 GMT Not After : Nov 23 13:39:11 2024 GMT Subject: CN=9985D6F2DD2C4D4CF2995474E67C5F3FBFD5795E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:87:0a:ef:36:33:22:25:e4:58:16:c3:af: f6:4f:9e:3e:09:d8:75:5d:61:32:d9:12:a2:be:52: bd:56:50:2d:d8:93:49:0d:f6:23:fb:34:cd:93:87: ee:c3:36:ea:aa:d7:cd:c1:b0:0c:0d:c4:bd:22:62: d6:be:f0:7e:15:14:5c:13:38:78:b4:ee:b0:2c:fb: 5d:9d:29:1c:41:f6:38:5a:7b:30:d5:f5:47:d9:0d: e5:0d:44:2c:08:3e:8e:f4:2f:1f:6f:56:84:f2:29: 91:74:fb:8c:0a:e1:f8:70:87:fa:e7:bd:a3:fd:95: eb:c4:05:c8:e8:bd:bd:61:7a:d3:17:87:59:f1:f2: cf:c6:79:5c:7b:be:cd:91:ab:81:a1:83:b7:63:c7: 9c:f0:c2:45:8e:ec:ef:da:64:a3:59:39:f8:3f:41: 50:e9:82:82:54:b6:5f:cf:06:ad:e5:a1:7f:71:c9: 8c:6c:4e:1a:05:0b:0a:1b:65:f6:9f:24:23:5e:55: 72:02:79:9b:41:ec:ab:5f:d9:33:49:d4:8a:10:45: 2f:dc:31:37:ed:b5:f7:fb:1b:d1:49:72:9f:33:fb: 2e:80:de:5a:03:b6:8b:94:20:ed:b5:41:98:55:02: d5:1d:52:7c:7d:81:ed:9e:ca:1e:a5:51:87:86:46: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:85:D6:F2:DD:2C:4D:4C:F2:99:54:74:E6:7C:5F:3F:BF:D5:79:5E X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c7:ea:46:4d:36:a5:3c:6e:9e:25:a9:eb:1f:4e:39:a8:2c: c0:0a:f6:df:43:7c:80:1c:23:cf:d0:89:79:76:4c:9a:0e:5f: b1:31:19:6e:55:a3:70:80:ca:aa:cc:42:3b:bb:94:27:63:3e: 5a:f5:d7:1b:1c:74:8a:e7:5c:70:c2:1a:d4:fb:4d:3e:de:01: ca:88:55:37:f4:ac:33:6e:45:24:aa:0e:39:c8:44:17:f2:b6: ab:74:ab:4b:54:39:1f:e1:42:db:67:7c:79:cb:8d:5c:54:59: 28:70:ee:2f:58:6d:37:db:ad:4f:d4:95:94:a6:17:90:66:b6: 91:3f:ac:d3:d1:7c:f4:eb:a3:b6:cc:05:a7:62:8a:3c:c3:bb: 26:75:31:7e:56:df:5f:e3:9d:16:15:d4:35:a8:01:6e:99:a1: a9:7d:cc:a1:c6:12:71:56:12:34:60:a7:50:7d:91:dd:c9:dc: 23:32:ef:ae:c5:a5:e4:ae:9f:be:12:2a:04:97:3b:01:9d:5a: 95:dc:1d:d2:2a:cb:70:1f:da:88:af:32:30:0d:6a:e1:94:af: b0:62:2a:9e:f3:c0:0c:6d:93:13:57:7e:6b:52:c5:0e:68:d3: 17:39:e4:d0:d0:7a:d1:b9:06:f1:6a:f4:4d:c4:8d:40:1c:51: 0f:8a:0f:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF4C9sP2I1vJVJpFNICEp4rmgAtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNDExMjIxMzA1MTFaFw0yNDExMjMxMzM5MTFaMDMxMTAvBgNV BAMTKDk5ODVENkYyREQyQzRENENGMjk5NTQ3NEU2N0M1RjNGQkZENTc5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWIcK7zYzIiXkWBbDr/ZPnj4J 2HVdYTLZEqK+Ur1WUC3Yk0kN9iP7NM2Th+7DNuqq183BsAwNxL0iYta+8H4VFFwT OHi07rAs+12dKRxB9jhaezDV9UfZDeUNRCwIPo70Lx9vVoTyKZF0+4wK4fhwh/rn vaP9levEBcjovb1hetMXh1nx8s/GeVx7vs2Rq4Ghg7djx5zwwkWO7O/aZKNZOfg/ QVDpgoJUtl/PBq3loX9xyYxsThoFCwobZfafJCNeVXICeZtB7Ktf2TNJ1IoQRS/c MTfttff7G9FJcp8z+y6A3loDtouUIO21QZhVAtUdUnx9ge2eyh6lUYeGRo3dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmYXW8t0sTUzymVR05nxfP7/VeV4wHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqcfqRk02pTxuniWp6x9OOagswAr230N8gBwjz9CJeXZMmg5fsTEZblWjcIDK qsxCO7uUJ2M+WvXXGxx0iudccMIa1PtNPt4ByohVN/SsM25FJKoOOchEF/K2q3Sr S1Q5H+FC22d8ecuNXFRZKHDuL1htN9utT9SVlKYXkGa2kT+s09F89OujtswFp2KK PMO7JnUxflbfX+OdFhXUNagBbpmhqX3MocYScVYSNGCnUH2R3cncIzLvrsWl5K6f vhIqBJc7AZ1aldwd0irLcB/aiK8yMA1q4ZSvsGIqnvPADG2TE1d+a1LFDmjTFznk 0NB60bkG8Wr0TcSNQBxRD4oPMQ== -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org