$ rpki-client -vvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft File: 1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft (raw, json) Hash identifier: PN9E2mFI7/+6ENVbqHjMK30qA72yaD+z+bb6oLOHKPE= Subject key identifier: 86:D4:8D:B1:06:F2:83:30:07:B8:5F:FA:83:2F:89:22:DF:30:44:0F Authority key identifier: 1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7 Certificate issuer: /CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7 Certificate serial: 312B3A9E757373C35BA65ECDF0E76FD2B5502E6F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft Manifest number: 0138 Signing time: Sat 23 Nov 2024 10:16:50 +0000 Manifest this update: Sat 23 Nov 2024 10:11:50 +0000 Manifest next update: Sun 24 Nov 2024 11:35:50 +0000 Files and hashes: 1: 34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa (hash: 23uRCD5wZkq1qmq0UWim+j81/dVYSbgXdWX6jRPVqQY=) 2: 323830343a353832303a3a2f33322d3634203d3e20323638313038.roa (hash: Tpyf/Cx1/hscv9lA21uGRT8QGRqfrCFe+EGSyS77FcA=) 3: 1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl (hash: YI7ABnzj9Q+Qwl6RYPHphugULMAHIc9f1wZjui65sHA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2b:3a:9e:75:73:73:c3:5b:a6:5e:cd:f0:e7:6f:d2:b5:50:2e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7 Validity Not Before: Nov 23 10:11:50 2024 GMT Not After : Nov 24 11:35:50 2024 GMT Subject: CN=86D48DB106F2833007B85FFA832F8922DF30440F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:58:95:06:ec:82:24:a0:55:9a:a1:cf:a0: 87:a7:eb:0b:d9:61:7d:fb:62:37:d2:f9:00:83:33: de:fa:1a:4d:1e:56:64:0e:81:f0:bb:ef:70:49:34: 8d:00:a6:f2:b4:72:38:11:5b:02:59:a6:d3:b2:39: 90:5d:da:ae:4a:52:98:a0:aa:3f:dc:e4:a4:72:d9: 5a:c9:46:3b:57:68:1c:20:d1:99:90:5b:e9:46:bb: 72:fe:e8:f7:c6:4f:14:71:f2:96:f8:35:c6:ab:43: 7e:eb:a2:f7:a1:68:ce:4d:38:7c:15:7f:ad:e2:0e: 5f:e2:67:f5:a5:6f:98:d7:d7:b6:12:c0:8d:f5:8d: 30:2d:c1:4a:d4:60:27:a1:46:ce:01:5d:59:92:47: cc:5c:eb:23:b8:b2:75:4e:de:20:8b:55:b3:ed:96: 9d:0a:de:22:39:3e:8b:ea:86:3e:25:6c:0b:99:e8: 1e:0a:b3:8b:e2:9c:91:4f:a3:de:b0:79:10:30:ae: ad:0d:f0:4c:81:4f:9b:e7:a9:43:ae:e0:63:0c:2a: e4:f1:e9:a0:32:d6:18:88:fe:13:6a:d9:96:1e:7b: 22:0e:17:30:3e:66:23:86:62:06:e5:0c:a6:d3:ee: ab:97:c4:44:86:24:5e:4d:ab:ca:71:57:35:eb:57: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D4:8D:B1:06:F2:83:30:07:B8:5F:FA:83:2F:89:22:DF:30:44:0F X509v3 Authority Key Identifier: keyid:1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:ad:e9:a0:78:e7:e2:54:3e:6b:a3:f3:5a:24:7e:ab:35: 7b:ef:33:5f:5b:a9:ba:19:b9:20:5a:fc:ea:5f:9e:2a:47:75: a7:4f:8a:e5:b4:7d:7c:99:65:3b:0d:35:76:f1:8f:0d:8a:af: 6f:60:9a:35:3c:45:c5:44:16:c7:55:fc:8c:36:29:9b:7d:c5: 3d:cf:4d:bc:71:d9:be:43:60:1e:7b:7a:b0:f2:b6:4e:ec:d5: cc:c2:0f:d8:12:04:47:d8:45:f6:d1:94:16:4e:0a:c6:84:4e: 5c:40:c8:d8:24:94:57:31:5e:3b:65:48:a7:da:13:a1:62:be: ca:63:e1:db:93:e0:bd:c8:48:af:31:bf:41:61:27:7c:67:90: 12:a1:da:85:01:26:a5:63:40:90:c9:53:2e:a5:c1:f6:49:6d: e7:b2:83:23:3e:47:69:0d:05:ae:aa:94:2e:25:62:5c:b1:cd: 41:72:f0:70:c3:ec:06:8c:6b:59:2b:09:e1:43:38:05:2f:01: 8c:08:2e:7a:bb:e1:a2:3d:3c:c1:5a:da:90:f7:c9:a8:23:7a: a5:5f:52:02:f1:bc:8d:fa:12:40:78:08:d3:82:0c:76:e4:31: 00:30:da:d9:1b:02:7c:33:41:8a:30:4b:10:08:a6:38:a0:8f: e9:1c:29:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMSs6nnVzc8Nbpl7N8Odv0rVQLm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM3REYwQzQ2QjM5NEU4RDc5QzlEMzFCQTJGMDFBRTY3 NjE3ODJDNzAeFw0yNDExMjMxMDExNTBaFw0yNDExMjQxMTM1NTBaMDMxMTAvBgNV BAMTKDg2RDQ4REIxMDZGMjgzMzAwN0I4NUZGQTgzMkY4OTIyREYzMDQ0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlliVBuyCJKBVmqHPoIen6wvZ YX37YjfS+QCDM976Gk0eVmQOgfC773BJNI0ApvK0cjgRWwJZptOyOZBd2q5KUpig qj/c5KRy2VrJRjtXaBwg0ZmQW+lGu3L+6PfGTxRx8pb4NcarQ37rovehaM5NOHwV f63iDl/iZ/Wlb5jX17YSwI31jTAtwUrUYCehRs4BXVmSR8xc6yO4snVO3iCLVbPt lp0K3iI5Povqhj4lbAuZ6B4Ks4vinJFPo96weRAwrq0N8EyBT5vnqUOu4GMMKuTx 6aAy1hiI/hNq2ZYeeyIOFzA+ZiOGYgblDKbT7quXxESGJF5Nq8pxVzXrV8LZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhtSNsQbygzAHuF/6gy+JIt8wRA8wHwYDVR0j BBgwFoAUHH3wxGs5To15ydMbovAa5nYXgscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmV2cFU0amVTa2dxQ21YZnNadllZOER4Y0g3UlhkS21USlNnN3NTc293 V1AvMS8xQzdERjBDNDZCMzk0RThENzlDOUQzMUJBMkYwMUFFNjc2MTc4MkM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDN0RGMEM0NkIzOTRFOEQ3 OUM5RDMxQkEyRjAxQUU2NzYxNzgyQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmV2cFU0amVTa2dxQ21YZnNadllZOER4Y0g3UlhkS21USlNnN3NTc293V1AvMS8x QzdERjBDNDZCMzk0RThENzlDOUQzMUJBMkYwMUFFNjc2MTc4MkM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaNqt6aB45+JUPmuj81okfqs1e+8zX1upuhm5IFr86l+eKkd1p0+K5bR9fJll Ow01dvGPDYqvb2CaNTxFxUQWx1X8jDYpm33FPc9NvHHZvkNgHnt6sPK2TuzVzMIP 2BIER9hF9tGUFk4KxoROXEDI2CSUVzFeO2VIp9oToWK+ymPh25PgvchIrzG/QWEn fGeQEqHahQEmpWNAkMlTLqXB9klt57KDIz5HaQ0FrqqULiViXLHNQXLwcMPsBoxr WSsJ4UM4BS8BjAguervhoj08wVrakPfJqCN6pV9SAvG8jfoSQHgI04IMduQxADDa 2RsCfDNBijBLEAimOKCP6Rwp1A== -----END CERTIFICATE-----Generated at Sat Nov 23 11:32:46 2024 by rpki-client on console-fra.rpki-client.org