$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft File: 4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft (raw, json) Hash identifier: 7Ll6k+6lwoZTSAVirVcoWuk3Tv3Ir/WhFrbTLSBvNVk= Subject key identifier: B3:28:3F:88:FC:2C:7A:B7:B5:9C:B5:56:90:5B:70:B6:42:5B:E5:A4 Authority key identifier: 44:63:AE:E3:1A:D6:DE:D2:C7:FB:94:A0:88:1F:7C:F8:7A:5A:36:23 Certificate issuer: /CN=4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623 Certificate serial: 501747C0C97D607E5F4DB0E111D70AB1BB102F23 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft Manifest number: 41 Signing time: Mon 25 Nov 2024 09:39:56 +0000 Manifest this update: Mon 25 Nov 2024 09:34:56 +0000 Manifest next update: Tue 26 Nov 2024 10:00:56 +0000 Files and hashes: 1: 3138372e38362e3136332e302f32342d3332203d3e20323733343137.roa (hash: eRI1ntSG/zMTwxSbRBzZ+Y3SwVsbGeq0ft859G6Z6mU=) 2: 4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.crl (hash: qQ27IgSfe2bIj7TcYy7YQnxSmEMxYi9C4jGa/9bQP+E=) 3: 323830343a386535303a3a2f33322d313238203d3e20323733343137.roa (hash: EBAtzNhsnuMxk7U3yl3wVIlmiy97ZPVycWbq9IeYBlg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.crl rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 09:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:17:47:c0:c9:7d:60:7e:5f:4d:b0:e1:11:d7:0a:b1:bb:10:2f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623 Validity Not Before: Nov 25 09:34:56 2024 GMT Not After : Nov 26 10:00:56 2024 GMT Subject: CN=B3283F88FC2C7AB7B59CB556905B70B6425BE5A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:82:62:a1:8b:c7:69:a9:38:13:b3:32:8c: b8:b2:6a:a8:26:a8:75:c3:7f:2c:95:21:dc:79:45: 59:7a:11:6e:73:2c:ce:1a:e0:1e:e8:0f:1a:fb:05: b7:6a:3a:4d:92:ba:80:98:9a:d0:b8:7a:03:d9:10: 37:38:75:9b:63:44:f0:ce:f1:07:1d:c8:16:ed:a3: 26:c1:e4:99:04:87:25:82:2d:5f:d3:4f:d2:d1:73: c5:dd:d9:47:2d:1b:48:b2:12:3b:3c:13:53:46:13: 4a:4b:c5:2e:fd:0c:bf:46:a2:c4:78:0f:59:ee:ae: d4:f4:9a:da:52:85:34:52:f9:f8:28:ff:6a:79:d8: 68:e3:51:51:1d:44:8a:94:ba:b5:27:cd:4f:59:52: 94:33:cb:bd:87:38:8c:53:9d:79:07:82:d6:22:10: 03:6b:6b:b2:4b:ca:fe:11:06:bf:26:6c:d2:8a:d2: 31:cb:4a:17:7f:ce:cf:bb:8d:80:fc:36:fb:e3:2d: d7:4b:10:9b:f5:b2:4c:fd:7d:07:fa:b9:2f:fc:b7: f0:46:5c:63:8f:04:3d:cc:79:7d:bc:61:7a:98:95: ec:e3:80:86:d2:3f:5c:a4:c2:c2:f2:dd:df:36:00: f2:7c:7d:01:c5:89:c5:11:eb:3f:ef:4f:fc:46:af: 56:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:28:3F:88:FC:2C:7A:B7:B5:9C:B5:56:90:5B:70:B6:42:5B:E5:A4 X509v3 Authority Key Identifier: keyid:44:63:AE:E3:1A:D6:DE:D2:C7:FB:94:A0:88:1F:7C:F8:7A:5A:36:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:55:8e:21:d6:01:35:de:59:47:6a:2e:fb:22:c6:ec:28:70: 6f:b4:07:99:02:f8:d1:0e:e8:07:72:71:90:8b:6f:ee:90:17: 73:74:46:33:05:40:28:87:3d:11:ec:e1:64:0a:fa:23:80:08: 2c:d6:08:4a:23:b8:69:57:17:99:e9:cc:35:4a:de:6c:5b:54: d7:7d:c9:55:93:9a:01:48:ec:e7:41:b0:5c:0d:58:17:d8:e0: b1:95:c6:3c:62:66:28:70:db:a1:01:c8:36:7e:dc:56:89:79: 04:42:fe:3d:bc:24:cf:c4:e4:f8:e6:56:ab:a0:36:a2:fe:d0: f9:c4:ca:45:2f:a1:d7:1e:ec:0f:c9:01:c1:df:de:ca:fa:89: 2e:2e:a1:9c:57:6d:a6:6e:df:4d:1c:dc:2a:15:3e:cf:0f:b0: d8:44:93:38:05:59:12:02:a9:47:95:18:2d:24:9c:bf:c3:80: 59:8c:f6:3f:87:d2:19:53:5c:bf:b5:47:9b:83:22:81:37:1e: fb:9c:85:b7:75:08:f4:ad:a8:8f:8d:e5:8f:4a:a4:a7:53:17: 70:ce:37:2e:5c:4d:29:2f:0f:37:ce:bc:0c:49:c0:77:bb:16: ce:5c:1f:45:d5:d9:9a:0c:78:79:d6:fe:a8:eb:2f:f4:79:c5: f3:53:6d:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUBdHwMl9YH5fTbDhEdcKsbsQLyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ2M0FFRTMxQUQ2REVEMkM3RkI5NEEwODgxRjdDRjg3 QTVBMzYyMzAeFw0yNDExMjUwOTM0NTZaFw0yNDExMjYxMDAwNTZaMDMxMTAvBgNV BAMTKEIzMjgzRjg4RkMyQzdBQjdCNTlDQjU1NjkwNUI3MEI2NDI1QkU1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPM4JioYvHaak4E7MyjLiyaqgm qHXDfyyVIdx5RVl6EW5zLM4a4B7oDxr7BbdqOk2SuoCYmtC4egPZEDc4dZtjRPDO 8QcdyBbtoybB5JkEhyWCLV/TT9LRc8Xd2UctG0iyEjs8E1NGE0pLxS79DL9GosR4 D1nurtT0mtpShTRS+fgo/2p52GjjUVEdRIqUurUnzU9ZUpQzy72HOIxTnXkHgtYi EANra7JLyv4RBr8mbNKK0jHLShd/zs+7jYD8NvvjLddLEJv1skz9fQf6uS/8t/BG XGOPBD3MeX28YXqYlezjgIbSP1ykwsLy3d82APJ8fQHFicUR6z/vT/xGr1aBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsyg/iPwsere1nLVWkFtwtkJb5aQwHwYDVR0j BBgwFoAURGOu4xrW3tLH+5SgiB98+HpaNiMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5lcGtwc3NYZnZZY0s1SzFIY2ppM1gzZ3JzUkFNcFA5WU00YXZtcEJZ eFcvMC80NDYzQUVFMzFBRDZERUQyQzdGQjk0QTA4ODFGN0NGODdBNUEzNjIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NjNBRUUzMUFENkRFRDJD N0ZCOTRBMDg4MUY3Q0Y4N0E1QTM2MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mm5lcGtwc3NYZnZZY0s1SzFIY2ppM1gzZ3JzUkFNcFA5WU00YXZtcEJZeFcvMC80 NDYzQUVFMzFBRDZERUQyQzdGQjk0QTA4ODFGN0NGODdBNUEzNjIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYlWOIdYBNd5ZR2ou+yLG7Chwb7QHmQL40Q7oB3JxkItv7pAXc3RGMwVAKIc9 EezhZAr6I4AILNYISiO4aVcXmenMNUrebFtU133JVZOaAUjs50GwXA1YF9jgsZXG PGJmKHDboQHINn7cVol5BEL+Pbwkz8Tk+OZWq6A2ov7Q+cTKRS+h1x7sD8kBwd/e yvqJLi6hnFdtpm7fTRzcKhU+zw+w2ESTOAVZEgKpR5UYLSScv8OAWYz2P4fSGVNc v7VHm4MigTce+5yFt3UI9K2oj43lj0qkp1MXcM43LlxNKS8PN868DEnAd7sWzlwf RdXZmgx4edb+qOsv9HnF81Nt5Q== -----END CERTIFICATE-----Generated at Mon Nov 25 10:55:44 2024 by rpki-client on console-ams.rpki-client.org