$ rpki-client -vvf rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft File: FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft (raw, json) Hash identifier: t8GhMHdPRJXc6bk132xAS6uK89W3ACME2Jn6PHC/aGc= Subject key identifier: 00:C7:EE:48:76:C6:13:9B:D6:B6:1A:3D:F7:90:3F:49:5E:3E:9D:55 Authority key identifier: FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9 Certificate issuer: /CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9 Certificate serial: 1AE7918E234997C65EDFF5288183A8C3CF4E4A18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft Manifest number: A1 Signing time: Fri 22 Nov 2024 13:57:41 +0000 Manifest this update: Fri 22 Nov 2024 13:52:41 +0000 Manifest next update: Sat 23 Nov 2024 14:19:41 +0000 Files and hashes: 1: FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl (hash: n1OxYcuB6LMkah4kx7agEhpT8uZB28SfKYknPG8ayoo=) 2: 34352e3233392e3232322e302f32342d3234203d3e20323638333833.roa (hash: ZvCRGGlparKns3/zFje/Bab2lJytFqqJyh6luU2VjBg=) 3: 34352e3233392e3232332e302f32342d3234203d3e20323638333833.roa (hash: niHXqan3HwQrFxvjwsAwg6fMvKWQxV8UhqEjXmKxmKg=) 4: 34352e3233392e3232302e302f32332d3233203d3e20323638333833.roa (hash: EMOJDqb5P0h52TtxiX7GiVHKiVLVb9F4zZDGSmezVsc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 14:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e7:91:8e:23:49:97:c6:5e:df:f5:28:81:83:a8:c3:cf:4e:4a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9 Validity Not Before: Nov 22 13:52:41 2024 GMT Not After : Nov 23 14:19:41 2024 GMT Subject: CN=00C7EE4876C6139BD6B61A3DF7903F495E3E9D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:14:44:e5:d7:78:d9:f1:e1:c5:f9:0d:4b: ac:f6:12:d8:da:ca:fc:72:1e:85:05:87:43:54:90: 7f:bf:40:34:cc:81:32:a8:a3:70:89:b2:35:5b:0c: 0f:16:8a:f2:5b:b7:bd:4f:77:8c:49:3b:27:df:ef: ac:cd:04:7c:ae:4e:57:47:d9:8a:11:85:91:c9:f6: 08:7e:38:50:3e:db:59:fd:63:ea:94:77:e1:a1:d8: c2:5d:5c:0a:0d:c3:d1:ef:97:87:d0:55:35:f4:9b: 91:b0:4d:2e:72:4b:ed:b4:6e:b5:bf:7d:4a:66:3c: 35:b8:9e:e1:65:af:7f:94:c7:83:da:8c:b3:bb:3a: a9:a2:37:90:52:b4:79:cf:da:3f:d1:fb:98:54:ea: 98:11:51:42:03:1a:f6:b8:38:3f:1e:94:56:6b:1b: 38:f6:96:ad:f1:7a:22:fd:ea:0f:c5:16:dc:d7:f7: 49:05:1c:95:28:ef:09:c2:4d:42:02:8f:04:88:6d: c8:bf:86:f9:d3:38:8a:c0:05:ef:1d:31:47:c1:ba: d0:08:c6:2e:b0:8a:33:e8:db:7d:64:65:b4:61:30: 4f:f8:07:a4:c7:7e:cb:51:4c:c8:ac:af:86:72:81: e1:57:21:39:9e:15:94:6a:d9:bb:c6:70:d8:78:66: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C7:EE:48:76:C6:13:9B:D6:B6:1A:3D:F7:90:3F:49:5E:3E:9D:55 X509v3 Authority Key Identifier: keyid:FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ff:f6:22:17:fe:72:40:c7:67:0a:df:ad:f8:0c:2a:58:cb: 89:d5:7c:38:ae:ab:01:9d:9d:4f:83:12:a6:0d:fd:3e:97:ed: f4:87:46:7f:49:4a:6d:78:09:44:6b:ea:42:fa:54:8f:40:48: e5:38:95:7b:9b:d2:6a:1e:90:e5:a7:85:ca:7b:f9:25:6d:b1: ca:80:cc:b3:82:0f:85:3e:2c:0f:48:c5:33:5b:e9:89:cf:0d: 18:6b:36:29:0e:0b:84:22:e5:f0:a4:52:23:cd:a8:6c:ba:cc: 02:7d:e2:98:79:bd:3d:74:df:22:76:e9:c3:2a:00:fd:74:25: 5a:17:c2:d5:56:16:0b:61:a7:f5:92:a5:09:28:9b:25:1a:8d: ac:e8:de:42:74:85:3a:d9:0f:76:ff:d2:bd:24:b2:30:78:4d: da:50:ae:8a:34:09:5d:99:58:d1:1d:4a:a1:11:e6:2c:78:71: 46:7d:ee:73:1b:aa:36:85:8f:2e:13:0d:7a:c7:58:23:b9:71: cb:8c:22:38:c3:f8:f2:0b:a4:93:37:c6:d3:88:c3:b0:ce:f9: 97:d6:a9:30:c4:af:16:2f:45:72:78:56:db:b0:0f:e7:9f:5e: 60:c4:e8:7a:a2:c7:82:ea:31:ce:8b:97:32:e1:a7:88:f1:07: 73:f9:3c:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGueRjiNJl8Ze3/UogYOow89OShgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGQkM1Njg1NTM0Qzg4MDRGMzU3Qjk0OTYyQ0M5QTVD OUVCRUVBOTAeFw0yNDExMjIxMzUyNDFaFw0yNDExMjMxNDE5NDFaMDMxMTAvBgNV BAMTKDAwQzdFRTQ4NzZDNjEzOUJENkI2MUEzREY3OTAzRjQ5NUUzRTlENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ExRE5dd42fHhxfkNS6z2Etja yvxyHoUFh0NUkH+/QDTMgTKoo3CJsjVbDA8WivJbt71Pd4xJOyff76zNBHyuTldH 2YoRhZHJ9gh+OFA+21n9Y+qUd+Gh2MJdXAoNw9Hvl4fQVTX0m5GwTS5yS+20brW/ fUpmPDW4nuFlr3+Ux4PajLO7OqmiN5BStHnP2j/R+5hU6pgRUUIDGva4OD8elFZr Gzj2lq3xeiL96g/FFtzX90kFHJUo7wnCTUICjwSIbci/hvnTOIrABe8dMUfButAI xi6wijPo231kZbRhME/4B6THfstRTMisr4ZygeFXITmeFZRq2bvGcNh4ZpQRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAMfuSHbGE5vWtho995A/SV4+nVUwHwYDVR0j BBgwFoAU//vFaFU0yIBPNXuUlizJpcnr7qkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRLaDlxTmVhSkVkNWdNOW9VTlBYRkVYZ1VFdW5WektrNUQyR215VzQ5 WnovMC9GRkZCQzU2ODU1MzRDODgwNEYzNTdCOTQ5NjJDQzlBNUM5RUJFRUE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRkJDNTY4NTUzNEM4ODA0 RjM1N0I5NDk2MkNDOUE1QzlFQkVFQTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRLaDlxTmVhSkVkNWdNOW9VTlBYRkVYZ1VFdW5WektrNUQyR215VzQ5WnovMC9G RkZCQzU2ODU1MzRDODgwNEYzNTdCOTQ5NjJDQzlBNUM5RUJFRUE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACP/2Ihf+ckDHZwrfrfgMKljLidV8OK6rAZ2dT4MSpg39Ppft9IdGf0lKbXgJ RGvqQvpUj0BI5TiVe5vSah6Q5aeFynv5JW2xyoDMs4IPhT4sD0jFM1vpic8NGGs2 KQ4LhCLl8KRSI82obLrMAn3imHm9PXTfInbpwyoA/XQlWhfC1VYWC2Gn9ZKlCSib JRqNrOjeQnSFOtkPdv/SvSSyMHhN2lCuijQJXZlY0R1KoRHmLHhxRn3ucxuqNoWP LhMNesdYI7lxy4wiOMP48gukkzfG04jDsM75l9apMMSvFi9FcnhW27AP559eYMTo eqLHguoxzouXMuGniPEHc/k8cQ== -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:53 2024 by rpki-client on console-ams.rpki-client.org