$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft File: 6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft (raw, json) Hash identifier: n0xWoFvH+tzcfRstazP/Nptq65FZJvhKyg/rA+Zneas= Subject key identifier: 58:9E:F8:F4:1B:CC:F3:B0:CE:64:83:F4:2E:B7:BF:72:A7:F1:68:0B Authority key identifier: 6C:D8:14:79:2F:B1:67:2D:1A:DD:DB:89:AA:31:CD:78:ED:6B:64:2A Certificate issuer: /CN=6CD814792FB1672D1ADDDB89AA31CD78ED6B642A Certificate serial: 3967E243E95C14D6367F068BE37A808E883BF7F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer Subject info access: rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft Manifest number: 0137 Signing time: Sat 23 Nov 2024 02:23:29 +0000 Manifest this update: Sat 23 Nov 2024 02:18:29 +0000 Manifest next update: Sun 24 Nov 2024 03:07:29 +0000 Files and hashes: 1: 323830343a363634383a3a2f33322d3332203d3e20323639353436.roa (hash: Gzz1V+1c9nVxv5NltDoXMZAqvD1Ko0quAC8j+zSqlZk=) 2: 6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.crl (hash: wRZ1/R0Gt+EmNny5hdKy8ci7tACN77h1YAGbzaOJpDs=) 3: 34352e3138372e35362e302f32322d3234203d3e20323639353436.roa (hash: RcDxf2Se82wXdNSTNvbjrqaav7gSzL4IkjY3Yb4QQww=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.crl rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:67:e2:43:e9:5c:14:d6:36:7f:06:8b:e3:7a:80:8e:88:3b:f7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CD814792FB1672D1ADDDB89AA31CD78ED6B642A Validity Not Before: Nov 23 02:18:29 2024 GMT Not After : Nov 24 03:07:29 2024 GMT Subject: CN=589EF8F41BCCF3B0CE6483F42EB7BF72A7F1680B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fa:70:5a:50:93:73:18:ca:c2:96:2e:bb:e7: 70:5b:83:2d:f7:20:55:75:ef:7b:26:d6:08:a1:5c: 9b:40:e8:6b:fc:3e:6d:0b:7d:ab:7f:87:19:8e:32: 2a:7e:e2:7b:be:9f:aa:c2:3d:d7:1e:cc:dc:29:63: e9:98:63:22:33:fd:c3:12:ac:1c:04:82:fb:cc:c8: 61:66:21:09:68:f7:de:28:18:0d:21:3b:a9:db:d6: 75:ab:1e:6f:f3:81:99:5b:e0:d1:97:87:60:da:1f: 98:ab:65:63:40:6c:ec:3f:61:e8:b6:38:60:3d:5e: 07:59:71:e0:ea:e5:5b:f0:4b:d6:0d:83:91:c6:b9: 1c:cd:6f:ae:22:16:8b:40:ed:6d:3d:cc:a3:3a:95: 19:5e:64:ec:44:ab:73:85:66:62:7d:72:21:b0:be: 7f:c9:dd:90:8c:23:72:51:1d:b1:99:6f:e2:0e:a6: 9c:b0:90:5a:6a:84:39:24:97:cb:f7:f9:1b:9b:95: a5:e0:ca:7d:b0:7b:dd:7a:0d:ab:09:ee:a4:2d:1d: 91:83:e5:fb:99:3c:48:84:9a:e9:71:3a:49:3b:f8: 90:74:2e:08:24:00:6b:c0:00:21:dc:5a:62:a3:22: 9d:79:d4:19:95:5f:15:80:42:0a:c5:5d:a3:91:49: 75:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:F8:F4:1B:CC:F3:B0:CE:64:83:F4:2E:B7:BF:72:A7:F1:68:0B X509v3 Authority Key Identifier: keyid:6C:D8:14:79:2F:B1:67:2D:1A:DD:DB:89:AA:31:CD:78:ED:6B:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c3:f6:af:a5:cc:6c:bc:a3:ee:ae:4c:80:2a:68:43:48:18: ac:22:14:68:cf:71:a4:c3:71:7f:c6:7f:23:9b:bc:6a:e8:f7: fc:37:b8:6a:7e:b7:7f:bc:50:1a:be:95:68:26:51:b1:58:70: 87:02:b0:2d:d3:3b:69:67:86:60:43:c7:4b:c5:d4:75:1f:d2: 34:93:7f:6b:94:d9:09:a6:9d:82:b6:5b:75:08:8e:d5:07:78: 4d:95:40:c7:1d:34:66:22:cb:eb:f6:0e:b5:e8:9d:0a:e9:77: 5a:8c:7b:6f:1e:47:5a:35:2b:18:54:78:29:3c:10:2a:aa:a2: 52:51:de:68:c3:6a:6a:0e:86:0d:27:97:69:69:13:76:e6:90: 1f:6a:bf:bd:a2:17:41:bf:1a:a9:8e:b7:9f:20:7a:3b:45:60: a6:6d:6d:39:e6:f2:6d:63:4d:ed:42:a2:77:38:a3:df:d3:8a: 27:d8:ab:da:f9:30:7c:ba:39:18:dc:a6:43:20:2a:ad:35:d0: cb:07:58:a1:46:a3:ab:01:24:89:40:17:57:46:f5:79:47:40: a2:cf:d0:29:5f:f3:30:07:fb:ce:a8:2f:c2:2c:d0:ca:33:1c: 2d:a3:aa:43:3a:93:b7:27:83:b4:98:e1:de:44:cb:e6:4a:dd: 7e:04:8f:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOWfiQ+lcFNY2fwaL43qAjog79/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNEODE0NzkyRkIxNjcyRDFBREREQjg5QUEzMUNENzhF RDZCNjQyQTAeFw0yNDExMjMwMjE4MjlaFw0yNDExMjQwMzA3MjlaMDMxMTAvBgNV BAMTKDU4OUVGOEY0MUJDQ0YzQjBDRTY0ODNGNDJFQjdCRjcyQTdGMTY4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy+nBaUJNzGMrCli6753Bbgy33 IFV173sm1gihXJtA6Gv8Pm0Lfat/hxmOMip+4nu+n6rCPdcezNwpY+mYYyIz/cMS rBwEgvvMyGFmIQlo994oGA0hO6nb1nWrHm/zgZlb4NGXh2DaH5irZWNAbOw/Yei2 OGA9XgdZceDq5VvwS9YNg5HGuRzNb64iFotA7W09zKM6lRleZOxEq3OFZmJ9ciGw vn/J3ZCMI3JRHbGZb+IOppywkFpqhDkkl8v3+RublaXgyn2we916DasJ7qQtHZGD 5fuZPEiEmulxOkk7+JB0LggkAGvAACHcWmKjIp151BmVXxWAQgrFXaORSXVHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWJ749BvM87DOZIP0Lre/cqfxaAswHwYDVR0j BBgwFoAUbNgUeS+xZy0a3duJqjHNeO1rZCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhQRHZaZ3BuNXdQelZlVWU3bUp4NlZXNEduUUVreFVrOXRRclJ0QUZU OHEvMS82Q0Q4MTQ3OTJGQjE2NzJEMUFERERCODlBQTMxQ0Q3OEVENkI2NDJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDRDgxNDc5MkZCMTY3MkQx QUREREI4OUFBMzFDRDc4RUQ2QjY0MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzhQRHZaZ3BuNXdQelZlVWU3bUp4NlZXNEduUUVreFVrOXRRclJ0QUZUOHEvMS82 Q0Q4MTQ3OTJGQjE2NzJEMUFERERCODlBQTMxQ0Q3OEVENkI2NDJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB8P2r6XMbLyj7q5MgCpoQ0gYrCIUaM9xpMNxf8Z/I5u8auj3/De4an63f7xQ Gr6VaCZRsVhwhwKwLdM7aWeGYEPHS8XUdR/SNJN/a5TZCaadgrZbdQiO1Qd4TZVA xx00ZiLL6/YOteidCul3Wox7bx5HWjUrGFR4KTwQKqqiUlHeaMNqag6GDSeXaWkT duaQH2q/vaIXQb8aqY63nyB6O0Vgpm1tOebybWNN7UKidzij39OKJ9ir2vkwfLo5 GNymQyAqrTXQywdYoUajqwEkiUAXV0b1eUdAos/QKV/zMAf7zqgvwizQyjMcLaOq QzqTtyeDtJjh3kTL5krdfgSPYA== -----END CERTIFICATE-----Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org