$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft File: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft (raw, json) Hash identifier: +CGZ7mhI2pdtfdNxscOqvOXKteR6XEapKlfufQkQEcc= Subject key identifier: 5A:F4:F1:29:47:85:F6:E7:23:6B:66:51:F0:92:DE:95:30:0E:33:62 Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65 Certificate issuer: /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765 Certificate serial: 5A4357BED60FA89111ADA291A98AC2FB21C10A21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 14:20:00 +0000 Manifest this update: Fri 22 Nov 2024 14:15:00 +0000 Manifest next update: Sat 23 Nov 2024 15:53:00 +0000 Files and hashes: 1: 323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (hash: eXvVK2Ix1oMw1CwMXpadulGbD/x5E7vcmJn23p0jg1o=) 2: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl (hash: svK7eMyRBWZvlKn4XvbFbczlgyRibRkXc6XHiQjUSTQ=) 3: 3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa (hash: 7Myy81UB6OABZrGUJgkmeq7bMLEXbjn95e8FEyeuRs8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 15:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:43:57:be:d6:0f:a8:91:11:ad:a2:91:a9:8a:c2:fb:21:c1:0a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765 Validity Not Before: Nov 22 14:15:00 2024 GMT Not After : Nov 23 15:53:00 2024 GMT Subject: CN=5AF4F1294785F6E7236B6651F092DE95300E3362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:a0:15:9a:d3:6f:43:40:f5:0f:e9:1d:cb: 6b:36:5b:37:84:7e:60:20:a2:ad:5c:ea:f1:b6:e8: 3c:ed:7f:93:78:c3:8a:6f:6e:30:fb:1a:5e:73:db: 6c:d3:cb:69:ff:7b:1f:34:3c:59:85:79:4a:2c:99: b0:6c:7f:0e:7e:39:2e:fa:36:c3:94:47:40:21:60: 4e:94:1b:8f:95:9f:ae:11:1b:d7:2a:4c:d2:20:1a: d0:06:e2:af:d4:ba:73:7d:9e:1c:39:12:31:cc:ec: fb:c3:e0:ab:54:ca:ff:72:da:71:6b:42:9e:08:2a: fa:27:db:a7:9d:51:40:1c:66:6f:82:a7:2b:bf:ba: 2a:7b:20:9e:1e:cd:29:a5:99:92:bd:80:03:78:d6: 06:1a:9c:b9:b9:fe:96:5b:78:bf:7b:a9:d5:b7:8c: a2:10:4e:4c:12:3f:3c:44:c5:30:d6:b3:49:32:49: 77:ce:37:73:54:3c:ad:9c:3e:9c:2f:fd:e1:99:fe: 7b:c4:e5:ab:c6:13:17:74:59:ad:ff:07:21:c9:02: cd:12:b4:ee:d1:13:95:ce:54:ed:a4:d0:a9:df:47: 3d:91:60:14:43:bb:25:d9:5b:fa:0d:90:3b:c9:85: 0a:03:9c:b9:0d:46:8c:9d:6e:5b:e8:fe:2c:68:a3: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:F1:29:47:85:F6:E7:23:6B:66:51:F0:92:DE:95:30:0E:33:62 X509v3 Authority Key Identifier: keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1e:7c:ec:c5:5a:40:4e:19:e5:b1:2e:ff:0b:0b:c8:21:bb: 8b:77:9d:a0:e3:f7:29:9e:c5:a0:29:0c:6a:3a:cf:d2:e0:b4: 3f:4f:80:fb:23:68:c7:60:f3:32:a2:87:a3:d1:4e:d9:fb:8f: 56:c7:d9:d7:c9:60:9e:ff:4f:84:31:5e:f4:35:02:3c:a4:a2: 9e:c4:bf:27:6c:77:e7:a6:d0:33:d5:32:97:bc:51:33:7d:1d: 29:d4:b7:49:0a:5c:8c:5e:49:b8:a8:34:00:13:00:69:bf:6f: 6a:ab:87:4e:d2:dc:cf:e1:dd:36:15:63:9e:f9:7e:4f:b7:0a: 74:35:52:90:ee:b3:42:df:28:c7:33:c2:18:9c:01:f7:fd:aa: 58:16:39:9e:14:c0:52:e5:e0:22:98:74:bd:83:ba:3f:f6:8f: cc:9b:8d:b4:e1:e8:05:94:4c:4d:68:73:40:5c:2f:33:94:c9: 60:6e:ab:09:33:64:0c:c6:ea:10:e1:a8:d7:b1:16:65:b4:1e: 8c:2e:c4:28:66:a1:88:b8:db:64:40:18:8a:78:6f:f6:64:1c: 2b:33:b4:c9:a7:74:0e:e4:3e:46:0d:cf:1b:89:75:1f:2c:58: 9a:1a:9a:68:fe:77:ca:d6:d1:4e:6b:e7:b2:83:5a:57:65:96: df:0c:c6:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWkNXvtYPqJERraKRqYrC+yHBCiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3NEJGQTNEMEJEQ0MyQ0M2MkVERDlFRkIxMUZDMDI4 Mzc0Mzc2NTAeFw0yNDExMjIxNDE1MDBaFw0yNDExMjMxNTUzMDBaMDMxMTAvBgNV BAMTKDVBRjRGMTI5NDc4NUY2RTcyMzZCNjY1MUYwOTJERTk1MzAwRTMzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuKAVmtNvQ0D1D+kdy2s2WzeE fmAgoq1c6vG26Dztf5N4w4pvbjD7Gl5z22zTy2n/ex80PFmFeUosmbBsfw5+OS76 NsOUR0AhYE6UG4+Vn64RG9cqTNIgGtAG4q/UunN9nhw5EjHM7PvD4KtUyv9y2nFr Qp4IKvon26edUUAcZm+Cpyu/uip7IJ4ezSmlmZK9gAN41gYanLm5/pZbeL97qdW3 jKIQTkwSPzxExTDWs0kySXfON3NUPK2cPpwv/eGZ/nvE5avGExd0Wa3/ByHJAs0S tO7RE5XOVO2k0KnfRz2RYBRDuyXZW/oNkDvJhQoDnLkNRoydblvo/ixooySFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWvTxKUeF9ucja2ZR8JLelTAOM2IwHwYDVR0j BBgwFoAUDXS/o9C9zCzGLt2e+xH8AoN0N2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZZOFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUth UjUvMS8wRDc0QkZBM0QwQkRDQzJDQzYyRUREOUVGQjExRkMwMjgzNzQzNzY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENzRCRkEzRDBCRENDMkND NjJFREQ5RUZCMTFGQzAyODM3NDM3NjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZZOFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUthUjUvMS8w RDc0QkZBM0QwQkRDQzJDQzYyRUREOUVGQjExRkMwMjgzNzQzNzY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALR587MVaQE4Z5bEu/wsLyCG7i3edoOP3KZ7FoCkMajrP0uC0P0+A+yNox2Dz MqKHo9FO2fuPVsfZ18lgnv9PhDFe9DUCPKSinsS/J2x356bQM9Uyl7xRM30dKdS3 SQpcjF5JuKg0ABMAab9vaquHTtLcz+HdNhVjnvl+T7cKdDVSkO6zQt8oxzPCGJwB 9/2qWBY5nhTAUuXgIph0vYO6P/aPzJuNtOHoBZRMTWhzQFwvM5TJYG6rCTNkDMbq EOGo17EWZbQejC7EKGahiLjbZEAYinhv9mQcKzO0yad0DuQ+Rg3PG4l1HyxYmhqa aP53ytbRTmvnsoNaV2WW3wzG1w== -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org