$ rpki-client -vvf rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft File: 968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft (raw, json) Hash identifier: oz8ngeicki8H/y3dYO+/qGtbWUx2oNh88oylkMFij/s= Subject key identifier: AC:F4:DF:DA:1B:B6:89:36:3B:7C:D8:0C:D6:18:0A:B6:23:83:D0:F7 Authority key identifier: 96:8A:C0:4D:5F:AF:C6:AC:A0:A1:EA:82:43:EC:C4:47:99:90:A2:85 Certificate issuer: /CN=968AC04D5FAFC6ACA0A1EA8243ECC4479990A285 Certificate serial: 68C88D69AD39F230F030F304073C64F375CB9AE5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft Manifest number: EA Signing time: Fri 27 Sep 2024 10:21:17 +0000 Manifest this update: Fri 27 Sep 2024 10:16:17 +0000 Manifest next update: Sat 28 Sep 2024 14:18:17 +0000 Files and hashes: 1: 323830343a366662383a3a2f33362d3336203d3e20323730363739.roa (hash: T9v6omvGwL7F9tNHVu6mnw+A1p2+zucZ+citJuQMGX0=) 2: 3138392e39302e3233322e302f32322d3232203d3e20323730363739.roa (hash: N/h6UGOWKlQmkXevQ9Z/2+exMI+OU4aFHyI0w5z5cQE=) 3: 968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.crl (hash: EG1c32EvBfXiLcm7TyHxi3j3NCxEjSSGEGGe+c9e0Mo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.crl rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Sep 2024 13:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c8:8d:69:ad:39:f2:30:f0:30:f3:04:07:3c:64:f3:75:cb:9a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968AC04D5FAFC6ACA0A1EA8243ECC4479990A285 Validity Not Before: Sep 27 10:16:17 2024 GMT Not After : Sep 28 14:18:17 2024 GMT Subject: CN=ACF4DFDA1BB689363B7CD80CD6180AB62383D0F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:70:01:bc:b2:cc:ff:4e:73:93:ce:5d:04: 0c:c4:79:1a:60:00:e3:46:12:c8:31:17:0b:c1:9d: ff:0e:a4:54:e2:07:ad:82:93:a6:76:fd:99:1a:f5: 0c:cf:b1:b2:b7:aa:0f:c5:b6:32:d2:f1:78:4b:d5: 52:5a:08:bc:ce:d3:8c:a8:5e:22:f7:af:cb:4b:28: 54:61:e9:24:32:91:fa:e5:9b:b0:bd:98:8e:9c:c7: 34:36:5e:a8:da:25:f8:1c:1e:ec:82:12:db:7c:b2: 1f:6f:9b:05:e0:9e:6c:bd:e0:d8:0b:f1:1b:ea:04: 9e:94:cf:28:9b:e6:22:1a:24:b1:d5:af:0c:f6:c4: a9:79:ee:bd:c6:31:ec:e4:a9:d8:e6:f7:b7:0a:4b: 6d:3b:b4:ff:f9:45:e4:38:92:67:d4:92:67:1f:37: 3d:be:b3:19:e1:58:89:74:00:6d:31:d8:36:d3:c4: 32:3f:f7:b7:4a:52:ae:d2:9c:52:be:c5:b4:56:7b: f7:71:a6:bd:bb:86:c9:4b:6a:0a:7c:4a:65:1e:1a: de:bc:98:33:4d:79:b0:97:b6:8a:c3:81:04:b5:71: 5a:31:e4:c8:47:1f:ed:19:33:de:c9:e8:e4:03:64: fa:76:d8:fb:d6:28:e1:61:3c:a4:5d:c5:ba:33:9c: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:DF:DA:1B:B6:89:36:3B:7C:D8:0C:D6:18:0A:B6:23:83:D0:F7 X509v3 Authority Key Identifier: keyid:96:8A:C0:4D:5F:AF:C6:AC:A0:A1:EA:82:43:EC:C4:47:99:90:A2:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1a:76:b9:da:2a:cb:c5:a6:22:08:13:c6:70:dc:a7:1b:91: dd:95:28:6b:0d:d4:d0:6c:8e:16:e7:ec:f6:0c:d8:52:bf:67: dc:43:95:50:b2:63:ea:11:f1:8a:0f:fb:92:50:b2:a8:93:0e: f4:6f:82:63:5a:db:fa:82:b4:78:b5:60:53:16:ba:2b:07:e1: 9d:ec:b4:ee:fe:27:bf:72:db:98:46:75:da:fc:4c:b8:25:09: 28:b1:7f:ff:58:be:67:70:35:15:98:97:6c:9c:02:63:36:ac: e9:f0:73:5f:57:37:ec:95:77:f9:92:93:50:b0:f8:1d:55:94: 63:61:62:55:38:a8:24:cf:08:be:26:c2:3b:ce:e5:5b:4f:fb: 7d:dc:1e:05:1d:2f:9a:24:c7:26:84:24:55:de:7c:8e:92:68: 82:c7:b1:af:f7:89:8c:62:a4:0e:a3:af:8c:f6:69:36:d4:47: 25:b4:a6:5c:d7:9b:ad:07:df:ae:b2:84:db:39:30:4c:9f:37: e5:d8:a4:50:04:3a:a6:cf:36:48:24:98:dc:81:47:69:6c:03: f6:7d:4b:85:5b:eb:14:06:1f:ae:81:96:1a:bb:e0:6d:90:6e: dd:c0:19:55:cc:be:92:36:b0:cd:b3:2e:e6:0b:3f:3e:50:b2: be:bd:15:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaMiNaa058jDwMPMEBzxk83XLmuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QUMwNEQ1RkFGQzZBQ0EwQTFFQTgyNDNFQ0M0NDc5 OTkwQTI4NTAeFw0yNDA5MjcxMDE2MTdaFw0yNDA5MjgxNDE4MTdaMDMxMTAvBgNV BAMTKEFDRjRERkRBMUJCNjg5MzYzQjdDRDgwQ0Q2MTgwQUI2MjM4M0QwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRy3ABvLLM/05zk85dBAzEeRpg AONGEsgxFwvBnf8OpFTiB62Ck6Z2/Zka9QzPsbK3qg/FtjLS8XhL1VJaCLzO04yo XiL3r8tLKFRh6SQykfrlm7C9mI6cxzQ2XqjaJfgcHuyCEtt8sh9vmwXgnmy94NgL 8RvqBJ6Uzyib5iIaJLHVrwz2xKl57r3GMezkqdjm97cKS207tP/5ReQ4kmfUkmcf Nz2+sxnhWIl0AG0x2DbTxDI/97dKUq7SnFK+xbRWe/dxpr27hslLagp8SmUeGt68 mDNNebCXtorDgQS1cVox5MhHH+0ZM97J6OQDZPp22PvWKOFhPKRdxboznPmVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrPTf2hu2iTY7fNgM1hgKtiOD0PcwHwYDVR0j BBgwFoAUlorATV+vxqygoeqCQ+zER5mQooUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hVUHJxZjlpcFF2eDhtVXZxMTZ3MTU1RURQSHdzOVZ5cEZiUVYzZzNi RDcvMS85NjhBQzA0RDVGQUZDNkFDQTBBMUVBODI0M0VDQzQ0Nzk5OTBBMjg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2OEFDMDRENUZBRkM2QUNB MEExRUE4MjQzRUNDNDQ3OTk5MEEyODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hVUHJxZjlpcFF2eDhtVXZxMTZ3MTU1RURQSHdzOVZ5cEZiUVYzZzNiRDcvMS85 NjhBQzA0RDVGQUZDNkFDQTBBMUVBODI0M0VDQzQ0Nzk5OTBBMjg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQxp2udoqy8WmIggTxnDcpxuR3ZUoaw3U0GyOFufs9gzYUr9n3EOVULJj6hHx ig/7klCyqJMO9G+CY1rb+oK0eLVgUxa6Kwfhney07v4nv3LbmEZ12vxMuCUJKLF/ /1i+Z3A1FZiXbJwCYzas6fBzX1c37JV3+ZKTULD4HVWUY2FiVTioJM8IvibCO87l W0/7fdweBR0vmiTHJoQkVd58jpJogsexr/eJjGKkDqOvjPZpNtRHJbSmXNebrQff rrKE2zkwTJ835dikUAQ6ps82SCSY3IFHaWwD9n1LhVvrFAYfroGWGrvgbZBu3cAZ Vcy+kjawzbMu5gs/PlCyvr0Vvg== -----END CERTIFICATE-----Generated at Fri Sep 27 12:47:22 2024 by rpki-client on console-fra.rpki-client.org