$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft File: 22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft (raw, json) Hash identifier: ygSnwMkPgg65D7Wv9XWPYalLr5VW5lcXXjVhIBMK5HY= Subject key identifier: 0C:CD:D6:0C:D4:7F:D5:6D:BE:B8:92:FE:70:D4:7A:34:7E:02:53:B4 Authority key identifier: 22:37:70:22:A3:2D:C6:70:18:2F:5C:02:A6:E1:E2:34:EC:F2:F9:C0 Certificate issuer: /CN=22377022A32DC670182F5C02A6E1E234ECF2F9C0 Certificate serial: 0BEAE1DB3CAC5377570CF204BEAB4DFF43D943CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 07:27:48 +0000 Manifest this update: Fri 22 Nov 2024 07:22:48 +0000 Manifest next update: Sat 23 Nov 2024 09:54:48 +0000 Files and hashes: 1: 34352e3136322e36342e302f32322d3234203d3e20323638353933.roa (hash: dmV4Fv1D57kuQxXtwo+9CuQp6Rr8S1iSSUyto4QInjo=) 2: 323830343a353339343a3a2f33322d3438203d3e20323638353933.roa (hash: dzbTFZFt7AeX9Y1l+r+6ygpBHp2yNQJ5tzPec1xycZE=) 3: 22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl (hash: 4hMnLEgupK1EyzHFOKm9mjsLooAV10NTX+fGVDthj9I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ea:e1:db:3c:ac:53:77:57:0c:f2:04:be:ab:4d:ff:43:d9:43:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22377022A32DC670182F5C02A6E1E234ECF2F9C0 Validity Not Before: Nov 22 07:22:48 2024 GMT Not After : Nov 23 09:54:48 2024 GMT Subject: CN=0CCDD60CD47FD56DBEB892FE70D47A347E0253B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:e7:e9:a8:84:69:44:e1:e8:f6:b1:07:fa: 60:f9:73:a6:ef:b7:e2:a5:85:94:6e:37:f7:18:48: e1:ae:50:36:60:44:e4:19:03:7c:73:e7:2e:70:ca: ac:01:b9:d2:43:2a:46:f4:f1:17:07:0b:99:e8:51: ec:82:96:7f:bf:64:af:03:1b:cf:c8:17:65:af:52: 28:8a:37:e5:c0:95:1b:c3:6b:f5:dc:fb:64:6c:b5: 9b:f4:61:b2:3f:36:40:a2:f6:a5:51:cb:86:ae:9c: be:99:fe:59:93:78:20:8b:cf:5a:12:cb:69:f6:41: f5:bb:19:fb:90:ea:09:67:61:2f:0a:72:1b:2c:a0: cb:d6:dd:9f:f0:c0:04:e7:17:0f:3c:ca:ca:45:48: e0:21:73:e5:a4:84:fd:72:99:00:ed:de:13:14:0c: 36:6a:0e:bc:53:81:2a:09:b1:ba:27:24:1a:ef:a3: 38:c8:0b:81:45:20:67:72:83:a0:94:00:1c:e4:45: 83:5f:3b:d9:db:12:9e:de:6b:41:cf:45:11:62:ea: 82:02:a4:87:3e:4e:56:e6:0e:99:f1:b7:73:fe:54: 1e:15:7c:2e:7c:61:15:b8:04:79:97:5c:12:af:8b: 4e:9c:86:e2:04:9f:ab:70:89:84:1d:3b:d2:12:43: f4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CD:D6:0C:D4:7F:D5:6D:BE:B8:92:FE:70:D4:7A:34:7E:02:53:B4 X509v3 Authority Key Identifier: keyid:22:37:70:22:A3:2D:C6:70:18:2F:5C:02:A6:E1:E2:34:EC:F2:F9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:f3:2b:e1:64:2b:63:ff:65:c4:6e:e6:d2:d7:06:ec:76: 24:e9:b9:4a:d8:7b:b5:a9:7a:4e:9b:fd:bf:9c:b1:f6:09:43: 8d:0c:d9:83:30:12:2b:ea:58:10:ae:b6:f3:25:19:5b:88:5b: 61:a2:35:63:4f:16:db:6a:e6:56:c9:7f:24:bf:63:92:f1:60: 70:d8:c3:f0:5e:9e:4d:63:1a:34:22:77:66:31:80:ef:94:f8: 25:b4:ae:f6:af:a7:dd:f7:a8:99:bd:7b:b9:f8:04:fd:c4:00: 34:04:35:8c:cf:68:8d:e2:36:d7:40:3a:f0:90:04:dc:77:e0: e5:7e:d7:17:4d:be:90:2e:59:bc:28:82:5a:bd:2d:e2:c5:ec: a3:2f:30:c0:1c:fd:09:d8:f3:80:0b:77:0a:ec:60:a2:ec:ac: 73:ae:89:33:e8:ab:1f:8b:c6:dd:b4:00:83:c2:7f:6b:eb:1c: e6:4d:0d:51:2e:65:3c:1a:30:96:84:6b:1c:01:8a:9e:19:28: 74:be:f9:48:45:5d:33:a1:76:0b:f1:6d:f7:8f:fc:71:86:f0: ec:dc:28:6e:69:18:58:55:4b:3d:84:58:67:8d:2c:51:c1:4c: 9c:85:bf:8e:83:c9:c9:65:31:96:00:1b:0f:77:91:14:2f:9b: 60:37:26:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC+rh2zysU3dXDPIEvqtN/0PZQ8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIzNzcwMjJBMzJEQzY3MDE4MkY1QzAyQTZFMUUyMzRF Q0YyRjlDMDAeFw0yNDExMjIwNzIyNDhaFw0yNDExMjMwOTU0NDhaMDMxMTAvBgNV BAMTKDBDQ0RENjBDRDQ3RkQ1NkRCRUI4OTJGRTcwRDQ3QTM0N0UwMjUzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZo+fpqIRpROHo9rEH+mD5c6bv t+KlhZRuN/cYSOGuUDZgROQZA3xz5y5wyqwBudJDKkb08RcHC5noUeyCln+/ZK8D G8/IF2WvUiiKN+XAlRvDa/Xc+2RstZv0YbI/NkCi9qVRy4aunL6Z/lmTeCCLz1oS y2n2QfW7GfuQ6glnYS8KchssoMvW3Z/wwATnFw88yspFSOAhc+WkhP1ymQDt3hMU DDZqDrxTgSoJsbonJBrvozjIC4FFIGdyg6CUABzkRYNfO9nbEp7ea0HPRRFi6oIC pIc+TlbmDpnxt3P+VB4VfC58YRW4BHmXXBKvi06chuIEn6twiYQdO9ISQ/QLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDM3WDNR/1W2+uJL+cNR6NH4CU7QwHwYDVR0j BBgwFoAUIjdwIqMtxnAYL1wCpuHiNOzy+cAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1RQdXJqUERtOEE3RVkxWkxMckppbm0xRVBjajZLdHBOR2dvMVNGNU13 eW4vMS8yMjM3NzAyMkEzMkRDNjcwMTgyRjVDMDJBNkUxRTIzNEVDRjJGOUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyMzc3MDIyQTMyREM2NzAx ODJGNUMwMkE2RTFFMjM0RUNGMkY5QzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1RQdXJqUERtOEE3RVkxWkxMckppbm0xRVBjajZLdHBOR2dvMVNGNU13eW4vMS8y MjM3NzAyMkEzMkRDNjcwMTgyRjVDMDJBNkUxRTIzNEVDRjJGOUMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUr3zK+FkK2P/ZcRu5tLXBux2JOm5Sth7tal6Tpv9v5yx9glDjQzZgzASK+pY EK628yUZW4hbYaI1Y08W22rmVsl/JL9jkvFgcNjD8F6eTWMaNCJ3ZjGA75T4JbSu 9q+n3feomb17ufgE/cQANAQ1jM9ojeI210A68JAE3Hfg5X7XF02+kC5ZvCiCWr0t 4sXsoy8wwBz9CdjzgAt3Cuxgouysc66JM+irH4vG3bQAg8J/a+sc5k0NUS5lPBow loRrHAGKnhkodL75SEVdM6F2C/Ft94/8cYbw7NwobmkYWFVLPYRYZ40sUcFMnIW/ joPJyWUxlgAbD3eRFC+bYDcm6Q== -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org