$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.mft File: CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.mft (raw, json) Hash identifier: M2zFsO3J7FpZveDrYE6G0Hhdiz7FmY0IwDILp5bNv/k= Subject key identifier: AC:F5:56:CF:11:4A:55:2D:B8:45:5E:9F:30:03:06:FB:B9:B1:F6:17 Authority key identifier: CE:EA:8A:82:DF:D1:65:7B:45:EA:51:8E:D6:EE:D9:1D:63:C8:C6:BB Certificate issuer: /CN=CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB Certificate serial: 7132A97CCE4D230EB52F436976F3039D9E36FAC7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.mft Manifest number: F0 Signing time: Fri 27 Sep 2024 18:39:54 +0000 Manifest this update: Fri 27 Sep 2024 18:34:54 +0000 Manifest next update: Sat 28 Sep 2024 20:10:54 +0000 Files and hashes: 1: CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.crl (hash: XeWIdVvSJRg/VjGKPLCIq012T2F+ZeEP4b+eFnt1J1U=) 2: 3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa (hash: jo/UnNTO1uIQZ7EAuUx3lZExmYK/nW+LDPuu2UzZeqQ=) 3: 323830343a376162343a3a2f33322d3438203d3e20323731333837.roa (hash: 3dwwbGs8sE/fLnsuUI6REw0lsJzJpaRcRJAd5ikNfTk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.crl rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Sep 2024 20:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:32:a9:7c:ce:4d:23:0e:b5:2f:43:69:76:f3:03:9d:9e:36:fa:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB Validity Not Before: Sep 27 18:34:54 2024 GMT Not After : Sep 28 20:10:54 2024 GMT Subject: CN=ACF556CF114A552DB8455E9F300306FBB9B1F617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:77:e6:11:0c:81:23:2d:78:63:4d:84:41:52: 9a:70:94:76:50:31:cf:df:4d:c9:17:d4:51:00:ce: 7f:54:30:9c:3b:e3:17:99:41:7e:6a:c2:4c:47:b1: 6f:8c:47:ec:d9:8a:90:04:2a:e3:f7:5c:be:ae:e4: 0f:44:d0:e4:53:e5:3f:4d:e6:e7:df:73:75:e8:0c: 99:e5:d3:cc:a9:07:09:59:43:e2:b3:50:4b:2d:55: bc:00:c7:e0:12:21:59:0f:b2:b0:13:d9:cd:2a:0e: 25:f9:15:e7:08:f1:ed:38:51:b5:22:b4:ee:66:49: 06:5a:07:df:e7:31:7e:2d:68:9b:72:29:af:4f:43: af:5b:b9:51:8c:20:f9:8a:27:1f:3c:31:0b:d1:dd: 35:a1:09:e1:6d:37:58:27:40:a0:65:26:9c:ac:7f: 94:77:da:25:d1:ca:80:b3:80:c5:a9:70:20:0e:fb: 16:eb:5b:2e:a9:41:e1:76:fb:ab:58:a6:0d:85:76: 1c:b2:92:4c:48:0a:9a:de:ba:40:77:cf:ad:d8:e0: 4f:ce:4b:99:6a:8f:8f:e4:a2:a9:92:1a:fd:66:ec: 8b:af:32:db:83:81:ec:69:bd:0d:e9:e2:ad:01:d3: cb:5e:ba:31:93:3e:54:4b:84:5b:a0:2c:b5:97:ce: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:56:CF:11:4A:55:2D:B8:45:5E:9F:30:03:06:FB:B9:B1:F6:17 X509v3 Authority Key Identifier: keyid:CE:EA:8A:82:DF:D1:65:7B:45:EA:51:8E:D6:EE:D9:1D:63:C8:C6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/1/CEEA8A82DFD1657B45EA518ED6EED91D63C8C6BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:f0:ad:96:d6:9c:50:e9:54:7d:d2:b4:f0:f4:13:13:a3: c9:5e:78:a3:93:d0:d1:f4:2f:e1:05:ed:2c:5d:40:19:19:ad: a2:a6:b0:d9:f9:4d:44:52:67:88:95:0a:74:0e:bf:7c:33:cb: ba:3e:6d:ad:26:c3:b9:9b:e6:2e:ef:7b:89:18:13:b1:83:00: 37:36:14:88:31:6b:6a:da:99:34:77:61:19:fa:ca:98:19:62: 27:07:db:c2:5f:4f:12:70:07:07:3a:37:61:2a:f3:2c:dc:cb: 15:77:e7:fa:d0:33:24:65:b5:5a:47:9a:fb:97:b0:cc:9b:31: cc:61:2a:f0:df:a0:2b:47:26:04:3d:66:b0:bf:3b:88:69:3e: 34:26:02:a9:5e:17:d5:1d:95:a6:d8:a5:24:52:3b:2a:f8:34: 51:94:99:7a:d7:72:41:7a:32:7f:27:b2:41:79:33:6c:e8:64: 6c:21:3f:44:ec:8f:00:0b:5d:40:cc:50:21:3a:7a:4c:70:af: 03:13:b2:ad:ef:75:b0:44:d1:73:7c:56:a2:5a:2f:8b:10:6d: cc:4a:d8:17:44:87:99:db:61:11:e6:b1:df:79:b0:7e:83:12: b7:69:0e:b9:5a:e5:ef:33:2c:83:76:e0:b4:ad:d2:69:53:6b: 83:03:d1:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcTKpfM5NIw61L0NpdvMDnZ42+scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFQThBODJERkQxNjU3QjQ1RUE1MThFRDZFRUQ5MUQ2 M0M4QzZCQjAeFw0yNDA5MjcxODM0NTRaFw0yNDA5MjgyMDEwNTRaMDMxMTAvBgNV BAMTKEFDRjU1NkNGMTE0QTU1MkRCODQ1NUU5RjMwMDMwNkZCQjlCMUY2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0d+YRDIEjLXhjTYRBUppwlHZQ Mc/fTckX1FEAzn9UMJw74xeZQX5qwkxHsW+MR+zZipAEKuP3XL6u5A9E0ORT5T9N 5uffc3XoDJnl08ypBwlZQ+KzUEstVbwAx+ASIVkPsrAT2c0qDiX5FecI8e04UbUi tO5mSQZaB9/nMX4taJtyKa9PQ69buVGMIPmKJx88MQvR3TWhCeFtN1gnQKBlJpys f5R32iXRyoCzgMWpcCAO+xbrWy6pQeF2+6tYpg2FdhyykkxICpreukB3z63Y4E/O S5lqj4/koqmSGv1m7IuvMtuDgexpvQ3p4q0B08teujGTPlRLhFugLLWXzoSXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrPVWzxFKVS24RV6fMAMG+7mx9hcwHwYDVR0j BBgwFoAUzuqKgt/RZXtF6lGO1u7ZHWPIxrswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhv dEovMS9DRUVBOEE4MkRGRDE2NTdCNDVFQTUxOEVENkVFRDkxRDYzQzhDNkJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFRUE4QTgyREZEMTY1N0I0 NUVBNTE4RUQ2RUVEOTFENjNDOEM2QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhvdEovMS9D RUVBOEE4MkRGRDE2NTdCNDVFQTUxOEVENkVFRDkxRDYzQzhDNkJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANp3wrZbWnFDpVH3StPD0ExOjyV54o5PQ0fQv4QXtLF1AGRmtoqaw2flNRFJn iJUKdA6/fDPLuj5trSbDuZvmLu97iRgTsYMANzYUiDFratqZNHdhGfrKmBliJwfb wl9PEnAHBzo3YSrzLNzLFXfn+tAzJGW1Wkea+5ewzJsxzGEq8N+gK0cmBD1msL87 iGk+NCYCqV4X1R2VptilJFI7Kvg0UZSZetdyQXoyfyeyQXkzbOhkbCE/ROyPAAtd QMxQITp6THCvAxOyre91sETRc3xWolovixBtzErYF0SHmdthEeax33mwfoMSt2kO uVrl7zMsg3bgtK3SaVNrgwPROw== -----END CERTIFICATE-----Generated at Fri Sep 27 21:10:59 2024 by rpki-client on console-ams.rpki-client.org