$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft File: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft (raw, json) Hash identifier: wxAayG7KbGQcWsh564UCFwKWndO2R2kYu/O4WeXInE8= Subject key identifier: 3C:1D:AC:5A:B6:37:BB:BD:94:38:61:5B:5F:58:0E:99:BD:F1:20:9E Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43 Certificate issuer: /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43 Certificate serial: 097C36CB12EDC27D9088A1584ACDA380C94F04AD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer Subject info access: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft Manifest number: 0130 Signing time: Fri 22 Nov 2024 22:50:07 +0000 Manifest this update: Fri 22 Nov 2024 22:45:07 +0000 Manifest next update: Sun 24 Nov 2024 00:37:07 +0000 Files and hashes: 1: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (hash: l2fBaVoL9wQRrQiklGPivT4vtQCD+5xVr0FOVcyxrRo=) 2: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl (hash: gkxE+K0lIE+OHe5q4Y3MPzieBkjFr7tAeNZRs/fJTtQ=) 3: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: gqcGuwnr5Fpm3jSnnKa9zDWYhmEqAx0lPvVOhYXqZLw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7c:36:cb:12:ed:c2:7d:90:88:a1:58:4a:cd:a3:80:c9:4f:04:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43 Validity Not Before: Nov 22 22:45:07 2024 GMT Not After : Nov 24 00:37:07 2024 GMT Subject: CN=3C1DAC5AB637BBBD9438615B5F580E99BDF1209E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:6e:ce:bc:40:71:bd:45:c2:72:af:7a:5c: d4:c0:83:ea:8d:62:34:c3:c5:a3:aa:8c:ad:b5:21: a0:af:e9:e7:3f:83:b2:bc:b0:6e:13:44:95:5e:23: 83:61:28:52:2a:cc:74:30:8d:17:fc:c6:6a:76:af: 56:75:2b:46:3c:61:ff:9c:dc:d3:ee:38:85:4c:79: 19:a6:78:5a:3a:7a:7a:2e:d6:25:6c:42:0a:dd:61: 95:4a:4c:07:d9:ee:71:d4:55:c6:a8:6a:fc:55:cf: ba:26:16:1f:95:87:65:6e:ec:a9:44:67:64:34:30: 32:04:1a:d8:ea:66:23:84:c9:4c:41:b3:f7:b4:7e: 3b:17:82:a0:e4:6f:21:08:ea:ef:9c:b5:af:00:de: a7:03:c1:2c:ec:dd:27:2d:38:85:91:7a:3f:6e:ea: 02:0e:a1:80:be:3c:75:ac:25:b3:65:01:f0:e9:33: 20:2d:b2:f1:42:94:88:7c:a7:61:e0:c1:93:ce:fc: b0:7d:06:50:10:d6:a5:4d:12:f3:03:bd:11:50:6e: 82:dd:b7:39:53:e4:5b:e5:62:24:f6:9b:91:79:bb: 23:69:54:91:e8:ce:8d:48:0f:22:e1:ec:8b:77:f8: ef:25:b6:65:40:95:8a:d1:04:ee:ac:04:3d:60:88: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:AC:5A:B6:37:BB:BD:94:38:61:5B:5F:58:0E:99:BD:F1:20:9E X509v3 Authority Key Identifier: keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d3:cb:20:53:27:13:45:16:87:33:cb:27:b4:88:de:65:fa: 72:79:28:b5:e4:78:0b:8a:ec:3f:89:b6:d9:94:53:b5:65:be: b0:00:a5:a4:89:d8:12:e1:34:51:56:97:ba:41:3c:62:da:b3: eb:08:68:0f:ce:3f:cf:ac:03:e4:4a:c0:28:d2:2b:50:ce:a5: d1:28:54:cc:e5:18:b9:61:e1:1e:de:29:e6:22:58:1e:78:b7: 7d:e6:f1:6f:77:df:92:22:6e:1f:7b:78:97:b9:09:4c:59:2b: 94:63:fc:c1:3d:43:23:0a:2f:74:90:1b:3c:03:21:41:35:9f: f9:70:12:e3:11:e3:54:45:98:7d:82:17:3c:5b:82:1e:cb:4b: 77:a3:7a:aa:33:d9:ba:0e:89:db:75:b7:84:77:c8:d3:a9:31: 9f:aa:c4:1f:7f:1d:d7:1c:b5:0e:bd:6a:81:13:3a:0e:b5:c9: 1f:00:a8:dc:af:5d:80:71:a6:8c:7c:b6:05:e4:f9:01:45:cc: 12:63:7c:2a:68:52:9d:85:ef:32:f6:92:1f:95:74:82:85:90: 13:34:b7:28:35:d4:f7:c0:8b:13:14:6b:aa:46:91:85:3b:aa: af:61:78:c7:90:09:90:62:07:13:c7:4b:7b:57:cd:4f:ec:64: 48:d7:e4:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCXw2yxLtwn2QiKFYSs2jgMlPBK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAyOEE5NUZCNkY3RTlCMzA0QUI3QjE1QkE5Q0YzN0M3 NDIwRUU0MzAeFw0yNDExMjIyMjQ1MDdaFw0yNDExMjQwMDM3MDdaMDMxMTAvBgNV BAMTKDNDMURBQzVBQjYzN0JCQkQ5NDM4NjE1QjVGNTgwRTk5QkRGMTIwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnm7OvEBxvUXCcq96XNTAg+qN YjTDxaOqjK21IaCv6ec/g7K8sG4TRJVeI4NhKFIqzHQwjRf8xmp2r1Z1K0Y8Yf+c 3NPuOIVMeRmmeFo6enou1iVsQgrdYZVKTAfZ7nHUVcaoavxVz7omFh+Vh2Vu7KlE Z2Q0MDIEGtjqZiOEyUxBs/e0fjsXgqDkbyEI6u+cta8A3qcDwSzs3SctOIWRej9u 6gIOoYC+PHWsJbNlAfDpMyAtsvFClIh8p2HgwZPO/LB9BlAQ1qVNEvMDvRFQboLd tzlT5FvlYiT2m5F5uyNpVJHozo1IDyLh7It3+O8ltmVAlYrRBO6sBD1giD2ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPB2sWrY3u72UOGFbX1gOmb3xIJ4wHwYDVR0j BBgwFoAUwCipX7b36bMEq3sVupzzfHQg7kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF R3gvMS9DMDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMjhBOTVGQjZGN0U5QjMw NEFCN0IxNUJBOUNGMzdDNzQyMEVFNDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhFR3gvMS9D MDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQNPLIFMnE0UWhzPLJ7SI3mX6cnkoteR4C4rsP4m22ZRTtWW+sAClpInYEuE0 UVaXukE8Ytqz6whoD84/z6wD5ErAKNIrUM6l0ShUzOUYuWHhHt4p5iJYHni3febx b3ffkiJuH3t4l7kJTFkrlGP8wT1DIwovdJAbPAMhQTWf+XAS4xHjVEWYfYIXPFuC HstLd6N6qjPZug6J23W3hHfI06kxn6rEH38d1xy1Dr1qgRM6DrXJHwCo3K9dgHGm jHy2BeT5AUXMEmN8KmhSnYXvMvaSH5V0goWQEzS3KDXU98CLExRrqkaRhTuqr2F4 x5AJkGIHE8dLe1fNT+xkSNfkpg== -----END CERTIFICATE-----Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org