$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft File: 642D27C2B88FC1E644188313B8DE644A2705C863.mft (raw, json) Hash identifier: U/SxHry3kzugpX4r7xk4ryuXMNNay5JgKbPrEsYpFyM= Subject key identifier: 56:26:ED:EA:C5:B9:C5:D4:7E:D2:BE:E9:41:68:CF:21:22:0B:DB:4E Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 Certificate issuer: /CN=642D27C2B88FC1E644188313B8DE644A2705C863 Certificate serial: 3095C92CDF827C9B182C29413C8D4F6A0D75BEE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft Manifest number: 0139 Signing time: Fri 22 Nov 2024 17:06:33 +0000 Manifest this update: Fri 22 Nov 2024 17:01:33 +0000 Manifest next update: Sat 23 Nov 2024 19:38:33 +0000 Files and hashes: 1: 323830343a323938303a3a2f33322d313238203d3e203533313732.roa (hash: YwWcG+EcjIuaUEqkN/bspdZQ3JrvMWl5yIUxhZSbNE0=) 2: 642D27C2B88FC1E644188313B8DE644A2705C863.crl (hash: PnR+j9m8cX0l9RPcTFiJoOJkZOzy85Vwc4P95o72/Dk=) 3: 3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (hash: wZdANpOFRinIMx0CC16GSM3lDiKlGdIxtjN06Z0odd8=) 4: 3134332e3133372e382e302f32322d3332203d3e203533313732.roa (hash: 9egZlyuaDd9sVoTD8gnYZY/NdolaNXt+uupaz13cHX8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 18:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:95:c9:2c:df:82:7c:9b:18:2c:29:41:3c:8d:4f:6a:0d:75:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863 Validity Not Before: Nov 22 17:01:33 2024 GMT Not After : Nov 23 19:38:33 2024 GMT Subject: CN=5626EDEAC5B9C5D47ED2BEE94168CF21220BDB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ed:e8:79:fb:73:f2:64:ca:98:b1:53:94:23: a9:a4:5c:cc:a7:0e:c1:e3:47:85:4f:3c:52:80:81: a8:ae:7d:d8:19:d1:9a:9e:ff:59:d3:32:f6:b1:d6: 4d:12:5f:ba:bb:ba:7f:dd:18:ce:04:65:f2:de:29: 88:03:0d:58:e4:c0:46:d6:92:1b:3e:e1:a3:67:e6: 0a:e5:7d:e9:e0:e7:57:18:86:40:6c:44:73:4b:20: 49:40:e4:71:05:78:20:e7:f3:80:34:63:93:ca:dc: 29:f9:c3:9e:75:d2:7b:45:fb:d4:92:18:f5:6b:3d: 32:df:de:e4:8d:82:ca:6e:f5:82:ec:e1:2c:e5:54: 20:e8:0c:e8:1b:24:d4:17:99:b6:6b:8f:fb:d2:d4: 6a:d1:19:1a:4d:9a:7c:81:af:6f:cc:ba:13:f3:82: d0:fb:3f:b0:f0:76:d3:a2:1f:21:a0:0a:4a:2e:3d: d0:ab:29:1b:b1:4d:b7:7e:fd:af:4a:e0:bd:b0:8f: 7c:d9:7c:66:1f:38:53:c0:bf:e8:23:9b:99:70:5f: f2:87:ad:6c:e2:3c:93:05:5d:cb:11:61:09:9c:e0: 43:a5:2a:a0:8e:ed:70:3e:57:c0:82:78:cd:30:61: 7a:48:57:52:92:32:d9:23:53:e8:3f:45:32:9a:35: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:26:ED:EA:C5:B9:C5:D4:7E:D2:BE:E9:41:68:CF:21:22:0B:DB:4E X509v3 Authority Key Identifier: keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:66:0b:b3:6a:1b:5b:f7:0c:6a:04:f0:0b:77:a8:f4:d2:80: b0:17:73:2e:b3:d3:f3:12:cb:fb:e5:04:fa:7d:20:86:2d:70: f7:7e:ac:99:cf:ab:e2:87:b6:25:cf:12:17:03:bd:62:49:c5: e9:4a:fc:4f:d7:67:6e:b2:5e:d1:22:09:58:a0:69:54:7d:66: 4a:e9:60:46:5b:4d:f9:e9:6d:92:c6:e7:69:dd:03:e1:26:26: 5d:4d:52:ff:66:8f:11:b7:d1:1b:65:47:84:29:7f:0e:65:0b: ab:74:63:7d:fb:b9:3b:f1:b6:29:c5:48:f9:bd:30:e9:8b:a1: 18:c7:4f:ac:08:0b:9d:cc:f8:30:a5:86:aa:32:75:48:6b:e0: 63:09:9c:0f:e4:d6:32:be:3c:56:6e:7e:ed:db:1b:e0:c0:92: bb:20:88:f3:84:21:be:bb:bb:11:d5:7c:2c:22:1f:9c:f2:27: f6:81:b2:aa:02:48:e9:7c:a5:1f:27:88:ab:27:98:53:c9:a5: b3:20:b7:f4:95:f3:f3:8c:6a:62:84:22:4e:09:83:cd:40:2d: 7c:5d:a1:4b:d2:df:05:dd:2a:af:09:95:ae:96:1f:db:ae:35: 4b:67:92:3f:27:fa:af:75:63:48:2a:68:c6:02:33:71:bf:1e: 5c:cf:07:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMJXJLN+CfJsYLClBPI1Pag11vuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyRDI3QzJCODhGQzFFNjQ0MTg4MzEzQjhERTY0NEEy NzA1Qzg2MzAeFw0yNDExMjIxNzAxMzNaFw0yNDExMjMxOTM4MzNaMDMxMTAvBgNV BAMTKDU2MjZFREVBQzVCOUM1RDQ3RUQyQkVFOTQxNjhDRjIxMjIwQkRCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF7eh5+3PyZMqYsVOUI6mkXMyn DsHjR4VPPFKAgaiufdgZ0Zqe/1nTMvax1k0SX7q7un/dGM4EZfLeKYgDDVjkwEbW khs+4aNn5grlfeng51cYhkBsRHNLIElA5HEFeCDn84A0Y5PK3Cn5w5510ntF+9SS GPVrPTLf3uSNgspu9YLs4SzlVCDoDOgbJNQXmbZrj/vS1GrRGRpNmnyBr2/MuhPz gtD7P7DwdtOiHyGgCkouPdCrKRuxTbd+/a9K4L2wj3zZfGYfOFPAv+gjm5lwX/KH rWziPJMFXcsRYQmc4EOlKqCO7XA+V8CCeM0wYXpIV1KSMtkjU+g/RTKaNcKfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVibt6sW5xdR+0r7pQWjPISIL204wHwYDVR0j BBgwFoAUZC0nwriPweZEGIMTuN5kSicFyGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVu NWsvMS82NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkQyN0MyQjg4RkMxRTY0 NDE4ODMxM0I4REU2NDRBMjcwNUM4NjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVuNWsvMS82 NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsmYLs2obW/cMagTwC3eo9NKAsBdzLrPT8xLL++UE+n0ghi1w936smc+r4oe2 Jc8SFwO9YknF6Ur8T9dnbrJe0SIJWKBpVH1mSulgRltN+eltksbnad0D4SYmXU1S /2aPEbfRG2VHhCl/DmULq3Rjffu5O/G2KcVI+b0w6YuhGMdPrAgLncz4MKWGqjJ1 SGvgYwmcD+TWMr48Vm5+7dsb4MCSuyCI84Qhvru7EdV8LCIfnPIn9oGyqgJI6Xyl HyeIqyeYU8mlsyC39JXz84xqYoQiTgmDzUAtfF2hS9LfBd0qrwmVrpYf2641S2eS Pyf6r3VjSCpoxgIzcb8eXM8HJA== -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:19 2024 by rpki-client on console-fra.rpki-client.org