$ rpki-client -vvf rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft File: B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft (raw, json) Hash identifier: pltZEvSX6QJexWUqx/R0Y8zZ7T9OHt4NlepNeB5IYPA= Subject key identifier: A7:6A:D7:7F:B4:81:42:6E:72:3F:23:B0:D7:DF:59:2B:0B:32:11:B1 Authority key identifier: B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD Certificate issuer: /CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD Certificate serial: 700E9BC3883CC86D3CCEE4DFEB704D2138B2F167 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 14:24:19 +0000 Manifest this update: Fri 22 Nov 2024 14:19:19 +0000 Manifest next update: Sat 23 Nov 2024 18:15:19 +0000 Files and hashes: 1: 323830343a3735633a3a2f33322d3438203d3e20323632363337.roa (hash: mHO2ymjF267nU1SnMPmkGKE0Z3zxDyW3Iqdhmke15Ro=) 2: 3137372e3130352e36342e302f32302d3234203d3e20323632363337.roa (hash: YMopmVZJRwvrB2E0i+Wkj9YdCrOlycxLY6/maf1+B0k=) 3: B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl (hash: J4V9kGO4GwA2KVjKlXfrGmozUWMIzAh6vgBZqmIol0Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 18:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0e:9b:c3:88:3c:c8:6d:3c:ce:e4:df:eb:70:4d:21:38:b2:f1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD Validity Not Before: Nov 22 14:19:19 2024 GMT Not After : Nov 23 18:15:19 2024 GMT Subject: CN=A76AD77FB481426E723F23B0D7DF592B0B3211B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:7f:58:31:6f:bb:23:8f:6a:8b:c8:a0:73: d8:39:79:ac:1d:d8:b5:92:88:55:51:c0:ae:39:f4: 64:13:83:75:b4:00:2d:77:2b:24:40:bd:16:0b:04: 99:e4:b4:7b:e3:e2:d1:26:a2:76:93:bd:58:21:ef: 70:f9:4e:87:c0:0a:ec:4d:45:34:96:19:f6:3a:eb: de:f5:bd:e3:6e:52:52:6d:3d:af:64:95:f2:ea:53: 25:0a:85:6a:11:81:eb:40:e8:d0:c9:71:bf:03:b5: aa:8e:e1:8f:3f:8c:c4:30:be:83:6e:4f:9b:e7:59: 6c:04:a9:08:8c:c8:ba:d2:75:b5:73:4f:81:cd:0c: 24:04:83:8c:cb:49:ee:b4:20:9a:5a:b7:38:9f:85: d4:f2:23:43:5f:10:33:3c:43:15:f1:29:77:c1:41: 98:e8:59:1b:89:e9:1b:2b:85:7e:6e:f6:45:7a:f7: ce:7d:56:c7:b5:3f:ac:5e:7c:f8:a7:43:62:d3:08: ac:47:04:55:0e:1c:7b:dc:e4:58:4d:2a:30:5e:8d: d9:9e:05:dd:04:76:ae:9c:75:3b:7e:c4:11:9c:07: f1:00:25:8c:08:ad:bb:a2:22:be:85:90:93:6c:bb: ad:a3:d1:7e:3d:30:ec:83:29:de:17:bf:36:e1:e0: 51:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:D7:7F:B4:81:42:6E:72:3F:23:B0:D7:DF:59:2B:0B:32:11:B1 X509v3 Authority Key Identifier: keyid:B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:d1:ec:69:10:61:f9:f9:28:6b:04:9a:f3:e1:83:62:5a:db: e8:2f:31:fa:fa:ad:b2:10:c6:b2:16:5d:c9:f7:95:f2:9f:8d: 29:63:06:10:de:e1:05:6b:59:2d:b9:70:ab:f3:f0:0a:bf:a6: c8:58:4e:cc:1d:5c:2e:e0:f9:5e:89:e7:4f:27:d6:c2:08:81: f1:e0:e7:7a:7e:dd:63:b1:3e:9c:d8:38:c2:bd:bb:99:22:49: 66:76:0c:68:e9:d7:70:db:1d:fc:6d:45:eb:10:f6:ff:e3:c0: f5:bc:32:a8:d2:46:3e:00:8b:92:fc:46:eb:ad:2c:28:74:42: 62:ff:14:c5:60:16:89:ef:76:24:69:0a:da:a2:45:14:46:2b: 10:28:79:c0:8c:9a:a7:40:0e:fd:36:20:96:d4:51:d5:02:5b: e1:62:83:55:72:17:29:32:2f:f3:09:dd:6d:9c:74:d2:28:57: 73:44:45:2a:00:b1:3a:2b:75:c7:55:04:f4:4e:1b:f3:c7:5b: bf:97:ba:a0:b7:ca:b7:0b:8d:05:f6:e4:b3:7a:9c:aa:b8:82: d2:ba:72:23:15:99:a6:10:56:52:28:e8:89:bc:86:88:4c:78: 0c:7a:a4:37:d6:a6:88:fa:e1:f5:74:99:e0:37:b3:fb:3d:ac: b9:cd:f0:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcA6bw4g8yG08zuTf63BNITiy8WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwMkM1MjAzQkYyMUQ4MjhENzJEOEZBN0NFQTg4MzFB REVCRThERDAeFw0yNDExMjIxNDE5MTlaFw0yNDExMjMxODE1MTlaMDMxMTAvBgNV BAMTKEE3NkFENzdGQjQ4MTQyNkU3MjNGMjNCMEQ3REY1OTJCMEIzMjExQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/a39YMW+7I49qi8igc9g5eawd 2LWSiFVRwK459GQTg3W0AC13KyRAvRYLBJnktHvj4tEmonaTvVgh73D5TofACuxN RTSWGfY66971veNuUlJtPa9klfLqUyUKhWoRgetA6NDJcb8DtaqO4Y8/jMQwvoNu T5vnWWwEqQiMyLrSdbVzT4HNDCQEg4zLSe60IJpatzifhdTyI0NfEDM8QxXxKXfB QZjoWRuJ6RsrhX5u9kV69859Vse1P6xefPinQ2LTCKxHBFUOHHvc5FhNKjBejdme Bd0Edq6cdTt+xBGcB/EAJYwIrbuiIr6FkJNsu62j0X49MOyDKd4Xvzbh4FE/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUp2rXf7SBQm5yPyOw199ZKwsyEbEwHwYDVR0j BBgwFoAUuQLFIDvyHYKNctj6fOqIMa3r6N0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pmeGFSbjZnZ1FSQjl0dTdLWXlvRXBjUTJ5YllOQXlzckhuakVtNldt Y1IvMS9COTAyQzUyMDNCRjIxRDgyOEQ3MkQ4RkE3Q0VBODgzMUFERUJFOERELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MDJDNTIwM0JGMjFEODI4 RDcyRDhGQTdDRUE4ODMxQURFQkU4REQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pmeGFSbjZnZ1FSQjl0dTdLWXlvRXBjUTJ5YllOQXlzckhuakVtNldtY1IvMS9C OTAyQzUyMDNCRjIxRDgyOEQ3MkQ4RkE3Q0VBODgzMUFERUJFOERELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz9HsaRBh+fkoawSa8+GDYlrb6C8x+vqtshDGshZdyfeV8p+NKWMGEN7hBWtZ Lblwq/PwCr+myFhOzB1cLuD5XonnTyfWwgiB8eDnen7dY7E+nNg4wr27mSJJZnYM aOnXcNsd/G1F6xD2/+PA9bwyqNJGPgCLkvxG660sKHRCYv8UxWAWie92JGkK2qJF FEYrECh5wIyap0AO/TYgltRR1QJb4WKDVXIXKTIv8wndbZx00ihXc0RFKgCxOit1 x1UE9E4b88dbv5e6oLfKtwuNBfbks3qcqriC0rpyIxWZphBWUijoibyGiEx4DHqk N9amiPrh9XSZ4Dez+z2suc3w8w== -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org