$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: Rov84JoEWmWsn5wsbK7BHS71V6gjiC7moLr34mDhcQM= Subject key identifier: A9:CD:F2:8C:8F:03:F4:F2:03:64:F8:40:0B:3F:13:A3:14:F2:90:F6 Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 12BDA1D06362FC514F5813B7D213A7395C8427CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: F1 Signing time: Fri 27 Sep 2024 16:02:52 +0000 Manifest this update: Fri 27 Sep 2024 15:57:52 +0000 Manifest next update: Sat 28 Sep 2024 16:58:52 +0000 Files and hashes: 1: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: tBrxvZJ3dYOgoekJ0+Z9LNeEmsGSc0Rr3xywbuC6vdM=) 2: 323830343a336534343a3a2f33322d3334203d3e20323636353834.roa (hash: QaDelKncj6ib4Ko1/z91Wk772ZdCBhJXkXaZuS0zJR8=) 3: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: +G0H6/45nk7kHu05Oy5T5SMRlHwt34RYCOpe0Q9m4Zg=) 4: 323830343a336534343a3a2f33362d3336203d3e20323636353834.roa (hash: sTIsu/ebGWCsiKbFxl4k6TGOIjXG1m0bIpf8DRaeF5o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Sep 2024 16:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:bd:a1:d0:63:62:fc:51:4f:58:13:b7:d2:13:a7:39:5c:84:27:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Sep 27 15:57:52 2024 GMT Not After : Sep 28 16:58:52 2024 GMT Subject: CN=A9CDF28C8F03F4F20364F8400B3F13A314F290F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b1:8d:a9:de:1a:f0:c6:dc:89:b2:75:b5:9e: b4:44:0f:d1:53:8a:8d:ba:62:3e:30:99:32:45:fd: 85:f8:de:b8:e2:17:71:ac:6f:d2:1a:c7:cc:fb:ae: ad:8f:ce:7b:df:70:02:1a:dd:ac:15:26:55:60:af: 6e:7a:79:77:42:50:09:30:b1:0e:77:12:a2:ff:3d: 6d:14:22:ec:45:d4:fd:26:59:44:dc:37:ab:86:7a: c6:ff:9b:6c:ea:4c:50:91:87:92:e2:74:15:a8:47: f4:94:ad:34:72:de:58:e1:a0:92:a6:88:ad:07:e2: 2a:de:ae:48:c9:57:53:28:67:28:3a:37:4d:ce:c3: ba:ca:86:c5:3e:af:53:ec:f0:1b:95:6a:97:bf:0a: da:13:2e:e6:a0:80:88:07:3f:d9:1d:72:80:f0:2c: 5b:3b:00:86:a6:a1:0d:15:15:46:ef:0b:88:89:8c: 4e:7b:8d:9d:85:b5:80:38:f1:42:eb:77:31:4a:c3: c2:7d:88:83:18:84:bc:07:f0:0c:77:f4:a2:6d:67: 6d:ed:0e:31:af:07:09:0c:a1:0b:02:0c:1f:22:05: 05:e4:2a:b2:10:ea:c5:e5:9c:22:43:ee:32:15:cc: b4:81:21:80:22:bb:51:3f:7c:74:80:ab:07:20:d7: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CD:F2:8C:8F:03:F4:F2:03:64:F8:40:0B:3F:13:A3:14:F2:90:F6 X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1b:c2:b2:8d:b7:e6:4e:4f:4d:22:27:c8:d4:bf:b8:b5:c7: b8:cb:45:9b:a9:b8:36:ee:ac:59:09:b3:34:17:02:23:9f:bc: b8:8e:91:1d:78:34:fc:26:00:b3:d6:a1:d2:91:39:fc:4e:88: 35:96:bb:50:64:6b:bd:48:89:e6:d2:ee:d6:c2:28:71:a4:1a: dd:10:ea:1f:04:9e:1e:33:ed:29:51:8a:74:7c:0a:25:a9:39: cb:fc:6c:8c:34:9b:3e:d9:b9:bd:db:30:82:24:85:e6:03:87: 73:9a:68:f2:17:3c:20:37:33:05:cf:be:56:58:3d:1e:db:7e: e4:d5:83:df:4a:35:33:93:12:21:94:89:b4:8d:87:27:72:23: c4:da:0d:f3:88:72:e0:02:10:b6:66:c2:f1:11:7f:14:be:c6: 31:1b:c0:21:7d:11:7e:67:7f:c6:6d:34:c7:21:bc:84:5d:56: 5e:47:a7:8b:d3:db:68:e3:87:d0:89:08:22:b2:4c:2f:53:55: 9e:29:49:91:8d:05:5c:f0:6d:19:f5:9e:ea:ce:61:f4:d5:c3: 28:46:b5:dc:e3:4d:85:5a:bf:f3:fc:b4:30:3e:62:f8:9c:86: 68:61:55:d0:43:05:62:03:43:83:8a:60:6d:e4:12:ef:9f:75: 80:36:0a:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEr2h0GNi/FFPWBO30hOnOVyEJ88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNDA5MjcxNTU3NTJaFw0yNDA5MjgxNjU4NTJaMDMxMTAvBgNV BAMTKEE5Q0RGMjhDOEYwM0Y0RjIwMzY0Rjg0MDBCM0YxM0EzMTRGMjkwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqsY2p3hrwxtyJsnW1nrRED9FT io26Yj4wmTJF/YX43rjiF3Gsb9Iax8z7rq2PznvfcAIa3awVJlVgr256eXdCUAkw sQ53EqL/PW0UIuxF1P0mWUTcN6uGesb/m2zqTFCRh5LidBWoR/SUrTRy3ljhoJKm iK0H4irerkjJV1MoZyg6N03Ow7rKhsU+r1Ps8BuVape/CtoTLuaggIgHP9kdcoDw LFs7AIamoQ0VFUbvC4iJjE57jZ2FtYA48ULrdzFKw8J9iIMYhLwH8Ax39KJtZ23t DjGvBwkMoQsCDB8iBQXkKrIQ6sXlnCJD7jIVzLSBIYAiu1E/fHSAqwcg18fVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqc3yjI8D9PIDZPhACz8ToxTykPYwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZRvCso235k5PTSInyNS/uLXHuMtFm6m4Nu6sWQmzNBcCI5+8uI6RHXg0/CYA s9ah0pE5/E6INZa7UGRrvUiJ5tLu1sIocaQa3RDqHwSeHjPtKVGKdHwKJak5y/xs jDSbPtm5vdswgiSF5gOHc5po8hc8IDczBc++Vlg9Htt+5NWD30o1M5MSIZSJtI2H J3IjxNoN84hy4AIQtmbC8RF/FL7GMRvAIX0Rfmd/xm00xyG8hF1WXkeni9PbaOOH 0IkIIrJML1NVnilJkY0FXPBtGfWe6s5h9NXDKEa13ONNhVq/8/y0MD5i+JyGaGFV 0EMFYgNDg4pgbeQS7591gDYKOA== -----END CERTIFICATE-----Generated at Fri Sep 27 18:56:25 2024 by rpki-client on console-ams.rpki-client.org