$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.mft File: 231C71CF45E50AD3D88C21DB5CDF14086564AB31.mft (raw, json) Hash identifier: hpodbqEAJcAajXN8MCteKfxyDbjD46Z8+G6BAGG1jZY= Subject key identifier: 88:01:38:9A:D0:48:F4:A4:55:23:A9:E6:29:E7:A2:6B:EF:95:5B:28 Authority key identifier: 23:1C:71:CF:45:E5:0A:D3:D8:8C:21:DB:5C:DF:14:08:65:64:AB:31 Certificate issuer: /CN=231C71CF45E50AD3D88C21DB5CDF14086564AB31 Certificate serial: 0FB511EC791188E6E4F0474CD97205A9B169C7B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.mft Manifest number: 1C Signing time: Sun 30 Jun 2024 07:25:06 +0000 Manifest this update: Sun 30 Jun 2024 07:20:06 +0000 Manifest next update: Mon 01 Jul 2024 10:21:06 +0000 Files and hashes: 1: 231C71CF45E50AD3D88C21DB5CDF14086564AB31.crl (hash: 7ZsLLsk/o0/DgOQrqLlK7Vt1r1menL56LN3Pm9qCUGw=) 2: 323830343a323739343a3a2f33322d3336203d3e20323633393131.roa (hash: I+J5LhMJQsezDzRmALs1rBrRTlqXAUgx6p0Ue4AmKuQ=) 3: 3133382e3230342e3137322e302f32322d3234203d3e20323633393131.roa (hash: g3LD3780LnO1+vgEZXoWIb8lGW2oNgyGq4fXSz+BgCI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Jul 2024 09:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b5:11:ec:79:11:88:e6:e4:f0:47:4c:d9:72:05:a9:b1:69:c7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=231C71CF45E50AD3D88C21DB5CDF14086564AB31 Validity Not Before: Jun 30 07:20:06 2024 GMT Not After : Jul 1 10:21:06 2024 GMT Subject: CN=8801389AD048F4A45523A9E629E7A26BEF955B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:d9:16:3b:9b:65:45:de:19:a4:7a:76:60: af:0c:f7:43:11:24:cb:9d:dc:f3:5d:06:7d:60:11: d2:38:7d:ca:32:98:31:85:e6:c6:c3:88:32:b0:d0: 8b:d8:47:81:bb:89:65:9e:f6:46:80:20:a6:79:53: c0:90:63:c0:e1:d5:2d:71:c9:a8:5b:8a:6f:04:4d: b9:44:ab:09:46:be:3c:3d:64:88:60:f4:73:33:db: bc:ee:52:79:8c:20:44:70:99:65:92:92:6e:1b:e9: 65:e3:4a:de:55:20:51:9e:4c:04:17:72:0d:68:73: ce:21:7a:04:7f:3e:bc:0c:e8:1f:e9:49:22:06:e2: 60:f0:58:04:3c:5a:c9:79:c0:50:46:56:91:ec:b8: d1:20:dd:75:c5:f3:0e:7f:79:b8:ce:1c:d3:b0:63: 0a:33:7a:5f:b2:48:e5:a7:70:bf:b8:e9:e9:fa:b2: fb:e8:d4:dd:6d:37:df:a6:02:e5:de:74:c5:2f:83: a7:55:fb:fd:40:58:2e:96:32:ed:a8:d9:db:9f:18: 88:10:0c:7c:75:fb:e2:ed:73:b3:c7:b6:5e:69:8a: 64:0e:8a:de:f1:21:00:f9:e6:5a:db:13:bf:3e:45: e6:d8:88:8d:83:70:0c:fe:ec:f0:36:b5:38:ad:3b: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:01:38:9A:D0:48:F4:A4:55:23:A9:E6:29:E7:A2:6B:EF:95:5B:28 X509v3 Authority Key Identifier: keyid:23:1C:71:CF:45:E5:0A:D3:D8:8C:21:DB:5C:DF:14:08:65:64:AB:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/1/231C71CF45E50AD3D88C21DB5CDF14086564AB31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b0:0f:c3:cb:ed:8f:04:21:10:c5:86:49:cc:60:67:57:32: d9:2d:87:36:c6:4b:ba:94:34:a3:73:56:bb:30:77:7a:38:b1: 5d:a1:29:28:1b:02:dc:43:e6:21:93:d2:8d:b8:49:cd:0b:23: 9a:b7:fd:c6:0a:a9:b0:c2:9f:1e:ba:52:d6:f1:ad:76:23:64: 9d:2b:2a:2f:25:ca:bc:60:9c:d6:8b:64:a6:e5:13:88:17:d4: 24:aa:3a:6b:fc:6e:35:10:82:2d:de:f4:26:c7:78:98:8f:18: 49:a4:80:ed:22:44:67:e3:1d:a9:93:93:cd:d5:25:32:e9:f5: 0d:a3:49:df:ed:89:01:ff:6a:6f:6d:f5:4d:86:e8:bb:3e:c5: 15:65:3c:04:1f:bb:7a:77:37:c5:7f:02:33:41:29:19:79:04: 81:6e:69:5d:df:7d:ac:3d:cb:e4:08:19:a0:d8:02:3b:3e:53: b4:ec:a7:76:d0:a6:cb:4c:03:2e:72:06:52:3b:09:36:cd:ab: ee:ff:3f:22:2f:9a:17:56:53:23:91:2d:4d:ba:21:08:9a:a3: 95:ca:28:08:b4:ff:5a:76:9f:65:5d:4c:05:f2:04:86:b8:7f: b8:bb:3a:94:c5:1f:77:45:6b:7c:a4:9c:0c:bf:3f:1e:3f:f3: 60:86:79:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD7UR7HkRiObk8EdM2XIFqbFpx7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxQzcxQ0Y0NUU1MEFEM0Q4OEMyMURCNUNERjE0MDg2 NTY0QUIzMTAeFw0yNDA2MzAwNzIwMDZaFw0yNDA3MDExMDIxMDZaMDMxMTAvBgNV BAMTKDg4MDEzODlBRDA0OEY0QTQ1NTIzQTlFNjI5RTdBMjZCRUY5NTVCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPNkWO5tlRd4ZpHp2YK8M90MR JMud3PNdBn1gEdI4fcoymDGF5sbDiDKw0IvYR4G7iWWe9kaAIKZ5U8CQY8Dh1S1x yahbim8ETblEqwlGvjw9ZIhg9HMz27zuUnmMIERwmWWSkm4b6WXjSt5VIFGeTAQX cg1oc84hegR/PrwM6B/pSSIG4mDwWAQ8Wsl5wFBGVpHsuNEg3XXF8w5/ebjOHNOw Ywozel+ySOWncL+46en6svvo1N1tN9+mAuXedMUvg6dV+/1AWC6WMu2o2dufGIgQ DHx1++Ltc7PHtl5pimQOit7xIQD55lrbE78+RebYiI2DcAz+7PA2tTitO8K9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiAE4mtBI9KRVI6nmKeeia++VWygwHwYDVR0j BBgwFoAUIxxxz0XlCtPYjCHbXN8UCGVkqzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMS8yMzFDNzFDRjQ1RTUwQUQzRDg4QzIxREI1Q0RGMTQwODY1NjRBQjMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzMUM3MUNGNDVFNTBBRDNE ODhDMjFEQjVDREYxNDA4NjU2NEFCMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNTclgvMS8y MzFDNzFDRjQ1RTUwQUQzRDg4QzIxREI1Q0RGMTQwODY1NjRBQjMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7APw8vtjwQhEMWGScxgZ1cy2S2HNsZLupQ0o3NWuzB3ejixXaEpKBsC3EPm IZPSjbhJzQsjmrf9xgqpsMKfHrpS1vGtdiNknSsqLyXKvGCc1otkpuUTiBfUJKo6 a/xuNRCCLd70Jsd4mI8YSaSA7SJEZ+MdqZOTzdUlMun1DaNJ3+2JAf9qb231TYbo uz7FFWU8BB+7enc3xX8CM0EpGXkEgW5pXd99rD3L5AgZoNgCOz5TtOyndtCmy0wD LnIGUjsJNs2r7v8/Ii+aF1ZTI5EtTbohCJqjlcooCLT/WnafZV1MBfIEhrh/uLs6 lMUfd0VrfKScDL8/Hj/zYIZ5Eg== -----END CERTIFICATE-----Generated at Sun Jun 30 11:03:26 2024 by rpki-client on console-ams.rpki-client.org