$ rpki-client -vvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft File: 4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft (raw, json) Hash identifier: 5ldKccq/ncLredNFWgTnegLd6iEYg0P1PkJK2jm5kbw= Subject key identifier: DF:93:66:20:C0:7B:E0:46:55:03:66:87:1E:06:AE:79:1A:CF:3E:39 Authority key identifier: 4D:A6:9F:03:DA:36:D1:79:DE:66:AE:4E:0D:1F:75:C4:B6:65:D1:0E Certificate issuer: /CN=4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E Certificate serial: 3EAD97A4EC402960AD6D93718EE8FA46E1DF4D2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft Manifest number: EE Signing time: Sat 28 Sep 2024 16:03:40 +0000 Manifest this update: Sat 28 Sep 2024 15:58:40 +0000 Manifest next update: Sun 29 Sep 2024 17:23:40 +0000 Files and hashes: 1: 3137302e3233332e35362e302f32322d3234203d3e20323635303837.roa (hash: 0ySGQGnXkUupusxgsXssN6Vx2wm8bgYnjqdPeFGnBXY=) 2: 323830343a333239383a3a2f33322d3438203d3e20323635303837.roa (hash: NyIoaSoW/p1okrc7w9MFB7BYLXeAHs8BLtwzG69EZy8=) 3: 4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.crl (hash: 1W319XLfBVmZogfNP7SaLw4He1H0gwBHYD66zSx3DDM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.crl rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 17:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ad:97:a4:ec:40:29:60:ad:6d:93:71:8e:e8:fa:46:e1:df:4d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E Validity Not Before: Sep 28 15:58:40 2024 GMT Not After : Sep 29 17:23:40 2024 GMT Subject: CN=DF936620C07BE046550366871E06AE791ACF3E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:2f:25:af:8c:61:83:59:9f:55:e4:f8:48: 36:37:ac:56:03:e9:b2:d2:ca:bc:bd:b1:7c:c2:12: 68:6e:d8:d6:8f:63:45:39:40:c4:56:19:0e:4a:9b: 3e:a3:b2:f8:64:42:a7:32:53:28:0c:9b:fd:c1:68: ac:6c:53:bd:5c:68:b1:fa:6c:d9:32:ee:f3:82:54: 91:9e:77:dc:97:dc:e1:72:01:2d:04:36:c6:7d:0e: cc:fe:66:0b:39:b7:75:9e:dd:19:c9:92:a2:bb:05: 25:31:62:52:45:5f:00:68:bb:cd:81:0e:49:fb:51: f7:0e:62:d6:5a:e1:59:1d:05:1a:98:e8:40:5b:1b: 66:7b:76:2f:c6:57:ce:e1:74:ff:b1:69:2f:30:9f: da:81:10:63:3f:aa:66:a9:f6:d0:a4:b8:5e:39:1e: ad:aa:ea:d1:32:5c:a7:5a:f3:7c:d7:dd:7f:c8:06: 2f:aa:b3:41:38:b3:a1:fd:14:9c:a0:0c:fb:53:59: 4c:d7:19:2b:c8:09:10:8d:52:e1:29:94:4a:0e:5f: ce:0a:75:93:3c:5f:23:b1:b3:1f:4d:cf:c6:c4:4d: 71:6b:0c:92:46:f3:38:cd:5e:69:65:4c:09:44:d7: a8:03:8e:e0:ee:45:30:c6:41:da:46:4c:88:7b:72: 1c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:93:66:20:C0:7B:E0:46:55:03:66:87:1E:06:AE:79:1A:CF:3E:39 X509v3 Authority Key Identifier: keyid:4D:A6:9F:03:DA:36:D1:79:DE:66:AE:4E:0D:1F:75:C4:B6:65:D1:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:43:9e:68:b2:db:d3:ea:e9:79:70:d8:5e:04:16:d1:ca:1b: cb:30:0f:ee:9e:42:49:37:c0:df:cb:4a:83:72:02:7a:84:be: ec:8a:1d:ce:b5:e7:fd:b5:11:47:a5:6b:8b:9f:a6:79:67:2f: ea:3a:2c:0c:ce:54:7a:e4:1d:15:e2:43:10:e5:02:a2:d5:91: 50:b8:ae:25:72:ec:e9:a0:b6:76:52:3d:ac:ed:83:6b:b0:3d: 56:91:f2:30:00:58:0d:6f:81:93:2c:e5:63:d0:b8:b3:74:88: 48:df:ee:5c:ef:9c:f4:ca:ba:54:88:ac:68:06:f2:43:45:f8: c7:cb:5d:25:2c:93:05:25:34:55:85:54:b8:6f:a8:4a:3f:28: 49:4b:92:d5:0d:0f:c1:45:e4:95:96:36:3a:59:7a:74:c0:75: f1:d3:8f:3c:aa:67:bf:4b:75:72:28:82:f5:75:ea:54:5a:7f: d4:24:4c:5c:32:f4:e3:e7:0b:f3:36:68:c6:06:46:10:41:20: d1:99:b4:43:93:91:e0:c9:dd:3b:99:79:ed:82:44:f5:3e:68: ff:5c:89:e7:4d:bb:67:f2:6f:ac:3c:aa:ef:53:eb:f4:92:07: a8:29:60:b9:15:2b:b7:02:00:bb:06:72:21:9e:82:97:e9:96: eb:56:bf:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPq2XpOxAKWCtbZNxjuj6RuHfTS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBNjlGMDNEQTM2RDE3OURFNjZBRTRFMEQxRjc1QzRC NjY1RDEwRTAeFw0yNDA5MjgxNTU4NDBaFw0yNDA5MjkxNzIzNDBaMDMxMTAvBgNV BAMTKERGOTM2NjIwQzA3QkUwNDY1NTAzNjY4NzFFMDZBRTc5MUFDRjNFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZi8lr4xhg1mfVeT4SDY3rFYD 6bLSyry9sXzCEmhu2NaPY0U5QMRWGQ5Kmz6jsvhkQqcyUygMm/3BaKxsU71caLH6 bNky7vOCVJGed9yX3OFyAS0ENsZ9Dsz+Zgs5t3We3RnJkqK7BSUxYlJFXwBou82B Dkn7UfcOYtZa4VkdBRqY6EBbG2Z7di/GV87hdP+xaS8wn9qBEGM/qmap9tCkuF45 Hq2q6tEyXKda83zX3X/IBi+qs0E4s6H9FJygDPtTWUzXGSvICRCNUuEplEoOX84K dZM8XyOxsx9Nz8bETXFrDJJG8zjNXmllTAlE16gDjuDuRTDGQdpGTIh7chxjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU35NmIMB74EZVA2aHHgaueRrPPjkwHwYDVR0j BBgwFoAUTaafA9o20XneZq5ODR91xLZl0Q4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JHaWFtYWNGV0V5VzlaUFM3U1NxeEhGQVlIdHZWaXhGMVhlUE1vZDFx dGkvMS80REE2OUYwM0RBMzZEMTc5REU2NkFFNEUwRDFGNzVDNEI2NjVEMTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREQTY5RjAzREEzNkQxNzlE RTY2QUU0RTBEMUY3NUM0QjY2NUQxMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JHaWFtYWNGV0V5VzlaUFM3U1NxeEhGQVlIdHZWaXhGMVhlUE1vZDFxdGkvMS80 REE2OUYwM0RBMzZEMTc5REU2NkFFNEUwRDFGNzVDNEI2NjVEMTBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPkOeaLLb0+rpeXDYXgQW0cobyzAP7p5CSTfA38tKg3ICeoS+7IodzrXn/bUR R6Vri5+meWcv6josDM5UeuQdFeJDEOUCotWRULiuJXLs6aC2dlI9rO2Da7A9VpHy MABYDW+BkyzlY9C4s3SISN/uXO+c9Mq6VIisaAbyQ0X4x8tdJSyTBSU0VYVUuG+o Sj8oSUuS1Q0PwUXklZY2Oll6dMB18dOPPKpnv0t1ciiC9XXqVFp/1CRMXDL04+cL 8zZoxgZGEEEg0Zm0Q5OR4MndO5l57YJE9T5o/1yJ5027Z/JvrDyq71Pr9JIHqClg uRUrtwIAuwZyIZ6Cl+mW61a/Kw== -----END CERTIFICATE-----Generated at Sat Sep 28 19:13:47 2024 by rpki-client on console-ams.rpki-client.org