$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft (raw, json) Hash identifier: jmQErufXErCjj9Nk7JNtgNKpjG6AQzAbs0klepeTRls= Subject key identifier: F0:F7:2C:11:64:C0:6C:B5:19:45:D2:2B:B4:6A:6D:45:85:F0:19:CA Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Certificate issuer: /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Certificate serial: 467086CC5320F3FA19AEECB376D2FDDD298FCE4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft Manifest number: 0136 Signing time: Fri 22 Nov 2024 12:10:00 +0000 Manifest this update: Fri 22 Nov 2024 12:05:00 +0000 Manifest next update: Sat 23 Nov 2024 15:35:00 +0000 Files and hashes: 1: 3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (hash: QaVVSHBC5t1D47P75pLvrr35nCZowBgwjFbutlYXGUg=) 2: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (hash: BiL8oUgvucHA0y1W6seoe7Un1Nj33ESDTNcJy8kJKu4=) 3: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl (hash: d95h3AcnWQOpA77HumvyLKsQMnnZNU02ne+jubxQMkc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 15:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:70:86:cc:53:20:f3:fa:19:ae:ec:b3:76:d2:fd:dd:29:8f:ce:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Validity Not Before: Nov 22 12:05:00 2024 GMT Not After : Nov 23 15:35:00 2024 GMT Subject: CN=F0F72C1164C06CB51945D22BB46A6D4585F019CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a8:dc:3e:54:74:65:d9:23:a4:8c:49:b1:b1: 55:85:a3:5c:8f:72:4e:34:f3:f2:b4:29:5e:e9:a6: 2e:7c:72:1b:4d:9b:b8:b7:d6:97:21:e7:20:b1:bf: 69:60:f4:6b:8b:1f:cc:76:91:ad:b3:44:1e:96:53: 56:b8:0e:e8:73:7a:89:2b:b9:71:16:19:d3:d6:ee: 05:a9:c3:ef:c7:a5:c1:c8:0a:5d:ce:21:06:1b:37: 9f:ac:60:e4:1a:51:01:b2:b1:18:9d:70:b3:1e:36: 6e:1f:67:99:37:0c:f3:5f:6e:89:45:f8:af:98:54: 1b:9b:e5:32:1f:75:4d:e9:5e:69:49:1e:65:cc:44: 93:97:4a:70:78:1f:f7:44:91:42:d0:6f:70:c5:a6: 09:80:89:ca:78:8f:8a:70:3d:21:6b:f0:34:80:24: 7a:d1:62:46:24:4b:02:89:06:07:46:40:dd:51:18: 10:cd:33:05:db:f2:1a:5b:f0:89:67:fc:65:eb:64: 91:91:39:7d:ff:87:8b:84:34:84:2c:7b:ff:12:fc: fd:66:a6:93:2a:43:b4:0f:d4:85:78:bf:15:53:7c: 57:ef:71:b3:13:35:21:79:ff:18:5e:67:1a:d4:d6: f8:31:da:43:b3:74:9b:36:c9:ad:b5:c3:21:db:7f: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F7:2C:11:64:C0:6C:B5:19:45:D2:2B:B4:6A:6D:45:85:F0:19:CA X509v3 Authority Key Identifier: keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:80:4d:79:07:94:15:37:e3:3a:8e:cc:d1:16:ec:36:e4:88: 66:3b:c8:94:2a:ec:8d:69:64:50:f1:f3:3e:df:9f:40:90:d8: ce:f9:2c:6f:0a:b9:20:30:08:b4:a4:01:d9:2d:f6:05:60:fb: 3c:75:99:d1:41:96:64:d4:3d:b9:fe:f4:96:95:fa:68:60:39: 7c:f3:ef:da:dc:11:13:c5:1e:66:b9:13:21:ab:fa:be:34:6e: 22:0a:92:7c:16:48:7f:f9:5b:1a:32:0a:36:d9:db:be:64:e4: c5:f8:c4:8d:9c:26:ab:14:6d:c7:3c:63:1b:03:78:f1:50:65: 57:da:6c:b5:07:8c:44:32:04:f2:a4:22:b0:f5:2c:5a:50:ab: 75:b1:1a:6f:33:37:a0:58:9d:dc:ff:b3:d0:d0:cc:2d:8c:61: c2:ca:e4:19:c5:ba:3c:0f:90:2a:09:a5:d4:a0:cc:9d:27:77: 54:5e:5a:19:a2:f4:7b:25:d5:9b:76:09:07:ea:9e:35:86:56: 50:2c:35:bc:99:c9:96:12:c7:c3:95:a4:8c:06:20:80:7f:af: 24:13:be:67:78:f6:64:a1:10:73:67:fe:dc:37:f2:28:d2:ee: eb:7a:3b:79:3a:7d:a5:5d:e5:a1:63:48:90:ab:74:17:4c:ff: 78:a2:7d:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURnCGzFMg8/oZruyzdtL93SmPzkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEN0ExQURENERFQkQyM0IxQzVGQUQ1RTYwQkMyNjlE MkFEMTAwRjAeFw0yNDExMjIxMjA1MDBaFw0yNDExMjMxNTM1MDBaMDMxMTAvBgNV BAMTKEYwRjcyQzExNjRDMDZDQjUxOTQ1RDIyQkI0NkE2RDQ1ODVGMDE5Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqNw+VHRl2SOkjEmxsVWFo1yP ck408/K0KV7ppi58chtNm7i31pch5yCxv2lg9GuLH8x2ka2zRB6WU1a4Duhzeokr uXEWGdPW7gWpw+/HpcHICl3OIQYbN5+sYOQaUQGysRidcLMeNm4fZ5k3DPNfbolF +K+YVBub5TIfdU3pXmlJHmXMRJOXSnB4H/dEkULQb3DFpgmAicp4j4pwPSFr8DSA JHrRYkYkSwKJBgdGQN1RGBDNMwXb8hpb8Iln/GXrZJGROX3/h4uENIQse/8S/P1m ppMqQ7QP1IV4vxVTfFfvcbMTNSF5/xheZxrU1vgx2kOzdJs2ya21wyHbf4ONAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8PcsEWTAbLUZRdIrtGptRYXwGcowHwYDVR0j BBgwFoAU3NehrdTevSOxxfrV5gvCadKtEA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu dlovMS9EQ0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRDdBMUFERDRERUJEMjNC MUM1RkFENUU2MEJDMjY5RDJBRDEwMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9E Q0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnoBNeQeUFTfjOo7M0RbsNuSIZjvIlCrsjWlkUPHzPt+fQJDYzvksbwq5IDAI tKQB2S32BWD7PHWZ0UGWZNQ9uf70lpX6aGA5fPPv2twRE8UeZrkTIav6vjRuIgqS fBZIf/lbGjIKNtnbvmTkxfjEjZwmqxRtxzxjGwN48VBlV9pstQeMRDIE8qQisPUs WlCrdbEabzM3oFid3P+z0NDMLYxhwsrkGcW6PA+QKgml1KDMnSd3VF5aGaL0eyXV m3YJB+qeNYZWUCw1vJnJlhLHw5WkjAYggH+vJBO+Z3j2ZKEQc2f+3DfyKNLu63o7 eTp9pV3loWNIkKt0F0z/eKJ9sg== -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:34 2024 by rpki-client on console-ams.rpki-client.org