$ rpki-client -vvf rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft File: 1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft (raw, json) Hash identifier: XL+GH6B3Byd2DuWfU/k5ABzyZJVTPdNzDZAWdgog32g= Subject key identifier: 16:ED:47:87:8F:C1:6B:28:34:ED:98:03:B6:09:C8:D2:9D:CD:AE:46 Authority key identifier: 12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE Certificate issuer: /CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE Certificate serial: 7C44311438A1CEDFDB7B8CFB7296694EDB02D503 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft Manifest number: 2F Signing time: Tue 26 Nov 2024 07:00:20 +0000 Manifest this update: Tue 26 Nov 2024 06:55:20 +0000 Manifest next update: Wed 27 Nov 2024 07:19:20 +0000 Files and hashes: 1: 3137372e32332e32302e302f32322d3332203d3e203532373537.roa (hash: BL/Itfvnx45bbm6nQRJXFTZMwuepTKIU9PAmM+XtjvI=) 2: 1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl (hash: QOzqrxLUJrRrO+XAtcSzJBO8l8jC15j79IR6VFKNWaw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 07:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:44:31:14:38:a1:ce:df:db:7b:8c:fb:72:96:69:4e:db:02:d5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1254D60C0E743AE17BC43FD38413C27FDD4AE0CE Validity Not Before: Nov 26 06:55:20 2024 GMT Not After : Nov 27 07:19:20 2024 GMT Subject: CN=16ED47878FC16B2834ED9803B609C8D29DCDAE46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7d:5e:27:a8:74:2f:e7:b4:3c:b6:0f:f1:8b: 10:56:6b:cf:97:78:ba:80:69:a7:07:4e:e9:47:b0: 77:cd:50:ba:25:a1:44:69:c5:7f:06:a1:07:d9:c2: 6a:7b:a1:84:34:b5:54:06:b6:98:17:05:b5:33:d9: 36:f3:0e:c7:93:5f:53:25:59:a1:bf:17:21:49:bb: 30:85:43:35:53:cd:74:d7:b9:10:66:75:d1:29:7f: 62:48:7d:f0:e0:6a:a5:a4:41:b0:b2:a2:2f:29:bf: 66:d8:6f:6e:16:09:b8:c5:e3:a2:1e:4c:71:98:a9: 82:4e:6a:89:fb:97:f9:30:f5:15:46:1c:88:df:ea: d5:10:e7:b7:19:06:c4:9e:5a:92:91:1f:de:ed:50: f0:4a:46:ae:6e:b3:7d:d4:54:53:39:53:ff:dd:ed: 60:3c:ce:5d:0b:04:e5:7c:d8:81:00:69:40:b8:d1: f7:f7:f7:61:24:29:b5:c3:f7:25:af:10:b4:54:35: ca:c6:05:f6:68:27:8e:d4:55:a0:b1:0f:4b:54:28: 77:b0:7c:04:c9:e3:03:84:b1:c3:ee:20:27:08:88: bc:91:91:bb:71:e4:44:0f:de:78:22:86:47:90:15: e8:82:5c:24:9e:20:50:a2:4b:03:0f:20:84:92:b7: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:ED:47:87:8F:C1:6B:28:34:ED:98:03:B6:09:C8:D2:9D:CD:AE:46 X509v3 Authority Key Identifier: keyid:12:54:D6:0C:0E:74:3A:E1:7B:C4:3F:D3:84:13:C2:7F:DD:4A:E0:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wkwS4E4Jq9dNATK1nZqKoyP7kroWNJTEpBaW6mJQwMF/0/1254D60C0E743AE17BC43FD38413C27FDD4AE0CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b7:19:0e:cb:87:a8:d6:8b:29:c8:16:ce:28:0d:d2:aa:4a: 8a:af:d1:73:8c:15:17:16:7b:29:49:cc:9e:f2:73:82:0b:df: 46:f6:bf:49:af:13:1c:10:fc:09:de:a0:53:6b:47:71:cc:a4: c0:78:75:47:e1:cf:0d:d6:bc:39:4b:78:38:39:74:25:04:a3: 85:fb:b5:61:ee:89:2c:75:55:c3:16:f4:8a:1c:36:44:93:7b: 0c:76:0f:69:62:02:0d:91:e8:37:1a:a1:2f:d8:7a:9e:a8:ba: 06:90:c8:11:10:c0:f2:ad:ce:61:70:81:10:bf:c1:af:e0:db: 9f:ba:af:e3:b1:16:3d:79:99:b7:28:80:3e:e1:e5:a8:71:2a: 29:00:42:25:26:19:f7:33:9b:8e:36:25:5a:fa:5b:00:20:2f: 9d:4e:d7:ce:49:20:dc:48:cf:d7:37:90:af:41:bc:45:f8:b6: f4:04:52:c3:17:87:db:33:38:0b:14:d2:8d:0b:2c:24:14:4e: 67:58:c9:f4:96:77:1a:be:4e:68:d1:b8:3a:d7:6a:da:40:ea: 65:ce:cd:3f:2e:bd:5b:76:19:55:f7:f0:a6:a4:2c:be:d3:e7: 0b:4b:e6:96:2f:71:0b:0f:b9:c6:c6:fd:5a:bb:45:3f:05:06: c7:eb:32:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfEQxFDihzt/be4z7cpZpTtsC1QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1NEQ2MEMwRTc0M0FFMTdCQzQzRkQzODQxM0MyN0ZE RDRBRTBDRTAeFw0yNDExMjYwNjU1MjBaFw0yNDExMjcwNzE5MjBaMDMxMTAvBgNV BAMTKDE2RUQ0Nzg3OEZDMTZCMjgzNEVEOTgwM0I2MDlDOEQyOURDREFFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWfV4nqHQv57Q8tg/xixBWa8+X eLqAaacHTulHsHfNULoloURpxX8GoQfZwmp7oYQ0tVQGtpgXBbUz2TbzDseTX1Ml WaG/FyFJuzCFQzVTzXTXuRBmddEpf2JIffDgaqWkQbCyoi8pv2bYb24WCbjF46Ie THGYqYJOaon7l/kw9RVGHIjf6tUQ57cZBsSeWpKRH97tUPBKRq5us33UVFM5U//d 7WA8zl0LBOV82IEAaUC40ff392EkKbXD9yWvELRUNcrGBfZoJ47UVaCxD0tUKHew fATJ4wOEscPuICcIiLyRkbtx5EQP3ngihkeQFeiCXCSeIFCiSwMPIISStyh/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFu1Hh4/Bayg07ZgDtgnI0p3NrkYwHwYDVR0j BBgwFoAUElTWDA50OuF7xD/ThBPCf91K4M4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3drd1M0RTRKcTlkTkFUSzFuWnFLb3lQN2tyb1dOSlRFcEJhVzZtSlF3 TUYvMC8xMjU0RDYwQzBFNzQzQUUxN0JDNDNGRDM4NDEzQzI3RkRENEFFMENFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyNTRENjBDMEU3NDNBRTE3 QkM0M0ZEMzg0MTNDMjdGREQ0QUUwQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3drd1M0RTRKcTlkTkFUSzFuWnFLb3lQN2tyb1dOSlRFcEJhVzZtSlF3TUYvMC8x MjU0RDYwQzBFNzQzQUUxN0JDNDNGRDM4NDEzQzI3RkRENEFFMENFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe7cZDsuHqNaLKcgWzigN0qpKiq/Rc4wVFxZ7KUnMnvJzggvfRva/Sa8THBD8 Cd6gU2tHccykwHh1R+HPDda8OUt4ODl0JQSjhfu1Ye6JLHVVwxb0ihw2RJN7DHYP aWICDZHoNxqhL9h6nqi6BpDIERDA8q3OYXCBEL/Br+Dbn7qv47EWPXmZtyiAPuHl qHEqKQBCJSYZ9zObjjYlWvpbACAvnU7Xzkkg3EjP1zeQr0G8Rfi29ARSwxeH2zM4 CxTSjQssJBROZ1jJ9JZ3Gr5OaNG4Otdq2kDqZc7NPy69W3YZVffwpqQsvtPnC0vm li9xCw+5xsb9WrtFPwUGx+sy1A== -----END CERTIFICATE-----Generated at Tue Nov 26 08:30:08 2024 by rpki-client on console-ams.rpki-client.org