$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.mft File: C14FC28CF60C23B61EE423210818638E76BDD5F0.mft (raw, json) Hash identifier: 5Aq+TNu/zLPUGBVifhkOtm4wleKP6pusRznvUduxxN0= Subject key identifier: 9A:CB:0A:2C:DD:04:3B:3B:D9:3D:C0:A3:1E:33:50:37:59:49:0B:EB Authority key identifier: C1:4F:C2:8C:F6:0C:23:B6:1E:E4:23:21:08:18:63:8E:76:BD:D5:F0 Certificate issuer: /CN=C14FC28CF60C23B61EE423210818638E76BDD5F0 Certificate serial: 13633323CA36600CF66AA369BAE4A7C17D708A7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C14FC28CF60C23B61EE423210818638E76BDD5F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.mft Manifest number: A2 Signing time: Mon 25 Nov 2024 09:00:09 +0000 Manifest this update: Mon 25 Nov 2024 08:55:09 +0000 Manifest next update: Tue 26 Nov 2024 12:04:09 +0000 Files and hashes: 1: 3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (hash: gmeem17PflRskMOZkMQJ7OwVCkuKMs/Ti9u21n67GF8=) 2: C14FC28CF60C23B61EE423210818638E76BDD5F0.crl (hash: S7eCMvWKHZtaINQxNhgJpbAPjmVpCci5oGr4grqNToQ=) 3: 3137302e38322e3139322e302f32322d3234203d3e20323636343436.roa (hash: mowIPFRKLt8xgaBPhCaPtYcqMn2BgD9gt18R+KhS7CA=) 4: 323830343a333766343a3a2f33322d313238203d3e20323636343436.roa (hash: 99LLG/Gq0f3jQL7pZpDpreMqTMsxgKAPbK0r5zRN89M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.crl rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C14FC28CF60C23B61EE423210818638E76BDD5F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 09:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:63:33:23:ca:36:60:0c:f6:6a:a3:69:ba:e4:a7:c1:7d:70:8a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14FC28CF60C23B61EE423210818638E76BDD5F0 Validity Not Before: Nov 25 08:55:09 2024 GMT Not After : Nov 26 12:04:09 2024 GMT Subject: CN=9ACB0A2CDD043B3BD93DC0A31E33503759490BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:3d:34:ac:a6:26:64:e7:93:b0:5d:ee:29: 0d:28:ed:28:0d:fa:53:b0:c8:9e:19:22:0c:81:a2: 0a:8d:96:fb:1e:0f:bf:96:a7:c4:4a:7b:c6:05:4a: 42:9d:3a:1b:15:fa:f3:16:b5:0d:1b:10:5e:b9:91: 78:1c:0b:96:53:7e:a4:37:03:e3:b1:da:6f:3b:da: bd:31:79:72:42:6b:ac:d1:b1:36:28:86:76:4b:66: fa:d6:3d:65:41:44:e2:02:ba:27:bb:3c:d1:c9:6c: d1:ba:a4:93:41:23:24:90:3d:3a:1c:fb:16:d9:5a: a9:cc:ab:1b:60:af:93:c5:5e:af:5f:36:03:90:9a: eb:c5:53:c9:e1:2e:d1:1f:73:c1:9d:d5:7d:d0:f5: 6e:37:dd:79:3c:25:f5:cf:ac:0f:71:b8:bb:1b:aa: 60:8d:01:67:1f:0b:b4:3b:33:9b:17:ef:6e:14:09: e5:27:af:d6:be:d8:41:c5:a6:ed:5b:f1:60:95:88: 48:19:e8:c5:54:1f:ea:6c:6d:e0:92:95:25:5b:91: 3e:e5:55:b3:47:bf:0e:e7:23:89:95:d3:46:9b:ef: 5d:57:35:d3:94:70:0c:c2:e2:f3:0d:34:35:01:d3: d5:e9:db:da:99:a5:ae:25:92:9e:a3:61:78:a1:68: 17:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CB:0A:2C:DD:04:3B:3B:D9:3D:C0:A3:1E:33:50:37:59:49:0B:EB X509v3 Authority Key Identifier: keyid:C1:4F:C2:8C:F6:0C:23:B6:1E:E4:23:21:08:18:63:8E:76:BD:D5:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C14FC28CF60C23B61EE423210818638E76BDD5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/C14FC28CF60C23B61EE423210818638E76BDD5F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f0:47:a9:6c:53:26:5f:80:44:74:f8:8a:5a:11:da:fd:8d: 54:8f:8c:80:a6:bb:0f:63:46:f5:51:a9:0b:db:34:44:ad:51: 04:12:df:74:a8:3c:2c:60:25:b5:8d:c7:6a:56:b0:c6:83:8e: 9a:f3:03:a6:68:e9:b7:39:bf:31:f3:84:2e:c6:69:e9:f2:fb: e9:94:56:21:de:05:a8:15:cb:8e:23:dc:e8:f9:ed:d9:79:26: e3:98:c8:a2:e3:6a:67:02:77:7b:04:f3:ac:61:b1:37:4f:29: ee:7c:0d:fd:81:11:00:b5:cd:d8:f2:9e:73:52:15:0f:a3:69: 8c:eb:a4:bb:c3:b4:33:3f:5c:81:4b:48:40:24:9f:8e:11:d0: 3b:d4:e5:78:5d:8b:c9:93:a5:07:21:53:95:c7:e0:53:84:4e: 49:03:c5:18:47:c7:19:e1:3a:f1:85:f8:2e:ab:f1:c2:d4:c4: d9:82:61:5a:7d:c9:f7:0f:57:38:98:81:9c:e5:17:ea:4c:b1: 8a:3a:a1:a0:ea:44:d3:65:54:0a:fb:65:43:b8:e9:f0:69:35: fb:10:f9:87:3a:4b:c2:bf:69:47:7a:90:6a:02:9d:58:86:0b: a4:18:df:cb:04:cc:c5:07:a5:2f:38:e6:ce:51:9e:d3:0a:a7: 49:e1:b6:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE2MzI8o2YAz2aqNpuuSnwX1winwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RkMyOENGNjBDMjNCNjFFRTQyMzIxMDgxODYzOEU3 NkJERDVGMDAeFw0yNDExMjUwODU1MDlaFw0yNDExMjYxMjA0MDlaMDMxMTAvBgNV BAMTKDlBQ0IwQTJDREQwNDNCM0JEOTNEQzBBMzFFMzM1MDM3NTk0OTBCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUT00rKYmZOeTsF3uKQ0o7SgN +lOwyJ4ZIgyBogqNlvseD7+Wp8RKe8YFSkKdOhsV+vMWtQ0bEF65kXgcC5ZTfqQ3 A+Ox2m872r0xeXJCa6zRsTYohnZLZvrWPWVBROICuie7PNHJbNG6pJNBIySQPToc +xbZWqnMqxtgr5PFXq9fNgOQmuvFU8nhLtEfc8Gd1X3Q9W433Xk8JfXPrA9xuLsb qmCNAWcfC7Q7M5sX724UCeUnr9a+2EHFpu1b8WCViEgZ6MVUH+psbeCSlSVbkT7l VbNHvw7nI4mV00ab711XNdOUcAzC4vMNNDUB09Xp29qZpa4lkp6jYXihaBdXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmssKLN0EOzvZPcCjHjNQN1lJC+swHwYDVR0j BBgwFoAUwU/CjPYMI7Ye5CMhCBhjjna91fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDNRdHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4 d2EvMC9DMTRGQzI4Q0Y2MEMyM0I2MUVFNDIzMjEwODE4NjM4RTc2QkRENUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxNEZDMjhDRjYwQzIzQjYx RUU0MjMyMTA4MTg2MzhFNzZCREQ1RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDNRdHA1cWI4ZnJOWEU0b0c1WGZjUXNKUlNOclliVUJhVVQ3UmRrc1Q4d2EvMC9D MTRGQzI4Q0Y2MEMyM0I2MUVFNDIzMjEwODE4NjM4RTc2QkRENUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARvBHqWxTJl+ARHT4iloR2v2NVI+MgKa7D2NG9VGpC9s0RK1RBBLfdKg8LGAl tY3HalawxoOOmvMDpmjptzm/MfOELsZp6fL76ZRWId4FqBXLjiPc6Pnt2Xkm45jI ouNqZwJ3ewTzrGGxN08p7nwN/YERALXN2PKec1IVD6NpjOuku8O0Mz9cgUtIQCSf jhHQO9TleF2LyZOlByFTlcfgU4ROSQPFGEfHGeE68YX4LqvxwtTE2YJhWn3J9w9X OJiBnOUX6kyxijqhoOpE02VUCvtlQ7jp8Gk1+xD5hzpLwr9pR3qQagKdWIYLpBjf ywTMxQelLzjmzlGe0wqnSeG2hw== -----END CERTIFICATE-----Generated at Mon Nov 25 10:49:40 2024 by rpki-client on console-fra.rpki-client.org