$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft File: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft (raw, json) Hash identifier: LoZLuabGlviFALoUqPcjFdD141/iukfVxQJH5z21RXU= Subject key identifier: 48:81:8E:35:03:4C:C4:25:F7:C1:1B:02:F6:CE:25:21:F5:DA:1B:BA Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 Certificate issuer: /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Certificate serial: 21C51AE20B858764FB387CFEC051AD0ABE6B5D53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject info access: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft Manifest number: 70 Signing time: Wed 26 Jun 2024 04:40:01 +0000 Manifest this update: Wed 26 Jun 2024 04:35:01 +0000 Manifest next update: Thu 27 Jun 2024 08:34:01 +0000 Files and hashes: 1: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl (hash: es10hEWMyl+jrS2UD1YbyUPuDKkgux4XQVzqimCuyUA=) 2: 3137372e39322e3138342e302f32312d3231203d3e20323633313236.roa (hash: cJ1SsTd3M9YxnmiQ38IjczgywPqNgX8DsqTL0oAXHEU=) 3: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (hash: 57BcGwUiC0b7Bkir+1qCxSLdpY+4gcJjIzRjn/CziZo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 08:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c5:1a:e2:0b:85:87:64:fb:38:7c:fe:c0:51:ad:0a:be:6b:5d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Validity Not Before: Jun 26 04:35:01 2024 GMT Not After : Jun 27 08:34:01 2024 GMT Subject: CN=48818E35034CC425F7C11B02F6CE2521F5DA1BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:3c:31:0c:af:0e:9f:24:1b:7f:98:dd:0e: fd:73:78:7d:da:9a:14:11:34:56:e2:8d:ab:30:b2: 79:04:a0:3d:38:07:b6:80:72:56:65:bb:05:3c:0f: ee:83:84:06:c1:d8:fd:c9:cf:f1:82:ae:db:56:d9: d1:9f:a8:9c:0b:4b:a0:45:39:05:9d:af:5e:01:8a: f2:c3:10:e4:14:04:19:68:3f:1b:78:30:97:36:31: 6b:43:7a:8a:51:8f:74:19:76:ab:ba:d9:90:1a:93: 58:2d:d3:c4:e2:3d:ea:0d:4b:b6:2e:c9:d8:7f:fa: 43:41:c9:ab:15:08:ba:b4:a9:67:3f:9f:bc:72:95: 54:c3:6e:23:65:e2:2c:6d:72:c7:67:ab:da:1c:53: b8:0f:0d:17:15:0d:f0:4c:00:3d:64:f1:0c:fe:23: 53:58:aa:bf:28:8d:d0:16:d0:0a:c0:76:f9:a1:9e: 49:b1:d7:ec:d2:20:19:66:44:f5:fd:37:e0:63:36: 89:df:42:a5:37:f1:29:8e:02:57:81:70:c0:e9:8f: 6b:ab:4c:fc:40:c0:4e:8b:08:01:41:d4:18:b1:c6: f1:8b:6a:58:ca:6b:26:30:a5:df:89:98:d8:32:56: c9:a4:62:59:49:0c:ae:19:a3:71:87:4e:35:e5:d1: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:81:8E:35:03:4C:C4:25:F7:C1:1B:02:F6:CE:25:21:F5:DA:1B:BA X509v3 Authority Key Identifier: keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f1:39:ff:dc:94:8d:c2:44:13:b8:2e:e8:22:51:c8:08:99: ff:54:3f:50:cd:80:d6:68:dd:19:2b:04:53:08:b0:65:ea:84: ac:5b:e2:5d:eb:af:fc:f4:38:a8:cd:5d:e7:19:3e:96:9e:77: ad:f9:bb:4e:50:e7:b2:1a:7d:6b:d7:a3:0b:e8:d9:c6:be:59: 95:5c:53:1e:c3:84:0c:2f:14:69:d5:f1:a9:28:ae:d8:ec:a7: 2a:fc:a7:19:fe:b0:db:59:49:00:ae:bc:30:85:85:7d:5f:5e: 5b:84:3d:48:6b:19:bf:91:ac:d8:02:ef:02:11:77:7a:fb:41: 27:be:80:e6:4f:4c:20:b2:85:ee:be:e7:dd:da:74:50:bf:45: 58:d1:7e:a2:7d:c2:1f:6d:15:54:e4:56:4c:03:89:5d:c9:50: f9:5b:81:3c:59:a2:8c:5f:64:18:c7:6c:dc:65:c0:d5:c2:d7: 6f:a4:e9:13:41:08:91:83:8f:a0:ce:95:fd:22:c5:c3:2b:2f: b9:e3:df:bd:9c:b4:82:3e:91:0d:0a:28:25:a3:78:2c:e2:92: 96:dc:72:40:b3:12:4f:aa:70:34:ae:bd:45:16:69:47:61:b0: 3d:d9:4d:48:4c:c5:44:27:f9:02:56:b6:e8:49:bd:6c:e7:53: b7:68:20:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIcUa4guFh2T7OHz+wFGtCr5rXVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBMjFBOEQ5MjhDQUJDMEM5RUYxMzg1MDYzNUIzMUVB RjNDMjY0MjAeFw0yNDA2MjYwNDM1MDFaFw0yNDA2MjcwODM0MDFaMDMxMTAvBgNV BAMTKDQ4ODE4RTM1MDM0Q0M0MjVGN0MxMUIwMkY2Q0UyNTIxRjVEQTFCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45DwxDK8OnyQbf5jdDv1zeH3a mhQRNFbijaswsnkEoD04B7aAclZluwU8D+6DhAbB2P3Jz/GCrttW2dGfqJwLS6BF OQWdr14BivLDEOQUBBloPxt4MJc2MWtDeopRj3QZdqu62ZAak1gt08TiPeoNS7Yu ydh/+kNByasVCLq0qWc/n7xylVTDbiNl4ixtcsdnq9ocU7gPDRcVDfBMAD1k8Qz+ I1NYqr8ojdAW0ArAdvmhnkmx1+zSIBlmRPX9N+BjNonfQqU38SmOAleBcMDpj2ur TPxAwE6LCAFB1BixxvGLaljKayYwpd+JmNgyVsmkYllJDK4Zo3GHTjXl0Y0xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSIGONQNMxCX3wRsC9s4lIfXaG7owHwYDVR0j BBgwFoAUTKIajZKMq8DJ7xOFBjWzHq88JkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZU c2cvMS80Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQTIxQThEOTI4Q0FCQzBD OUVGMTM4NTA2MzVCMzFFQUYzQzI2NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZUc2cvMS80 Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALvE5/9yUjcJEE7gu6CJRyAiZ/1Q/UM2A1mjdGSsEUwiwZeqErFviXeuv/PQ4 qM1d5xk+lp53rfm7TlDnshp9a9ejC+jZxr5ZlVxTHsOEDC8UadXxqSiu2OynKvyn Gf6w21lJAK68MIWFfV9eW4Q9SGsZv5Gs2ALvAhF3evtBJ76A5k9MILKF7r7n3dp0 UL9FWNF+on3CH20VVORWTAOJXclQ+VuBPFmijF9kGMds3GXA1cLXb6TpE0EIkYOP oM6V/SLFwysvuePfvZy0gj6RDQooJaN4LOKSltxyQLMST6pwNK69RRZpR2GwPdlN SEzFRCf5Ala26Em9bOdTt2ggGg== -----END CERTIFICATE-----Generated at Wed Jun 26 08:11:35 2024 by rpki-client on console-ams.rpki-client.org