$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft File: 890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft (raw, json) Hash identifier: HSc9Qh55iAc/y4NTbiyZ8EC4A7Jk6cd1ESiZLoFGGqw= Subject key identifier: 92:9A:BB:F9:3F:9F:9C:53:1A:C7:4B:40:F2:DD:A7:C4:55:28:E4:F2 Authority key identifier: 89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E Certificate issuer: /CN=890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E Certificate serial: 4747EA69EE68249B78378DCDA2102C20DA22AD78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft Manifest number: F0 Signing time: Sat 28 Sep 2024 03:16:40 +0000 Manifest this update: Sat 28 Sep 2024 03:11:40 +0000 Manifest next update: Sun 29 Sep 2024 06:12:40 +0000 Files and hashes: 1: 890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.crl (hash: HD5yszerSf6N3y5ydw88AAeGtQ9H9muj+p7Ogr5cC5E=) 2: 34352e3138342e3139362e302f32322d3234203d3e20323639333432.roa (hash: czs71pNYpwVt/iIzTEE6SfnGDOpFl2XBpM7AvNQe9lM=) 3: 323830343a363332383a3a2f33322d3438203d3e20323639333432.roa (hash: FOoIGnT+y9KSbeAjO8El5Wi62jVDKq+T/kg1/4jaqHk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.crl rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 04:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:47:ea:69:ee:68:24:9b:78:37:8d:cd:a2:10:2c:20:da:22:ad:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E Validity Not Before: Sep 28 03:11:40 2024 GMT Not After : Sep 29 06:12:40 2024 GMT Subject: CN=929ABBF93F9F9C531AC74B40F2DDA7C45528E4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:d4:f6:c2:fa:91:6b:9b:7b:14:df:9f:12: 44:00:ff:93:3b:6f:6b:bf:33:38:8e:b8:81:a5:96: c5:6b:14:bd:8c:89:4e:b5:0e:97:7e:4c:79:40:fc: d1:79:cf:d3:e2:63:52:a4:dd:ac:be:fe:d3:16:d6: 12:fc:f1:4e:e2:99:93:de:7f:fb:96:7a:c4:c4:0e: 34:31:75:50:b1:6a:e4:6e:0a:e6:ca:c1:5f:74:12: b5:ca:c7:68:32:4c:32:27:0f:ad:a8:06:06:a4:9c: 04:a6:1e:c6:ce:96:cb:cd:16:b7:9e:35:9d:69:71: 41:23:7b:27:d0:56:af:b6:ac:24:62:4d:de:25:72: dc:5d:c9:4d:57:90:76:f6:17:c7:41:4e:08:2b:08: 93:52:73:80:8e:2d:ce:50:d2:cb:1d:76:ca:37:76: 42:ae:e1:79:28:75:21:00:a4:56:18:35:3d:12:ab: 8e:ed:96:9b:0f:ff:e2:4b:b7:64:87:99:0d:ef:da: cc:33:69:20:86:16:97:0e:8e:73:d5:95:c2:3c:4c: eb:ad:df:35:e0:1b:69:22:5f:93:db:5a:1d:b4:82: 0e:79:2e:a9:c7:28:d3:40:7e:d9:0a:73:fb:d8:5d: dc:54:6a:c5:9d:c5:d9:98:d6:77:ac:15:7e:1c:84: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9A:BB:F9:3F:9F:9C:53:1A:C7:4B:40:F2:DD:A7:C4:55:28:E4:F2 X509v3 Authority Key Identifier: keyid:89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:60:27:8f:00:bb:3c:12:d1:6b:f7:2a:4f:5b:41:d9:03:d7: 40:22:cb:4e:6e:66:95:14:6c:4f:cf:9c:9e:06:f5:31:ca:be: 0b:47:e9:cc:3d:42:4c:4d:0f:92:02:74:47:7e:59:52:29:ae: 5e:64:89:dc:dd:44:d0:8b:83:a7:f1:04:3f:e3:56:4a:9d:0d: 12:e9:c9:89:d1:bc:98:d1:38:6c:74:af:cc:04:33:68:07:1a: b4:b5:bb:29:b4:ca:c9:83:37:68:cf:1b:7b:24:01:50:23:cb: ca:53:c2:c5:33:0d:c6:d8:43:11:6f:e9:d9:19:c8:8d:37:71: 30:92:22:13:e0:32:6a:82:08:57:7a:49:d0:4d:ec:eb:6b:25: b1:3c:7a:89:c4:45:55:26:d7:54:8f:69:0b:9d:8b:11:1a:ef: 34:a4:22:9a:01:ac:d6:b5:23:2a:22:03:3f:20:8c:46:70:61: 35:89:85:09:71:e4:f6:8d:2a:86:52:69:00:fe:61:45:dc:56: 0e:b8:7d:9f:c9:e5:01:b5:29:99:63:81:66:54:60:33:5c:73: 7a:78:82:ca:0f:38:b9:27:6d:93:24:91:95:51:4d:36:d3:5e: 58:89:ed:5c:93:c9:25:8b:84:38:0f:38:28:50:4c:13:bf:33: 5d:d8:67:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR0fqae5oJJt4N43NohAsINoirXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwRThEMUQ5RkQ5NzBFMkU0QTVGQThDNDBEQkVCQ0VB QUY1OTAwRTAeFw0yNDA5MjgwMzExNDBaFw0yNDA5MjkwNjEyNDBaMDMxMTAvBgNV BAMTKDkyOUFCQkY5M0Y5RjlDNTMxQUM3NEI0MEYyRERBN0M0NTUyOEU0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gNT2wvqRa5t7FN+fEkQA/5M7 b2u/MziOuIGllsVrFL2MiU61Dpd+THlA/NF5z9PiY1Kk3ay+/tMW1hL88U7imZPe f/uWesTEDjQxdVCxauRuCubKwV90ErXKx2gyTDInD62oBgaknASmHsbOlsvNFree NZ1pcUEjeyfQVq+2rCRiTd4lctxdyU1XkHb2F8dBTggrCJNSc4COLc5Q0ssddso3 dkKu4XkodSEApFYYNT0Sq47tlpsP/+JLt2SHmQ3v2swzaSCGFpcOjnPVlcI8TOut 3zXgG2kiX5PbWh20gg55LqnHKNNAftkKc/vYXdxUasWdxdmY1nesFX4chBfVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkpq7+T+fnFMax0tA8t2nxFUo5PIwHwYDVR0j BBgwFoAUiQ6NHZ/ZcOLkpfqMQNvrzqr1kA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENOeHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdm ak0vMS84OTBFOEQxRDlGRDk3MEUyRTRBNUZBOEM0MERCRUJDRUFBRjU5MDBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MEU4RDFEOUZEOTcwRTJF NEE1RkE4QzQwREJFQkNFQUFGNTkwMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NENOeHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdmak0vMS84 OTBFOEQxRDlGRDk3MEUyRTRBNUZBOEM0MERCRUJDRUFBRjU5MDBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWGAnjwC7PBLRa/cqT1tB2QPXQCLLTm5mlRRsT8+cngb1Mcq+C0fpzD1CTE0P kgJ0R35ZUimuXmSJ3N1E0IuDp/EEP+NWSp0NEunJidG8mNE4bHSvzAQzaAcatLW7 KbTKyYM3aM8beyQBUCPLylPCxTMNxthDEW/p2RnIjTdxMJIiE+AyaoIIV3pJ0E3s 62slsTx6icRFVSbXVI9pC52LERrvNKQimgGs1rUjKiIDPyCMRnBhNYmFCXHk9o0q hlJpAP5hRdxWDrh9n8nlAbUpmWOBZlRgM1xzeniCyg84uSdtkySRlVFNNtNeWInt XJPJJYuEOA84KFBME78zXdhnwA== -----END CERTIFICATE-----Generated at Sat Sep 28 04:03:53 2024 by rpki-client on console-fra.rpki-client.org