$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft File: 032EBC04B31CCA7416FFF2267C50AACE979BC999.mft (raw, json) Hash identifier: 8xEWOUR7PG8214AsPzWRRFFV59HdBhrA9vajU6uV6xM= Subject key identifier: FC:E8:73:F5:C8:14:54:25:6C:8C:7D:47:AC:9B:FB:37:26:BF:6F:FF Authority key identifier: 03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99 Certificate issuer: /CN=032EBC04B31CCA7416FFF2267C50AACE979BC999 Certificate serial: 1FFE3FC44590868DDA8CD056AA44299398124CA1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft Manifest number: 0138 Signing time: Sat 23 Nov 2024 08:23:29 +0000 Manifest this update: Sat 23 Nov 2024 08:18:29 +0000 Manifest next update: Sun 24 Nov 2024 09:03:29 +0000 Files and hashes: 1: 323830343a336238343a3a2f33322d3438203d3e20323636313534.roa (hash: fRCj+xMp40y10h9fi6JUBtn2+LkDT+a0lsFWBabNkr0=) 2: 032EBC04B31CCA7416FFF2267C50AACE979BC999.crl (hash: t9NARDtdfyyb8TxhyN5KJNJn+3nEuu7XX4xTMd1nV+A=) 3: 3139322e3134302e382e302f32322d3234203d3e20323636313534.roa (hash: PjQGJUWihAQ7N/aXUdaxuB/EmeJAI8ZLFzgCDvLqvvo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fe:3f:c4:45:90:86:8d:da:8c:d0:56:aa:44:29:93:98:12:4c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999 Validity Not Before: Nov 23 08:18:29 2024 GMT Not After : Nov 24 09:03:29 2024 GMT Subject: CN=FCE873F5C81454256C8C7D47AC9BFB3726BF6FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:23:b9:f8:e6:f1:17:21:9a:c2:a4:e4:d6: cf:fe:ab:37:b4:1b:bf:1f:30:52:82:30:65:05:26: d9:0d:05:be:29:39:b7:f9:4d:f1:a8:17:36:82:2e: 40:a3:f2:ee:01:e9:1c:cc:85:7c:2e:85:b3:e1:85: bd:09:f2:bb:93:6c:30:b5:49:ef:e6:16:4f:8b:55: bb:e7:9c:fc:55:79:f2:c4:2d:4a:a4:86:8a:eb:6e: 99:51:5a:d6:a8:fe:f0:f2:5a:0a:d1:d5:f5:61:66: 43:52:5c:be:af:ff:79:93:ba:8c:e9:8f:77:08:8c: 3a:d3:51:01:81:51:0c:ad:07:e0:b1:7a:8b:dc:d5: e8:4d:53:79:0f:89:28:95:9d:d0:67:57:df:e6:dc: 3a:e0:65:57:e2:f2:2b:48:bf:44:0e:4a:4f:26:2f: 19:e2:91:19:38:0b:90:8e:9f:9a:fa:83:13:c0:04: 5e:ce:aa:18:39:c6:bd:0f:a9:90:c9:f3:8c:74:aa: 14:8c:af:1d:ff:9a:c1:d2:cc:17:d6:30:e2:ae:97: b3:55:8c:6b:31:aa:75:f1:54:d7:87:8a:b9:41:ae: 96:af:9c:d6:a2:ad:d8:90:b9:bd:dd:b0:65:23:d6: be:d6:ff:a6:70:76:46:04:7d:02:66:5a:c9:a1:87: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E8:73:F5:C8:14:54:25:6C:8C:7D:47:AC:9B:FB:37:26:BF:6F:FF X509v3 Authority Key Identifier: keyid:03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:59:00:78:ff:e0:83:52:aa:81:a4:23:3d:20:f3:9e:fc:0c: 62:34:3f:03:d6:35:21:10:0a:1e:0d:0e:74:bc:4f:f0:16:6f: f9:47:6a:a7:6e:e6:cf:39:99:d3:e5:4a:cd:92:cd:5a:08:f7: 3b:7c:77:48:a1:c1:de:39:bd:4e:18:95:2a:43:ae:57:71:15: f5:d5:33:14:75:6c:5c:91:74:42:65:5b:e5:1d:3a:c2:d4:fc: 21:c8:c3:e0:81:3c:91:d2:29:73:d4:52:c4:1b:5a:46:07:ee: 0e:4b:6f:61:bb:63:d1:b9:00:80:8f:46:f5:ca:49:ef:4c:ee: 28:a7:aa:2b:e2:b6:b1:6d:bd:67:98:4f:2a:16:cf:6a:8e:44: 40:26:e4:10:8d:34:80:42:8e:fe:fe:6b:30:02:b3:1f:4b:f6: 00:ea:c7:4c:5b:b0:73:c2:d1:a7:25:48:86:3f:07:81:02:f1: fb:bf:c4:be:c0:c5:a1:d2:4d:90:d1:8d:59:f7:dd:5b:ea:4e: 9a:29:3c:83:5d:8e:2d:1f:58:f1:43:15:ae:3d:f2:f3:a4:01: 03:21:da:e7:f8:82:bd:6c:ef:c0:5e:86:03:3a:51:b8:19:12: 41:b6:6e:b5:0f:73:9e:6f:eb:1c:3f:e2:2f:5d:3c:bf:c6:57: 13:98:50:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH/4/xEWQho3ajNBWqkQpk5gSTKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRUJDMDRCMzFDQ0E3NDE2RkZGMjI2N0M1MEFBQ0U5 NzlCQzk5OTAeFw0yNDExMjMwODE4MjlaFw0yNDExMjQwOTAzMjlaMDMxMTAvBgNV BAMTKEZDRTg3M0Y1QzgxNDU0MjU2QzhDN0Q0N0FDOUJGQjM3MjZCRjZGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ByO5+ObxFyGawqTk1s/+qze0 G78fMFKCMGUFJtkNBb4pObf5TfGoFzaCLkCj8u4B6RzMhXwuhbPhhb0J8ruTbDC1 Se/mFk+LVbvnnPxVefLELUqkhorrbplRWtao/vDyWgrR1fVhZkNSXL6v/3mTuozp j3cIjDrTUQGBUQytB+Cxeovc1ehNU3kPiSiVndBnV9/m3DrgZVfi8itIv0QOSk8m LxnikRk4C5COn5r6gxPABF7Oqhg5xr0PqZDJ84x0qhSMrx3/msHSzBfWMOKul7NV jGsxqnXxVNeHirlBrpavnNairdiQub3dsGUj1r7W/6ZwdkYEfQJmWsmhh2mFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/Ohz9cgUVCVsjH1HrJv7Nya/b/8wHwYDVR0j BBgwFoAUAy68BLMcynQW//ImfFCqzpebyZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0 TWsvMS8wMzJFQkMwNEIzMUNDQTc0MTZGRkYyMjY3QzUwQUFDRTk3OUJDOTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMkVCQzA0QjMxQ0NBNzQx NkZGRjIyNjdDNTBBQUNFOTc5QkM5OTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0TWsvMS8w MzJFQkMwNEIzMUNDQTc0MTZGRkYyMjY3QzUwQUFDRTk3OUJDOTk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE1kAeP/gg1KqgaQjPSDznvwMYjQ/A9Y1IRAKHg0OdLxP8BZv+Udqp27mzzmZ 0+VKzZLNWgj3O3x3SKHB3jm9ThiVKkOuV3EV9dUzFHVsXJF0QmVb5R06wtT8IcjD 4IE8kdIpc9RSxBtaRgfuDktvYbtj0bkAgI9G9cpJ70zuKKeqK+K2sW29Z5hPKhbP ao5EQCbkEI00gEKO/v5rMAKzH0v2AOrHTFuwc8LRpyVIhj8HgQLx+7/EvsDFodJN kNGNWffdW+pOmik8g12OLR9Y8UMVrj3y86QBAyHa5/iCvWzvwF6GAzpRuBkSQbZu tQ9znm/rHD/iL108v8ZXE5hQfA== -----END CERTIFICATE-----Generated at Sat Nov 23 09:08:02 2024 by rpki-client on console-ams.rpki-client.org