$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft File: E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft (raw, json) Hash identifier: 9lKGPKO0nFPiDqA7zBkFHh67VbWiK3/YBeDZBMMoyi4= Subject key identifier: 57:2D:65:40:AA:99:22:57:E7:CB:2E:A5:DE:CA:C2:CF:35:8B:1E:E1 Authority key identifier: E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0 Certificate issuer: /CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0 Certificate serial: 3B286B8610ED02851DDED256192FE6586E1CB9B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft Manifest number: 0128 Signing time: Sat 23 Nov 2024 10:25:46 +0000 Manifest this update: Sat 23 Nov 2024 10:20:46 +0000 Manifest next update: Sun 24 Nov 2024 12:13:46 +0000 Files and hashes: 1: 323830343a353637303a3a2f33322d3438203d3e20323637393938.roa (hash: ZDLIBIhkomySjADXF/PYG2ZV4cMRuXw5TD1SmoiZX5c=) 2: E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl (hash: sqxjr13LJsosveM0YrH6pf7erX/xUcCoykxHtxt3uxY=) 3: 34352e3136372e39362e302f32322d3332203d3e20323637393938.roa (hash: 5R1q6WzBBLUoRDJ69LG/38M8xfOpKYgGvdIaEoQZPeE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:28:6b:86:10:ed:02:85:1d:de:d2:56:19:2f:e6:58:6e:1c:b9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0 Validity Not Before: Nov 23 10:20:46 2024 GMT Not After : Nov 24 12:13:46 2024 GMT Subject: CN=572D6540AA992257E7CB2EA5DECAC2CF358B1EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:c2:4e:06:9c:8d:d1:ab:0a:15:d9:42:02: eb:4b:46:00:61:84:bc:e6:8a:78:30:64:b6:56:04: 5d:a0:dd:62:df:7d:38:1d:fe:d3:8c:78:be:16:63: 87:4a:69:7b:cb:8d:99:8e:8b:3c:8c:67:69:a7:57: 8e:6c:59:4b:1e:6a:a9:1a:06:0d:a3:95:b6:f4:cd: 79:5c:60:35:e4:d4:76:aa:e4:2d:be:b7:8a:53:8c: ee:f8:0c:a0:b0:55:dc:f5:e5:71:54:72:d5:e6:d8: 23:fd:88:d8:39:17:16:f6:62:63:98:bd:7f:50:7f: 28:b3:3f:80:37:21:74:d6:bc:8b:87:b5:40:59:73: e1:a4:33:ac:37:44:90:25:8e:21:7c:3f:d9:8f:3d: 0a:e4:db:af:2d:48:24:fe:87:17:12:26:db:55:cb: d4:33:01:e4:c2:28:db:fa:3f:8d:f4:9f:ed:3e:26: 71:64:ab:25:91:b8:db:0f:60:bc:5f:12:ff:95:90: fe:d8:fa:ed:84:e4:43:44:a1:b6:41:60:72:f5:f9: 32:a8:f1:bf:71:c7:33:89:15:b5:0e:27:24:5b:2b: 03:92:09:6f:d3:72:17:da:a7:22:b2:46:b7:0c:58: c5:15:75:9d:23:2e:f7:6a:a4:73:f1:24:54:9d:11: a9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2D:65:40:AA:99:22:57:E7:CB:2E:A5:DE:CA:C2:CF:35:8B:1E:E1 X509v3 Authority Key Identifier: keyid:E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7d:67:ab:15:08:98:d3:3f:7c:1b:ef:fb:02:9f:30:c1:ff: e5:3a:64:12:a7:a0:6d:36:72:dd:00:64:f3:7d:5b:b0:bb:00: a0:4e:c2:5d:41:d7:51:21:14:fd:61:e1:5e:06:7b:e9:21:f2: 6b:d3:21:04:d0:b6:6f:6f:48:62:6a:61:18:9d:eb:13:f3:41: 93:50:84:39:b6:bf:15:e9:b3:eb:6b:9e:aa:3a:eb:0e:78:37: 27:c3:80:c4:69:31:59:e0:7c:3d:c4:d0:ec:c4:0c:f7:db:27: bb:99:fd:36:41:1c:b0:6f:39:02:5f:23:ed:cc:54:96:b2:16: 6d:a4:d4:67:30:52:99:ea:0f:ff:f8:2c:88:1a:8f:39:ae:9d: f7:6c:3c:8c:04:b0:60:9e:01:7f:67:7b:04:f9:b5:23:37:70: 9d:f8:db:fd:26:9b:91:2c:42:18:ad:06:b4:c8:ab:ed:1b:38: 2a:b2:fe:90:8e:b6:95:e1:73:08:90:bb:7f:b9:2e:14:13:30: d6:16:8f:89:b3:a2:2f:6a:3a:c4:03:20:97:7d:d7:2d:bd:e6: 7d:b9:37:1f:e3:e7:41:04:0e:59:64:74:92:7e:4f:23:22:59: 81:a7:c4:b9:aa:1a:8e:66:3c:38:e7:5a:71:a2:9c:30:43:da: dd:ef:54:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOyhrhhDtAoUd3tJWGS/mWG4cubEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVGQUVCQkZCRjg2NkIyODM2RjYwNDFCQjEyRUQzQjAw OTU0NENCMDAeFw0yNDExMjMxMDIwNDZaFw0yNDExMjQxMjEzNDZaMDMxMTAvBgNV BAMTKDU3MkQ2NTQwQUE5OTIyNTdFN0NCMkVBNURFQ0FDMkNGMzU4QjFFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbsJOBpyN0asKFdlCAutLRgBh hLzmingwZLZWBF2g3WLffTgd/tOMeL4WY4dKaXvLjZmOizyMZ2mnV45sWUseaqka Bg2jlbb0zXlcYDXk1Haq5C2+t4pTjO74DKCwVdz15XFUctXm2CP9iNg5Fxb2YmOY vX9QfyizP4A3IXTWvIuHtUBZc+GkM6w3RJAljiF8P9mPPQrk268tSCT+hxcSJttV y9QzAeTCKNv6P430n+0+JnFkqyWRuNsPYLxfEv+VkP7Y+u2E5ENEobZBYHL1+TKo 8b9xxzOJFbUOJyRbKwOSCW/TchfapyKyRrcMWMUVdZ0jLvdqpHPxJFSdEanPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVy1lQKqZIlfnyy6l3srCzzWLHuEwHwYDVR0j BBgwFoAU5frrv7+Gayg29gQbsS7TsAlUTLAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFl SmovMC9FNUZBRUJCRkJGODY2QjI4MzZGNjA0MUJCMTJFRDNCMDA5NTQ0Q0IwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1RkFFQkJGQkY4NjZCMjgz NkY2MDQxQkIxMkVEM0IwMDk1NDRDQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFlSmovMC9F NUZBRUJCRkJGODY2QjI4MzZGNjA0MUJCMTJFRDNCMDA5NTQ0Q0IwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGn1nqxUImNM/fBvv+wKfMMH/5TpkEqegbTZy3QBk831bsLsAoE7CXUHXUSEU /WHhXgZ76SHya9MhBNC2b29IYmphGJ3rE/NBk1CEOba/Femz62ueqjrrDng3J8OA xGkxWeB8PcTQ7MQM99snu5n9NkEcsG85Al8j7cxUlrIWbaTUZzBSmeoP//gsiBqP Oa6d92w8jASwYJ4Bf2d7BPm1Izdwnfjb/SabkSxCGK0GtMir7Rs4KrL+kI62leFz CJC7f7kuFBMw1haPibOiL2o6xAMgl33XLb3mfbk3H+PnQQQOWWR0kn5PIyJZgafE uaoajmY8OOdacaKcMEPa3e9UuQ== -----END CERTIFICATE-----Generated at Sat Nov 23 11:32:48 2024 by rpki-client on console-fra.rpki-client.org