$ rpki-client -vvf rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft File: 5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft (raw, json) Hash identifier: 2vZvtiJpBaAutkQREbuFeCeraXdO+KlTHpxs1OHOMCw= Subject key identifier: 6C:04:CC:DB:B9:56:C9:95:42:E1:79:1B:7B:D9:56:42:01:AB:0F:B6 Authority key identifier: 57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B Certificate issuer: /CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B Certificate serial: 0FAB9ECCC9C0D806AE52B58E5608FE7BF823DA27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft Manifest number: A1 Signing time: Sat 23 Nov 2024 00:10:00 +0000 Manifest this update: Sat 23 Nov 2024 00:05:00 +0000 Manifest next update: Sun 24 Nov 2024 00:10:00 +0000 Files and hashes: 1: 3139322e3134342e3132342e302f32322d3234203d3e20323732343833.roa (hash: hY/MVYgIleoE4MCx6xZwHp9yHD9Fy6MgIg2oWr8cH4k=) 2: 5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl (hash: AdOtGLtViM2I6U7vfQ1zuMAuvkd3YcKvq3QKheq0jNU=) 3: 323830343a383165303a3a2f33322d3438203d3e20323732343833.roa (hash: D846vWvprrgW81h6qaC31Nas1tEdxpDgACO/C+ZeQ5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ab:9e:cc:c9:c0:d8:06:ae:52:b5:8e:56:08:fe:7b:f8:23:da:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B Validity Not Before: Nov 23 00:05:00 2024 GMT Not After : Nov 24 00:10:00 2024 GMT Subject: CN=6C04CCDBB956C99542E1791B7BD9564201AB0FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:1c:31:ca:b0:d8:d2:b1:8c:b7:bf:2d:07: 4e:70:50:76:1d:10:f6:42:56:84:a6:ee:9b:ca:f1: 49:3f:3c:e4:18:ed:a3:9b:6d:e1:10:31:53:ff:b1: 4a:43:27:04:a3:65:66:20:c8:5c:c1:a8:29:da:00: 03:27:9b:40:1e:0a:b7:2e:b8:8a:54:3f:be:f6:29: 4b:6b:50:71:cf:f2:6b:e0:dc:59:9c:94:9d:4d:1f: d9:4a:a3:a8:00:a0:87:73:0a:fe:1f:f7:58:ec:99: 5e:c5:bd:a0:65:2a:6b:61:f9:4a:d0:76:ac:3c:71: c0:db:3c:ef:71:38:61:a0:57:ab:a8:80:60:f1:c5: 05:04:05:41:d5:6c:88:9c:64:b3:59:7c:cb:45:84: 31:86:67:39:e7:c7:61:91:1c:ba:b2:20:43:8e:51: d8:a9:24:d6:2b:c4:2c:1e:54:c6:6e:2b:c7:1a:66: de:71:08:f9:34:48:7e:85:91:9e:12:29:d2:d6:6c: cc:e5:a2:f6:cd:ab:f4:67:1a:31:33:cf:87:af:66: 56:7b:7d:8a:19:46:20:e6:47:07:f3:f4:c2:38:5f: 90:5f:2a:c8:70:41:d7:65:4b:52:14:77:48:39:da: ce:46:aa:7c:17:38:b3:ae:1c:25:2a:65:9d:3e:e1: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:CC:DB:B9:56:C9:95:42:E1:79:1B:7B:D9:56:42:01:AB:0F:B6 X509v3 Authority Key Identifier: keyid:57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:1a:be:62:06:ce:c9:c2:f1:e9:c6:61:4b:f5:9d:99:48:9e: 8e:05:dc:f4:d8:54:20:d0:5c:5e:af:e2:9c:0e:ab:2b:67:55: 3c:78:7a:a9:c1:93:4b:81:9e:f1:b6:2e:5e:24:f3:89:1a:89: 6a:cd:f7:f4:63:70:8e:82:b4:46:a1:1e:22:b9:d4:19:e6:9b: 9f:28:f5:48:4a:4b:85:a9:dd:66:6e:43:af:a1:9d:06:be:71: 2f:10:c5:1d:8c:be:18:d0:00:84:dc:e5:51:28:6c:0d:2e:73: 02:c0:a9:69:f7:7f:b5:ae:f1:93:8e:d8:c5:2a:70:e2:4c:29: 6e:73:54:fa:36:f9:6a:06:c8:1b:11:3f:5a:8a:39:f3:df:41: 8c:de:3f:6f:f3:9a:24:b1:e5:c1:51:d2:b0:99:a3:ef:fa:a9: e1:24:64:79:ca:69:c2:67:00:09:83:e8:26:65:c4:81:ca:82: a8:93:3c:4c:14:6c:7f:6d:ad:9e:de:c4:d2:10:bd:49:69:73: 2a:e9:51:4b:15:32:0c:66:61:17:0f:5b:4f:6b:14:95:0e:33: 2c:1c:03:63:be:6f:c0:eb:88:13:9b:d2:27:ac:db:68:ac:67: 31:c7:8f:e8:57:92:23:1d:1f:43:d1:e6:c9:03:cb:0f:f9:2c: 4f:fc:b1:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD6uezMnA2AauUrWOVgj+e/gj2icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcyNURGQjJEQzI3ODZFNEZDNTZCQTBDMTE1NjcwMzJF QTM4OUUyQjAeFw0yNDExMjMwMDA1MDBaFw0yNDExMjQwMDEwMDBaMDMxMTAvBgNV BAMTKDZDMDRDQ0RCQjk1NkM5OTU0MkUxNzkxQjdCRDk1NjQyMDFBQjBGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xxwxyrDY0rGMt78tB05wUHYd EPZCVoSm7pvK8Uk/POQY7aObbeEQMVP/sUpDJwSjZWYgyFzBqCnaAAMnm0AeCrcu uIpUP772KUtrUHHP8mvg3FmclJ1NH9lKo6gAoIdzCv4f91jsmV7FvaBlKmth+UrQ dqw8ccDbPO9xOGGgV6uogGDxxQUEBUHVbIicZLNZfMtFhDGGZznnx2GRHLqyIEOO UdipJNYrxCweVMZuK8caZt5xCPk0SH6FkZ4SKdLWbMzlovbNq/RnGjEzz4evZlZ7 fYoZRiDmRwfz9MI4X5BfKshwQddlS1IUd0g52s5GqnwXOLOuHCUqZZ0+4VyvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbATM27lWyZVC4Xkbe9lWQgGrD7YwHwYDVR0j BBgwFoAUVyXfstwnhuT8VroMEVZwMuo4niswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHpZVHF3Ykhha0M1QVp0ZlBicTZtRXVIdVFWdU5aRnZ2NzdVYWFGNUV6 VFIvMC81NzI1REZCMkRDMjc4NkU0RkM1NkJBMEMxMTU2NzAzMkVBMzg5RTJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MjVERkIyREMyNzg2RTRG QzU2QkEwQzExNTY3MDMyRUEzODlFMkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHpZVHF3Ykhha0M1QVp0ZlBicTZtRXVIdVFWdU5aRnZ2NzdVYWFGNUV6VFIvMC81 NzI1REZCMkRDMjc4NkU0RkM1NkJBMEMxMTU2NzAzMkVBMzg5RTJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtxq+YgbOycLx6cZhS/WdmUiejgXc9NhUINBcXq/inA6rK2dVPHh6qcGTS4Ge 8bYuXiTziRqJas339GNwjoK0RqEeIrnUGeabnyj1SEpLhandZm5Dr6GdBr5xLxDF HYy+GNAAhNzlUShsDS5zAsCpafd/ta7xk47YxSpw4kwpbnNU+jb5agbIGxE/Woo5 899BjN4/b/OaJLHlwVHSsJmj7/qp4SRkecppwmcACYPoJmXEgcqCqJM8TBRsf22t nt7E0hC9SWlzKulRSxUyDGZhFw9bT2sUlQ4zLBwDY75vwOuIE5vSJ6zbaKxnMceP 6FeSIx0fQ9HmyQPLD/ksT/yxBg== -----END CERTIFICATE-----Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org