$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft File: CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft (raw, json) Hash identifier: mtgYw24FZxhfWGhVJNz8WxneUjwojXj4R8XJS6B8HLw= Subject key identifier: 6A:14:98:D3:55:2B:FB:10:D6:87:20:4E:A2:87:23:D0:3C:B0:53:57 Authority key identifier: CA:3B:D6:2F:6F:B4:36:76:27:D5:1C:EF:22:D8:BA:41:02:DF:AB:77 Certificate issuer: /CN=CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77 Certificate serial: 25A86C30AA4F88FFAC56B093CC3280766A1ECD2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.cer Subject info access: rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft Manifest number: 2B Signing time: Fri 22 Nov 2024 19:20:55 +0000 Manifest this update: Fri 22 Nov 2024 19:15:55 +0000 Manifest next update: Sat 23 Nov 2024 22:41:55 +0000 Files and hashes: 1: CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.crl (hash: KutVSwpAMCbJ7PqR9oP48Lp6Owx5ZpMJwUUrvfrhUx4=) 2: 3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (hash: 6ZoNROM9vlhK0ewfR8fg+zyN7EhymIzwpK1TlotGh90=) 3: 323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (hash: 8UUoTZMPwp9+BrL8VF/TGdb1NmsQDHLxmr/7nSn4EI4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.crl rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 21:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a8:6c:30:aa:4f:88:ff:ac:56:b0:93:cc:32:80:76:6a:1e:cd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77 Validity Not Before: Nov 22 19:15:55 2024 GMT Not After : Nov 23 22:41:55 2024 GMT Subject: CN=6A1498D3552BFB10D687204EA28723D03CB05357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:1b:88:a3:9d:68:5c:84:21:95:aa:ed:4f: 42:7c:1f:da:61:08:aa:04:3a:06:44:ff:af:b2:41: cd:63:0d:bd:c4:ab:27:72:2d:f3:df:a0:8b:07:a6: 86:40:78:56:ac:aa:82:17:d9:8d:15:0b:03:3c:21: 82:68:69:1d:ad:66:6b:f0:f1:f5:0e:22:87:82:b5: ef:53:ad:ac:7d:67:e6:3f:0f:59:6e:ba:02:6f:08: 5f:2f:e3:7f:c0:03:98:9f:7b:b3:a7:02:9e:39:89: 8d:d5:09:f2:96:18:00:4f:f2:03:58:31:27:c1:7c: 65:65:5c:26:99:86:c9:56:2e:2a:49:b7:16:34:55: f2:42:f5:52:78:a2:23:90:06:ad:c3:2d:ec:24:2d: 93:63:81:83:6b:7e:6c:41:23:3c:0b:f7:41:fd:ba: d1:92:22:56:da:c8:5e:dc:cb:27:82:c3:84:69:ae: 19:ab:aa:97:85:5c:2d:c3:c7:8c:23:92:be:ae:8f: 09:d0:e5:ef:e2:d1:c7:1b:f9:9c:06:d1:57:69:bb: fa:b6:ec:07:f7:23:c8:81:91:cf:9e:85:88:70:47: a4:7f:45:62:d5:ec:69:f7:fa:19:f1:0b:05:b5:56: 87:d1:43:7a:56:5e:bf:02:0c:ac:9f:7e:9c:00:60: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:14:98:D3:55:2B:FB:10:D6:87:20:4E:A2:87:23:D0:3C:B0:53:57 X509v3 Authority Key Identifier: keyid:CA:3B:D6:2F:6F:B4:36:76:27:D5:1C:EF:22:D8:BA:41:02:DF:AB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b2:5a:33:a2:c3:38:8c:df:38:70:1d:42:98:a4:8e:9f:5b: d2:54:fd:ba:c3:a7:3f:b0:02:c3:45:e2:b6:7e:2c:de:04:db: b0:5d:44:c3:14:28:61:b0:53:71:b2:7a:ba:01:0a:28:3f:30: 9c:46:75:e3:9e:f9:35:f7:0b:07:3f:fe:86:2b:e5:09:df:ed: d9:c3:41:e5:6b:7f:83:1b:df:de:ef:80:ba:57:e0:a3:57:1a: 92:2c:95:ed:71:fe:71:d8:d4:ae:da:ba:a0:53:9c:5a:44:4b: c4:52:d9:43:0c:8c:f4:da:2f:49:96:d0:64:4c:14:6c:e4:66: eb:79:06:8a:a2:00:a1:b6:fb:54:aa:48:6c:85:46:f1:b5:1c: 89:c4:3f:a5:ef:0f:2f:6b:25:c4:cc:9d:06:f4:02:0b:c8:f3: d8:32:34:6c:69:e2:ad:46:28:15:7c:ad:7a:33:4b:90:44:bd: e3:91:4c:a0:08:59:18:f6:39:99:53:2c:95:41:df:ba:95:05: c6:61:7d:b6:1c:45:ea:f2:1b:03:d8:75:ea:5d:a9:94:4a:a1: 32:fd:4a:78:50:db:43:62:9a:47:43:32:e6:ce:bd:43:5b:8a: c3:d3:6d:58:5f:09:0f:f0:a6:51:3f:8e:7e:cd:69:b1:f6:7c: 1c:07:ce:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJahsMKpPiP+sVrCTzDKAdmoezSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQkQ2MkY2RkI0MzY3NjI3RDUxQ0VGMjJEOEJBNDEw MkRGQUI3NzAeFw0yNDExMjIxOTE1NTVaFw0yNDExMjMyMjQxNTVaMDMxMTAvBgNV BAMTKDZBMTQ5OEQzNTUyQkZCMTBENjg3MjA0RUEyODcyM0QwM0NCMDUzNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/BuIo51oXIQhlartT0J8H9ph CKoEOgZE/6+yQc1jDb3EqydyLfPfoIsHpoZAeFasqoIX2Y0VCwM8IYJoaR2tZmvw 8fUOIoeCte9Trax9Z+Y/D1luugJvCF8v43/AA5ife7OnAp45iY3VCfKWGABP8gNY MSfBfGVlXCaZhslWLipJtxY0VfJC9VJ4oiOQBq3DLewkLZNjgYNrfmxBIzwL90H9 utGSIlbayF7cyyeCw4RprhmrqpeFXC3Dx4wjkr6ujwnQ5e/i0ccb+ZwG0Vdpu/q2 7Af3I8iBkc+ehYhwR6R/RWLV7Gn3+hnxCwW1VofRQ3pWXr8CDKyffpwAYCVHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUahSY01Ur+xDWhyBOoocj0DywU1cwHwYDVR0j BBgwFoAUyjvWL2+0NnYn1RzvIti6QQLfq3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFn aW8vMC9DQTNCRDYyRjZGQjQzNjc2MjdENTFDRUYyMkQ4QkE0MTAyREZBQjc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBM0JENjJGNkZCNDM2NzYy N0Q1MUNFRjIyRDhCQTQxMDJERkFCNzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFnaW8vMC9D QTNCRDYyRjZGQjQzNjc2MjdENTFDRUYyMkQ4QkE0MTAyREZBQjc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlrJaM6LDOIzfOHAdQpikjp9b0lT9usOnP7ACw0Xitn4s3gTbsF1EwxQoYbBT cbJ6ugEKKD8wnEZ14575NfcLBz/+hivlCd/t2cNB5Wt/gxvf3u+Aulfgo1cakiyV 7XH+cdjUrtq6oFOcWkRLxFLZQwyM9NovSZbQZEwUbORm63kGiqIAobb7VKpIbIVG 8bUcicQ/pe8PL2slxMydBvQCC8jz2DI0bGnirUYoFXytejNLkES945FMoAhZGPY5 mVMslUHfupUFxmF9thxF6vIbA9h16l2plEqhMv1KeFDbQ2KaR0My5s69Q1uKw9Nt WF8JD/CmUT+Ofs1psfZ8HAfOwg== -----END CERTIFICATE-----Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org