$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft File: 912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft (raw, json) Hash identifier: iKsyrbFdw4mvD5akl4yG0VZTmk9+O4yzX4vRgrnBjRE= Subject key identifier: DF:06:46:49:65:76:5A:1F:38:C3:6D:E4:AE:7C:29:58:D0:D2:9C:AF Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A Certificate issuer: /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A Certificate serial: 23FF8E37B109405D3538857C90147F595E93C7B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft Manifest number: F1 Signing time: Fri 27 Sep 2024 04:50:01 +0000 Manifest this update: Fri 27 Sep 2024 04:45:01 +0000 Manifest next update: Sat 28 Sep 2024 06:59:01 +0000 Files and hashes: 1: 34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa (hash: 3D+mhzx+CASCM2XgtyJH0vay0w/z+zXo6P06CGMefJs=) 2: 912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl (hash: 8JtOmCR8GJjhqNpM6bUYOkl9kmOQSfz90QrNknm30+I=) 3: 34352e3136382e3135392e302f32342d3234203d3e20323638313031.roa (hash: +QuJa0+02hz3U1DP0lXaXiQk+chqs1vz/T5VDiBhTes=) 4: 34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa (hash: uMgmpj/4cJHTF4Ft3BptXFQfY/sx1JoiL73HRw4DbMw=) 5: 323830343a353830383a3a2f33322d3332203d3e20323638313031.roa (hash: xkQTk72N6v6foo/DYmWBDZeyMQf5FIEWUJGCLOV3nQE=) 6: 34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa (hash: F7qfst+UyhNkzitPOJg+kOki9yDiUX4PwbQN8DLW4lY=) 7: 34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa (hash: UYICwSpaLqwVGiDvZuj1a5Wi+SMOpCchjuQas5Cahvw=) 8: 34352e3136382e3135372e302f32342d3234203d3e20323638313031.roa (hash: tdIRpxLlIwDURe4ZnBaRCRvYENa7rFlSTXRIldThN1o=) 9: 34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa (hash: RFkZafYItnwm1cuAbjYFAbIztZLQE6nItSvxOdF4uRI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Sep 2024 05:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ff:8e:37:b1:09:40:5d:35:38:85:7c:90:14:7f:59:5e:93:c7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A Validity Not Before: Sep 27 04:45:01 2024 GMT Not After : Sep 28 06:59:01 2024 GMT Subject: CN=DF06464965765A1F38C36DE4AE7C2958D0D29CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:d3:3b:ac:13:e2:60:dc:65:41:34:f5:da: 8e:03:13:41:91:3a:f1:5c:4d:6d:60:50:e2:15:c8: 95:30:cc:47:66:29:4d:29:a9:dc:15:2c:b4:93:4a: f2:4b:d5:1b:a9:de:56:d5:d6:40:7e:bd:bc:17:3f: 07:94:fb:d9:ca:84:78:57:e8:e6:3b:b2:7f:ca:f8: ee:e0:6b:af:c6:ca:d3:4c:1b:40:80:3d:12:4e:49: 59:97:83:fa:94:fe:39:73:de:5d:32:a7:73:7d:d2: ed:98:74:a6:a0:ba:29:ff:d0:f9:53:72:ac:96:26: c2:96:57:cb:01:e0:e8:8a:72:5f:ca:96:cf:04:7f: bf:f1:41:4c:a8:eb:51:54:4c:2c:01:60:1c:01:3a: 5d:09:b1:be:3c:01:02:7a:05:c9:9a:36:89:f7:46: 74:a2:47:b5:a0:73:26:4f:c7:05:5b:fc:c1:8f:98: fd:b6:40:7d:ec:a7:8c:40:ca:e3:00:70:34:2a:9b: 5f:7a:eb:ca:94:ae:69:5b:a9:78:22:8c:48:90:a6: 20:d4:9c:22:95:d7:65:f7:31:dd:d2:ac:d7:2b:ca: c5:b8:36:45:dc:d1:fe:49:09:52:f4:0d:b1:11:66: bd:c3:ee:0c:f2:56:09:fb:b4:06:a7:96:ee:f4:3d: 3e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:06:46:49:65:76:5A:1F:38:C3:6D:E4:AE:7C:29:58:D0:D2:9C:AF X509v3 Authority Key Identifier: keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:94:4f:f9:9b:9b:6e:66:71:87:3e:29:42:6d:b0:7b:b6:53: f7:97:42:f7:31:3f:34:28:5f:65:32:9f:88:f6:69:90:ad:ad: c4:b9:c5:8f:bb:a4:6f:51:57:7c:e4:0a:bd:f3:99:4e:e4:35: 05:8b:11:2e:54:89:0f:00:06:01:34:16:36:9b:f8:13:26:6b: 07:f9:99:37:9f:d4:25:d7:a3:0c:b1:0a:bf:54:57:2e:fc:35: bf:ee:e9:62:92:a6:47:ed:6d:6d:4b:c1:7a:3f:aa:52:36:26: f4:62:30:93:51:f8:7c:58:48:ef:f0:9f:b5:b8:f6:b4:99:d1: bf:16:7a:18:fd:4a:48:6a:68:ae:45:a5:ee:6a:56:02:91:eb: b4:f4:c1:d5:4e:29:2c:d7:eb:bd:e1:41:79:a3:dc:b1:d1:2b: 79:81:09:a4:27:76:52:4b:a5:f3:99:65:fe:30:ca:c5:e3:0c: 34:5d:8b:b6:f0:15:69:5d:72:c4:a0:cc:33:cd:64:53:83:73: 11:2e:e3:14:86:15:fc:32:89:2a:81:a6:64:bc:da:dc:c3:4f: bb:1e:e7:69:2e:90:7f:af:2e:ba:be:ac:86:db:7d:d0:bf:f9: bd:80:8c:ee:70:b9:a0:13:5c:6a:75:b4:7a:42:00:f5:58:c7: 8e:68:86:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI/+ON7EJQF01OIV8kBR/WV6Tx7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEyRUM0OUM4OUJEQzFEQ0JFQ0I1MkM5MjJCRTRFQzk0 RDc5ODgyQTAeFw0yNDA5MjcwNDQ1MDFaFw0yNDA5MjgwNjU5MDFaMDMxMTAvBgNV BAMTKERGMDY0NjQ5NjU3NjVBMUYzOEMzNkRFNEFFN0MyOTU4RDBEMjlDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfK9M7rBPiYNxlQTT12o4DE0GR OvFcTW1gUOIVyJUwzEdmKU0pqdwVLLSTSvJL1Rup3lbV1kB+vbwXPweU+9nKhHhX 6OY7sn/K+O7ga6/GytNMG0CAPRJOSVmXg/qU/jlz3l0yp3N90u2YdKaguin/0PlT cqyWJsKWV8sB4OiKcl/Kls8Ef7/xQUyo61FUTCwBYBwBOl0Jsb48AQJ6BcmaNon3 RnSiR7WgcyZPxwVb/MGPmP22QH3sp4xAyuMAcDQqm19668qUrmlbqXgijEiQpiDU nCKV12X3Md3SrNcrysW4NkXc0f5JCVL0DbERZr3D7gzyVgn7tAanlu70PT6BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3wZGSWV2Wh84w23krnwpWNDSnK8wHwYDVR0j BBgwFoAUkS7EnIm9wdy+y1LJIr5OyU15iCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL TlgvMS85MTJFQzQ5Qzg5QkRDMURDQkVDQjUyQzkyMkJFNEVDOTRENzk4ODJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMkVDNDlDODlCREMxRENC RUNCNTJDOTIyQkU0RUM5NEQ3OTg4MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpLTlgvMS85 MTJFQzQ5Qzg5QkRDMURDQkVDQjUyQzkyMkJFNEVDOTRENzk4ODJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtJRP+ZubbmZxhz4pQm2we7ZT95dC9zE/NChfZTKfiPZpkK2txLnFj7ukb1FX fOQKvfOZTuQ1BYsRLlSJDwAGATQWNpv4EyZrB/mZN5/UJdejDLEKv1RXLvw1v+7p YpKmR+1tbUvBej+qUjYm9GIwk1H4fFhI7/Cftbj2tJnRvxZ6GP1KSGporkWl7mpW ApHrtPTB1U4pLNfrveFBeaPcsdEreYEJpCd2Ukul85ll/jDKxeMMNF2LtvAVaV1y xKDMM81kU4NzES7jFIYV/DKJKoGmZLza3MNPux7naS6Qf68uur6shtt90L/5vYCM 7nC5oBNcanW0ekIA9VjHjmiGTA== -----END CERTIFICATE-----Generated at Fri Sep 27 06:20:16 2024 by rpki-client on console-ams.rpki-client.org