$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft File: C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft (raw, json) Hash identifier: b1s9qPggTO/+zjwnSumSD39UDJmTPNWf90ONpVkQcvo= Subject key identifier: 76:FD:76:86:FC:2C:86:C8:BA:CB:87:8F:87:F5:8B:3D:45:32:B3:A3 Authority key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7 Certificate issuer: /CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7 Certificate serial: 4179501E35AB1404CA18E343238FE48BF01A44A9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft Manifest number: A0 Signing time: Tue 26 Nov 2024 07:23:09 +0000 Manifest this update: Tue 26 Nov 2024 07:18:09 +0000 Manifest next update: Wed 27 Nov 2024 07:41:09 +0000 Files and hashes: 1: C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl (hash: Q6n9ZLEV1dt0UHpdGsS5OBuibM2qeY/W+JvzQHPr/JE=) 2: 323830343a333362303a3a2f33322d3438203d3e203532363632.roa (hash: dKRcdpYQwGN4g/8SNRrmTcSy423QAHcOYImLbXn+XO4=) 3: 3137372e36372e32342e302f32322d3234203d3e203532363632.roa (hash: CaJ2YqX6hYjPow+L/+Ed8XjKqJ1iY+o5jqj7La4tRTg=) 4: 3138392e3131332e3132382e302f32302d3234203d3e203532363632.roa (hash: q1DjdNr03vq3gtIeiumSp0kWWvZaHwOX0bMiVqb891s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 07:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:79:50:1e:35:ab:14:04:ca:18:e3:43:23:8f:e4:8b:f0:1a:44:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7 Validity Not Before: Nov 26 07:18:09 2024 GMT Not After : Nov 27 07:41:09 2024 GMT Subject: CN=76FD7686FC2C86C8BACB878F87F58B3D4532B3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:72:dc:5a:b5:8d:b3:a1:f7:84:b3:d3:21: 5c:42:c5:65:89:fa:ec:eb:71:d1:00:70:7d:51:42: e1:00:51:73:a3:cc:6f:f3:15:4a:89:16:e9:fc:44: ef:71:2d:2a:85:d3:49:4a:b5:18:87:70:26:e4:71: e7:d2:e1:53:be:37:ef:71:48:16:e7:c0:56:1a:2b: 8b:4f:fe:bb:de:b3:5c:f7:2c:24:2d:aa:63:4f:43: 81:93:6c:1d:fc:5d:a1:94:69:2e:3d:82:78:ed:75: 90:05:14:e3:6d:64:fd:72:65:81:c1:dd:f0:74:04: c9:c6:55:49:1c:ac:55:ef:78:e9:e3:1c:2c:92:c3: c6:da:07:3b:25:af:6e:8c:d0:c7:19:fe:da:92:7d: 89:82:9d:d2:b7:e4:85:77:e8:df:f5:f3:7a:93:f4: cf:fe:16:dd:82:b2:9a:35:1b:57:f9:7f:b0:a3:53: 35:d8:17:b3:70:c2:8a:ba:99:97:55:a0:e9:20:a8: 22:fa:24:c4:87:26:5a:d0:68:8e:85:c4:32:f2:47: 9a:a9:df:f7:89:98:8b:97:b2:2e:b2:1f:0f:3b:4d: ae:a5:50:99:9b:eb:c7:d7:36:58:ec:48:4c:4f:64: 9e:04:3a:7c:68:b0:2d:c0:43:8d:e5:da:99:c0:49: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FD:76:86:FC:2C:86:C8:BA:CB:87:8F:87:F5:8B:3D:45:32:B3:A3 X509v3 Authority Key Identifier: keyid:C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:6e:cd:84:16:b2:f4:89:3a:05:43:68:72:35:af:da:66:12: 39:0a:23:1a:62:95:db:7e:3a:b1:73:85:eb:40:07:e0:65:60: 91:62:71:5d:43:a3:e1:93:e6:98:33:c5:b6:97:1c:b7:14:d8: 67:ec:da:f8:ac:5d:28:d9:b2:ab:a3:7f:3d:2f:db:d9:69:db: f8:36:a8:12:db:b2:59:9c:d7:08:61:66:bd:65:34:d5:d8:51: cc:30:9b:86:7a:3d:be:22:da:d2:ce:b1:f5:8c:7c:01:6d:20: 50:c1:91:5d:b9:d6:b5:d3:da:8a:fb:47:9d:bc:35:f8:6f:65: fa:78:2b:00:f1:65:a7:ed:23:b1:40:b8:df:36:bc:e4:48:7b: 80:ab:2d:91:75:af:cc:2f:c9:33:02:cd:95:ba:b5:eb:ee:cf: df:37:79:ef:09:0b:13:1a:cc:2c:80:ad:01:e0:7f:2d:47:02: 91:c1:df:03:05:9a:52:ed:23:c1:84:85:f7:08:f5:61:7d:99: e5:22:ec:30:8f:ed:d9:09:46:a5:49:78:b4:5e:97:a8:61:61: 54:5f:81:9e:93:6e:62:4c:fd:d8:3a:b4:5b:ce:1a:45:41:f6: dd:3f:cf:a0:86:fb:38:90:cd:cc:df:fd:6c:be:bc:ad:74:9c: c6:8a:45:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQXlQHjWrFATKGONDI4/ki/AaRKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDMjk1RTZBNTgzRUU1QUZFRDY4OEJGNjdGQjVENjJE Q0UxNkZCNzAeFw0yNDExMjYwNzE4MDlaFw0yNDExMjcwNzQxMDlaMDMxMTAvBgNV BAMTKDc2RkQ3Njg2RkMyQzg2QzhCQUNCODc4Rjg3RjU4QjNENDUzMkIzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjnLcWrWNs6H3hLPTIVxCxWWJ +uzrcdEAcH1RQuEAUXOjzG/zFUqJFun8RO9xLSqF00lKtRiHcCbkcefS4VO+N+9x SBbnwFYaK4tP/rves1z3LCQtqmNPQ4GTbB38XaGUaS49gnjtdZAFFONtZP1yZYHB 3fB0BMnGVUkcrFXveOnjHCySw8baBzslr26M0McZ/tqSfYmCndK35IV36N/183qT 9M/+Ft2Cspo1G1f5f7CjUzXYF7Nwwoq6mZdVoOkgqCL6JMSHJlrQaI6FxDLyR5qp 3/eJmIuXsi6yHw87Ta6lUJmb68fXNljsSExPZJ4EOnxosC3AQ43l2pnASUhfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdv12hvwshsi6y4ePh/WLPUUys6MwHwYDVR0j BBgwFoAUxcKV5qWD7lr+1oi/Z/tdYtzhb7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD RFQvMC9DNUMyOTVFNkE1ODNFRTVBRkVENjg4QkY2N0ZCNUQ2MkRDRTE2RkI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1QzI5NUU2QTU4M0VFNUFG RUQ2ODhCRjY3RkI1RDYyRENFMTZGQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tDRFQvMC9D NUMyOTVFNkE1ODNFRTVBRkVENjg4QkY2N0ZCNUQ2MkRDRTE2RkI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg27NhBay9Ik6BUNocjWv2mYSOQojGmKV2346sXOF60AH4GVgkWJxXUOj4ZPm mDPFtpcctxTYZ+za+KxdKNmyq6N/PS/b2Wnb+DaoEtuyWZzXCGFmvWU01dhRzDCb hno9viLa0s6x9Yx8AW0gUMGRXbnWtdPaivtHnbw1+G9l+ngrAPFlp+0jsUC43za8 5Eh7gKstkXWvzC/JMwLNlbq16+7P3zd57wkLExrMLICtAeB/LUcCkcHfAwWaUu0j wYSF9wj1YX2Z5SLsMI/t2QlGpUl4tF6XqGFhVF+BnpNuYkz92Dq0W84aRUH23T/P oIb7OJDNzN/9bL68rXScxopFSA== -----END CERTIFICATE-----Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org