$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft File: 6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft (raw, json) Hash identifier: T4eK6W1Zl3CpE4I8RQOXcJEPWfB1ZY+yYLiJ5dI7g2s= Subject key identifier: A1:BF:22:3D:06:32:B0:77:0D:91:10:EB:BA:99:41:A5:96:CF:34:19 Authority key identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2 Certificate issuer: /CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2 Certificate serial: 380CFA655F0ADC0FDCEAB7E5F56E1579C265BB4C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft Manifest number: 0134 Signing time: Sat 23 Nov 2024 03:21:20 +0000 Manifest this update: Sat 23 Nov 2024 03:16:20 +0000 Manifest next update: Sun 24 Nov 2024 06:54:20 +0000 Files and hashes: 1: 323830343a353836343a3a2f33322d3333203d3e20323638313236.roa (hash: D/eaUWsetuzQHV0RtlkxDpymvcQ/97w6Z+IYjoqe/l0=) 2: 6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl (hash: /vr0a77GAsxrnMarFVzkBudp3SQcgbaOAh16Y12CyNQ=) 3: 34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa (hash: fgVmyMQnhBpU4EbNoIp3VmcKKU6Z3YCI8VhGGZHSFPA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0c:fa:65:5f:0a:dc:0f:dc:ea:b7:e5:f5:6e:15:79:c2:65:bb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2 Validity Not Before: Nov 23 03:16:20 2024 GMT Not After : Nov 24 06:54:20 2024 GMT Subject: CN=A1BF223D0632B0770D9110EBBA9941A596CF3419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:e3:85:e9:d4:18:00:25:6c:22:71:19:63: a2:86:6a:0c:fa:b7:f6:62:84:fc:6d:d6:e0:54:62: 07:b5:f9:51:59:1b:75:d5:7c:dd:6f:5b:82:d8:7c: a0:cd:30:04:c8:a1:2d:e9:09:01:19:8d:2e:13:ef: 03:7f:db:69:42:f6:e2:fb:fe:d6:2f:33:c4:d5:94: 10:1e:be:d2:2e:19:53:3b:cc:8d:52:e5:c4:ae:94: b2:ee:19:49:a5:07:ee:9a:60:f3:48:03:d6:16:fa: 5a:87:ca:8f:ab:b2:73:f8:94:fa:b6:81:74:f4:a2: 33:f7:9a:f2:9e:42:64:a7:59:f7:90:19:bf:1f:17: ef:bb:61:22:a4:3f:63:4d:7c:22:48:00:e7:c8:65: 75:4a:25:69:8d:12:2c:18:c5:17:be:a2:4f:7f:a7: 11:e6:b7:42:46:17:82:79:f5:a4:a6:2c:50:7d:6b: fd:43:6f:32:dd:30:52:df:0f:e3:8c:6f:a0:ba:30: 17:e3:1c:b5:8f:5c:89:66:e0:db:ee:1f:06:dc:a8: ff:9a:7b:03:0c:be:ff:6b:4a:ca:cb:e8:a1:62:d0: df:de:24:39:54:6e:35:55:87:11:5f:2e:b3:e3:ec: aa:93:7e:a9:cc:08:65:78:ff:08:3c:ec:c2:a3:3f: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BF:22:3D:06:32:B0:77:0D:91:10:EB:BA:99:41:A5:96:CF:34:19 X509v3 Authority Key Identifier: keyid:68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3c:c8:10:2f:90:0e:d0:65:3c:04:7e:ef:74:22:87:79:f7: eb:75:93:8e:06:33:99:95:9f:40:16:0a:f5:3d:88:d2:16:f3: f8:63:dd:cc:d6:99:60:df:c3:7c:4e:41:b4:38:40:c4:82:ef: 2b:02:f9:31:41:57:2f:47:28:8c:6c:88:cd:eb:15:a9:64:31: 67:4d:6f:58:8a:45:5e:fe:37:13:b2:6f:a5:3c:04:08:a4:5c: 43:d4:96:e5:d3:d9:82:96:af:8a:4b:9b:1e:cc:40:6b:68:d2: cb:9d:85:5a:27:00:66:75:4a:50:9c:5d:d1:33:e5:97:dc:69: b3:57:06:89:6a:27:05:80:01:25:f6:00:ff:69:9a:0f:ec:b9: 33:c7:d8:40:97:09:d8:f5:c6:0f:8c:d4:53:7e:08:11:7c:fe: 84:da:99:8a:57:3f:86:73:32:66:fd:d3:6e:f8:98:a7:d6:ce: a3:4e:ea:d9:0f:03:73:fc:40:e4:61:42:69:bc:25:a0:f1:ce: f9:a5:91:94:5b:af:35:d6:4c:e6:a2:ad:4a:9e:d7:99:32:a4: 8e:d6:25:9e:e1:02:1d:64:6d:31:d4:b3:53:4e:1c:13:d0:e3: f4:5b:bf:8a:3e:1e:f0:d7:bd:e8:7f:3c:f9:0b:9b:47:3c:dc: 08:b7:38:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOAz6ZV8K3A/c6rfl9W4VecJlu0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg5N0U4NjdDRTYxNTAwMzlEMEZBRDRGNjEyMkY3QUUz MTU2RDVBMjAeFw0yNDExMjMwMzE2MjBaFw0yNDExMjQwNjU0MjBaMDMxMTAvBgNV BAMTKEExQkYyMjNEMDYzMkIwNzcwRDkxMTBFQkJBOTk0MUE1OTZDRjM0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQOOF6dQYACVsInEZY6KGagz6 t/ZihPxt1uBUYge1+VFZG3XVfN1vW4LYfKDNMATIoS3pCQEZjS4T7wN/22lC9uL7 /tYvM8TVlBAevtIuGVM7zI1S5cSulLLuGUmlB+6aYPNIA9YW+lqHyo+rsnP4lPq2 gXT0ojP3mvKeQmSnWfeQGb8fF++7YSKkP2NNfCJIAOfIZXVKJWmNEiwYxRe+ok9/ pxHmt0JGF4J59aSmLFB9a/1DbzLdMFLfD+OMb6C6MBfjHLWPXIlm4NvuHwbcqP+a ewMMvv9rSsrL6KFi0N/eJDlUbjVVhxFfLrPj7KqTfqnMCGV4/wg87MKjP79LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUob8iPQYysHcNkRDruplBpZbPNBkwHwYDVR0j BBgwFoAUaJfoZ85hUAOdD61PYSL3rjFW1aIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1Vh akEvMi82ODk3RTg2N0NFNjE1MDAzOUQwRkFENEY2MTIyRjdBRTMxNTZENUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OTdFODY3Q0U2MTUwMDM5 RDBGQUQ0RjYxMjJGN0FFMzE1NkQ1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1VhakEvMi82 ODk3RTg2N0NFNjE1MDAzOUQwRkFENEY2MTIyRjdBRTMxNTZENUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAjzIEC+QDtBlPAR+73Qih3n363WTjgYzmZWfQBYK9T2I0hbz+GPdzNaZYN/D fE5BtDhAxILvKwL5MUFXL0cojGyIzesVqWQxZ01vWIpFXv43E7JvpTwECKRcQ9SW 5dPZgpavikubHsxAa2jSy52FWicAZnVKUJxd0TPll9xps1cGiWonBYABJfYA/2ma D+y5M8fYQJcJ2PXGD4zUU34IEXz+hNqZilc/hnMyZv3TbviYp9bOo07q2Q8Dc/xA 5GFCabwloPHO+aWRlFuvNdZM5qKtSp7XmTKkjtYlnuECHWRtMdSzU04cE9Dj9Fu/ ij4e8Ne96H88+QubRzzcCLc4Iw== -----END CERTIFICATE-----Generated at Sat Nov 23 05:00:54 2024 by rpki-client on console-fra.rpki-client.org