$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft File: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft (raw, json) Hash identifier: 38esPAWv6BrruZgv9KYzpPoOyVrSDI/h/PSNR3ya6A4= Subject key identifier: 21:F1:23:CA:D8:30:BF:23:C2:34:E1:4D:CC:DE:D3:17:66:65:98:FE Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4 Certificate issuer: /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4 Certificate serial: 791E4609B432AF3AE72E0D7A7D3DF3B6D3D9FE12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft Manifest number: 0133 Signing time: Fri 22 Nov 2024 16:16:02 +0000 Manifest this update: Fri 22 Nov 2024 16:11:02 +0000 Manifest next update: Sat 23 Nov 2024 18:31:02 +0000 Files and hashes: 1: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl (hash: OI9aHzoZZkXWzrkFf8+IGGgmsLWUgvv9LlOY311j2Co=) 2: 323830343a6464303a3a2f33322d313238203d3e203238363339.roa (hash: zs93PJTY+GlOjOMnh5Bej8KwwP6qMaP2bNehN7DC5go=) 3: 3139312e362e3233322e302f32312d3332203d3e203238363339.roa (hash: SdkhKkQaEhAsMgSuEvbkGfUbqwf3N1KF7mmmaGk9Jys=) 4: 3137372e3132392e36382e302f32322d3332203d3e203238363339.roa (hash: AyoqRgv/pCwkuJeIf85xZKN9XSOkWE46smavNY6gzM0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 18:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1e:46:09:b4:32:af:3a:e7:2e:0d:7a:7d:3d:f3:b6:d3:d9:fe:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4 Validity Not Before: Nov 22 16:11:02 2024 GMT Not After : Nov 23 18:31:02 2024 GMT Subject: CN=21F123CAD830BF23C234E14DCCDED317666598FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:4b:99:c1:21:83:92:e2:c7:9a:d0:25:a9: 25:af:ae:7b:c9:53:44:e7:64:30:f2:c3:c6:6c:34: e4:8c:d5:9b:b4:d4:21:8a:95:2a:a3:23:eb:b6:06: 40:12:fc:d2:cb:50:7e:ec:1c:2a:bd:98:62:6f:ab: 3f:bf:78:01:fe:bd:f9:a6:94:75:8d:49:98:d6:cb: e9:c5:a4:23:93:8f:a8:80:52:f3:9a:35:2b:45:e3: 7a:26:83:fc:32:5e:c6:8b:0e:24:5e:b9:1b:80:df: de:4e:0d:7a:a5:cb:97:71:ed:d9:47:5f:5e:d5:71: 26:c2:d1:26:a7:8a:d0:90:48:d3:92:e6:33:80:59: 7c:49:a1:d0:c8:57:7f:5e:4e:db:16:84:d3:d5:18: 0a:26:e8:be:11:fb:98:a6:3a:63:85:c7:fc:3f:1a: d9:3b:33:68:d7:e9:f6:c4:49:51:b7:89:fa:9e:eb: 64:23:fe:1f:fe:a1:ef:f0:33:80:ba:fc:36:a6:71: de:c5:06:00:8d:2f:b4:3f:5c:f9:7f:9e:19:22:d5: 03:81:9e:f0:0a:f1:03:de:b9:01:e4:0a:8b:b7:b3: 66:a9:b2:5b:97:1a:33:d0:30:25:0f:06:7b:95:4f: 2f:96:0b:c7:2e:c4:63:47:6b:e4:2d:80:00:f3:de: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F1:23:CA:D8:30:BF:23:C2:34:E1:4D:CC:DE:D3:17:66:65:98:FE X509v3 Authority Key Identifier: keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c9:79:f4:85:18:3c:9d:77:84:7d:a2:da:20:50:64:88:56: 3d:48:44:b2:55:a6:0a:3f:0b:d0:17:74:32:7e:cb:20:46:6e: 80:ce:f9:1b:24:96:cd:11:47:f8:e6:a1:cd:3b:a2:dd:5b:64: fa:1f:b2:b9:61:9b:5e:19:1a:b9:b5:5a:8c:41:8b:c9:b7:1e: 64:47:9b:f5:5b:6d:04:62:f5:df:2e:c3:e6:3d:5a:bd:5c:88: 55:08:45:85:8d:a2:ec:8d:fd:34:7e:96:96:de:17:9f:bb:48: 8a:34:e8:56:91:2e:48:cb:a6:14:ba:e9:3a:ea:b9:fe:98:eb: 6f:12:d6:6a:b7:5e:8c:43:79:2c:bd:a9:74:f1:bb:d9:fa:61: 7e:fc:34:ac:fb:16:29:5b:60:51:c8:a8:b9:12:60:16:40:ae: 13:db:03:27:4f:1a:6c:ef:e8:a2:f4:e7:f1:32:90:76:03:9a: d9:75:4c:ec:9d:39:28:1a:c4:2f:97:9e:0c:2c:0c:31:68:84: 0b:11:99:ee:37:25:43:1b:3e:bf:fd:f6:86:be:95:eb:02:eb: ec:38:fb:5a:fb:ee:dc:43:d0:cb:2c:df:db:d0:e2:14:b9:ab: 33:ab:a1:2b:f3:9a:12:73:99:10:60:c8:af:48:ff:e9:13:ee: 6b:11:f0:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeR5GCbQyrzrnLg16fT3zttPZ/hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3MzE2Q0E5MDdGM0Q0NjkyOUFGRjZEREY1NjU1REJC NTNBQkRDNDAeFw0yNDExMjIxNjExMDJaFw0yNDExMjMxODMxMDJaMDMxMTAvBgNV BAMTKDIxRjEyM0NBRDgzMEJGMjNDMjM0RTE0RENDREVEMzE3NjY2NTk4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJkuZwSGDkuLHmtAlqSWvrnvJ U0TnZDDyw8ZsNOSM1Zu01CGKlSqjI+u2BkAS/NLLUH7sHCq9mGJvqz+/eAH+vfmm lHWNSZjWy+nFpCOTj6iAUvOaNStF43omg/wyXsaLDiReuRuA395ODXqly5dx7dlH X17VcSbC0SanitCQSNOS5jOAWXxJodDIV39eTtsWhNPVGAom6L4R+5imOmOFx/w/ Gtk7M2jX6fbESVG3ifqe62Qj/h/+oe/wM4C6/Damcd7FBgCNL7Q/XPl/nhki1QOB nvAK8QPeuQHkCou3s2apsluXGjPQMCUPBnuVTy+WC8cuxGNHa+QtgADz3hiPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIfEjytgwvyPCNOFNzN7TF2ZlmP4wHwYDVR0j BBgwFoAUjnMWypB/PUaSmv9t31ZV27U6vcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBO WGovMS84RTczMTZDQTkwN0YzRDQ2OTI5QUZGNkRERjU2NTVEQkI1M0FCREM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNzMxNkNBOTA3RjNENDY5 MjlBRkY2RERGNTY1NURCQjUzQUJEQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBOWGovMS84 RTczMTZDQTkwN0YzRDQ2OTI5QUZGNkRERjU2NTVEQkI1M0FCREM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAcl59IUYPJ13hH2i2iBQZIhWPUhEslWmCj8L0Bd0Mn7LIEZugM75GySWzRFH +OahzTui3Vtk+h+yuWGbXhkaubVajEGLybceZEeb9VttBGL13y7D5j1avVyIVQhF hY2i7I39NH6Wlt4Xn7tIijToVpEuSMumFLrpOuq5/pjrbxLWardejEN5LL2pdPG7 2fphfvw0rPsWKVtgUciouRJgFkCuE9sDJ08abO/oovTn8TKQdgOa2XVM7J05KBrE L5eeDCwMMWiECxGZ7jclQxs+v/32hr6V6wLr7Dj7Wvvu3EPQyyzf29DiFLmrM6uh K/OaEnOZEGDIr0j/6RPuaxHwEA== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org