$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft File: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json) Hash identifier: 3T0FXSBkAzFTwUyjgBrti4y6CS8SH9vA1NigwSec8HI= Subject key identifier: E9:0F:F6:41:F2:9B:66:D0:F8:5E:7E:E6:DB:5E:C9:49:16:27:5B:53 Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Certificate serial: 4C06687F69AEAF8F2BF504346D8F8D81D23D2863 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft Manifest number: 012E Signing time: Mon 25 Nov 2024 13:55:55 +0000 Manifest this update: Mon 25 Nov 2024 13:50:55 +0000 Manifest next update: Tue 26 Nov 2024 15:47:55 +0000 Files and hashes: 1: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: FQW6y868bi9yjTdWXfzdiiqWV+8Oyh5xV2feYcO3s4w=) 2: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: 8g5BW8wIlTWi7OFcS47255914DHTonrLOK2FfrgCsMg=) 3: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: 5ba7IaKOMgg05glzLzNzJDooqPn0CfKUdz1ZRFwxd3I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 15:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:06:68:7f:69:ae:af:8f:2b:f5:04:34:6d:8f:8d:81:d2:3d:28:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Validity Not Before: Nov 25 13:50:55 2024 GMT Not After : Nov 26 15:47:55 2024 GMT Subject: CN=E90FF641F29B66D0F85E7EE6DB5EC94916275B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:91:a5:5e:69:97:1f:eb:a5:41:cc:17:1b: bc:1e:6b:21:31:c3:ce:0b:5f:64:5d:de:d0:42:cf: 42:28:da:93:f7:18:9d:9b:f7:d9:00:67:a4:90:72: d2:8f:98:26:d6:54:3d:ad:e3:c8:32:f9:53:a2:ef: 7a:38:4e:4e:1d:26:8e:50:69:f1:55:01:72:99:58: 74:21:0e:c3:05:b4:ce:37:07:e4:e7:d1:39:5e:b7: 52:a9:7b:53:30:c5:7f:10:c2:2c:70:32:9e:9a:f0: de:0b:b9:9c:7f:b0:2f:2c:ac:b4:24:6b:cc:8c:84: 6a:c0:ce:0c:81:6b:d9:26:e1:eb:33:c3:f2:05:99: 36:eb:12:6b:63:1e:b9:12:98:ef:4f:b8:5c:c3:2c: 5c:d4:ce:99:ad:a4:92:61:29:dd:0b:57:c1:71:c6: b8:d4:fa:ca:29:2d:b1:d5:43:fb:86:f8:7e:15:3a: b6:d9:84:ff:90:6b:64:56:88:3d:b0:cc:c9:bb:2b: c9:ad:fd:05:c2:87:eb:17:57:1b:d9:8c:18:03:9a: 86:cf:68:97:af:56:dc:e4:8c:27:da:5a:aa:05:39: 5f:62:07:b1:bf:49:92:ed:48:2c:a5:f3:9b:3b:09: 24:14:67:82:26:46:99:9e:a4:ae:c2:de:48:b9:df: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0F:F6:41:F2:9B:66:D0:F8:5E:7E:E6:DB:5E:C9:49:16:27:5B:53 X509v3 Authority Key Identifier: keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:97:61:39:95:f8:70:55:c9:a7:bc:ec:c1:d6:03:90:00:e8: ae:bc:65:8e:f0:11:f0:88:e5:b9:e1:37:8b:91:31:79:0f:d0: cd:e0:c2:8c:15:98:c8:62:4e:e7:51:de:31:fc:1a:fa:85:0a: 20:34:c5:83:7f:80:77:c7:45:8e:c6:58:bc:05:9b:9d:ec:f3: 12:97:01:52:ca:5c:ad:22:2b:00:44:04:99:20:a4:76:53:49: 1a:23:8f:0b:90:5f:cf:79:3d:dd:56:93:9f:92:20:1d:2a:de: 43:48:b1:db:a8:e5:16:c0:fb:2e:9a:97:b2:74:9e:ee:75:81: 7f:cf:78:5a:27:03:01:dd:c8:d8:5e:80:6f:30:67:03:7d:2b: 78:a4:60:8c:87:23:e0:6a:90:c2:35:b6:8c:29:83:17:08:ab: 2e:b2:8b:e8:de:4c:eb:f6:42:26:97:b7:39:9b:e3:4a:0b:db: 94:1d:ef:3a:90:8a:3f:10:e0:68:4e:05:07:46:cb:1e:1c:51: 87:11:6b:e9:e4:49:3e:23:4f:8f:ae:8b:01:af:7e:a6:a4:0f: f5:a4:2d:8b:f3:d2:be:be:a1:3d:47:3c:5a:7d:da:cb:22:5b: de:05:bb:17:ac:e6:4e:6a:6c:98:98:11:dd:69:f2:38:6e:ba: 50:4d:63:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTAZof2mur48r9QQ0bY+NgdI9KGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzQTJGRDREOEQ3QUI5MTU4MTlGRTgzQ0I4NEQzQUM1 MUEzMkM3RTAeFw0yNDExMjUxMzUwNTVaFw0yNDExMjYxNTQ3NTVaMDMxMTAvBgNV BAMTKEU5MEZGNjQxRjI5QjY2RDBGODVFN0VFNkRCNUVDOTQ5MTYyNzVCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd45GlXmmXH+ulQcwXG7weayEx w84LX2Rd3tBCz0Io2pP3GJ2b99kAZ6SQctKPmCbWVD2t48gy+VOi73o4Tk4dJo5Q afFVAXKZWHQhDsMFtM43B+Tn0Tlet1Kpe1MwxX8QwixwMp6a8N4LuZx/sC8srLQk a8yMhGrAzgyBa9km4eszw/IFmTbrEmtjHrkSmO9PuFzDLFzUzpmtpJJhKd0LV8Fx xrjU+sopLbHVQ/uG+H4VOrbZhP+Qa2RWiD2wzMm7K8mt/QXCh+sXVxvZjBgDmobP aJevVtzkjCfaWqoFOV9iB7G/SZLtSCyl85s7CSQUZ4ImRpmepK7C3ki5370/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6Q/2QfKbZtD4Xn7m217JSRYnW1MwHwYDVR0j BBgwFoAULTov1NjXq5FYGf6Dy4TTrFGjLH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK bW8vMC8yRDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEM0EyRkQ0RDhEN0FCOTE1 ODE5RkU4M0NCODREM0FDNTFBMzJDN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZKbW8vMC8y RDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKZdhOZX4cFXJp7zswdYDkADorrxljvAR8IjlueE3i5ExeQ/QzeDCjBWYyGJO 51HeMfwa+oUKIDTFg3+Ad8dFjsZYvAWbnezzEpcBUspcrSIrAEQEmSCkdlNJGiOP C5Bfz3k93VaTn5IgHSreQ0ix26jlFsD7LpqXsnSe7nWBf894WicDAd3I2F6AbzBn A30reKRgjIcj4GqQwjW2jCmDFwirLrKL6N5M6/ZCJpe3OZvjSgvblB3vOpCKPxDg aE4FB0bLHhxRhxFr6eRJPiNPj66LAa9+pqQP9aQti/PSvr6hPUc8Wn3ayyJb3gW7 F6zmTmpsmJgR3WnyOG66UE1jcg== -----END CERTIFICATE-----Generated at Mon Nov 25 15:27:03 2024 by rpki-client on console-fra.rpki-client.org