$ rpki-client -vvf rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft File: 29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft (raw, json) Hash identifier: RGDMjglhXGyP9Ufno36rO9p7xJrW2WczZ4+SY0pLzaE= Subject key identifier: 9D:80:C3:70:0B:1A:87:E0:C1:49:64:2E:EA:8A:45:88:64:17:B4:90 Authority key identifier: 29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17 Certificate issuer: /CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17 Certificate serial: 4DEFA90EAD9FA4238DC8BD3F94A05B5B367AD4A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer Subject info access: rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft Manifest number: C2 Signing time: Tue 26 Nov 2024 00:22:38 +0000 Manifest this update: Tue 26 Nov 2024 00:17:38 +0000 Manifest next update: Wed 27 Nov 2024 04:12:38 +0000 Files and hashes: 1: 29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl (hash: pPRKfjj66ALWRAPpSf49u5DwhZ88k/MNmq79pLLt2Go=) 2: 323830343a383130303a3a2f33322d313238203d3e20323632333036.roa (hash: Ixun3nWW3SSxlndSkYliPomT6RUJWF3m47aF6RdUzTo=) 3: 3137372e38372e3137362e302f32322d3234203d3e20323632333036.roa (hash: /1iZ7MfjI0TaFU+5fIGZM08kiGyQDGOepbs2iyRnPng=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 04:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ef:a9:0e:ad:9f:a4:23:8d:c8:bd:3f:94:a0:5b:5b:36:7a:d4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17 Validity Not Before: Nov 26 00:17:38 2024 GMT Not After : Nov 27 04:12:38 2024 GMT Subject: CN=9D80C3700B1A87E0C149642EEA8A45886417B490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:a2:15:80:2f:58:92:33:98:98:73:da:c7: 8b:0d:9d:6c:d6:b9:bd:4a:18:78:f7:9f:08:8a:62: fb:e3:1d:bd:14:be:05:31:ed:3c:4b:a0:0d:e9:88: 0a:d8:78:76:c4:1c:fb:85:59:6f:27:e1:f1:91:49: 5d:0e:ce:f3:d5:33:c7:95:21:9d:6e:61:25:9a:6a: 09:a3:11:ec:30:fc:ad:28:c6:4c:88:05:fb:86:09: 44:3c:4e:06:a1:97:5a:5c:77:68:28:96:43:87:e9: b3:af:1c:36:59:cf:9e:8d:9d:4a:0d:a2:43:16:dc: 89:6d:04:f6:3e:8e:15:f8:b8:18:07:32:f0:7c:5c: 8e:fe:e5:08:17:54:02:e4:87:cc:ce:83:e8:2e:f5: 7a:91:e7:4c:d8:8c:49:12:af:89:d8:a5:f6:73:91: fe:fb:51:aa:07:b6:27:9d:f8:9c:f5:8e:3f:51:a0: 97:ea:02:96:88:d8:bb:03:2f:38:0d:70:3b:80:1a: 3c:64:24:9b:be:61:a8:5c:b5:60:5b:93:60:36:b9: ca:5f:c0:f6:a7:a8:fe:9e:1a:58:58:ce:47:69:85: 0e:4e:f7:22:c5:3f:05:aa:4d:f4:91:e9:82:02:2c: c1:19:64:6e:71:55:29:71:f9:fa:78:be:92:c7:4d: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:80:C3:70:0B:1A:87:E0:C1:49:64:2E:EA:8A:45:88:64:17:B4:90 X509v3 Authority Key Identifier: keyid:29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9d:ce:91:3f:46:e7:57:4a:a9:b9:5e:86:b8:3c:f6:f2:07: ac:31:61:3f:20:0f:c0:db:31:f6:29:a7:c4:a7:9c:94:06:1b: a3:96:df:1f:4c:fb:8d:fe:ad:52:11:0f:f3:97:ac:fd:17:a1: f5:84:80:01:8b:00:62:53:46:f6:c8:1f:bf:ab:7c:30:08:62: 43:02:94:b2:11:7a:97:24:a5:a9:35:fc:50:7f:58:53:27:ab: fa:a1:20:d6:5f:d5:97:3c:bc:82:57:b8:65:c4:4f:64:58:f6: 91:91:ea:10:15:5b:5e:bc:38:41:ee:7a:f1:2e:fc:ad:d8:08: ee:05:5d:94:73:2b:48:fe:87:25:89:60:7a:31:34:3d:30:36: 46:d9:70:d5:af:16:13:b5:ed:b9:f6:03:13:6a:71:6e:7b:58: 93:3a:27:5f:95:46:78:4f:2d:30:ab:89:18:e4:d3:ca:d3:1d: 49:b0:59:5c:49:c7:fa:7c:1d:7b:8e:7d:3e:29:a9:df:81:1e: c9:75:d8:8f:91:56:fb:06:68:04:f7:67:59:97:9e:2d:06:5d: 1b:05:41:52:ff:f6:cc:a0:ef:24:ac:e5:a4:f6:b5:b1:fc:71: df:f1:6c:4d:aa:be:5c:ea:1e:db:ab:c4:12:19:c9:61:da:50: bc:ef:f8:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTe+pDq2fpCONyL0/lKBbWzZ61KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlENzExMkM3QjZCRDM5NDExMzNEOEEyREIwRkJBQjZD QTA4MUMxNzAeFw0yNDExMjYwMDE3MzhaFw0yNDExMjcwNDEyMzhaMDMxMTAvBgNV BAMTKDlEODBDMzcwMEIxQTg3RTBDMTQ5NjQyRUVBOEE0NTg4NjQxN0I0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO2KIVgC9YkjOYmHPax4sNnWzW ub1KGHj3nwiKYvvjHb0UvgUx7TxLoA3piArYeHbEHPuFWW8n4fGRSV0OzvPVM8eV IZ1uYSWaagmjEeww/K0oxkyIBfuGCUQ8Tgahl1pcd2golkOH6bOvHDZZz56NnUoN okMW3IltBPY+jhX4uBgHMvB8XI7+5QgXVALkh8zOg+gu9XqR50zYjEkSr4nYpfZz kf77UaoHtied+Jz1jj9RoJfqApaI2LsDLzgNcDuAGjxkJJu+YahctWBbk2A2ucpf wPanqP6eGlhYzkdphQ5O9yLFPwWqTfSR6YICLMEZZG5xVSlx+fp4vpLHTTuBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnYDDcAsah+DBSWQu6opFiGQXtJAwHwYDVR0j BBgwFoAUKdcRLHtr05QRM9ii2w+6tsoIHBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkxrVFh4emU5NkJyOVpQbThpSFpqV2dBYkZTOFU1eGRRaXJ5TjZOOGFk ZlUvMC8yOUQ3MTEyQzdCNkJEMzk0MTEzM0Q4QTJEQjBGQkFCNkNBMDgxQzE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RDcxMTJDN0I2QkQzOTQx MTMzRDhBMkRCMEZCQUI2Q0EwODFDMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkxrVFh4emU5NkJyOVpQbThpSFpqV2dBYkZTOFU1eGRRaXJ5TjZOOGFkZlUvMC8y OUQ3MTEyQzdCNkJEMzk0MTEzM0Q4QTJEQjBGQkFCNkNBMDgxQzE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlZ3OkT9G51dKqblehrg89vIHrDFhPyAPwNsx9imnxKeclAYbo5bfH0z7jf6t UhEP85es/Reh9YSAAYsAYlNG9sgfv6t8MAhiQwKUshF6lySlqTX8UH9YUyer+qEg 1l/Vlzy8gle4ZcRPZFj2kZHqEBVbXrw4Qe568S78rdgI7gVdlHMrSP6HJYlgejE0 PTA2Rtlw1a8WE7XtufYDE2pxbntYkzonX5VGeE8tMKuJGOTTytMdSbBZXEnH+nwd e459Pimp34EeyXXYj5FW+wZoBPdnWZeeLQZdGwVBUv/2zKDvJKzlpPa1sfxx3/Fs Taq+XOoe26vEEhnJYdpQvO/4KQ== -----END CERTIFICATE-----Generated at Tue Nov 26 02:15:48 2024 by rpki-client on console-fra.rpki-client.org