$ rpki-client -vvf rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft File: 23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft (raw, json) Hash identifier: 8k/GAJM8EKFpGI+PJRx56W2MHfLanEK/HbFRLADJo0g= Subject key identifier: FD:D8:C1:17:D8:5E:CA:36:D7:2D:38:24:58:59:0D:AA:E2:B1:64:5C Authority key identifier: 23:E1:66:0A:B4:80:C1:C9:D3:0F:79:28:A7:AD:5C:70:39:C1:32:FE Certificate issuer: /CN=23E1660AB480C1C9D30F7928A7AD5C7039C132FE Certificate serial: 71E5E7CC6DAF38C9AA30E458B8D4D7273C4C0047 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft Manifest number: 3D Signing time: Sat 23 Nov 2024 11:53:16 +0000 Manifest this update: Sat 23 Nov 2024 11:48:16 +0000 Manifest next update: Sun 24 Nov 2024 12:56:16 +0000 Files and hashes: 1: 323830343a353137633a3a2f33322d313238203d3e20323638343535.roa (hash: kYM3XC/wI7ECSPT+HPn4WPHV7AW9Yh9Wby+jSh5s3V8=) 2: 34352e3136312e36382e302f32322d3332203d3e20323638343535.roa (hash: xCtQZyFdO/CnIWoNrgcqWtU9sPdnzvX3Otkw+IWxknI=) 3: 23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl (hash: IEAolDDYAQQtxPUtA0vXhgeBqTDYOO1NW6wpZq+BmyI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e5:e7:cc:6d:af:38:c9:aa:30:e4:58:b8:d4:d7:27:3c:4c:00:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23E1660AB480C1C9D30F7928A7AD5C7039C132FE Validity Not Before: Nov 23 11:48:16 2024 GMT Not After : Nov 24 12:56:16 2024 GMT Subject: CN=FDD8C117D85ECA36D72D382458590DAAE2B1645C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:c7:6f:0b:5d:83:64:cc:93:fb:06:9d:1b: 41:7a:89:50:7d:2a:e1:ae:8a:10:47:f0:cb:ce:f8: 72:73:3f:2c:ee:ab:29:d5:47:fd:6b:7d:4e:07:ff: d4:4c:bb:49:19:e4:da:21:14:2c:68:d8:7a:4d:9f: 66:81:d0:d0:29:25:3d:46:ec:ce:e7:01:33:a4:3b: 07:fc:08:eb:f8:c7:cf:8b:e5:34:ec:17:9f:4e:cd: 8a:cc:45:f8:f6:f6:2a:1a:e3:0b:e0:5d:77:9e:39: 3e:62:87:97:37:f9:06:1b:0e:e7:e4:53:83:61:92: 3f:bc:3c:23:e9:47:6b:af:58:e2:b5:72:4e:48:8a: c6:1f:3b:cb:9e:7a:89:ee:e7:41:a3:32:cf:f8:a0: 0c:8f:32:19:56:e0:22:7d:35:fb:35:3e:30:86:74: ac:a2:91:30:7f:5e:2f:57:29:14:92:30:e4:6b:cb: 54:b0:b8:80:ec:b9:9a:a2:ee:7c:90:f7:d4:16:0e: a0:f0:43:e6:b9:0a:90:23:63:d6:5b:f6:94:00:9a: 98:8f:23:f1:13:49:a2:e7:6d:d5:76:c9:e5:49:6e: 93:dc:47:ad:85:59:95:9b:27:11:c9:b7:3c:02:b5: b7:0d:cf:dc:80:04:7b:6d:51:05:89:f2:2f:02:72: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D8:C1:17:D8:5E:CA:36:D7:2D:38:24:58:59:0D:AA:E2:B1:64:5C X509v3 Authority Key Identifier: keyid:23:E1:66:0A:B4:80:C1:C9:D3:0F:79:28:A7:AD:5C:70:39:C1:32:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:85:e5:4d:0e:b7:1c:a0:0b:48:90:ff:9d:cc:3b:71:6d:06: cc:44:27:91:89:90:0e:a9:04:27:ab:76:90:a5:0c:08:5e:55: ee:43:4f:08:32:6e:9f:15:b8:36:cf:4b:7a:1e:d9:91:65:94: e8:a2:12:e8:36:f1:51:57:cf:84:4a:8f:8e:73:8f:91:45:de: d1:6b:d1:0f:7e:35:49:53:2d:25:bc:a6:82:fd:89:b9:41:5c: d3:4d:28:27:fe:cd:81:c3:8c:24:b9:7d:e0:02:c4:32:a7:cb: 27:73:ef:c6:e2:f0:38:ae:20:c7:76:1e:b8:93:ed:b5:71:db: cd:a1:2e:19:fc:b9:89:ae:4b:5e:c0:69:2a:1d:06:0f:be:18: d5:fa:df:75:f0:9a:81:3a:4c:5d:0c:6e:2c:98:64:39:c4:f9: a8:4c:2c:50:fc:c2:0d:6a:64:27:d3:10:51:3a:c1:14:a5:ec: a7:8a:7b:e5:0d:4b:1b:7a:43:f0:c3:75:e2:26:b4:31:2b:f0: d2:02:13:58:72:a1:aa:69:a6:e3:5f:4d:8f:f5:f1:8e:04:c5: 8d:fd:3f:43:dc:8d:02:fc:f8:10:6f:6e:c1:23:29:e6:6f:5c: 9a:45:ca:3d:ce:28:81:4e:91:d2:ac:e6:64:05:e2:4e:c3:b7: 9a:a9:ce:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUceXnzG2vOMmqMORYuNTXJzxMAEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFMTY2MEFCNDgwQzFDOUQzMEY3OTI4QTdBRDVDNzAz OUMxMzJGRTAeFw0yNDExMjMxMTQ4MTZaFw0yNDExMjQxMjU2MTZaMDMxMTAvBgNV BAMTKEZERDhDMTE3RDg1RUNBMzZENzJEMzgyNDU4NTkwREFBRTJCMTY0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTasdvC12DZMyT+wadG0F6iVB9 KuGuihBH8MvO+HJzPyzuqynVR/1rfU4H/9RMu0kZ5NohFCxo2HpNn2aB0NApJT1G 7M7nATOkOwf8COv4x8+L5TTsF59OzYrMRfj29ioa4wvgXXeeOT5ih5c3+QYbDufk U4Nhkj+8PCPpR2uvWOK1ck5IisYfO8ueeonu50GjMs/4oAyPMhlW4CJ9Nfs1PjCG dKyikTB/Xi9XKRSSMORry1SwuIDsuZqi7nyQ99QWDqDwQ+a5CpAjY9Zb9pQAmpiP I/ETSaLnbdV2yeVJbpPcR62FWZWbJxHJtzwCtbcNz9yABHttUQWJ8i8CcozNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/djBF9heyjbXLTgkWFkNquKxZFwwHwYDVR0j BBgwFoAUI+FmCrSAwcnTD3kop61ccDnBMv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlFKWm5pVVRKazJQZE5qUG9kOFVhdHBwWmhLMzdEakNLdnRwY2pKREdw d0wvMC8yM0UxNjYwQUI0ODBDMUM5RDMwRjc5MjhBN0FENUM3MDM5QzEzMkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzRTE2NjBBQjQ4MEMxQzlE MzBGNzkyOEE3QUQ1QzcwMzlDMTMyRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlFKWm5pVVRKazJQZE5qUG9kOFVhdHBwWmhLMzdEakNLdnRwY2pKREdwd0wvMC8y M0UxNjYwQUI0ODBDMUM5RDMwRjc5MjhBN0FENUM3MDM5QzEzMkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG4XlTQ63HKALSJD/ncw7cW0GzEQnkYmQDqkEJ6t2kKUMCF5V7kNPCDJunxW4 Ns9Leh7ZkWWU6KIS6DbxUVfPhEqPjnOPkUXe0WvRD341SVMtJbymgv2JuUFc000o J/7NgcOMJLl94ALEMqfLJ3PvxuLwOK4gx3YeuJPttXHbzaEuGfy5ia5LXsBpKh0G D74Y1frfdfCagTpMXQxuLJhkOcT5qEwsUPzCDWpkJ9MQUTrBFKXsp4p75Q1LG3pD 8MN14ia0MSvw0gITWHKhqmmm419Nj/XxjgTFjf0/Q9yNAvz4EG9uwSMp5m9cmkXK Pc4ogU6R0qzmZAXiTsO3mqnO1w== -----END CERTIFICATE-----Generated at Sat Nov 23 13:12:17 2024 by rpki-client on console-fra.rpki-client.org