$ rpki-client -vvf rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.mft File: 8F69EC4070CE7658D3059640F9268DDF17E8B1A8.mft (raw, json) Hash identifier: 2umJIjQtguJvBGponhygE3CPTC3XWMbeCUTXX5Xd3YE= Subject key identifier: 82:17:82:6C:AB:66:15:A0:EC:91:A6:8C:43:B8:37:79:41:98:28:D7 Authority key identifier: 8F:69:EC:40:70:CE:76:58:D3:05:96:40:F9:26:8D:DF:17:E8:B1:A8 Certificate issuer: /CN=8F69EC4070CE7658D3059640F9268DDF17E8B1A8 Certificate serial: 3308583C2363499EDC200A1FE850BCA9FF7F3372 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.mft Manifest number: 71 Signing time: Wed 26 Jun 2024 03:24:42 +0000 Manifest this update: Wed 26 Jun 2024 03:19:42 +0000 Manifest next update: Thu 27 Jun 2024 06:46:42 +0000 Files and hashes: 1: 34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa (hash: 81Ba8NpCyVpADZZbfgiYPAuSplQw5HcvFECLSE+YHsg=) 2: 8F69EC4070CE7658D3059640F9268DDF17E8B1A8.crl (hash: EfeoX4DtRJbEeCE2jdUZFhCzv/W7SzpwImcZOl9rSzQ=) 3: 323830343a343864343a3a2f33322d3438203d3e20323637313437.roa (hash: QAoF11iqPo9OrZ24v/keZXg5sbKSZ8FvQDRj7fVSnJY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.crl rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 03:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:08:58:3c:23:63:49:9e:dc:20:0a:1f:e8:50:bc:a9:ff:7f:33:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F69EC4070CE7658D3059640F9268DDF17E8B1A8 Validity Not Before: Jun 26 03:19:42 2024 GMT Not After : Jun 27 06:46:42 2024 GMT Subject: CN=8217826CAB6615A0EC91A68C43B83779419828D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:88:0f:f9:11:14:28:2b:73:74:99:80:7b:43: 13:50:25:de:b0:ab:07:44:cd:16:bb:97:13:34:95: 2f:28:ef:ba:13:1d:d6:0a:c4:36:60:4c:76:86:6e: 0f:be:f8:8b:43:de:be:76:11:ff:68:d7:73:b1:04: 20:ae:1e:02:71:21:1c:51:59:34:b1:91:05:0b:09: 41:8e:be:ac:4a:9e:33:4b:4d:d7:fb:d0:ca:f7:31: b7:1d:53:76:4c:c3:99:b9:ff:5e:da:21:e5:38:8b: 61:2b:e4:a5:d4:fa:96:4e:0a:36:6e:61:31:ca:11: 06:77:63:60:c8:1d:83:a1:d5:45:4e:38:0f:be:93: cf:3e:aa:b0:34:14:48:5c:6e:fc:31:3a:74:7b:e1: ce:55:7f:6e:9d:9f:a1:1b:5b:da:d8:ca:97:a2:25: 6c:e6:00:ba:f5:72:9c:84:e7:75:cf:dc:41:57:c0: b3:c1:c5:a0:a5:5d:80:27:aa:a5:bd:b7:6c:cd:77: 4a:d1:44:20:95:25:bb:d6:29:5c:38:6c:28:70:2f: 9c:bc:dc:c2:3b:0d:27:02:96:44:91:d2:41:ef:f5: 92:de:f6:d4:28:6c:97:b6:54:79:db:f6:a9:c1:3a: 64:a5:13:28:1a:21:9f:e5:6e:04:45:01:bb:a0:ff: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:17:82:6C:AB:66:15:A0:EC:91:A6:8C:43:B8:37:79:41:98:28:D7 X509v3 Authority Key Identifier: keyid:8F:69:EC:40:70:CE:76:58:D3:05:96:40:F9:26:8D:DF:17:E8:B1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4c:18:67:77:79:c5:e0:df:52:f8:ee:b9:0e:b3:f7:c9:7b: fe:d7:17:ab:3e:c1:26:d3:0d:80:07:ba:79:a3:e1:de:2a:97: f0:6c:5b:f9:b9:71:52:28:bd:a7:e3:e8:83:d3:a5:9a:0e:0d: 09:c7:7d:7c:3c:e2:33:16:4a:c1:1a:f3:a3:57:76:71:28:3a: 67:c8:4f:c3:bf:c3:6f:ab:13:dc:fb:2b:3f:69:f9:da:86:38: eb:85:7d:4e:fd:de:0d:18:b5:7f:b7:63:47:ff:8a:c7:0e:e1: 13:83:ed:70:90:15:bf:4c:de:db:b8:8d:9b:70:a6:74:23:4b: d4:b3:52:e1:b3:f9:ed:ed:29:f8:9c:7b:bc:e6:e4:b9:42:ab: 07:f5:ac:c7:ee:4e:fa:b4:90:9a:60:31:df:56:f1:e2:9a:87: b7:5f:7a:b6:77:bd:46:08:7d:df:8c:79:f1:87:d8:61:5a:f3: ea:9d:c5:1b:b9:85:5c:15:a3:32:69:1e:07:fc:22:38:69:e4: 91:36:fa:c4:80:91:3f:c6:34:85:3c:d6:92:b5:10:e8:1b:3b: 07:32:7f:4e:80:c9:ca:2c:5e:f0:08:32:bd:c0:53:af:47:d3: 3b:a6:53:d7:8d:de:e1:07:91:9c:fc:5c:b8:8c:a1:83:f2:85: cf:6f:11:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMwhYPCNjSZ7cIAof6FC8qf9/M3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY2OUVDNDA3MENFNzY1OEQzMDU5NjQwRjkyNjhEREYx N0U4QjFBODAeFw0yNDA2MjYwMzE5NDJaFw0yNDA2MjcwNjQ2NDJaMDMxMTAvBgNV BAMTKDgyMTc4MjZDQUI2NjE1QTBFQzkxQTY4QzQzQjgzNzc5NDE5ODI4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhiA/5ERQoK3N0mYB7QxNQJd6w qwdEzRa7lxM0lS8o77oTHdYKxDZgTHaGbg+++ItD3r52Ef9o13OxBCCuHgJxIRxR WTSxkQULCUGOvqxKnjNLTdf70Mr3MbcdU3ZMw5m5/17aIeU4i2Er5KXU+pZOCjZu YTHKEQZ3Y2DIHYOh1UVOOA++k88+qrA0FEhcbvwxOnR74c5Vf26dn6EbW9rYypei JWzmALr1cpyE53XP3EFXwLPBxaClXYAnqqW9t2zNd0rRRCCVJbvWKVw4bChwL5y8 3MI7DScClkSR0kHv9ZLe9tQobJe2VHnb9qnBOmSlEygaIZ/lbgRFAbug/983AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgheCbKtmFaDskaaMQ7g3eUGYKNcwHwYDVR0j BBgwFoAUj2nsQHDOdljTBZZA+SaN3xfosagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlFRZ1F2Qk5EV2dERnZielUxMlZzcVhhV2V1dHJvTnZlOHhTd1Rmc2pC eWkvMS84RjY5RUM0MDcwQ0U3NjU4RDMwNTk2NDBGOTI2OERERjE3RThCMUE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGNjlFQzQwNzBDRTc2NThE MzA1OTY0MEY5MjY4RERGMTdFOEIxQTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlFRZ1F2Qk5EV2dERnZielUxMlZzcVhhV2V1dHJvTnZlOHhTd1Rmc2pCeWkvMS84 RjY5RUM0MDcwQ0U3NjU4RDMwNTk2NDBGOTI2OERERjE3RThCMUE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnUwYZ3d5xeDfUvjuuQ6z98l7/tcXqz7BJtMNgAe6eaPh3iqX8Gxb+blxUii9 p+Pog9Olmg4NCcd9fDziMxZKwRrzo1d2cSg6Z8hPw7/Db6sT3PsrP2n52oY464V9 Tv3eDRi1f7djR/+Kxw7hE4PtcJAVv0ze27iNm3CmdCNL1LNS4bP57e0p+Jx7vObk uUKrB/Wsx+5O+rSQmmAx31bx4pqHt196tne9Rgh934x58YfYYVrz6p3FG7mFXBWj MmkeB/wiOGnkkTb6xICRP8Y0hTzWkrUQ6Bs7BzJ/ToDJyixe8AgyvcBTr0fTO6ZT 143e4QeRnPxcuIyhg/KFz28RQw== -----END CERTIFICATE-----Generated at Wed Jun 26 06:20:46 2024 by rpki-client on console-fra.rpki-client.org