$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft File: AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft (raw, json) Hash identifier: L+9JYCdaCXk98Y6fhfdatAm3RN8dH+bZXZ7tYvMWFGI= Subject key identifier: 23:AC:0B:CF:65:87:DC:95:97:BC:0A:C5:26:32:D0:EA:40:76:74:CA Authority key identifier: AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00 Certificate issuer: /CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00 Certificate serial: 106333685ADFC4808CE07E3D4DCC6090C5D2E1CB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer Subject info access: rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft Manifest number: 0136 Signing time: Sat 23 Nov 2024 02:06:20 +0000 Manifest this update: Sat 23 Nov 2024 02:01:20 +0000 Manifest next update: Sun 24 Nov 2024 05:29:20 +0000 Files and hashes: 1: AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl (hash: r+t9FLrn/O3z8IWFBDHZYLivZg2CP00fJOX5Mlqj1eQ=) 2: 3137372e37322e3135362e302f32322d3332203d3e203532383231.roa (hash: UsmNJMkM0SxDwYyq2HRU5y7FaPmFEPQqoTvFTByUrdo=) 3: 3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa (hash: O/qHNecssVRYbjZulTpy095JErTkyj5kg7hkcQNt5tE=) 4: 323830343a323561343a3a2f33322d313238203d3e203532383231.roa (hash: vGZtWWS5AEZQpMfNacnb+qPe45FThe3Jq4bvoGAIzLg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:63:33:68:5a:df:c4:80:8c:e0:7e:3d:4d:cc:60:90:c5:d2:e1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00 Validity Not Before: Nov 23 02:01:20 2024 GMT Not After : Nov 24 05:29:20 2024 GMT Subject: CN=23AC0BCF6587DC9597BC0AC52632D0EA407674CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:6d:86:c5:e7:b5:1d:e2:7f:fc:8e:e9:56: 18:73:0c:16:7f:e9:4e:bf:6a:d3:9b:21:1e:6f:a3: 78:e1:9c:ee:68:95:be:64:b2:6b:be:f2:ef:64:e1: af:60:f8:2c:03:85:30:ee:04:0a:1c:81:b4:85:1d: d2:5d:29:a6:8d:91:f8:3d:c9:f2:76:7c:71:6b:03: a3:ff:37:e9:e8:ab:b1:a0:d3:ef:d3:a1:7c:87:0e: ce:26:b8:70:9e:52:21:c5:1b:2e:21:c5:eb:84:2b: 63:9f:ef:f7:c9:ab:ef:62:cb:69:57:a8:14:65:45: c6:33:f4:0d:29:bf:45:70:cd:ef:e2:a3:a0:ae:06: f5:19:a5:6d:f7:5e:11:a7:d0:53:85:a0:4f:b9:a5: 8d:69:a8:8b:c7:d1:3c:55:9f:37:2b:4d:f0:96:89: 02:73:c4:34:cf:ee:9e:d3:9b:7c:02:79:b1:14:0f: 8b:87:e2:63:20:fa:86:8f:44:bc:4c:8a:50:f9:ff: 14:18:90:12:4e:57:0f:9d:62:63:98:09:72:ca:af: 36:16:fd:0f:8e:76:1e:df:c1:17:5c:03:87:95:13: b1:a6:6d:ad:5e:b1:de:9e:d8:f7:22:4b:21:d9:84: 82:a1:10:27:47:a4:e9:f2:6a:b3:f3:b2:67:b1:db: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AC:0B:CF:65:87:DC:95:97:BC:0A:C5:26:32:D0:EA:40:76:74:CA X509v3 Authority Key Identifier: keyid:AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ca:e4:4f:03:c4:0c:77:54:73:03:a5:ab:5c:e4:1e:86:a9: bf:28:a4:27:35:88:73:09:bf:cd:75:36:42:28:b9:cd:86:b1: d1:17:0d:85:c0:d0:e2:09:75:98:f0:45:aa:7a:70:48:c7:b2: d9:c4:0c:ac:45:37:b7:5a:4e:07:9a:65:29:e6:e1:cb:8b:4d: 6d:7a:ac:33:62:a5:82:82:4a:14:b4:ff:95:24:48:6d:f1:75: 27:76:8b:ff:9e:01:e6:23:cf:6c:a6:37:a0:2e:5e:5a:6f:b9: de:6e:58:de:91:13:e5:86:37:b6:dc:ea:e2:5b:e6:a1:57:ee: 17:5f:29:01:b1:4f:f9:87:43:97:77:73:86:f9:02:69:84:96: 91:b9:6e:26:35:da:a6:a8:be:17:8a:90:15:b8:fc:5c:a2:fb: e2:87:7d:3d:61:a6:43:8a:56:31:ba:c1:e3:9f:6c:25:86:e2: 78:a1:9c:2b:90:98:c1:51:c9:a1:e9:fa:27:ac:36:28:62:4d: fb:6b:1c:2e:34:5a:f5:40:47:e2:d9:ff:32:b3:b0:1d:d6:7e: e6:ff:b2:e8:04:9b:83:33:7a:54:4d:09:4a:28:33:ae:c8:08: bc:c5:18:3d:e2:b1:a1:33:00:b1:e4:fb:f8:d8:5e:dc:34:9b: 40:d9:21:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEGMzaFrfxICM4H49TcxgkMXS4cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwOTA2ODZCNjNDNERERTIwOEI0NDVFMENBQ0QzRjQz ODZFOEQwMDAeFw0yNDExMjMwMjAxMjBaFw0yNDExMjQwNTI5MjBaMDMxMTAvBgNV BAMTKDIzQUMwQkNGNjU4N0RDOTU5N0JDMEFDNTI2MzJEMEVBNDA3Njc0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBW2Gxee1HeJ//I7pVhhzDBZ/ 6U6/atObIR5vo3jhnO5olb5ksmu+8u9k4a9g+CwDhTDuBAocgbSFHdJdKaaNkfg9 yfJ2fHFrA6P/N+noq7Gg0+/ToXyHDs4muHCeUiHFGy4hxeuEK2Of7/fJq+9iy2lX qBRlRcYz9A0pv0Vwze/io6CuBvUZpW33XhGn0FOFoE+5pY1pqIvH0TxVnzcrTfCW iQJzxDTP7p7Tm3wCebEUD4uH4mMg+oaPRLxMilD5/xQYkBJOVw+dYmOYCXLKrzYW /Q+Odh7fwRdcA4eVE7Gmba1esd6e2PciSyHZhIKhECdHpOnyarPzsmex2yRrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI6wLz2WH3JWXvArFJjLQ6kB2dMowHwYDVR0j BBgwFoAUqgkGhrY8Td4gi0ReDKzT9DhujQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlNnRFkxaVhWa1VaRGt0dUJoTTZlU2h4Q0tMR3J0VGVWNjFnY0NiUnFi SmUvMS9BQTA5MDY4NkI2M0M0RERFMjA4QjQ0NUUwQ0FDRDNGNDM4NkU4RDAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDkwNjg2QjYzQzREREUy MDhCNDQ1RTBDQUNEM0Y0Mzg2RThEMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlNnRFkxaVhWa1VaRGt0dUJoTTZlU2h4Q0tMR3J0VGVWNjFnY0NiUnFiSmUvMS9B QTA5MDY4NkI2M0M0RERFMjA4QjQ0NUUwQ0FDRDNGNDM4NkU4RDAwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp8rkTwPEDHdUcwOlq1zkHoapvyikJzWIcwm/zXU2Qii5zYax0RcNhcDQ4gl1 mPBFqnpwSMey2cQMrEU3t1pOB5plKebhy4tNbXqsM2KlgoJKFLT/lSRIbfF1J3aL /54B5iPPbKY3oC5eWm+53m5Y3pET5YY3ttzq4lvmoVfuF18pAbFP+YdDl3dzhvkC aYSWkbluJjXapqi+F4qQFbj8XKL74od9PWGmQ4pWMbrB459sJYbieKGcK5CYwVHJ oen6J6w2KGJN+2scLjRa9UBH4tn/MrOwHdZ+5v+y6ASbgzN6VE0JSigzrsgIvMUY PeKxoTMAseT7+Nhe3DSbQNkhJA== -----END CERTIFICATE-----Generated at Sat Nov 23 03:54:34 2024 by rpki-client on console-ams.rpki-client.org