$ rpki-client -vvf rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft File: AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft (raw, json) Hash identifier: zH8u2hJIPXJ+9rkc60VttaJouoIc+Ns8gVpFkvg4R4E= Subject key identifier: 8C:DE:AE:A9:E1:F2:1C:38:88:E7:6B:79:DE:81:A1:7D:B0:EE:DD:D9 Authority key identifier: AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9 Certificate issuer: /CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9 Certificate serial: 41349A6CA960F393F2208E6A2A47C831A7E480C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft Manifest number: 9A Signing time: Mon 25 Nov 2024 19:48:38 +0000 Manifest this update: Mon 25 Nov 2024 19:43:38 +0000 Manifest next update: Tue 26 Nov 2024 22:03:38 +0000 Files and hashes: 1: 323830343a343938343a3a2f33322d313238203d3e20323637313838.roa (hash: MIvar1WwVFEy8tLlGfc8n/tcNfBJ/y9Ff18oopb91Uc=) 2: 34352e3233312e32382e302f32322d3332203d3e20323637313838.roa (hash: /qESdZxzCrV9f94e7OAZkOB/4CnBQ8QhISCqH41USow=) 3: AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.crl (hash: ciXCQQ1TZAIMD4uadp6sEwZFb4ZZR4Vw+yNrGM+8i+w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.crl rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 22:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:34:9a:6c:a9:60:f3:93:f2:20:8e:6a:2a:47:c8:31:a7:e4:80:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9 Validity Not Before: Nov 25 19:43:38 2024 GMT Not After : Nov 26 22:03:38 2024 GMT Subject: CN=8CDEAEA9E1F21C3888E76B79DE81A17DB0EEDDD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:1d:fd:43:90:f3:4f:fd:5e:06:14:85:03: 55:cb:97:85:8b:69:67:78:00:18:21:74:82:3a:0c: 40:63:39:34:52:5d:a9:ff:b6:ff:f5:3b:88:96:d7: f5:39:d3:84:9b:f9:94:9b:5e:d7:cd:53:7f:0a:24: ff:cd:fe:2a:5a:6b:de:6b:6a:ab:1e:34:ef:73:e2: 3f:e7:71:8d:79:59:47:a5:2f:7c:8c:c4:04:f9:43: a8:19:79:02:4e:01:db:65:66:50:f0:04:55:bb:e0: 14:56:4d:50:de:e0:ad:ca:24:93:f1:77:5d:4c:68: b1:7c:de:76:46:2b:dd:9a:2b:10:6d:9d:a6:0d:5d: 9b:4b:4f:85:db:7f:67:d8:ff:11:04:d8:49:3e:06: 95:93:98:47:55:1e:dd:ea:f0:ae:0e:6f:cb:b6:6d: 3b:f5:2e:47:2d:14:c3:ec:95:9d:bd:f2:94:16:d8: ee:3e:ca:21:14:7e:1a:d1:19:ac:e3:ef:1c:73:77: f8:76:c8:7a:9d:89:f5:e4:b2:ed:5d:40:a0:03:4e: fe:cd:52:a8:f8:93:98:04:71:73:53:66:be:29:b6: 8f:47:7d:11:24:dd:02:58:aa:a5:5d:4c:c7:8c:57: 5f:44:d4:79:01:b6:33:ce:3b:c4:8a:8a:9c:4f:03: ca:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DE:AE:A9:E1:F2:1C:38:88:E7:6B:79:DE:81:A1:7D:B0:EE:DD:D9 X509v3 Authority Key Identifier: keyid:AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:57:77:4d:9d:94:5c:23:04:47:9f:a1:c5:e0:54:da:4a:31: ff:ed:88:69:f9:93:20:c3:c5:26:a3:d9:9c:72:db:49:36:b5: 5f:00:25:4d:b2:53:2f:74:b9:5b:c5:d9:6b:70:58:b4:7e:fe: f5:0b:bf:1a:f7:32:ee:0c:11:1a:13:3d:76:ba:e1:98:9f:84: 88:cd:79:76:51:43:3b:44:55:6a:b4:56:22:3b:46:ef:9c:44: 48:84:79:0c:cf:7a:13:b9:d7:dc:00:1e:49:eb:2e:54:2e:38: 0d:d9:a8:41:64:ea:bc:c3:55:85:08:69:5d:9d:8c:69:8a:1f: 98:c5:e7:a7:fc:65:97:bf:c7:55:b7:72:8b:80:01:05:f8:d7: 76:27:42:47:9f:5d:2b:bc:de:ee:0c:3e:28:1e:5f:83:e7:e7: d2:7c:6e:3e:96:ef:5f:bd:34:5b:e9:95:19:98:26:d6:22:7f: a8:9b:2f:35:ee:34:ae:57:8d:f3:9a:e6:b3:86:54:08:3e:72: f1:f0:05:ba:6a:b7:66:d7:2a:0a:21:39:db:5e:ca:b5:40:94: 30:0a:f2:a6:a3:5c:f8:03:d4:41:27:59:5f:40:81:b0:60:3b: 3c:09:2b:58:b2:42:50:1f:cf:ef:b8:04:f5:d4:69:b0:ce:7e: e6:bb:79:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQTSabKlg85PyII5qKkfIMafkgMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QzE5N0YzNjY1MjA1QTJDOUVERjhFNjgwRThBRTU3 NUFGOTdEOTAeFw0yNDExMjUxOTQzMzhaFw0yNDExMjYyMjAzMzhaMDMxMTAvBgNV BAMTKDhDREVBRUE5RTFGMjFDMzg4OEU3NkI3OURFODFBMTdEQjBFRURERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdB39Q5DzT/1eBhSFA1XLl4WL aWd4ABghdII6DEBjOTRSXan/tv/1O4iW1/U504Sb+ZSbXtfNU38KJP/N/ipaa95r aqseNO9z4j/ncY15WUelL3yMxAT5Q6gZeQJOAdtlZlDwBFW74BRWTVDe4K3KJJPx d11MaLF83nZGK92aKxBtnaYNXZtLT4Xbf2fY/xEE2Ek+BpWTmEdVHt3q8K4Ob8u2 bTv1LkctFMPslZ298pQW2O4+yiEUfhrRGazj7xxzd/h2yHqdifXksu1dQKADTv7N Uqj4k5gEcXNTZr4pto9HfREk3QJYqqVdTMeMV19E1HkBtjPOO8SKipxPA8rzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjN6uqeHyHDiI52t53oGhfbDu3dkwHwYDVR0j BBgwFoAUr0wZfzZlIFosnt+OaA6K5XWvl9kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlVhNXhXZXNSU2lYNHVpN0c2am1vWWdINkJhckRqOHp6dVEzSnJneVB3 VGgvMC9BRjRDMTk3RjM2NjUyMDVBMkM5RURGOEU2ODBFOEFFNTc1QUY5N0Q5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNEMxOTdGMzY2NTIwNUEy QzlFREY4RTY4MEU4QUU1NzVBRjk3RDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlVhNXhXZXNSU2lYNHVpN0c2am1vWWdINkJhckRqOHp6dVEzSnJneVB3VGgvMC9B RjRDMTk3RjM2NjUyMDVBMkM5RURGOEU2ODBFOEFFNTc1QUY5N0Q5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArFd3TZ2UXCMER5+hxeBU2kox/+2IafmTIMPFJqPZnHLbSTa1XwAlTbJTL3S5 W8XZa3BYtH7+9Qu/Gvcy7gwRGhM9drrhmJ+EiM15dlFDO0RVarRWIjtG75xESIR5 DM96E7nX3AAeSesuVC44DdmoQWTqvMNVhQhpXZ2MaYofmMXnp/xll7/HVbdyi4AB BfjXdidCR59dK7ze7gw+KB5fg+fn0nxuPpbvX700W+mVGZgm1iJ/qJsvNe40rleN 85rms4ZUCD5y8fAFumq3ZtcqCiE5217KtUCUMArypqNc+APUQSdZX0CBsGA7PAkr WLJCUB/P77gE9dRpsM5+5rt5Ew== -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:52 2024 by rpki-client on console-fra.rpki-client.org