$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json) Hash identifier: oYDgouopTASqbRAzZwgo4Vx65ROXV/H7MjSIAvphEm4= Subject key identifier: FD:C4:E8:E1:F6:CE:52:5D:CA:E2:5B:D7:B4:45:EC:63:AC:F1:8B:10 Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Certificate serial: 663F95EB02B07141EC755434BD736463054B9835 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft Manifest number: 0130 Signing time: Fri 15 Nov 2024 10:32:00 +0000 Manifest this update: Fri 15 Nov 2024 10:27:00 +0000 Manifest next update: Sat 16 Nov 2024 12:06:00 +0000 Files and hashes: 1: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: 3DpoDuvxNlyqzOE+Bl/kqpmEqEuwkD7TYxZ6Hx0ruyE=) 2: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: oTqTNNrqnTEkZ2vw9yFW08D0LW25gTss79eNyDdHLgw=) 3: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: oUCADcip5JgQUvg2OSg8LTpihbkkWUybM651aLZ4cEE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 Nov 2024 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3f:95:eb:02:b0:71:41:ec:75:54:34:bd:73:64:63:05:4b:98:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Validity Not Before: Nov 15 10:27:00 2024 GMT Not After : Nov 16 12:06:00 2024 GMT Subject: CN=FDC4E8E1F6CE525DCAE25BD7B445EC63ACF18B10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:8c:e7:dd:ee:ba:e9:28:ab:2f:c6:44:14: 73:df:f5:ed:fd:f0:09:99:96:12:c5:f1:51:57:c2: 77:78:4b:fe:2e:1c:1c:d4:b8:56:6a:99:b2:88:d9: 69:87:ad:27:43:82:0b:f8:eb:be:ee:7a:0a:ea:30: c7:ac:c3:ea:a1:9d:2b:44:22:98:a1:58:d1:6c:2b: d6:65:76:a9:32:a6:bb:97:f0:0e:0e:60:e6:fd:0d: a5:c4:46:39:db:91:59:3c:8e:b3:5e:ab:6c:a8:12: 5b:a4:77:86:8c:63:ee:de:84:71:7c:a5:47:c7:66: 3b:01:e3:73:2f:1e:9e:40:d1:b5:f4:38:42:db:d8: 52:0e:fc:22:5f:19:f7:4b:4b:3b:a3:63:fc:95:15: 09:62:86:19:1b:37:64:0d:27:a2:67:67:83:47:ab: 93:6f:ae:0a:43:08:ca:25:e4:7a:c5:f6:d8:59:bb: 29:f7:23:7a:06:c3:f3:10:b7:b4:a2:c9:0c:f4:49: 2d:69:db:e8:2e:53:52:cf:4e:03:16:47:42:e4:83: 51:b3:a9:e5:c6:4a:05:4a:0b:64:c3:df:08:93:2a: 9b:05:c3:b0:9a:59:8b:25:49:3a:d8:6e:d5:f9:19: e4:3b:b3:3c:15:04:d0:46:26:72:c3:3b:1e:c5:a5: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C4:E8:E1:F6:CE:52:5D:CA:E2:5B:D7:B4:45:EC:63:AC:F1:8B:10 X509v3 Authority Key Identifier: keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a9:f9:97:da:60:e9:8a:41:2e:12:0f:9b:e9:bd:97:fd:17: 5a:5d:d4:3e:1b:34:68:59:31:12:34:d4:77:68:f1:ef:fa:03: 3b:06:a9:e9:64:1d:cb:65:69:d4:7e:67:23:c1:62:8b:02:ef: 82:fb:6f:46:fd:a5:ab:a6:f2:72:89:06:b1:ce:18:00:8e:13: 02:ec:2f:cf:40:fa:ca:e4:22:34:6a:b5:33:48:1f:c0:ef:f0: d0:0b:b0:4e:27:d7:41:42:6b:86:0e:e8:b8:f1:6e:98:f7:6a: d7:75:30:fc:2b:8e:f9:3d:7f:21:36:47:8c:37:32:a2:87:89: ca:46:fe:a6:dc:95:e6:14:88:65:c1:56:4a:69:63:c8:6a:77: 39:79:db:33:57:81:ef:1d:92:b7:a9:fe:8f:2e:2b:37:68:14: c1:f3:74:4d:4d:83:9c:21:a1:41:48:c3:d9:25:a5:6b:f8:69: 42:99:f6:9e:c6:ad:d9:73:e0:27:22:15:99:e9:79:dc:f2:38: 84:3e:87:16:c2:10:e9:af:d8:0e:72:7f:58:3c:c0:e0:1e:12: 83:6e:a1:b3:4b:b9:17:6b:48:75:24:1e:bb:83:b2:cf:f7:45: f8:7c:f9:40:2b:80:90:04:0f:b8:8b:98:95:00:03:ba:ff:87: 7d:bd:90:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZj+V6wKwcUHsdVQ0vXNkYwVLmDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNTk0N0IzRUIyMjUyREMyQzI4QTFGNUY4NTYxMjMy NjAwMzZGRTAeFw0yNDExMTUxMDI3MDBaFw0yNDExMTYxMjA2MDBaMDMxMTAvBgNV BAMTKEZEQzRFOEUxRjZDRTUyNURDQUUyNUJEN0I0NDVFQzYzQUNGMThCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2q4zn3e666SirL8ZEFHPf9e39 8AmZlhLF8VFXwnd4S/4uHBzUuFZqmbKI2WmHrSdDggv4677uegrqMMesw+qhnStE IpihWNFsK9ZldqkypruX8A4OYOb9DaXERjnbkVk8jrNeq2yoElukd4aMY+7ehHF8 pUfHZjsB43MvHp5A0bX0OELb2FIO/CJfGfdLSzujY/yVFQlihhkbN2QNJ6JnZ4NH q5NvrgpDCMol5HrF9thZuyn3I3oGw/MQt7SiyQz0SS1p2+guU1LPTgMWR0Lkg1Gz qeXGSgVKC2TD3wiTKpsFw7CaWYslSTrYbtX5GeQ7szwVBNBGJnLDOx7FpXybAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/cTo4fbOUl3K4lvXtEXsY6zxixAwHwYDVR0j BBgwFoAUK7WUez6yJS3CwoofX4VhIyYANv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJn MWkvMi8yQkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjU5NDdCM0VCMjI1MkRD MkMyOEExRjVGODU2MTIzMjYwMDM2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJnMWkvMi8y QkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHqn5l9pg6YpBLhIPm+m9l/0XWl3UPhs0aFkxEjTUd2jx7/oDOwap6WQdy2Vp 1H5nI8FiiwLvgvtvRv2lq6bycokGsc4YAI4TAuwvz0D6yuQiNGq1M0gfwO/w0Auw TifXQUJrhg7ouPFumPdq13Uw/CuO+T1/ITZHjDcyooeJykb+ptyV5hSIZcFWSmlj yGp3OXnbM1eB7x2St6n+jy4rN2gUwfN0TU2DnCGhQUjD2SWla/hpQpn2nsat2XPg JyIVmel53PI4hD6HFsIQ6a/YDnJ/WDzA4B4Sg26hs0u5F2tIdSQeu4Oyz/dF+Hz5 QCuAkAQPuIuYlQADuv+Hfb2QZw== -----END CERTIFICATE-----Generated at Fri Nov 15 11:30:27 2024 by rpki-client on console-ams.rpki-client.org