$ rpki-client -vvf rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft File: 8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft (raw, json) Hash identifier: f0mXFv1K3eLJW6MN0A06sSWng7Sy5+kMB4t5eNE5c00= Subject key identifier: D5:41:59:58:A2:03:20:FA:B6:ED:61:76:C4:F7:D9:63:BD:DD:B0:D1 Authority key identifier: 84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34 Certificate issuer: /CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34 Certificate serial: 202E95FB802C4B70737FABCE4F416D61E8B926C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer Subject info access: rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft Manifest number: 011E Signing time: Fri 22 Nov 2024 10:19:12 +0000 Manifest this update: Fri 22 Nov 2024 10:14:12 +0000 Manifest next update: Sat 23 Nov 2024 11:27:12 +0000 Files and hashes: 1: 3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa (hash: d2xVGm7YFvkNs3By6FOCt2fuV2G1oav2ZfrYI9eorXQ=) 2: 323830343a323630383a3a2f33322d3438203d3e20323634333139.roa (hash: UGVI5VYP9UWM5uxG1BC9ywkbpo8IOcRpMW/p19VuFX4=) 3: 8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl (hash: vQG2rkh9hKFfFym60bL64IQ//imSk30BA2jpGSj8wpw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 11:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2e:95:fb:80:2c:4b:70:73:7f:ab:ce:4f:41:6d:61:e8:b9:26:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34 Validity Not Before: Nov 22 10:14:12 2024 GMT Not After : Nov 23 11:27:12 2024 GMT Subject: CN=D5415958A20320FAB6ED6176C4F7D963BDDDB0D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:b9:43:85:bb:d6:59:89:9e:70:f3:18:d9: 92:9f:70:3b:0e:03:1b:fd:22:02:f2:b6:6c:60:6e: 6e:66:04:ce:25:bb:cc:6a:ff:30:01:b5:4c:c2:ea: 58:88:6a:c5:b0:53:dd:48:21:99:3d:ac:54:e4:cf: 4e:8b:4b:ca:89:48:83:8a:d4:9d:5c:50:af:a5:50: e3:48:26:16:03:db:ce:0d:5f:9a:d3:a7:0b:84:76: e9:8e:c6:0b:24:47:d2:53:03:ba:77:4a:f8:a5:77: 5f:4e:2b:d2:95:10:31:5e:7d:d0:4e:05:59:d0:31: fb:ba:35:f4:88:97:05:e8:c3:ea:36:5b:a0:8b:cf: b4:89:60:fa:40:1e:f9:d2:c8:22:bb:aa:a8:2d:0c: 18:e1:fa:af:72:e1:02:86:49:20:b4:ec:b4:e7:10: e4:ca:fa:85:1f:29:40:e7:df:69:e4:dc:bf:e3:64: d6:7c:f3:38:a2:91:d1:16:c7:75:de:5c:fc:4b:0c: 20:a2:b4:c3:a9:fd:cb:9e:33:8d:13:f4:e9:3f:0e: 5a:7e:92:44:3e:a6:49:ab:43:39:58:8c:66:07:d7: d6:dd:96:47:01:7f:75:02:51:f9:6f:71:4c:30:41: 1f:f0:8b:1a:77:e0:f2:53:73:cc:e1:4f:f5:44:f9: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:41:59:58:A2:03:20:FA:B6:ED:61:76:C4:F7:D9:63:BD:DD:B0:D1 X509v3 Authority Key Identifier: keyid:84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1a:ff:2d:16:5a:79:e0:6d:6f:bd:07:fc:74:e1:0a:81:9c: 04:a8:d7:79:41:c1:a7:df:fc:57:46:10:36:99:eb:eb:4a:ff: 19:e9:01:e8:0e:fe:34:bb:6d:c2:ce:71:3b:99:f4:44:25:b0: ae:69:0b:48:36:c8:06:7c:90:62:86:5a:91:e8:62:2d:96:f5: 0f:4d:96:72:39:f9:47:d7:f2:10:cb:72:e9:8c:71:cb:85:07: 62:e9:f7:a3:ce:60:ae:43:d7:2e:c9:4b:43:35:a4:38:22:df: 97:71:1b:f4:b3:c1:8b:20:62:bb:58:7d:01:e6:43:c6:21:3e: a2:7f:e9:5d:9e:76:42:52:71:e8:b3:a1:54:0d:2c:6f:5f:fc: 0f:b0:01:64:fc:db:85:14:11:b0:83:94:63:db:79:55:5d:7c: ac:7e:85:c7:b2:c1:be:de:fb:cb:71:f6:75:2d:91:ed:22:57: e6:20:34:38:2b:4f:d4:72:18:05:0d:84:88:74:e3:23:ee:ed: 28:1a:dc:4d:2b:7e:cd:b3:88:6b:5b:dd:57:66:3c:8c:6a:ae: e9:48:3d:24:d3:92:be:c7:5d:d9:32:ab:48:91:1c:04:e8:46: 0b:e5:b4:e7:6c:c3:77:9d:f3:1e:ec:aa:71:72:88:a3:4b:ef: e6:bf:a9:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIC6V+4AsS3Bzf6vOT0FtYei5JsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5ODM1NkQ1MTdCOUE0QkNDOUE5NTlGRDExMkVENjc1 NUZEN0QzNDAeFw0yNDExMjIxMDE0MTJaFw0yNDExMjMxMTI3MTJaMDMxMTAvBgNV BAMTKEQ1NDE1OTU4QTIwMzIwRkFCNkVENjE3NkM0RjdEOTYzQkREREIwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfLlDhbvWWYmecPMY2ZKfcDsO Axv9IgLytmxgbm5mBM4lu8xq/zABtUzC6liIasWwU91IIZk9rFTkz06LS8qJSIOK 1J1cUK+lUONIJhYD284NX5rTpwuEdumOxgskR9JTA7p3Svild19OK9KVEDFefdBO BVnQMfu6NfSIlwXow+o2W6CLz7SJYPpAHvnSyCK7qqgtDBjh+q9y4QKGSSC07LTn EOTK+oUfKUDn32nk3L/jZNZ88ziikdEWx3XeXPxLDCCitMOp/cueM40T9Ok/Dlp+ kkQ+pkmrQzlYjGYH19bdlkcBf3UCUflvcUwwQR/wixp34PJTc8zhT/VE+eZxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1UFZWKIDIPq27WF2xPfZY73dsNEwHwYDVR0j BBgwFoAUhJg1bVF7mkvMmpWf0RLtZ1X9fTQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzc5QzJuVUpWWUpUd3lVTFpHb29tOTkzVUVGR0NDeGNUejhUNEVXZ0sz YTQvMC84NDk4MzU2RDUxN0I5QTRCQ0M5QTk1OUZEMTEyRUQ2NzU1RkQ3RDM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OTgzNTZENTE3QjlBNEJD QzlBOTU5RkQxMTJFRDY3NTVGRDdEMzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Nzc5QzJuVUpWWUpUd3lVTFpHb29tOTkzVUVGR0NDeGNUejhUNEVXZ0szYTQvMC84 NDk4MzU2RDUxN0I5QTRCQ0M5QTk1OUZEMTEyRUQ2NzU1RkQ3RDM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKxr/LRZaeeBtb70H/HThCoGcBKjXeUHBp9/8V0YQNpnr60r/GekB6A7+NLtt ws5xO5n0RCWwrmkLSDbIBnyQYoZakehiLZb1D02Wcjn5R9fyEMty6Yxxy4UHYun3 o85grkPXLslLQzWkOCLfl3Eb9LPBiyBiu1h9AeZDxiE+on/pXZ52QlJx6LOhVA0s b1/8D7ABZPzbhRQRsIOUY9t5VV18rH6Fx7LBvt77y3H2dS2R7SJX5iA0OCtP1HIY BQ2EiHTjI+7tKBrcTSt+zbOIa1vdV2Y8jGqu6Ug9JNOSvsdd2TKrSJEcBOhGC+W0 52zDd53zHuyqcXKIo0vv5r+pIg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org