$ rpki-client -vvf rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.mft File: 17A303D8E6A89A6A5148E842F9400F754E558ED5.mft (raw, json) Hash identifier: w8tkxORyTVDD3IcjQN9djzVdRq+6Sl3wn5du3+jOrt8= Subject key identifier: 65:87:9F:B8:29:7B:FF:52:59:27:00:FE:EA:9A:57:23:F5:FC:CC:E1 Authority key identifier: 17:A3:03:D8:E6:A8:9A:6A:51:48:E8:42:F9:40:0F:75:4E:55:8E:D5 Certificate issuer: /CN=17A303D8E6A89A6A5148E842F9400F754E558ED5 Certificate serial: 47C1F40277BDBAFB479DC8B3FCBBD0DB31FEE937 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer Subject info access: rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.mft Manifest number: 0136 Signing time: Fri 22 Nov 2024 07:56:23 +0000 Manifest this update: Fri 22 Nov 2024 07:51:23 +0000 Manifest next update: Sat 23 Nov 2024 11:15:23 +0000 Files and hashes: 1: 3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa (hash: 8Dl652xkKlauxIdG4R6j0ernP7WlyqjIx+xh69b/Qkc=) 2: 17A303D8E6A89A6A5148E842F9400F754E558ED5.crl (hash: SX/O7nWbPQhWYIXLJIe+1W0cY143b3vcH71ZvDjTx70=) 3: 323830343a323538343a3a2f33322d3336203d3e20323634323835.roa (hash: 8DC3n1647gIClpjhRe+buCLw+x1LdsgxnxLKp9SnWgE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.crl rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 11:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c1:f4:02:77:bd:ba:fb:47:9d:c8:b3:fc:bb:d0:db:31:fe:e9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A303D8E6A89A6A5148E842F9400F754E558ED5 Validity Not Before: Nov 22 07:51:23 2024 GMT Not After : Nov 23 11:15:23 2024 GMT Subject: CN=65879FB8297BFF52592700FEEA9A5723F5FCCCE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bf:50:48:f9:56:2d:65:53:6a:f0:0e:3b:20: 1a:07:44:21:f4:01:5a:bf:d5:75:6f:e9:64:fd:8e: 76:08:53:6c:d4:cc:4b:47:18:8f:9a:9b:9f:9f:a3: fb:7d:f3:b4:41:82:0e:0e:64:13:6b:be:bc:a8:2f: bf:23:46:8e:c0:43:82:0f:cf:36:26:31:00:2c:9c: 4f:86:bb:9f:41:1e:2b:40:db:f2:8b:10:73:27:93: df:cc:63:23:1b:85:ce:e7:e0:b3:60:7b:ce:6f:b5: 68:67:1f:bd:72:2a:a5:e2:27:d7:e1:c9:3b:61:fe: aa:03:cd:19:b7:69:3b:0c:91:cf:9d:1a:d7:59:c5: 27:cb:b0:29:94:5b:10:d9:5d:66:ab:2c:86:8d:29: 32:e3:06:ab:e6:f7:b1:91:12:67:8b:07:e3:c9:a7: ab:9a:7a:86:bc:d5:36:bf:92:63:17:d9:aa:79:31: 54:ec:75:c9:9b:03:0d:a4:8f:02:3a:a3:69:f8:b0: 1f:24:4c:68:55:56:1e:0d:d7:aa:86:9e:b5:6a:42: 73:20:83:54:eb:48:13:55:39:85:a9:11:5f:4f:fe: 7b:76:35:c0:e2:36:0e:a2:81:11:92:51:ff:51:93: 37:25:cd:55:93:da:5c:90:ca:39:dd:d7:13:4b:67: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:87:9F:B8:29:7B:FF:52:59:27:00:FE:EA:9A:57:23:F5:FC:CC:E1 X509v3 Authority Key Identifier: keyid:17:A3:03:D8:E6:A8:9A:6A:51:48:E8:42:F9:40:0F:75:4E:55:8E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f6:38:ba:47:c5:2b:21:96:6f:59:ff:f1:72:fe:9e:dc:19: b9:23:0c:45:f5:4e:a4:39:c1:29:a5:33:ab:cb:c6:9c:21:97: 5d:3c:0b:7f:2c:86:9b:c7:9f:0a:fa:47:24:a2:ee:93:93:d0: e8:78:cc:5b:1f:f0:d3:a2:95:8b:9e:91:d7:55:75:52:56:08: a4:fe:67:ec:54:e2:7a:ef:0a:d8:10:5a:55:70:4a:f3:e6:ca: 21:77:c3:96:d9:df:4f:c6:99:ff:9e:47:19:75:77:6f:c3:a7: 04:f5:90:08:90:26:4f:41:06:c3:e5:fb:b6:7c:90:fc:44:8e: 7c:92:2f:f5:a6:1f:09:b3:c6:81:ac:97:7b:ee:c9:5a:ae:08: 3c:97:1f:7a:59:07:1b:9d:37:5e:5f:14:f1:5d:27:b9:89:db: 3c:de:f4:26:22:06:57:0f:37:06:44:fb:8f:40:35:f3:4a:1a: d2:e0:52:9b:6f:80:e3:27:b7:a4:be:86:10:66:6b:ab:54:cd: 4b:f3:df:d0:5e:13:f2:fd:c2:1f:28:a1:96:56:4d:e1:3b:f3: 4b:60:58:8c:e5:c0:d6:bb:51:d0:49:37:c8:34:b2:16:ed:69: 8d:ab:66:35:f7:49:4e:eb:67:00:8d:b9:84:be:fc:14:bc:10: 94:de:71:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR8H0Ane9uvtHnciz/LvQ2zH+6TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBMzAzRDhFNkE4OUE2QTUxNDhFODQyRjk0MDBGNzU0 RTU1OEVENTAeFw0yNDExMjIwNzUxMjNaFw0yNDExMjMxMTE1MjNaMDMxMTAvBgNV BAMTKDY1ODc5RkI4Mjk3QkZGNTI1OTI3MDBGRUVBOUE1NzIzRjVGQ0NDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtv1BI+VYtZVNq8A47IBoHRCH0 AVq/1XVv6WT9jnYIU2zUzEtHGI+am5+fo/t987RBgg4OZBNrvryoL78jRo7AQ4IP zzYmMQAsnE+Gu59BHitA2/KLEHMnk9/MYyMbhc7n4LNge85vtWhnH71yKqXiJ9fh yTth/qoDzRm3aTsMkc+dGtdZxSfLsCmUWxDZXWarLIaNKTLjBqvm97GREmeLB+PJ p6uaeoa81Ta/kmMX2ap5MVTsdcmbAw2kjwI6o2n4sB8kTGhVVh4N16qGnrVqQnMg g1TrSBNVOYWpEV9P/nt2NcDiNg6igRGSUf9RkzclzVWT2lyQyjnd1xNLZ5YtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZYefuCl7/1JZJwD+6ppXI/X8zOEwHwYDVR0j BBgwFoAUF6MD2OaommpRSOhC+UAPdU5VjtUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0ZEVkJKQ2ZOa2lIcnRlMmFoYzFOQXVHbnprOXZGbW9FTGNnQ1FOV3ND eXIvMS8xN0EzMDNEOEU2QTg5QTZBNTE0OEU4NDJGOTQwMEY3NTRFNTU4RUQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QTMwM0Q4RTZBODlBNkE1 MTQ4RTg0MkY5NDAwRjc1NEU1NThFRDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0ZEVkJKQ2ZOa2lIcnRlMmFoYzFOQXVHbnprOXZGbW9FTGNnQ1FOV3NDeXIvMS8x N0EzMDNEOEU2QTg5QTZBNTE0OEU4NDJGOTQwMEY3NTRFNTU4RUQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPPY4ukfFKyGWb1n/8XL+ntwZuSMMRfVOpDnBKaUzq8vGnCGXXTwLfyyGm8ef CvpHJKLuk5PQ6HjMWx/w06KVi56R11V1UlYIpP5n7FTieu8K2BBaVXBK8+bKIXfD ltnfT8aZ/55HGXV3b8OnBPWQCJAmT0EGw+X7tnyQ/ESOfJIv9aYfCbPGgayXe+7J Wq4IPJcfelkHG503Xl8U8V0nuYnbPN70JiIGVw83BkT7j0A180oa0uBSm2+A4ye3 pL6GEGZrq1TNS/Pf0F4T8v3CHyihllZN4TvzS2BYjOXA1rtR0Ek3yDSyFu1pjatm NfdJTutnAI25hL78FLwQlN5xCw== -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org