$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft File: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft (raw, json) Hash identifier: 3H3E8Xp9tYP96PWrSIfDqz+8ey4sjRxVonSBl90yPFk= Subject key identifier: FE:1E:17:55:57:B0:12:63:1A:19:91:49:C5:17:9F:D0:21:88:5B:C3 Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78 Certificate issuer: /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78 Certificate serial: 0F27377BC66679EDA1F8616C0003BC1237A54DC1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft Manifest number: 78 Signing time: Sun 30 Jun 2024 18:33:01 +0000 Manifest this update: Sun 30 Jun 2024 18:28:01 +0000 Manifest next update: Mon 01 Jul 2024 21:48:01 +0000 Files and hashes: 1: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (hash: kP6mlsB37sJmAcKU5Diec2NO19zKD3mSF7unp7PIshA=) 2: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl (hash: a4y/a2LhRMUiiTkyze04wnLL8LQ3FHxC6ysDrL8e+nQ=) 3: 323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (hash: CWf0itcwQp5MDOcgJEPVv+R049wpYxZtFROAmcWQ0ag=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Jul 2024 20:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:27:37:7b:c6:66:79:ed:a1:f8:61:6c:00:03:bc:12:37:a5:4d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78 Validity Not Before: Jun 30 18:28:01 2024 GMT Not After : Jul 1 21:48:01 2024 GMT Subject: CN=FE1E175557B012631A199149C5179FD021885BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:47:5c:f8:2e:ad:24:6b:03:32:05:3e:8f: 8d:93:07:f1:7f:6e:43:fe:99:ea:b7:cb:32:fe:b0: 1c:17:eb:53:87:be:79:45:20:c3:06:4f:9c:38:df: 90:dd:61:75:c5:43:10:35:ea:22:11:1e:41:a6:32: 57:1c:ec:f7:08:ab:35:94:0d:51:f6:91:e7:da:2f: 65:08:c2:c5:48:5c:21:8d:b5:64:59:b9:9c:19:4a: 27:e0:67:fc:0e:dc:5b:49:a3:e1:93:85:0b:b0:e1: 19:7e:34:f3:32:e2:5c:db:68:89:12:cd:78:e1:53: e5:52:d2:6b:77:e3:d7:a7:2b:5f:6d:ac:0a:89:70: a2:d9:0e:f4:0b:a7:64:06:b5:90:68:fd:64:7e:3f: 89:1d:e4:d5:57:1c:19:1c:90:98:d7:54:39:a4:3c: ab:6e:8f:54:4e:3a:08:63:aa:fe:ed:af:9d:93:5d: 0e:6f:be:23:00:11:32:ce:fb:f4:dc:8b:f0:fc:f1: 4f:1c:90:54:da:bc:46:24:07:f1:d6:c3:6a:84:18: 3a:1a:f9:78:53:34:1d:71:53:1b:e0:78:f6:30:fd: 67:80:18:d7:4a:dd:ed:33:e7:f4:bb:4d:40:c0:04: c2:39:a1:59:69:5a:8e:aa:fd:5c:49:f5:57:f7:b4: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1E:17:55:57:B0:12:63:1A:19:91:49:C5:17:9F:D0:21:88:5B:C3 X509v3 Authority Key Identifier: keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:76:c2:dd:bf:d8:10:e0:2e:77:85:12:93:73:fe:96:22:e5: 53:a3:e3:19:9f:99:a6:4d:6b:f6:18:55:ea:4b:e2:38:de:4f: d0:5b:7d:1d:5a:51:ac:f3:70:7f:a7:c0:7d:98:12:41:b9:73: 08:69:3c:60:5d:28:f5:52:80:96:3d:da:e6:e3:fa:f4:67:82: 62:79:ca:49:e5:65:d1:d6:6e:29:90:45:df:bb:28:cc:e9:2b: 2c:aa:33:49:c0:27:6a:e0:3e:75:68:1b:17:ce:16:7d:bb:f7: 4a:17:83:98:b9:85:61:90:c1:b3:16:08:de:04:07:88:af:40: dc:18:54:26:e3:ab:00:c3:cf:ed:d0:1f:c9:8e:5e:6b:b4:d1: 27:72:9c:ef:f9:ab:7b:1f:94:6d:23:c7:3f:b1:9c:7b:41:59: 06:98:bb:35:7b:f5:24:a8:86:b1:37:f1:47:aa:06:23:9d:75: cf:a4:40:97:ec:a8:81:39:d1:ea:cf:01:ea:93:52:c5:f8:cf: cc:40:8d:45:f8:68:42:c4:dd:c9:3d:7c:0b:30:99:91:fd:e5: 3d:78:23:c4:8e:d4:c6:f7:77:aa:37:85:7c:03:1c:a1:e3:3c: 78:5e:dc:76:67:cb:0d:a7:38:1e:11:78:80:69:a9:c7:52:b7: 6b:6d:c5:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDyc3e8Zmee2h+GFsAAO8EjelTcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2Nzg5OTdENjY2QkY5MjgxRkZFQUI3OEI2RDI4QTFG QTUxRkY3ODAeFw0yNDA2MzAxODI4MDFaFw0yNDA3MDEyMTQ4MDFaMDMxMTAvBgNV BAMTKEZFMUUxNzU1NTdCMDEyNjMxQTE5OTE0OUM1MTc5RkQwMjE4ODVCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKEdc+C6tJGsDMgU+j42TB/F/ bkP+meq3yzL+sBwX61OHvnlFIMMGT5w435DdYXXFQxA16iIRHkGmMlcc7PcIqzWU DVH2kefaL2UIwsVIXCGNtWRZuZwZSifgZ/wO3FtJo+GThQuw4Rl+NPMy4lzbaIkS zXjhU+VS0mt349enK19trAqJcKLZDvQLp2QGtZBo/WR+P4kd5NVXHBkckJjXVDmk PKtuj1ROOghjqv7tr52TXQ5vviMAETLO+/Tci/D88U8ckFTavEYkB/HWw2qEGDoa +XhTNB1xUxvgePYw/WeAGNdK3e0z5/S7TUDABMI5oVlpWo6q/VxJ9Vf3tGkHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/h4XVVewEmMaGZFJxRef0CGIW8MwHwYDVR0j BBgwFoAUJWeJl9Zmv5KB/+q3i20oofpR/3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJE SzcvMS8yNTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1Njc4OTk3RDY2NkJGOTI4 MUZGRUFCNzhCNkQyOEExRkE1MUZGNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJESzcvMS8y NTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASXbC3b/YEOAud4USk3P+liLlU6PjGZ+Zpk1r9hhV6kviON5P0Ft9HVpRrPNw f6fAfZgSQblzCGk8YF0o9VKAlj3a5uP69GeCYnnKSeVl0dZuKZBF37sozOkrLKoz ScAnauA+dWgbF84Wfbv3SheDmLmFYZDBsxYI3gQHiK9A3BhUJuOrAMPP7dAfyY5e a7TRJ3Kc7/mrex+UbSPHP7Gce0FZBpi7NXv1JKiGsTfxR6oGI511z6RAl+yogTnR 6s8B6pNSxfjPzECNRfhoQsTdyT18CzCZkf3lPXgjxI7Uxvd3qjeFfAMcoeM8eF7c dmfLDac4HhF4gGmpx1K3a23FBw== -----END CERTIFICATE-----Generated at Sun Jun 30 21:36:07 2024 by rpki-client on console-fra.rpki-client.org