$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft File: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft (raw, json) Hash identifier: fBrbkvSMi8kXm2nsnJJfqFVKy4QPHOwK/BP7veJY88Y= Subject key identifier: A3:81:05:14:AF:47:F1:18:9D:10:DB:18:DF:09:34:F2:E4:16:EC:91 Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0 Certificate issuer: /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0 Certificate serial: 29AAA6D9166B45217DD4F4611C96A9935A83F18A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft Manifest number: 71 Signing time: Wed 26 Jun 2024 11:06:11 +0000 Manifest this update: Wed 26 Jun 2024 11:01:11 +0000 Manifest next update: Thu 27 Jun 2024 13:05:11 +0000 Files and hashes: 1: 323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (hash: BKglOYUMBMFLDY7pDuXKyIiaw5hwQ4Iq3tYU15X2+Nc=) 2: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl (hash: 27kJQ6sbZA63dct7H2+YTJJLwU1PLTCBkHAxH17Fm5E=) 3: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (hash: 7NUy0AVP9rk1PtRGRiqnk+hcQHLBp/rMCMAUhMOBsm0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 13:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:aa:a6:d9:16:6b:45:21:7d:d4:f4:61:1c:96:a9:93:5a:83:f1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0 Validity Not Before: Jun 26 11:01:11 2024 GMT Not After : Jun 27 13:05:11 2024 GMT Subject: CN=A3810514AF47F1189D10DB18DF0934F2E416EC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:88:03:62:52:9a:d3:fa:9a:66:7f:97:c5: d5:a4:7b:4a:18:d3:1d:32:ae:60:14:18:d6:52:7a: a4:a9:7f:6e:59:3c:c9:4b:2b:07:1e:1b:e4:74:27: fd:0c:4a:bf:0a:1d:88:3a:18:c6:64:4f:b8:fe:39: d0:ef:64:08:9b:45:af:bf:2f:88:ea:60:68:67:46: d2:cb:a4:08:3f:b9:67:33:c6:f3:4e:fb:91:1f:05: e2:84:60:3a:94:48:0d:5d:fa:c4:5b:1e:90:03:05: 4b:4e:78:8d:9d:e9:22:4d:65:6b:e5:55:d1:6b:17: 0f:92:a1:d6:25:72:a9:74:0b:4d:4b:c6:b0:d7:e7: d4:6b:f9:73:30:62:c6:56:24:1e:eb:91:22:83:c8: bb:ea:b7:7d:cb:57:4f:dd:14:cc:96:04:9d:d4:3c: 73:df:62:be:2c:b9:e4:46:14:f3:ce:c2:6a:db:84: 98:da:ff:3b:62:c4:67:06:7b:56:22:ac:0c:d6:cc: 02:46:64:b1:ee:6a:b5:a6:14:7e:7a:15:9a:01:4a: b4:cb:00:7c:e2:cc:c9:0f:6f:5a:eb:ed:1a:61:21: a5:f5:97:5d:6d:6a:99:37:f5:12:91:a8:d9:d5:00: f2:f3:77:bf:24:92:86:97:f1:b6:62:e2:3f:0c:01: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:81:05:14:AF:47:F1:18:9D:10:DB:18:DF:09:34:F2:E4:16:EC:91 X509v3 Authority Key Identifier: keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6b:cf:97:dd:c1:73:d5:1a:05:fe:e0:1e:3b:13:ef:6e:36: 8d:47:bf:db:a3:11:8b:b8:cd:55:9f:20:55:73:64:9e:06:1f: 89:97:b5:60:56:74:d7:23:09:a0:47:f5:7d:ee:67:27:1f:a5: 7b:69:41:ba:d4:e5:e5:b1:c8:79:13:71:c9:9d:31:93:2f:7d: d1:6e:97:e8:49:f3:d8:fc:f5:ad:9b:13:b8:23:12:cf:d3:d2: ea:b6:d7:23:3e:98:93:2b:3d:11:e9:39:25:87:2f:11:d9:90: 98:b9:5d:ba:98:64:1d:02:4c:36:19:d4:1c:78:de:68:64:48: 1f:50:67:f1:ce:c2:3a:f2:5f:54:76:1c:aa:8a:a2:57:1d:2e: e0:4e:f9:9e:ca:fe:b2:89:98:bd:76:52:3d:00:a1:13:bc:2d: d4:0d:de:d5:bf:e6:90:9c:e5:e8:c5:f5:b5:7d:f3:de:66:1e: 9a:df:ef:73:43:a6:44:66:bf:0c:ed:25:90:33:47:80:2f:a3: 3f:fb:d5:0e:21:95:5b:52:2c:48:48:35:21:6e:58:95:6d:e6: a4:d5:79:9a:2b:59:a7:c8:91:bb:ce:18:db:8a:2b:4d:60:82: 7d:4c:d0:59:9d:48:35:fa:8e:c8:4f:c1:4b:b2:bc:53:73:db: 8c:81:9e:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKaqm2RZrRSF91PRhHJapk1qD8YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NzM4MUYyQTdGREUwOEIzNjM5OEFGQjBGQ0U3RTdC NkJEMzFGMDAeFw0yNDA2MjYxMTAxMTFaFw0yNDA2MjcxMzA1MTFaMDMxMTAvBgNV BAMTKEEzODEwNTE0QUY0N0YxMTg5RDEwREIxOERGMDkzNEYyRTQxNkVDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoIgDYlKa0/qaZn+XxdWke0oY 0x0yrmAUGNZSeqSpf25ZPMlLKwceG+R0J/0MSr8KHYg6GMZkT7j+OdDvZAibRa+/ L4jqYGhnRtLLpAg/uWczxvNO+5EfBeKEYDqUSA1d+sRbHpADBUtOeI2d6SJNZWvl VdFrFw+SodYlcql0C01LxrDX59Rr+XMwYsZWJB7rkSKDyLvqt33LV0/dFMyWBJ3U PHPfYr4sueRGFPPOwmrbhJja/ztixGcGe1YirAzWzAJGZLHuarWmFH56FZoBSrTL AHzizMkPb1rr7RphIaX1l11tapk39RKRqNnVAPLzd78kkoaX8bZi4j8MAZUvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo4EFFK9H8RidENsY3wk08uQW7JEwHwYDVR0j BBgwFoAUtZc4Hyp/3gizY5ivsPzn57a9MfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lzcXNzemE3Z3NzOTZNZGY1V3ZMR25wSFBNQ0p1REVGN0E0dEc3Sm9o WFQvMS9CNTk3MzgxRjJBN0ZERTA4QjM2Mzk4QUZCMEZDRTdFN0I2QkQzMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1OTczODFGMkE3RkRFMDhC MzYzOThBRkIwRkNFN0U3QjZCRDMxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lzcXNzemE3Z3NzOTZNZGY1V3ZMR25wSFBNQ0p1REVGN0E0dEc3Sm9oWFQvMS9C NTk3MzgxRjJBN0ZERTA4QjM2Mzk4QUZCMEZDRTdFN0I2QkQzMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtGvPl93Bc9UaBf7gHjsT7242jUe/26MRi7jNVZ8gVXNkngYfiZe1YFZ01yMJ oEf1fe5nJx+le2lButTl5bHIeRNxyZ0xky990W6X6Enz2Pz1rZsTuCMSz9PS6rbX Iz6Ykys9Eek5JYcvEdmQmLlduphkHQJMNhnUHHjeaGRIH1Bn8c7COvJfVHYcqoqi Vx0u4E75nsr+somYvXZSPQChE7wt1A3e1b/mkJzl6MX1tX3z3mYemt/vc0OmRGa/ DO0lkDNHgC+jP/vVDiGVW1IsSEg1IW5YlW3mpNV5mitZp8iRu84Y24orTWCCfUzQ WZ1INfqOyE/BS7K8U3PbjIGevw== -----END CERTIFICATE-----Generated at Wed Jun 26 12:54:48 2024 by rpki-client on console-fra.rpki-client.org