$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: hG857FOMW0WSB9PZYz5NrHwHKIKvNfiF2oIVSh4kJOs= Subject key identifier: B1:94:0E:C3:91:83:6B:F6:C0:AD:4D:22:1C:09:B2:C0:AC:64:C2:26 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 5E92536B5DE52CA9F28D25CD9E709BEDA20E7D5B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 72 Signing time: Wed 26 Jun 2024 09:17:50 +0000 Manifest this update: Wed 26 Jun 2024 09:12:50 +0000 Manifest next update: Thu 27 Jun 2024 12:09:50 +0000 Files and hashes: 1: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: ou9f8JKwMw4/SftU873Z5KOpQv330G98i2QRY+yWruQ=) 2: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: WsPoR6ep5aIw6loVdrgMnJiQt8BhtXvqT9ERTF/B+lI=) 3: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: R27KzniRKO9VO/3d1HpoC6dkRSAkCtLlyU0mCCdNmvE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 12:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:92:53:6b:5d:e5:2c:a9:f2:8d:25:cd:9e:70:9b:ed:a2:0e:7d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Jun 26 09:12:50 2024 GMT Not After : Jun 27 12:09:50 2024 GMT Subject: CN=B1940EC391836BF6C0AD4D221C09B2C0AC64C226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:c8:e6:0a:98:d4:3a:8a:bc:b5:90:96:35: ae:ad:48:bb:b3:de:b9:eb:71:1f:07:1f:d5:7c:3f: 0e:08:ba:94:64:0c:10:78:27:80:8e:47:0d:20:d0: 0f:0f:3e:2e:72:3b:60:ba:46:14:8a:7f:ec:92:fe: e9:c2:f2:8c:69:4f:cc:c9:9e:b8:33:f6:4e:40:f3: 32:21:82:fb:24:af:e0:a0:3b:ff:b1:60:c9:07:2d: 22:f9:db:04:b8:da:93:4b:f5:cb:fc:d8:38:f8:4d: 52:e6:b9:6d:5e:17:ba:b6:0e:31:38:97:d4:bc:bf: d0:f8:63:51:81:04:86:d8:90:26:8c:5d:d0:f4:03: 62:a9:8c:62:fb:17:e3:8c:a0:e9:08:f2:a0:4a:ae: fa:38:d0:a1:02:db:56:aa:f9:8e:da:8e:a5:c3:6a: 91:d6:82:31:35:63:6e:79:1d:71:44:14:c7:58:eb: d4:b9:7f:fb:22:2c:25:3c:56:30:21:21:33:5d:73: 77:62:cc:17:d6:69:24:e5:17:e9:2c:93:d7:f6:f3: 94:66:c1:43:bc:ac:0a:77:0b:d2:22:47:78:7c:f9: 27:8a:c2:bc:3a:08:e6:cf:04:ab:60:2a:f9:ca:ae: d3:d6:9c:84:19:04:a4:f3:b2:80:17:7b:3d:d2:8b: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:94:0E:C3:91:83:6B:F6:C0:AD:4D:22:1C:09:B2:C0:AC:64:C2:26 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9d:df:50:58:89:cb:f7:81:2a:93:58:d0:86:cc:97:e6:dc: 94:3c:a6:f5:c0:ca:7d:9c:64:a0:fb:80:82:53:5b:4e:de:cc: ba:71:61:ef:81:7f:2f:e5:df:e9:fb:28:ab:be:8f:98:f4:92: d9:30:5f:8c:f2:37:e3:b7:11:b4:65:41:a3:ec:6a:49:a4:6d: 65:29:bf:f9:21:29:ea:17:42:80:03:2a:c3:74:51:00:a9:62: 43:6c:a2:34:57:9a:ff:dc:cb:9b:30:00:9d:27:c6:74:f1:57: b5:48:26:43:4b:80:75:60:d4:6e:77:5e:72:2c:b7:b3:dc:ac: b7:ee:b0:36:ac:42:6c:0f:76:19:6c:ba:c2:b1:8c:44:8c:c3: 7f:b4:fe:35:45:45:43:29:af:ab:93:98:5b:af:b0:61:8f:e3: 05:ec:10:ab:bc:5d:b3:b2:f9:81:a5:ad:35:38:c1:d6:03:fe: 1a:92:0c:fd:32:49:9d:ca:87:4f:33:0c:33:53:45:50:06:fe: 78:0b:13:ed:5e:b6:95:cb:06:e2:98:46:3e:e2:cc:a4:a5:70: e5:61:80:61:ba:4a:f0:da:69:53:2f:90:eb:6a:2b:02:f1:ad: 66:4d:02:7b:67:3e:d0:26:0f:7b:a4:1d:be:b8:75:cd:89:8e: 6d:88:27:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXpJTa13lLKnyjSXNnnCb7aIOfVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNDA2MjYwOTEyNTBaFw0yNDA2MjcxMjA5NTBaMDMxMTAvBgNV BAMTKEIxOTQwRUMzOTE4MzZCRjZDMEFENEQyMjFDMDlCMkMwQUM2NEMyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUsjmCpjUOoq8tZCWNa6tSLuz 3rnrcR8HH9V8Pw4IupRkDBB4J4CORw0g0A8PPi5yO2C6RhSKf+yS/unC8oxpT8zJ nrgz9k5A8zIhgvskr+CgO/+xYMkHLSL52wS42pNL9cv82Dj4TVLmuW1eF7q2DjE4 l9S8v9D4Y1GBBIbYkCaMXdD0A2KpjGL7F+OMoOkI8qBKrvo40KEC21aq+Y7ajqXD apHWgjE1Y255HXFEFMdY69S5f/siLCU8VjAhITNdc3dizBfWaSTlF+ksk9f285Rm wUO8rAp3C9IiR3h8+SeKwrw6CObPBKtgKvnKrtPWnIQZBKTzsoAXez3Si3e5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsZQOw5GDa/bArU0iHAmywKxkwiYwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJZ3fUFiJy/eBKpNY0IbMl+bclDym9cDKfZxkoPuAglNbTt7MunFh74F/L+Xf 6fsoq76PmPSS2TBfjPI347cRtGVBo+xqSaRtZSm/+SEp6hdCgAMqw3RRAKliQ2yi NFea/9zLmzAAnSfGdPFXtUgmQ0uAdWDUbndeciy3s9yst+6wNqxCbA92GWy6wrGM RIzDf7T+NUVFQymvq5OYW6+wYY/jBewQq7xds7L5gaWtNTjB1gP+GpIM/TJJncqH TzMMM1NFUAb+eAsT7V62lcsG4phGPuLMpKVw5WGAYbpK8NppUy+Q62orAvGtZk0C e2c+0CYPe6Qdvrh1zYmObYgnZg== -----END CERTIFICATE-----Generated at Wed Jun 26 12:54:49 2024 by rpki-client on console-fra.rpki-client.org