$ rpki-client -vvf rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/1/BF8E3488311E68A2213939396C95A32C1B970903.mft File: BF8E3488311E68A2213939396C95A32C1B970903.mft (raw, json) Hash identifier: gsHkLyto9j8nJdqCFEYnTl8kbe4AQ0ROtxf9tqsH/vs= Subject key identifier: A3:C0:BD:EC:A3:13:A8:08:6E:F6:FB:3C:01:FD:FC:78:02:28:A0:B7 Authority key identifier: BF:8E:34:88:31:1E:68:A2:21:39:39:39:6C:95:A3:2C:1B:97:09:03 Certificate issuer: /CN=BF8E3488311E68A2213939396C95A32C1B970903 Certificate serial: 6DCBC27C2CB0FEACA3A1CEDD07FF2426A9EB55D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8E3488311E68A2213939396C95A32C1B970903.cer Subject info access: rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/1/BF8E3488311E68A2213939396C95A32C1B970903.mft Manifest number: 75 Signing time: Sun 30 Jun 2024 21:04:57 +0000 Manifest this update: Sun 30 Jun 2024 20:59:57 +0000 Manifest next update: Mon 01 Jul 2024 21:26:57 +0000 Files and hashes: 1: 323830343a336337383a3a2f33322d3438203d3e20323636323134.roa (hash: oeWbghX+7TrHfA0MupwQqr0ZNnotjqo+HvKh0shYoWQ=) 2: 3139302e3132332e3230342e302f32322d3234203d3e20323636323134.roa (hash: POkwdyNcViDC3DXzA43y8hqMOZMr+IsKWjDUJ+X3jPo=) 3: BF8E3488311E68A2213939396C95A32C1B970903.crl (hash: XvklageBztMnpQlsbewU9cfDXOQS03YJJ/vwP5nUmGw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/1/BF8E3488311E68A2213939396C95A32C1B970903.crl rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/1/BF8E3488311E68A2213939396C95A32C1B970903.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8E3488311E68A2213939396C95A32C1B970903.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Jul 2024 20:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cb:c2:7c:2c:b0:fe:ac:a3:a1:ce:dd:07:ff:24:26:a9:eb:55:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF8E3488311E68A2213939396C95A32C1B970903 Validity Not Before: Jun 30 20:59:57 2024 GMT Not After : Jul 1 21:26:57 2024 GMT Subject: CN=A3C0BDECA313A8086EF6FB3C01FDFC780228A0B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:b4:5e:7f:a8:18:ee:6d:58:2c:dc:cd:79: a3:6b:ee:da:80:f0:fc:58:c1:34:75:62:d8:6a:82: ba:d6:51:34:9a:77:65:76:63:48:f3:ef:ad:43:54: 78:73:a3:ce:da:29:59:a5:bc:19:c4:0d:70:cc:7f: fa:ad:41:04:4e:58:e4:af:8c:9d:bd:46:9d:c9:6b: 8d:d5:8f:41:2e:30:f3:bd:4e:85:69:4d:79:55:49: 66:8a:09:82:8d:09:2b:7d:cf:3a:87:2f:b1:13:53: 36:ee:a9:50:42:f1:f4:36:a4:e2:86:3c:d9:4e:80: b2:44:cd:13:4a:24:3a:30:87:3e:eb:16:13:7e:bb: ef:a1:9f:80:92:e1:52:e0:7f:e3:d6:ca:98:70:83: 4f:e9:7d:02:13:9f:b5:94:53:d6:fa:93:c1:34:8d: 88:f0:2e:a1:30:37:fa:77:ae:b9:ce:f2:71:d3:d9: 5b:1d:40:aa:9c:01:20:cb:9e:2c:d5:0d:69:5e:81: a4:96:8d:95:ce:b0:dc:b1:3b:73:a2:d9:9c:76:b2: ee:4b:16:db:39:16:6f:8a:28:90:42:38:1e:16:e7: fa:1e:d5:4e:79:ba:a5:ec:93:18:88:6c:29:db:62: 65:9a:36:2b:06:21:f7:00:d6:7f:77:1a:b4:08:31: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C0:BD:EC:A3:13:A8:08:6E:F6:FB:3C:01:FD:FC:78:02:28:A0:B7 X509v3 Authority Key Identifier: keyid:BF:8E:34:88:31:1E:68:A2:21:39:39:39:6C:95:A3:2C:1B:97:09:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/1/BF8E3488311E68A2213939396C95A32C1B970903.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8E3488311E68A2213939396C95A32C1B970903.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/1/BF8E3488311E68A2213939396C95A32C1B970903.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ea:b4:58:cf:1d:e4:d9:08:b2:96:be:f2:80:d5:d1:da:fc: 4e:97:3b:c7:90:bf:08:e6:bc:32:52:d0:6d:12:c6:11:c2:f2: 5a:47:82:d9:72:63:ca:c7:d3:33:19:48:dc:6f:66:7e:a7:f7: 99:7e:5f:55:1d:e8:f8:e1:5b:05:c1:a4:ac:67:a5:88:b8:79: 85:1d:06:6b:c7:97:d5:a6:f9:51:94:08:07:aa:65:db:58:27: eb:93:62:68:4c:17:2c:95:54:89:56:02:19:6d:d5:34:d1:f8: 67:d3:a3:08:fe:6a:37:95:76:04:ee:20:ac:21:48:47:ee:8f: f9:bd:60:04:44:2d:bd:38:9c:71:2f:76:be:24:32:5c:ad:23: 5d:82:ec:af:19:d8:77:ba:ef:5c:5f:18:84:29:69:69:bd:04: ee:09:55:77:60:27:ac:d7:c9:f8:db:8f:7f:f2:ed:4e:61:c8: f7:df:d2:5c:29:56:7e:f5:a0:b9:02:67:c7:41:9e:bf:6d:fb: 5f:4c:56:5f:79:61:37:be:50:07:80:3a:37:32:10:ea:64:7a: 61:36:b8:f8:96:60:66:31:2d:a1:ce:3a:2f:46:ed:7b:ae:e5: 0c:ae:58:0e:7b:7f:aa:c0:22:11:59:e6:82:a0:9b:d7:c5:a3: ab:03:67:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbcvCfCyw/qyjoc7dB/8kJqnrVdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4RTM0ODgzMTFFNjhBMjIxMzkzOTM5NkM5NUEzMkMx Qjk3MDkwMzAeFw0yNDA2MzAyMDU5NTdaFw0yNDA3MDEyMTI2NTdaMDMxMTAvBgNV BAMTKEEzQzBCREVDQTMxM0E4MDg2RUY2RkIzQzAxRkRGQzc4MDIyOEEwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnK7Ref6gY7m1YLNzNeaNr7tqA 8PxYwTR1YthqgrrWUTSad2V2Y0jz761DVHhzo87aKVmlvBnEDXDMf/qtQQROWOSv jJ29Rp3Ja43Vj0EuMPO9ToVpTXlVSWaKCYKNCSt9zzqHL7ETUzbuqVBC8fQ2pOKG PNlOgLJEzRNKJDowhz7rFhN+u++hn4CS4VLgf+PWyphwg0/pfQITn7WUU9b6k8E0 jYjwLqEwN/p3rrnO8nHT2VsdQKqcASDLnizVDWlegaSWjZXOsNyxO3Oi2Zx2su5L Fts5Fm+KKJBCOB4W5/oe1U55uqXskxiIbCnbYmWaNisGIfcA1n93GrQIMUBNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo8C97KMTqAhu9vs8Af38eAIooLcwHwYDVR0j BBgwFoAUv440iDEeaKIhOTk5bJWjLBuXCQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlSYUd6WlVHaW03TFhRcFNCdEROclBGM3Brb1YydExWaGRUUkhmVWh1 RE4vMS9CRjhFMzQ4ODMxMUU2OEEyMjEzOTM5Mzk2Qzk1QTMyQzFCOTcwOTAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGOEUzNDg4MzExRTY4QTIy MTM5MzkzOTZDOTVBMzJDMUI5NzA5MDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlSYUd6WlVHaW03TFhRcFNCdEROclBGM3Brb1YydExWaGRUUkhmVWh1RE4vMS9C RjhFMzQ4ODMxMUU2OEEyMjEzOTM5Mzk2Qzk1QTMyQzFCOTcwOTAzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFeq0WM8d5NkIspa+8oDV0dr8Tpc7x5C/COa8MlLQbRLGEcLyWkeC2XJjysfT MxlI3G9mfqf3mX5fVR3o+OFbBcGkrGeliLh5hR0Ga8eX1ab5UZQIB6pl21gn65Ni aEwXLJVUiVYCGW3VNNH4Z9OjCP5qN5V2BO4grCFIR+6P+b1gBEQtvTiccS92viQy XK0jXYLsrxnYd7rvXF8YhClpab0E7glVd2AnrNfJ+NuPf/LtTmHI99/SXClWfvWg uQJnx0Gev237X0xWX3lhN75QB4A6NzIQ6mR6YTa4+JZgZjEtoc46L0bte67lDK5Y Dnt/qsAiEVnmgqCb18WjqwNnjg== -----END CERTIFICATE-----Generated at Sun Jun 30 22:51:48 2024 by rpki-client on console-fra.rpki-client.org