$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft File: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json) Hash identifier: stEdMW0asO3R0kpvl9mQUR03zic/k32wd7CKx1MsRwI= Subject key identifier: 85:B5:BC:9A:E8:38:1A:2E:D6:A1:CA:5C:DA:D9:25:F3:46:3D:3D:E1 Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 Certificate issuer: /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Certificate serial: 59ADBFC079E69D4E3CC565705C94901BEF3671F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft Manifest number: EC Signing time: Fri 27 Sep 2024 11:02:05 +0000 Manifest this update: Fri 27 Sep 2024 10:57:05 +0000 Manifest next update: Sat 28 Sep 2024 11:37:05 +0000 Files and hashes: 1: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: YO4HEaqPU3/HibQB30aTPGWYOKEMck8X+19Sl0okEOE=) 2: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: e1fclMo03JD0GyqCvV279UEx8zbIyBBEmjLv2KL/IaE=) 3: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: sB2KLYkwNZmrVp1jYE2WdevpVLvUXmrC4F/bc/s1TV0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Sep 2024 11:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ad:bf:c0:79:e6:9d:4e:3c:c5:65:70:5c:94:90:1b:ef:36:71:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Validity Not Before: Sep 27 10:57:05 2024 GMT Not After : Sep 28 11:37:05 2024 GMT Subject: CN=85B5BC9AE8381A2ED6A1CA5CDAD925F3463D3DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:e8:08:90:db:a5:75:a6:b3:2b:82:38:a3: 76:a7:1c:c3:c2:f3:8b:32:e4:7b:cf:f2:ff:69:e1: 9f:22:9d:6b:dd:70:de:21:73:54:ce:a3:94:f8:7c: b5:0f:22:05:5e:05:1f:04:18:08:c6:54:c4:3a:17: b5:a1:20:6d:0a:39:8d:aa:60:f8:c2:6f:6d:e4:1a: cf:22:99:68:33:39:63:c9:60:b9:37:7e:68:62:e2: 5d:21:37:de:96:b9:89:68:02:a5:f5:84:1c:33:ea: 43:bc:c8:3a:cc:07:78:8c:86:9a:50:c5:4b:a3:13: 1b:cd:30:f3:68:25:fd:47:b1:cd:0d:f2:fb:7a:88: 3e:a8:b8:76:2a:0b:46:58:a6:dc:1d:b5:bb:4d:3a: bd:ea:e0:b0:c8:70:18:47:fb:b9:03:d2:bb:62:16: 5e:8a:01:2a:96:8c:ca:6a:13:1a:c1:f6:e0:ed:c2: 33:a9:02:0a:4d:57:81:5f:ac:22:c3:47:71:9c:4d: 1a:7f:72:ca:84:c1:6c:43:53:ad:76:84:9e:83:b9: 1c:56:9b:31:eb:c0:bb:30:d2:72:97:a6:5f:4e:c5: 34:2a:d8:df:3d:f2:74:77:95:63:d2:34:0b:80:72: ab:53:e5:a4:ec:a8:03:9f:d5:01:87:57:e6:95:e9: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B5:BC:9A:E8:38:1A:2E:D6:A1:CA:5C:DA:D9:25:F3:46:3D:3D:E1 X509v3 Authority Key Identifier: keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7d:3a:5d:ad:a5:e0:07:03:18:46:2c:f2:0b:27:76:6d:14: 21:2f:c2:14:89:3f:32:49:a1:ba:04:3a:25:3b:29:9a:1e:5a: e8:05:53:ba:32:36:de:bb:8f:dc:5c:1d:cc:51:6f:36:52:e9: 03:0d:1f:63:a1:80:96:5c:8f:7b:34:37:45:0f:1c:44:04:77: f7:fd:cd:28:2e:a9:bd:1d:8f:82:dc:e5:b5:94:03:54:f8:14: 7c:ec:3b:4a:29:95:ac:25:7a:26:18:ff:eb:2e:7e:ef:89:60: c2:33:4f:f5:e7:4d:5a:e8:81:87:81:6f:25:26:e0:9d:80:18: e8:3f:fc:58:35:24:e5:4c:a3:78:d6:e8:0d:12:e7:e3:8f:1e: d9:51:7b:61:c1:53:37:aa:b7:4f:16:cd:c2:3d:2b:33:48:01: 54:81:15:1f:df:f2:f4:4e:ec:ee:4d:39:30:92:69:f3:6f:96: 19:47:93:8d:ae:e5:5b:e3:9d:f8:81:c4:41:79:b8:1a:7d:ec: db:76:a1:7c:0a:b4:00:83:a1:8c:70:7a:ab:c7:b4:98:c1:b5: c2:25:30:2f:5d:b6:01:02:79:89:7c:db:8d:b9:be:a4:d2:12: 76:64:b1:ea:7b:13:b6:ba:ee:ce:33:1d:fe:9a:51:4c:41:3a: a2:c7:12:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWa2/wHnmnU48xWVwXJSQG+82cfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NFRjJEM0VBNUJEMTg3QzQ1RUE2RDNBOEZBRjcxQ0Qx NUY3RDJBNzAeFw0yNDA5MjcxMDU3MDVaFw0yNDA5MjgxMTM3MDVaMDMxMTAvBgNV BAMTKDg1QjVCQzlBRTgzODFBMkVENkExQ0E1Q0RBRDkyNUYzNDYzRDNERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWk+gIkNuldaazK4I4o3anHMPC 84sy5HvP8v9p4Z8inWvdcN4hc1TOo5T4fLUPIgVeBR8EGAjGVMQ6F7WhIG0KOY2q YPjCb23kGs8imWgzOWPJYLk3fmhi4l0hN96WuYloAqX1hBwz6kO8yDrMB3iMhppQ xUujExvNMPNoJf1Hsc0N8vt6iD6ouHYqC0ZYptwdtbtNOr3q4LDIcBhH+7kD0rti Fl6KASqWjMpqExrB9uDtwjOpAgpNV4FfrCLDR3GcTRp/csqEwWxDU612hJ6DuRxW mzHrwLsw0nKXpl9OxTQq2N898nR3lWPSNAuAcqtT5aTsqAOf1QGHV+aV6cItAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhbW8mug4Gi7Wocpc2tkl80Y9PeEwHwYDVR0j BBgwFoAUzO8tPqW9GHxF6m06j69xzRX30qcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1 WDYvMS9DQ0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRUYyRDNFQTVCRDE4N0M0 NUVBNkQzQThGQUY3MUNEMTVGN0QyQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1WDYvMS9D Q0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf306Xa2l4AcDGEYs8gsndm0UIS/CFIk/MkmhugQ6JTspmh5a6AVTujI23ruP 3FwdzFFvNlLpAw0fY6GAllyPezQ3RQ8cRAR39/3NKC6pvR2PgtzltZQDVPgUfOw7 SimVrCV6Jhj/6y5+74lgwjNP9edNWuiBh4FvJSbgnYAY6D/8WDUk5UyjeNboDRLn 448e2VF7YcFTN6q3TxbNwj0rM0gBVIEVH9/y9E7s7k05MJJp82+WGUeTja7lW+Od +IHEQXm4Gn3s23ahfAq0AIOhjHB6q8e0mMG1wiUwL122AQJ5iXzbjbm+pNISdmSx 6nsTtrruzjMd/ppRTEE6oscSFg== -----END CERTIFICATE-----Generated at Fri Sep 27 12:47:27 2024 by rpki-client on console-fra.rpki-client.org