$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft File: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft (raw, json) Hash identifier: Lh13n/mC4ZzTou/l+mhOnI/+9vjnTKHETQ2oVR9TAZk= Subject key identifier: 94:5D:FD:8C:5A:0F:A8:7C:90:99:66:B6:85:E7:EE:AB:87:9F:55:D4 Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 Certificate issuer: /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Certificate serial: 49F8BAE5B3CE1454F9622ED6E5291C9339752793 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft Manifest number: 0120 Signing time: Fri 22 Nov 2024 18:00:48 +0000 Manifest this update: Fri 22 Nov 2024 17:55:48 +0000 Manifest next update: Sat 23 Nov 2024 21:58:48 +0000 Files and hashes: 1: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl (hash: GNG/4CuWPNgHmLdijabhOKZK3t4QLUfh0qQcUNyBliM=) 2: 323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (hash: 2346Z9sA6sm1fdi4zzQqT2Hbv9Ho+FYcywRTHXQJPPM=) 3: 3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (hash: U9C7AIkVM5r77Z45kQ1OSkYmu/IEk9vt1atgw+XimrQ=) 4: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (hash: 4sQsq2RwTLw5Hl0XYOgoCLs7SnslRa4Dlq3Ya5UcRbI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f8:ba:e5:b3:ce:14:54:f9:62:2e:d6:e5:29:1c:93:39:75:27:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Validity Not Before: Nov 22 17:55:48 2024 GMT Not After : Nov 23 21:58:48 2024 GMT Subject: CN=945DFD8C5A0FA87C909966B685E7EEAB879F55D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:33:f3:cc:2c:27:85:19:58:e8:47:83:c5: a7:b8:b7:07:5a:4c:f0:ef:30:68:1c:55:0b:60:59: bb:2d:24:47:59:11:da:2a:1b:52:ec:2c:15:ce:36: 09:a0:5d:ad:6b:e6:dd:6f:36:28:7d:b9:1f:43:39: 2e:bd:41:55:5b:b4:11:18:a2:83:97:61:36:de:ab: 44:2f:55:4e:10:f0:3f:11:11:f9:cf:95:e6:17:44: 3b:b5:98:3e:17:35:ee:8e:87:95:ef:6c:59:37:db: c5:a6:a9:f0:c5:97:9c:1e:55:66:b3:4c:71:29:1a: 03:f4:42:c1:99:c8:92:7f:bd:a9:37:9b:cc:1b:b8: 19:4c:c5:a1:17:87:95:19:63:70:62:df:86:3f:24: ca:6c:06:1d:d4:42:d0:fe:0f:a2:86:db:49:cc:60: a7:fc:a8:a9:4b:b2:66:76:60:8d:bb:b1:57:ab:af: 65:36:f9:23:74:04:d7:02:fa:02:52:03:f8:1c:72: 9b:da:5d:1c:73:3f:02:0a:71:cc:4e:40:d7:d1:89: d8:43:4b:f2:d9:df:5b:21:9a:3d:ba:aa:33:5d:58: dc:f0:6d:6e:4b:3a:e2:d2:d0:8f:78:fd:50:31:9d: 80:d8:55:da:eb:4b:a9:ef:69:a1:fe:20:40:97:4c: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5D:FD:8C:5A:0F:A8:7C:90:99:66:B6:85:E7:EE:AB:87:9F:55:D4 X509v3 Authority Key Identifier: keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6b:34:b8:e1:65:68:4e:da:47:ee:7e:d4:22:04:0d:90:dd: de:02:7a:96:b1:5a:ff:d6:1c:68:9f:75:11:5c:60:42:c9:6a: 79:7d:3a:d2:7c:14:39:e3:6a:f2:03:ab:b1:04:71:b9:a6:89: f4:2a:90:9f:bb:90:17:16:5a:09:8c:03:3b:76:d2:c7:cd:89: aa:0e:36:95:15:7f:2e:e0:20:ac:a8:72:84:cb:3c:72:bb:16: 5c:07:91:07:08:c7:07:b1:79:53:46:68:81:ec:94:3b:64:88: b3:51:e1:3e:92:5b:45:9f:1e:18:d3:10:08:ed:6f:69:f0:ec: 88:64:b1:c4:d9:39:76:f7:0d:27:18:88:fc:74:34:95:71:8e: c9:6a:91:e6:b4:ae:a1:1e:0b:f2:6f:96:97:2d:71:92:78:51: bb:9c:89:a9:36:31:89:2d:da:de:68:35:b0:d2:92:ee:0c:f0: 09:d1:57:7e:8c:d1:23:bd:17:7a:bb:e2:50:f5:d1:f1:d9:0e: 35:38:b1:4d:2f:7c:b0:75:b4:78:ad:a2:3f:0d:2a:ff:89:3e: 8b:f6:c9:61:55:81:ba:02:86:00:80:00:e7:76:1a:58:93:fc: 9b:d1:fe:ba:63:de:a3:14:a0:bc:0c:a4:db:71:d7:a7:2d:98: 7c:75:30:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSfi65bPOFFT5Yi7W5Skckzl1J5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4NjRCNzQxOUI4NzBDMUU4RTBBNEJFQTlFMzhGQzQ4 MzYzN0FEMDAeFw0yNDExMjIxNzU1NDhaFw0yNDExMjMyMTU4NDhaMDMxMTAvBgNV BAMTKDk0NURGRDhDNUEwRkE4N0M5MDk5NjZCNjg1RTdFRUFCODc5RjU1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7zPzzCwnhRlY6EeDxae4twda TPDvMGgcVQtgWbstJEdZEdoqG1LsLBXONgmgXa1r5t1vNih9uR9DOS69QVVbtBEY ooOXYTbeq0QvVU4Q8D8REfnPleYXRDu1mD4XNe6Oh5XvbFk328WmqfDFl5weVWaz THEpGgP0QsGZyJJ/vak3m8wbuBlMxaEXh5UZY3Bi34Y/JMpsBh3UQtD+D6KG20nM YKf8qKlLsmZ2YI27sVerr2U2+SN0BNcC+gJSA/gccpvaXRxzPwIKccxOQNfRidhD S/LZ31shmj26qjNdWNzwbW5LOuLS0I94/VAxnYDYVdrrS6nvaaH+IECXTHbzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlF39jFoPqHyQmWa2hefuq4efVdQwHwYDVR0j BBgwFoAUhoZLdBm4cMHo4KS+qeOPxINjetAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5W NlAvMC84Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2ODY0Qjc0MTlCODcwQzFF OEUwQTRCRUE5RTM4RkM0ODM2MzdBRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5WNlAvMC84 Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf2s0uOFlaE7aR+5+1CIEDZDd3gJ6lrFa/9YcaJ91EVxgQslqeX060nwUOeNq 8gOrsQRxuaaJ9CqQn7uQFxZaCYwDO3bSx82Jqg42lRV/LuAgrKhyhMs8crsWXAeR BwjHB7F5U0ZogeyUO2SIs1HhPpJbRZ8eGNMQCO1vafDsiGSxxNk5dvcNJxiI/HQ0 lXGOyWqR5rSuoR4L8m+Wly1xknhRu5yJqTYxiS3a3mg1sNKS7gzwCdFXfozRI70X erviUPXR8dkONTixTS98sHW0eK2iPw0q/4k+i/bJYVWBugKGAIAA53YaWJP8m9H+ umPeoxSgvAyk23HXpy2YfHUwQg== -----END CERTIFICATE-----Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org