$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.mft File: 39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.mft (raw, json) Hash identifier: PjKFoIPfR3wLNS7NzY3l5yTEyy2ku3pRvNANlPzIIiw= Subject key identifier: 52:64:0D:D3:39:0D:47:5C:CC:AA:2E:9D:C9:FE:86:34:AE:D8:43:04 Authority key identifier: 39:DC:52:F9:D7:AC:EE:A9:7A:CE:C4:4E:D6:AD:56:2A:4F:23:07:0C Certificate issuer: /CN=39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C Certificate serial: 3569D1ADB9CE6DABA9E97894B646DBC43B450F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 12:32:03 +0000 Manifest this update: Fri 22 Nov 2024 12:27:03 +0000 Manifest next update: Sat 23 Nov 2024 16:26:03 +0000 Files and hashes: 1: 39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.crl (hash: tuPPjXumd+5DbfT4cjxiGzmnxrMf6oe2JblFFrAZ6dc=) 2: 34352e3138332e3133342e302f32332d3233203d3e20323639323832.roa (hash: HQwyOD6RAgKs3dGWoCFr/587ZhU0sbkhICFPouEYZuQ=) 3: 34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa (hash: F7SihtJTn4E2itDVJEbsBLwndSIHxQuqsaliQKPF0BM=) 4: 34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa (hash: 98C1qIv6aM9E5kQIfxiMwhR+GMBUjamfEl89LaB8IOY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.crl rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 16:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:69:d1:ad:b9:ce:6d:ab:a9:e9:78:94:b6:46:db:c4:3b:45:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C Validity Not Before: Nov 22 12:27:03 2024 GMT Not After : Nov 23 16:26:03 2024 GMT Subject: CN=52640DD3390D475CCCAA2E9DC9FE8634AED84304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:58:5c:b4:19:aa:23:c2:c0:c4:fa:13:af: e8:88:f0:9f:fc:d6:eb:19:f5:89:32:84:5f:a3:e5: 95:20:10:b8:52:f4:05:a8:c5:6f:42:42:57:b7:4b: 81:bd:96:af:d0:82:cc:15:96:4b:6d:bc:f1:45:af: 51:b3:58:41:d6:86:3c:3d:32:56:31:de:21:4b:93: ab:bd:0e:ca:f8:ee:78:f9:6e:b7:24:58:0d:b3:8a: c6:0d:fd:38:d2:ab:bb:e8:05:c9:55:13:ef:18:41: f1:d3:22:a4:30:29:f5:0f:1b:6c:cc:30:3f:03:66: 31:01:23:a6:2c:ea:d1:25:35:7a:e6:bb:42:b4:0d: 7b:2f:73:c8:da:8b:20:2f:cb:47:36:39:82:c5:2f: f6:4c:b7:94:77:0d:b5:b2:04:14:5d:d5:ef:e2:07: 08:37:c2:40:32:c9:5b:47:43:6b:70:47:65:41:bd: f7:56:d3:fa:0e:ab:e1:0f:75:07:eb:f8:6d:0f:94: b6:54:ba:05:2b:65:19:77:7a:a9:8f:c0:b6:73:06: 18:33:0b:f4:31:05:b2:0f:18:df:88:5a:31:4c:52: f6:40:78:2f:5e:de:83:3d:3b:fd:c4:97:03:11:07: 75:1b:ee:c5:6e:8e:13:2c:81:5e:4e:a4:c2:c8:35: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:0D:D3:39:0D:47:5C:CC:AA:2E:9D:C9:FE:86:34:AE:D8:43:04 X509v3 Authority Key Identifier: keyid:39:DC:52:F9:D7:AC:EE:A9:7A:CE:C4:4E:D6:AD:56:2A:4F:23:07:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/1/39DC52F9D7ACEEA97ACEC44ED6AD562A4F23070C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5d:bb:92:4e:08:65:6f:cd:82:d7:3b:c4:34:24:2c:63:69: 79:56:fa:2c:ef:9f:49:04:38:05:9b:e4:50:b3:04:67:5d:b8: 5b:85:8d:10:dd:a7:06:98:bc:41:ec:e5:3e:3b:5c:28:2f:b1: 1c:a8:5c:ea:7b:0e:4c:9c:fd:78:74:a6:26:2c:98:2f:d6:1a: bc:d9:c5:0f:3b:19:4f:6d:bf:b5:f9:a1:d0:ae:3b:fa:41:d1: a8:92:c0:9f:bb:7c:2b:16:96:a1:00:28:26:25:ae:50:e7:15: a6:3c:be:83:d9:c7:24:95:be:ff:43:27:12:63:db:e5:64:97: 30:e2:85:81:5f:62:e2:a7:58:bf:51:d9:da:21:a9:b2:93:2b: 54:ce:82:69:f2:28:dc:e9:c6:64:cc:1a:61:6d:1f:25:50:fa: 22:84:d6:29:a8:13:5f:e0:e3:2c:40:7d:a2:5a:ca:a7:05:21: 9c:3d:fa:5f:80:a1:f6:56:ab:f6:96:9b:d5:73:1b:11:42:7e: 0c:6f:a6:c8:9c:76:b7:60:c7:9a:0f:20:43:7f:41:12:ac:8f: e5:da:92:34:e5:34:aa:a0:10:2c:ab:61:0a:a3:b8:65:89:b2: 3b:d0:51:d4:d2:19:d6:26:71:c6:50:1d:f4:d7:b3:e2:57:7c: 32:d0:ce:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITNWnRrbnObaup6XiUtkbbxDtFDzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzOURDNTJGOUQ3QUNFRUE5N0FDRUM0NEVENkFENTYyQTRG MjMwNzBDMB4XDTI0MTEyMjEyMjcwM1oXDTI0MTEyMzE2MjYwM1owMzExMC8GA1UE AxMoNTI2NDBERDMzOTBENDc1Q0NDQUEyRTlEQzlGRTg2MzRBRUQ4NDMwNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK2SWFy0GaojwsDE+hOv6Ijwn/zW 6xn1iTKEX6PllSAQuFL0BajFb0JCV7dLgb2Wr9CCzBWWS2288UWvUbNYQdaGPD0y VjHeIUuTq70OyvjuePlutyRYDbOKxg39ONKru+gFyVUT7xhB8dMipDAp9Q8bbMww PwNmMQEjpizq0SU1eua7QrQNey9zyNqLIC/LRzY5gsUv9ky3lHcNtbIEFF3V7+IH CDfCQDLJW0dDa3BHZUG991bT+g6r4Q91B+v4bQ+UtlS6BStlGXd6qY/AtnMGGDML 9DEFsg8Y34haMUxS9kB4L17egz07/cSXAxEHdRvuxW6OEyyBXk6kwsg1GoMCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBRSZA3TOQ1HXMyqLp3J/oY0rthDBDAfBgNVHSME GDAWgBQ53FL516zuqXrOxE7WrVYqTyMHDDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby84WG43eWY5bUxDbzNzbVA5aGRIWkNITHJmU1FLbXloQXphTlRwZ21aUEwz Ny8xLzM5REM1MkY5RDdBQ0VFQTk3QUNFQzQ0RUQ2QUQ1NjJBNEYyMzA3MEMuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMzlEQzUyRjlEN0FDRUVBOTdB Q0VDNDRFRDZBRDU2MkE0RjIzMDcwQy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84 WG43eWY5bUxDbzNzbVA5aGRIWkNITHJmU1FLbXloQXphTlRwZ21aUEwzNy8xLzM5 REM1MkY5RDdBQ0VFQTk3QUNFQzQ0RUQ2QUQ1NjJBNEYyMzA3MEMubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeXbuSTghlb82C1zvENCQsY2l5Vvos759JBDgFm+RQswRnXbhbhY0Q3acGmLxB 7OU+O1woL7EcqFzqew5MnP14dKYmLJgv1hq82cUPOxlPbb+1+aHQrjv6QdGoksCf u3wrFpahACgmJa5Q5xWmPL6D2ccklb7/QycSY9vlZJcw4oWBX2Lip1i/UdnaIamy kytUzoJp8ijc6cZkzBphbR8lUPoihNYpqBNf4OMsQH2iWsqnBSGcPfpfgKH2Vqv2 lpvVcxsRQn4Mb6bInHa3YMeaDyBDf0ESrI/l2pI05TSqoBAsq2EKo7hlibI70FHU 0hnWJnHGUB3017PiV3wy0M4m -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org