$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.mft File: 108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.mft (raw, json) Hash identifier: vK1lxT2j6Ho1j0N954W94JqwSV+exQ/nSuQOBlDPOVA= Subject key identifier: 87:B2:61:28:BE:6E:E2:9B:BB:3B:B6:9C:01:0B:08:58:7B:30:6F:F9 Authority key identifier: 10:8C:C3:E7:A5:B6:3C:7A:E8:A3:B1:DF:F7:9B:8E:68:5A:96:82:6B Certificate issuer: /CN=108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B Certificate serial: 0ADAF7297CA2931B5831ECA5E3AA2A8149EA4497 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.mft Manifest number: 94 Signing time: Mon 25 Nov 2024 19:09:05 +0000 Manifest this update: Mon 25 Nov 2024 19:04:05 +0000 Manifest next update: Tue 26 Nov 2024 22:31:05 +0000 Files and hashes: 1: 3136342e3136332e302e302f32322d3332203d3e20323635393333.roa (hash: p/c3dHOLgSCXkXsn37Blx6C5KBNo4jxUm7NIXXK1Peg=) 2: 323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (hash: ocQtCuFHu7fWHmVZJjFPw4fHPR11DcN+mpnkU0aWEEA=) 3: 34352e342e38302e302f32322d3332203d3e20323635393333.roa (hash: UUYHhG+vJGL5Pn0Ca1/8506F8ZufDEL2LiP5Oqy/hz0=) 4: 108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.crl (hash: E6RwOwjv990syzaL+4yQYkrLINb3fEz/OcnyTV+2JYU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.crl rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 21:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:da:f7:29:7c:a2:93:1b:58:31:ec:a5:e3:aa:2a:81:49:ea:44:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B Validity Not Before: Nov 25 19:04:05 2024 GMT Not After : Nov 26 22:31:05 2024 GMT Subject: CN=87B26128BE6EE29BBB3BB69C010B08587B306FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:23:ea:b0:52:cf:2c:6d:ac:0e:8b:3e:55: 69:1c:a6:e2:5e:01:0e:67:14:58:93:f3:81:49:8b: e0:03:11:4a:04:a2:88:d7:64:e2:f6:2e:53:da:ba: 1b:f9:61:b4:60:b1:52:15:f9:1e:88:ab:9c:90:a3: a6:f8:67:4e:c3:9f:a2:a4:1a:82:db:75:80:b9:35: 61:f4:ca:4b:7d:fd:b0:fc:eb:e9:22:31:6d:be:e4: 46:76:d9:9d:0e:6b:06:38:76:75:cb:c0:66:88:97: 5c:a1:7f:3e:50:62:07:89:b9:01:f0:78:fa:f6:a2: 6f:89:8e:d1:0c:4f:af:a9:a6:e2:0d:49:ce:63:92: 93:e6:83:b4:0c:f6:6d:8b:8c:2c:ce:82:d8:9c:d5: 60:fd:e8:27:09:d6:67:f3:10:f1:b5:72:75:c1:eb: 74:ef:7b:67:d7:25:4a:e6:b0:8a:1b:b4:9a:ce:25: 3f:2e:4e:e3:c8:68:9d:47:43:55:e5:31:c8:0c:90: 17:01:20:5c:b2:63:34:23:39:d9:cd:ff:1a:8e:2a: df:a5:fc:9b:7f:28:a3:d5:9f:c2:db:20:ec:22:d8: 62:2f:49:20:72:5f:5e:ce:4e:41:b9:06:e5:d8:af: 16:22:f6:46:00:ac:e7:05:2a:87:31:c3:6d:07:49: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B2:61:28:BE:6E:E2:9B:BB:3B:B6:9C:01:0B:08:58:7B:30:6F:F9 X509v3 Authority Key Identifier: keyid:10:8C:C3:E7:A5:B6:3C:7A:E8:A3:B1:DF:F7:9B:8E:68:5A:96:82:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7c:7b:c8:57:3e:ff:ae:39:b4:d5:49:11:c4:a4:b0:44:c1: a0:ee:b8:77:14:93:eb:20:cf:2f:5c:86:a0:96:35:aa:7b:75: aa:80:79:92:bf:6c:f3:17:41:a0:80:1a:34:bc:82:eb:29:66: 06:ac:8a:52:e9:9b:d7:50:e0:28:0c:8b:d8:28:5a:b3:8c:fc: d5:ad:99:37:56:d0:a3:32:3c:72:45:fb:1e:d7:5d:dd:39:39: 07:93:2f:34:de:cb:f3:46:99:f0:36:70:31:5b:48:cf:cc:8a: 1d:25:6a:6e:91:77:6e:23:ff:83:d8:91:9d:41:90:5b:99:fe: be:35:1c:ac:08:88:80:db:71:8f:98:96:f0:d1:75:f5:32:e8: f8:dd:0e:ca:fe:f6:83:43:60:e9:c3:10:c3:f4:ca:dd:20:a0: 64:1a:ab:80:58:74:51:4d:ff:3d:7d:50:4c:55:c0:b5:ef:e8: 7b:bb:67:7c:04:50:b8:36:1d:e2:22:ec:a3:6a:d3:cf:f4:2b: f8:72:c4:e2:1d:df:1e:23:34:1b:64:17:fa:45:a1:ba:76:06: 30:84:51:1a:75:13:b0:e2:e4:97:3e:0d:e1:f5:1d:e8:3d:fe: 9f:11:a0:d4:bc:73:45:b1:21:59:c7:09:28:1d:52:0f:e9:ea: 14:51:3f:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCtr3KXyikxtYMeyl46oqgUnqRJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4Q0MzRTdBNUI2M0M3QUU4QTNCMURGRjc5QjhFNjg1 QTk2ODI2QjAeFw0yNDExMjUxOTA0MDVaFw0yNDExMjYyMjMxMDVaMDMxMTAvBgNV BAMTKDg3QjI2MTI4QkU2RUUyOUJCQjNCQjY5QzAxMEIwODU4N0IzMDZGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaRiPqsFLPLG2sDos+VWkcpuJe AQ5nFFiT84FJi+ADEUoEoojXZOL2LlPauhv5YbRgsVIV+R6Iq5yQo6b4Z07Dn6Kk GoLbdYC5NWH0ykt9/bD86+kiMW2+5EZ22Z0OawY4dnXLwGaIl1yhfz5QYgeJuQHw ePr2om+JjtEMT6+ppuINSc5jkpPmg7QM9m2LjCzOgtic1WD96CcJ1mfzEPG1cnXB 63Tve2fXJUrmsIobtJrOJT8uTuPIaJ1HQ1XlMcgMkBcBIFyyYzQjOdnN/xqOKt+l /Jt/KKPVn8LbIOwi2GIvSSByX17OTkG5BuXYrxYi9kYArOcFKocxw20HSTi7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh7JhKL5u4pu7O7acAQsIWHswb/kwHwYDVR0j BBgwFoAUEIzD56W2PHroo7Hf95uOaFqWgmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50 RHEvMC8xMDhDQzNFN0E1QjYzQzdBRThBM0IxREZGNzlCOEU2ODVBOTY4MjZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwOENDM0U3QTVCNjNDN0FF OEEzQjFERkY3OUI4RTY4NUE5NjgyNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50RHEvMC8x MDhDQzNFN0E1QjYzQzdBRThBM0IxREZGNzlCOEU2ODVBOTY4MjZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtnx7yFc+/645tNVJEcSksETBoO64dxST6yDPL1yGoJY1qnt1qoB5kr9s8xdB oIAaNLyC6ylmBqyKUumb11DgKAyL2Chas4z81a2ZN1bQozI8ckX7Htdd3Tk5B5Mv NN7L80aZ8DZwMVtIz8yKHSVqbpF3biP/g9iRnUGQW5n+vjUcrAiIgNtxj5iW8NF1 9TLo+N0Oyv72g0Ng6cMQw/TK3SCgZBqrgFh0UU3/PX1QTFXAte/oe7tnfARQuDYd 4iLso2rTz/Qr+HLE4h3fHiM0G2QX+kWhunYGMIRRGnUTsOLklz4N4fUd6D3+nxGg 1LxzRbEhWccJKB1SD+nqFFE/kw== -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:34 2024 by rpki-client on console-fra.rpki-client.org