$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: 2x/ZnOJp7dI6nncqruEL75re4qbS61MEOCILBx15m7c= Subject key identifier: CC:E6:E6:7F:FA:19:32:89:42:44:FA:2B:95:4C:69:D4:51:85:F1:DD Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 1731F0B339CFF395FE708D491F03FF5B188AE863 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 6F Signing time: Tue 25 Jun 2024 22:38:33 +0000 Manifest this update: Tue 25 Jun 2024 22:33:33 +0000 Manifest next update: Wed 26 Jun 2024 23:49:33 +0000 Files and hashes: 1: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: 2TL+3LdJ9cpbZ0Kv3TGTOalLvbQDGw52Y+Fe35VzZJE=) 2: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: cYI3LVwIIUVAmFtI5CV4cXj02TgZiK3H0mPzBvcc5OE=) 3: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: zudx40cbO45Yz5omPgQguIDpOM2K8gPod75lseMm8LI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 26 Jun 2024 23:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:31:f0:b3:39:cf:f3:95:fe:70:8d:49:1f:03:ff:5b:18:8a:e8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Jun 25 22:33:33 2024 GMT Not After : Jun 26 23:49:33 2024 GMT Subject: CN=CCE6E67FFA1932894244FA2B954C69D45185F1DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:f4:2e:da:3e:f0:9e:0f:d3:7d:69:e0:88: 16:1f:6a:b6:cb:6d:7f:ea:49:e7:8d:e2:82:f7:ff: 9c:dc:20:8b:3a:98:b0:d6:3b:b8:25:18:c7:56:16: 50:39:45:79:be:bf:9c:c0:af:f3:7d:06:aa:35:c5: 8e:c4:a7:8c:4b:18:f1:f7:d6:b7:b0:96:3c:fd:a5: 6e:e4:75:6d:ed:89:fa:bf:ff:4d:53:e0:6e:88:1f: f4:90:5d:0a:71:98:bf:e9:75:6d:0f:6c:c3:a2:e3: be:f8:93:4e:9f:da:45:3d:be:6c:f5:90:8d:82:40: 8a:5f:cc:a7:16:d7:80:68:e7:b4:ae:e2:3d:17:09: 98:98:0a:03:e9:c5:42:61:4d:b5:cd:eb:e0:f0:c7: 51:4f:e2:30:d0:56:c6:95:47:77:9f:60:0c:21:1e: 49:5e:69:f6:a8:80:25:60:63:24:dd:13:10:1f:e8: 03:67:2b:88:df:bd:6a:27:b2:ec:e7:2f:fd:1c:75: 66:6a:66:26:09:9e:ef:70:88:bf:4f:7c:cc:d5:7c: a4:81:5a:6f:5e:02:77:66:d0:92:e5:98:6e:59:06: 3f:66:db:1e:5e:9d:be:e7:91:15:84:a2:0d:e6:55: d8:0e:0e:77:4c:3c:55:61:34:15:d8:4a:8d:20:02: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:E6:7F:FA:19:32:89:42:44:FA:2B:95:4C:69:D4:51:85:F1:DD X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:9e:93:c9:a8:b4:f1:ca:27:29:eb:21:6d:7b:36:8b:c2:6d: 3e:ec:e5:35:72:7c:b4:37:75:74:13:03:f5:c7:c5:8c:05:97: 53:1b:62:bc:ca:dd:75:d2:ac:e6:e7:f6:b4:56:1c:44:b3:46: 8d:8f:77:ae:ad:71:ea:0d:40:de:b6:1b:7f:11:a1:8f:4a:9d: 53:40:a0:d3:10:ff:2b:0b:01:a2:7d:e4:13:8a:5c:50:c9:f4: 09:00:2b:9a:63:be:f6:4f:c9:25:e9:a8:ca:28:01:f7:c8:5a: ef:38:dd:2b:cf:16:20:ab:a9:bd:a1:db:0b:49:d1:68:b0:a3: bf:ba:b4:4b:e0:17:78:8e:bb:dd:3b:2b:fb:89:b6:11:ea:8c: 5d:cd:9d:ac:70:61:a7:f1:90:71:da:0b:c1:b5:8f:63:c8:31: 50:57:a8:e5:52:42:24:e4:07:b5:e9:02:84:3b:3f:16:29:2f: 50:cc:c1:7a:18:3f:b9:20:0d:93:d3:cb:63:5c:72:5f:01:1a: 3a:2c:1f:94:93:c4:f4:9b:ff:bf:52:8d:f3:59:68:45:b4:fc: 17:81:ae:fa:78:5a:04:d4:ac:a2:01:ae:f7:47:eb:a3:2a:8a: 24:b9:02:31:23:73:e3:b4:7c:3b:8f:8f:53:23:94:b0:d5:74: b5:b8:88:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFzHwsznP85X+cI1JHwP/WxiK6GMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNDA2MjUyMjMzMzNaFw0yNDA2MjYyMzQ5MzNaMDMxMTAvBgNV BAMTKENDRTZFNjdGRkExOTMyODk0MjQ0RkEyQjk1NEM2OUQ0NTE4NUYxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMAvQu2j7wng/TfWngiBYfarbL bX/qSeeN4oL3/5zcIIs6mLDWO7glGMdWFlA5RXm+v5zAr/N9Bqo1xY7Ep4xLGPH3 1rewljz9pW7kdW3tifq//01T4G6IH/SQXQpxmL/pdW0PbMOi4774k06f2kU9vmz1 kI2CQIpfzKcW14Bo57Su4j0XCZiYCgPpxUJhTbXN6+Dwx1FP4jDQVsaVR3efYAwh HkleafaogCVgYyTdExAf6ANnK4jfvWonsuznL/0cdWZqZiYJnu9wiL9PfMzVfKSB Wm9eAndm0JLlmG5ZBj9m2x5enb7nkRWEog3mVdgODndMPFVhNBXYSo0gAumvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzObmf/oZMolCRPorlUxp1FGF8d0wHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk56Tyai08conKeshbXs2i8JtPuzlNXJ8tDd1dBMD9cfFjAWXUxtivMrdddKs 5uf2tFYcRLNGjY93rq1x6g1A3rYbfxGhj0qdU0Cg0xD/KwsBon3kE4pcUMn0CQAr mmO+9k/JJemoyigB98ha7zjdK88WIKupvaHbC0nRaLCjv7q0S+AXeI673Tsr+4m2 EeqMXc2drHBhp/GQcdoLwbWPY8gxUFeo5VJCJOQHtekChDs/FikvUMzBehg/uSAN k9PLY1xyXwEaOiwflJPE9Jv/v1KN81loRbT8F4Gu+nhaBNSsogGu90froyqKJLkC MSNz47R8O4+PUyOUsNV0tbiIWA== -----END CERTIFICATE-----Generated at Wed Jun 26 02:43:17 2024 by rpki-client on console-fra.rpki-client.org