$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft File: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft (raw, json) Hash identifier: sj8STr03Cv4jTWn2QoFXwjuhJ6pp6gNjfbYnGiWZnls= Subject key identifier: 8C:22:E3:16:F5:CD:01:2B:C8:B1:55:56:1E:25:C8:4B:40:96:FD:48 Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 Certificate issuer: /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Certificate serial: 72B7DFE3F27F65FF7E8439861580ABA4B0F5B11E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft Manifest number: 52 Signing time: Sun 16 Jun 2024 10:36:25 +0000 Manifest this update: Sun 16 Jun 2024 10:31:25 +0000 Manifest next update: Mon 17 Jun 2024 12:54:25 +0000 Files and hashes: 1: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl (hash: NJ0oBgt/KN2OKja/aiejCg3yHJOYblBx7hH/eNrD7RQ=) 2: 323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (hash: WSE3cZt912miCIkaIMJ78s1ed94zSPT2utyFLSAB6NA=) 3: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (hash: PSnMNUHy3PE/jMzpXjI7sTd8mH5CKsMvE4CAGRSSncs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 16 Jun 2024 19:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b7:df:e3:f2:7f:65:ff:7e:84:39:86:15:80:ab:a4:b0:f5:b1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Validity Not Before: Jun 16 10:31:25 2024 GMT Not After : Jun 17 12:54:25 2024 GMT Subject: CN=8C22E316F5CD012BC8B155561E25C84B4096FD48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8e:b6:16:6e:a6:10:bf:57:fe:13:7f:d0:6f: b9:41:56:a0:cf:25:31:d9:46:eb:31:59:c4:11:5d: 8d:d7:14:c3:4c:70:de:90:89:1a:6d:e0:a6:70:98: ac:ca:25:be:2c:75:23:88:15:c6:c7:ec:ae:01:9f: 47:22:e0:ec:dd:cb:56:78:51:c7:48:0c:71:c1:7c: fa:c4:9c:d2:d8:c1:bc:23:0d:a6:d9:6a:68:82:cb: 29:ce:05:af:a2:3b:d5:14:24:a9:3a:5e:b7:6c:9d: d4:64:68:d8:c0:5a:1d:eb:db:e1:4b:a4:46:74:78: 02:55:6e:ad:a1:b9:23:db:2a:a1:d7:3e:d3:94:08: 05:b0:46:25:84:0e:b1:9e:a1:ea:30:ef:86:20:65: cb:37:46:99:23:65:ac:29:0a:c4:69:07:4e:0f:e4: e5:cf:11:70:2a:de:95:e3:33:b7:7c:6c:a8:f7:da: ca:3b:aa:6b:87:ee:d1:b0:62:2b:57:01:9d:e5:19: b2:09:18:88:41:7d:54:d9:54:3d:4d:c3:93:81:e0: e8:cb:6e:2e:88:0d:d7:fa:eb:a0:dd:5f:7a:a6:61: 24:ad:c5:57:64:d2:35:77:4c:18:0b:fc:dd:d9:7a: 23:61:21:85:b1:27:76:72:77:97:23:0a:34:63:6f: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:22:E3:16:F5:CD:01:2B:C8:B1:55:56:1E:25:C8:4B:40:96:FD:48 X509v3 Authority Key Identifier: keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:89:1c:65:33:a1:06:cb:51:22:61:83:cf:98:04:7e:ca:a8: 66:44:74:24:3b:a0:2b:f0:63:7f:81:fb:ae:97:6f:27:5b:e1: 57:e1:86:b1:c5:7a:d0:44:07:b8:db:5b:17:40:0c:b5:52:cb: 4b:a9:de:60:fc:09:73:46:42:b4:d2:f4:0d:73:2c:c3:9c:2c: 8b:18:71:48:a0:bc:a3:3f:1c:40:7b:40:4c:7a:bc:e7:7f:94: 14:a2:51:d5:93:b8:d6:08:43:47:19:65:f9:31:53:00:f0:99: 2a:5e:99:c2:45:53:05:f1:a6:e9:0e:a5:c6:c9:d1:26:db:9c: 26:9c:db:a9:68:87:5b:23:6b:29:d2:f9:d3:08:fc:73:fd:c3: 7f:7c:dc:7c:f5:1f:a7:b7:81:9d:41:ed:b8:59:34:bd:c6:cb: 19:b7:b9:e4:71:9c:37:d0:7e:8b:dc:24:0a:1f:f5:81:da:56: 8e:6a:60:88:a0:02:c1:58:20:ef:b6:91:06:80:2b:ad:4a:10: dd:f0:ff:81:2a:fd:85:81:a4:68:4b:20:1b:92:d3:a6:e4:2f: 08:1c:e3:1d:9f:db:5d:08:3e:59:24:d4:ba:b9:b1:45:7d:eb: c0:a7:5d:84:77:9d:80:e2:3d:83:38:af:38:fa:d0:4d:ad:8d: e7:50:15:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcrff4/J/Zf9+hDmGFYCrpLD1sR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTNCRUM5NzY2QzBCNEY4MTE1NTFFNzM4NUNFMkU0 RDQwRkU5MjAeFw0yNDA2MTYxMDMxMjVaFw0yNDA2MTcxMjU0MjVaMDMxMTAvBgNV BAMTKDhDMjJFMzE2RjVDRDAxMkJDOEIxNTU1NjFFMjVDODRCNDA5NkZENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtjrYWbqYQv1f+E3/Qb7lBVqDP JTHZRusxWcQRXY3XFMNMcN6QiRpt4KZwmKzKJb4sdSOIFcbH7K4Bn0ci4Ozdy1Z4 UcdIDHHBfPrEnNLYwbwjDabZamiCyynOBa+iO9UUJKk6XrdsndRkaNjAWh3r2+FL pEZ0eAJVbq2huSPbKqHXPtOUCAWwRiWEDrGeoeow74YgZcs3RpkjZawpCsRpB04P 5OXPEXAq3pXjM7d8bKj32so7qmuH7tGwYitXAZ3lGbIJGIhBfVTZVD1Nw5OB4OjL bi6IDdf666DdX3qmYSStxVdk0jV3TBgL/N3ZeiNhIYWxJ3Zyd5cjCjRjb2rTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjCLjFvXNASvIsVVWHiXIS0CW/UgwHwYDVR0j BBgwFoAUH9U77JdmwLT4EVUec4XOLk1A/pIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN WUMvMC8xRkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRDUzQkVDOTc2NkMwQjRG ODExNTUxRTczODVDRTJFNEQ0MEZFOTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8x RkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQIkcZTOhBstRImGDz5gEfsqoZkR0JDugK/Bjf4H7rpdvJ1vhV+GGscV60EQH uNtbF0AMtVLLS6neYPwJc0ZCtNL0DXMsw5wsixhxSKC8oz8cQHtATHq853+UFKJR 1ZO41ghDRxll+TFTAPCZKl6ZwkVTBfGm6Q6lxsnRJtucJpzbqWiHWyNrKdL50wj8 c/3Df3zcfPUfp7eBnUHtuFk0vcbLGbe55HGcN9B+i9wkCh/1gdpWjmpgiKACwVgg 77aRBoArrUoQ3fD/gSr9hYGkaEsgG5LTpuQvCBzjHZ/bXQg+WSTUurmxRX3rwKdd hHedgOI9gzivOPrQTa2N51AV+Q== -----END CERTIFICATE-----Generated at Sun Jun 16 11:23:08 2024 by rpki-client on console-ams.rpki-client.org