$ rpki-client -vvf rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.mft File: 29D311E07E371336F94D10B16A429E47398D71E2.mft (raw, json) Hash identifier: +WPb43RveNwyO+2GeBKJ4fawPJWYmqKXxDphH4CS9mM= Subject key identifier: D0:09:26:11:6C:36:35:3C:38:24:57:8F:D7:4E:15:E1:4D:EE:72:56 Authority key identifier: 29:D3:11:E0:7E:37:13:36:F9:4D:10:B1:6A:42:9E:47:39:8D:71:E2 Certificate issuer: /CN=29D311E07E371336F94D10B16A429E47398D71E2 Certificate serial: 31B67F1356CED46F767E1178B19D4D60AD2DED59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D311E07E371336F94D10B16A429E47398D71E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.mft Manifest number: 2E Signing time: Fri 22 Nov 2024 21:19:34 +0000 Manifest this update: Fri 22 Nov 2024 21:14:34 +0000 Manifest next update: Sun 24 Nov 2024 00:20:34 +0000 Files and hashes: 1: 3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa (hash: Vh31/AAua7hzLgQMBSmuKYc0C5prBv6yDVsGNFIlyOw=) 2: 323830343a313634383a3a2f33322d313238203d3e20323633323738.roa (hash: 8srNwqpDGJd4HfmH2vRTllhHQI5zkb8r2osmsif0IMk=) 3: 29D311E07E371336F94D10B16A429E47398D71E2.crl (hash: L1guL51pC/afPM1yLUQF5vrcWDNu0JgeQmq5cAUAb24=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.crl rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D311E07E371336F94D10B16A429E47398D71E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b6:7f:13:56:ce:d4:6f:76:7e:11:78:b1:9d:4d:60:ad:2d:ed:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D311E07E371336F94D10B16A429E47398D71E2 Validity Not Before: Nov 22 21:14:34 2024 GMT Not After : Nov 24 00:20:34 2024 GMT Subject: CN=D00926116C36353C3824578FD74E15E14DEE7256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:98:1a:99:cc:de:a4:f5:29:77:a7:a6:24: 1f:41:e9:6b:23:dc:29:6c:5e:25:94:82:7b:45:0f: 6c:11:18:62:14:3c:bf:5b:fd:37:c4:12:2f:95:fe: 05:15:48:9b:40:c4:6f:7d:88:6f:50:5c:45:15:33: 25:d9:60:bc:a7:e6:43:14:33:78:5c:25:b7:ef:0c: 3e:54:b1:24:56:a9:bd:80:a7:31:fd:60:a8:83:2a: 6c:e9:bc:db:e4:e7:6d:79:86:1e:81:88:6d:c9:a3: 11:1a:44:20:cf:d5:96:c9:86:b7:79:75:23:15:07: d8:90:14:97:cb:05:7c:1b:23:c2:0e:36:c9:f0:d9: c1:58:09:28:60:72:09:9d:69:97:18:f7:8f:e5:99: c7:81:5f:91:29:51:60:93:36:53:6b:b5:3a:bf:bf: 74:a1:02:0f:37:df:19:95:98:5f:e4:e6:2f:dc:4a: 02:5f:b0:d7:08:a0:03:6b:d3:a5:69:5b:ac:6b:52: 44:b0:b8:e0:c1:70:e7:4b:f5:40:bf:d9:80:03:6a: 5b:98:a4:ab:b2:96:88:dd:71:15:7f:63:d7:63:14: 4a:f8:e5:8a:b8:a5:c6:fc:f7:71:fb:79:05:67:1e: 98:32:5b:f2:dd:b8:d5:c5:2b:cf:ed:65:d5:28:d9: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:09:26:11:6C:36:35:3C:38:24:57:8F:D7:4E:15:E1:4D:EE:72:56 X509v3 Authority Key Identifier: keyid:29:D3:11:E0:7E:37:13:36:F9:4D:10:B1:6A:42:9E:47:39:8D:71:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D311E07E371336F94D10B16A429E47398D71E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9c:eb:3d:df:d2:40:a0:32:f5:9f:4c:2d:e5:15:a1:b8:da: 9f:4b:c8:aa:a0:db:4d:a4:60:d7:0e:24:58:4b:3e:a1:79:28: 2f:ea:46:7b:1c:f3:ff:ef:a5:d0:14:6e:f4:36:45:20:24:57: a2:65:f5:b9:40:b8:c8:57:bc:28:46:0f:07:a6:4f:4c:92:9b: 1a:da:08:de:da:e3:67:c4:c4:63:4a:95:bf:73:7f:c4:3f:92: 20:5c:e6:4a:4e:74:07:f8:76:b9:07:6c:11:ca:72:6b:7f:11: 4f:82:d7:20:bd:f5:db:e7:a4:c3:a3:33:2f:bf:0b:49:89:f5: be:f3:dd:b4:ca:ab:64:a2:30:e0:47:ae:b9:59:91:4e:10:2e: 71:de:b2:86:37:dd:24:a9:7c:16:bf:bc:74:b6:c8:91:e4:7c: ec:f5:60:07:f7:43:a0:3c:08:53:5b:eb:df:e9:33:10:87:bb: f6:c6:af:59:e9:b7:aa:3d:97:1e:1c:5e:76:a2:64:77:5c:e6: 92:43:22:34:b8:ef:5f:ed:0a:a9:70:8f:fd:71:dc:e3:ec:24: df:ff:bc:70:40:1f:76:ab:8c:35:ab:78:b2:41:82:54:46:14: ad:cf:ab:68:54:9f:65:01:57:6f:15:9f:e7:bd:be:23:64:26: b8:79:70:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMbZ/E1bO1G92fhF4sZ1NYK0t7VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMzExRTA3RTM3MTMzNkY5NEQxMEIxNkE0MjlFNDcz OThENzFFMjAeFw0yNDExMjIyMTE0MzRaFw0yNDExMjQwMDIwMzRaMDMxMTAvBgNV BAMTKEQwMDkyNjExNkMzNjM1M0MzODI0NTc4RkQ3NEUxNUUxNERFRTcyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBC5gamczepPUpd6emJB9B6Wsj 3ClsXiWUgntFD2wRGGIUPL9b/TfEEi+V/gUVSJtAxG99iG9QXEUVMyXZYLyn5kMU M3hcJbfvDD5UsSRWqb2ApzH9YKiDKmzpvNvk5215hh6BiG3JoxEaRCDP1ZbJhrd5 dSMVB9iQFJfLBXwbI8IONsnw2cFYCShgcgmdaZcY94/lmceBX5EpUWCTNlNrtTq/ v3ShAg833xmVmF/k5i/cSgJfsNcIoANr06VpW6xrUkSwuODBcOdL9UC/2YADaluY pKuylojdcRV/Y9djFEr45Yq4pcb893H7eQVnHpgyW/LduNXFK8/tZdUo2WcNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0AkmEWw2NTw4JFeP104V4U3uclYwHwYDVR0j BBgwFoAUKdMR4H43Ezb5TRCxakKeRzmNceIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHNWN0RUejdkcW1iSnlxRWdRN0JzVDlQQ3dCZXcyNk55R3ZZRGk5N3BM M3MvMC8yOUQzMTFFMDdFMzcxMzM2Rjk0RDEwQjE2QTQyOUU0NzM5OEQ3MUUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RDMxMUUwN0UzNzEzMzZG OTREMTBCMTZBNDI5RTQ3Mzk4RDcxRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHNWN0RUejdkcW1iSnlxRWdRN0JzVDlQQ3dCZXcyNk55R3ZZRGk5N3BMM3MvMC8y OUQzMTFFMDdFMzcxMzM2Rjk0RDEwQjE2QTQyOUU0NzM5OEQ3MUUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX5zrPd/SQKAy9Z9MLeUVobjan0vIqqDbTaRg1w4kWEs+oXkoL+pGexzz/++l 0BRu9DZFICRXomX1uUC4yFe8KEYPB6ZPTJKbGtoI3trjZ8TEY0qVv3N/xD+SIFzm Sk50B/h2uQdsEcpya38RT4LXIL312+ekw6MzL78LSYn1vvPdtMqrZKIw4EeuuVmR ThAucd6yhjfdJKl8Fr+8dLbIkeR87PVgB/dDoDwIU1vr3+kzEIe79savWem3qj2X HhxedqJkd1zmkkMiNLjvX+0KqXCP/XHc4+wk3/+8cEAfdquMNat4skGCVEYUrc+r aFSfZQFXbxWf572+I2QmuHlwvg== -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org