$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json) Hash identifier: i6zD67ZgFejVxqK30cHjhyUUYzQZlj8y8rNq+xmOZfA= Subject key identifier: DD:1E:57:19:A4:CD:38:83:C2:9E:E7:99:D2:A2:F4:22:A4:9D:0B:F0 Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Certificate serial: 078DA0FEDDBBD20F0F6B3D7DFDBB0380C77D7C55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 15:23:22 +0000 Manifest this update: Fri 22 Nov 2024 15:18:22 +0000 Manifest next update: Sat 23 Nov 2024 17:27:22 +0000 Files and hashes: 1: 323830343a343934343a3a2f33322d3336203d3e20323637313734.roa (hash: 2+CyEwEwI6Y4MD2mIo1LTA8DNvss+3doYn4uufN0Fgg=) 2: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: 2S73S2fwqKIEucTv5iFLR9IP1j1APznL28hVSPOu/yU=) 3: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: jUsQLWFr71m//XZ+i94f1AhsRl14IQGgC+s1V7zdcBE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 17:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8d:a0:fe:dd:bb:d2:0f:0f:6b:3d:7d:fd:bb:03:80:c7:7d:7c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Validity Not Before: Nov 22 15:18:22 2024 GMT Not After : Nov 23 17:27:22 2024 GMT Subject: CN=DD1E5719A4CD3883C29EE799D2A2F422A49D0BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cb:b6:4a:3e:ef:1a:d8:53:30:91:a6:ec:f7: 15:b7:b8:13:65:e6:a5:3c:2d:d4:5f:7e:6a:01:ce: ba:23:b4:99:0d:ce:cc:e0:3b:38:f6:1c:34:5f:cc: 22:b7:d0:3d:88:c0:ae:e0:97:e4:e2:43:13:43:bc: a8:bc:6f:f1:3f:85:dc:0d:52:0e:8c:7a:af:3e:7f: e7:2b:0c:82:35:8f:dd:6d:09:9c:5e:02:77:e6:e1: 3c:00:c5:42:b0:8c:b9:f8:c6:58:8d:5a:61:4f:a9: ed:90:fa:f0:f8:4f:0a:1d:d3:d3:a1:91:c5:36:46: 3f:69:de:44:5d:47:2c:3d:72:4a:bd:06:66:f3:3e: 6e:3b:2d:e2:13:6c:c1:33:2a:14:b7:7c:43:48:7a: c7:2e:0d:f7:5a:ed:07:46:df:48:e4:dd:de:4c:b0: 1e:3c:37:aa:4c:ae:43:d6:94:ba:4a:20:42:1f:82: d3:ab:51:fa:f2:a3:41:23:ba:a7:37:c3:c4:96:b2: 19:1d:03:b1:86:fd:ca:1a:0a:e2:52:4b:67:87:17: d6:c2:e6:32:5b:e1:6c:fd:0a:ac:af:09:de:7b:30: c3:fa:13:6e:d2:d7:9f:3d:7f:40:33:31:13:c0:2c: 20:15:4f:51:df:b6:cc:e9:5a:ef:d8:8b:35:f2:30: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1E:57:19:A4:CD:38:83:C2:9E:E7:99:D2:A2:F4:22:A4:9D:0B:F0 X509v3 Authority Key Identifier: keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:99:a2:94:e8:6b:df:90:6a:b3:b1:28:80:df:d8:36:c8:ca: ee:40:27:47:97:59:51:89:66:de:94:d1:05:5a:83:43:72:02: 62:c1:d3:49:1a:fb:bb:72:99:5e:86:79:34:0d:db:2a:b6:c5: ea:d7:f9:81:70:8c:4e:f2:58:ff:f9:3f:7c:c2:2b:c4:b7:9f: db:62:2a:e9:ad:23:7c:03:52:3c:b5:a6:67:55:5f:eb:58:4b: d9:73:64:7e:3a:d5:98:03:da:ad:dc:dc:d7:a1:2b:9e:76:99: fa:3c:23:07:0c:c2:1b:99:27:80:e6:21:ae:57:5d:4e:79:b8: b5:55:de:33:52:1f:c8:3d:27:b3:53:d4:c0:5c:59:fd:a9:f0: b9:05:db:c6:35:95:88:83:d6:be:e0:51:37:8a:a1:a3:df:aa: 3f:e1:5e:99:93:4b:4f:77:e8:7b:d5:84:c1:9c:b1:33:81:89: 4c:68:d8:81:fe:3c:37:06:2c:32:a6:d6:37:6c:10:ba:93:6b: 85:f9:4a:6c:c4:93:b4:51:e1:1e:e6:e4:11:de:d0:e1:94:eb: ed:48:86:c9:2b:93:c1:89:4b:01:b9:e0:8a:fa:81:96:dd:fc: c1:2c:d7:6a:92:85:5d:60:6d:35:a2:ce:72:5b:98:e4:4c:02: 60:aa:fa:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB42g/t270g8Paz19/bsDgMd9fFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE Q0EwMDE1NjAeFw0yNDExMjIxNTE4MjJaFw0yNDExMjMxNzI3MjJaMDMxMTAvBgNV BAMTKEREMUU1NzE5QTRDRDM4ODNDMjlFRTc5OUQyQTJGNDIyQTQ5RDBCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDey7ZKPu8a2FMwkabs9xW3uBNl 5qU8LdRffmoBzrojtJkNzszgOzj2HDRfzCK30D2IwK7gl+TiQxNDvKi8b/E/hdwN Ug6Meq8+f+crDII1j91tCZxeAnfm4TwAxUKwjLn4xliNWmFPqe2Q+vD4Twod09Oh kcU2Rj9p3kRdRyw9ckq9BmbzPm47LeITbMEzKhS3fENIescuDfda7QdG30jk3d5M sB48N6pMrkPWlLpKIEIfgtOrUfryo0Ejuqc3w8SWshkdA7GG/coaCuJSS2eHF9bC 5jJb4Wz9CqyvCd57MMP6E27S1589f0AzMRPALCAVT1HftszpWu/YizXyMHsPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3R5XGaTNOIPCnueZ0qL0IqSdC/AwHwYDVR0j BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4 bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4bmUvMS8z Q0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdZmilOhr35Bqs7EogN/YNsjK7kAnR5dZUYlm3pTRBVqDQ3ICYsHTSRr7u3KZ XoZ5NA3bKrbF6tf5gXCMTvJY//k/fMIrxLef22Iq6a0jfANSPLWmZ1Vf61hL2XNk fjrVmAPardzc16ErnnaZ+jwjBwzCG5kngOYhrlddTnm4tVXeM1IfyD0ns1PUwFxZ /anwuQXbxjWViIPWvuBRN4qho9+qP+FemZNLT3foe9WEwZyxM4GJTGjYgf48NwYs MqbWN2wQupNrhflKbMSTtFHhHubkEd7Q4ZTr7UiGySuTwYlLAbngivqBlt38wSzX apKFXWBtNaLOcluY5EwCYKr6jA== -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org