$ rpki-client -vvf rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.mft File: B42C382D0432E1D64A3416918A84F0D945387A0A.mft (raw, json) Hash identifier: uo6osEmttUlMFqT1oTmv/2foA598Ja06sGL/Q2/Qde0= Subject key identifier: 3C:27:45:20:8D:22:CD:AE:31:FF:D3:28:F1:50:AE:D4:41:BB:1C:DE Authority key identifier: B4:2C:38:2D:04:32:E1:D6:4A:34:16:91:8A:84:F0:D9:45:38:7A:0A Certificate issuer: /CN=B42C382D0432E1D64A3416918A84F0D945387A0A Certificate serial: 56CAAE87825B3EBACDA84E9A7C1072398300388C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42C382D0432E1D64A3416918A84F0D945387A0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.mft Manifest number: 21 Signing time: Fri 22 Nov 2024 20:38:01 +0000 Manifest this update: Fri 22 Nov 2024 20:33:01 +0000 Manifest next update: Sat 23 Nov 2024 22:24:01 +0000 Files and hashes: 1: 3137372e38342e3232342e302f32322d3332203d3e20323632353933.roa (hash: P1p6/9DADM3M8qge72rYfZnEqpf7TKslK3zDY/3YtyE=) 2: 3137302e3234372e32342e302f32322d3332203d3e20323632353933.roa (hash: JP4TcwfTeIYHThW1SFrF8mznGr9tmZoamUX2O6Gw4eU=) 3: B42C382D0432E1D64A3416918A84F0D945387A0A.crl (hash: Em9cmu7Rq6qchY3aePECAbLVjPfcSO2Vg4+5JJISJhw=) 4: 323830343a326534303a3a2f33322d313238203d3e20323632353933.roa (hash: i4EfRsQ8pHIdJ9iHurrw0m5s1Z6OmWKA/nwuOCuZL0Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.crl rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42C382D0432E1D64A3416918A84F0D945387A0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 22:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ca:ae:87:82:5b:3e:ba:cd:a8:4e:9a:7c:10:72:39:83:00:38:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B42C382D0432E1D64A3416918A84F0D945387A0A Validity Not Before: Nov 22 20:33:01 2024 GMT Not After : Nov 23 22:24:01 2024 GMT Subject: CN=3C2745208D22CDAE31FFD328F150AED441BB1CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:43:32:19:0f:14:4b:80:2a:06:b4:e0:96: 13:53:9d:02:cc:4b:cc:e9:04:18:86:65:1e:e9:05: da:b0:e0:3f:c6:d5:c8:54:2a:62:bf:a8:5f:2d:40: bf:22:a2:51:11:4d:9a:f0:ea:52:60:75:b4:7b:83: 4d:52:c0:ed:6b:00:63:c5:cc:e4:9b:6d:f4:98:60: 43:4a:76:9a:c7:4d:9d:3f:01:71:4b:1d:22:b6:86: ce:d6:2b:11:dc:52:87:74:c0:ce:15:64:e6:d0:bb: b6:11:a7:ad:72:e7:70:50:40:bd:66:a0:e9:0c:0c: 00:21:e3:3c:a7:1c:3c:de:58:86:b5:a1:57:c3:f6: a3:d3:1c:5d:06:b7:ec:cc:81:59:5b:a8:a8:75:b0: 5b:71:d4:5f:03:61:b4:9d:0e:0c:bf:7b:81:50:f9: 22:9e:f3:d7:bf:09:b2:38:1a:2b:85:fa:4a:10:c7: ee:26:0e:8a:0c:be:17:d8:9f:d3:c7:2f:85:41:c1: f9:92:03:fb:2e:b1:0c:d9:7e:36:9f:7f:c0:a5:5a: cb:c2:a0:8c:ad:5a:f9:91:7a:a7:f5:dd:f3:e7:81: f3:bd:37:f0:01:66:41:f7:3c:4e:06:9e:9c:1f:9e: 4d:94:96:f7:da:25:f8:4b:6e:86:3f:16:69:d7:5d: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:27:45:20:8D:22:CD:AE:31:FF:D3:28:F1:50:AE:D4:41:BB:1C:DE X509v3 Authority Key Identifier: keyid:B4:2C:38:2D:04:32:E1:D6:4A:34:16:91:8A:84:F0:D9:45:38:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42C382D0432E1D64A3416918A84F0D945387A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:df:e9:12:9f:e5:4c:8b:25:79:a9:7c:49:6f:f6:a5:f2:e6: a1:5b:64:fe:5d:ab:15:b2:4d:e0:0d:3c:5c:dc:d2:1a:92:84: 72:54:35:80:c6:c5:17:2b:46:0e:b0:8e:44:30:b8:44:e8:98: 44:8e:ec:70:96:f2:92:3c:c0:92:67:4b:a9:d9:ba:46:e0:79: 5f:07:aa:74:72:16:01:3e:22:5a:d0:6c:8c:fe:ce:5b:8e:37: 91:a2:fa:87:cb:ae:c1:92:57:47:2c:66:95:ff:3e:84:b6:07: 54:a7:94:9b:de:b3:a8:c2:06:47:6d:32:c6:ba:7c:99:80:4c: ce:ac:a4:7b:09:e3:56:59:23:a2:22:7f:72:ee:7c:ca:73:fe: f7:5b:b7:bd:92:aa:aa:be:84:47:5b:3e:89:6d:bd:f6:aa:d2: 2c:4c:1a:fd:8c:4d:bd:25:63:c8:92:1e:b8:66:e4:89:25:6f: 65:bc:1c:1d:da:ab:02:b8:05:a6:b6:b7:51:93:47:0d:79:ba: 56:84:48:9e:71:a9:1f:4b:de:17:b5:a4:93:76:fd:bb:b1:ce: 03:cf:fa:ed:d2:3b:16:58:41:f6:3b:37:1e:95:ac:48:88:89: 42:17:61:7c:5a:70:84:34:90:22:c0:46:d7:3a:28:fc:bf:08: 5b:55:14:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVsquh4JbPrrNqE6afBByOYMAOIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQyQzM4MkQwNDMyRTFENjRBMzQxNjkxOEE4NEYwRDk0 NTM4N0EwQTAeFw0yNDExMjIyMDMzMDFaFw0yNDExMjMyMjI0MDFaMDMxMTAvBgNV BAMTKDNDMjc0NTIwOEQyMkNEQUUzMUZGRDMyOEYxNTBBRUQ0NDFCQjFDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH60MyGQ8US4AqBrTglhNTnQLM S8zpBBiGZR7pBdqw4D/G1chUKmK/qF8tQL8iolERTZrw6lJgdbR7g01SwO1rAGPF zOSbbfSYYENKdprHTZ0/AXFLHSK2hs7WKxHcUod0wM4VZObQu7YRp61y53BQQL1m oOkMDAAh4zynHDzeWIa1oVfD9qPTHF0Gt+zMgVlbqKh1sFtx1F8DYbSdDgy/e4FQ +SKe89e/CbI4GiuF+koQx+4mDooMvhfYn9PHL4VBwfmSA/susQzZfjaff8ClWsvC oIytWvmReqf13fPngfO9N/ABZkH3PE4Gnpwfnk2UlvfaJfhLboY/FmnXXemvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPCdFII0iza4x/9Mo8VCu1EG7HN4wHwYDVR0j BBgwFoAUtCw4LQQy4dZKNBaRioTw2UU4egowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXRBeUVSbzkyYXp4eFBRa0pBaURvUmI2a0I5bXNhbVJ3WFVLZmZ6b05u RzYvMC9CNDJDMzgyRDA0MzJFMUQ2NEEzNDE2OTE4QTg0RjBEOTQ1Mzg3QTBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MkMzODJEMDQzMkUxRDY0 QTM0MTY5MThBODRGMEQ5NDUzODdBMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXRBeUVSbzkyYXp4eFBRa0pBaURvUmI2a0I5bXNhbVJ3WFVLZmZ6b05uRzYvMC9C NDJDMzgyRDA0MzJFMUQ2NEEzNDE2OTE4QTg0RjBEOTQ1Mzg3QTBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACd/pEp/lTIsleal8SW/2pfLmoVtk/l2rFbJN4A08XNzSGpKEclQ1gMbFFytG DrCORDC4ROiYRI7scJbykjzAkmdLqdm6RuB5XweqdHIWAT4iWtBsjP7OW443kaL6 h8uuwZJXRyxmlf8+hLYHVKeUm96zqMIGR20yxrp8mYBMzqykewnjVlkjoiJ/cu58 ynP+91u3vZKqqr6ER1s+iW299qrSLEwa/YxNvSVjyJIeuGbkiSVvZbwcHdqrArgF pra3UZNHDXm6VoRInnGpH0veF7Wkk3b9u7HOA8/67dI7FlhB9js3HpWsSIiJQhdh fFpwhDSQIsBG1zoo/L8IW1UUkw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:10:05 2024 by rpki-client on console-ams.rpki-client.org