$ rpki-client -vvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json) Hash identifier: t744dwNWMWE+snszjUespol/30g5iByGqHPwyGcJCLY= Subject key identifier: 81:7B:06:7B:C8:1E:21:08:F6:1E:EC:D0:D5:22:F4:A1:55:7E:3D:05 Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 Certificate issuer: /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Certificate serial: 3AB302517EA869BFF79DE4DC2DC0D304613F7C96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft Manifest number: EE Signing time: Sat 28 Sep 2024 11:06:30 +0000 Manifest this update: Sat 28 Sep 2024 11:01:30 +0000 Manifest next update: Sun 29 Sep 2024 11:10:30 +0000 Files and hashes: 1: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: lH2X0qyeDQaDPAPZQXiHlHLLmSFUzhJ73oMPz/U0/hQ=) 2: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: qvV3Ji0ojjWhXafmlllEBblNoGGdlDo8eNBCQcw86YA=) 3: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: 5R/GNEaZDgpb9onpFXInv+H6WtxGEkLpm4iPZOdDz1M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 11:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b3:02:51:7e:a8:69:bf:f7:9d:e4:dc:2d:c0:d3:04:61:3f:7c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Validity Not Before: Sep 28 11:01:30 2024 GMT Not After : Sep 29 11:10:30 2024 GMT Subject: CN=817B067BC81E2108F61EECD0D522F4A1557E3D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:1c:05:b3:64:b4:40:bc:d8:d1:2c:aa:30: cd:4c:72:e5:9d:9e:be:2d:98:c4:62:c1:1d:e3:5b: 30:ef:2c:08:f5:ab:87:61:89:43:c3:8b:c0:6e:2b: 6a:83:50:cb:52:02:fc:c4:1e:a5:de:af:e0:56:92: 07:7d:7f:d7:1b:c1:65:3c:69:0f:af:9e:be:b1:1f: 90:a3:08:90:17:38:f6:dc:0e:fb:b6:41:43:9f:f5: 93:13:d3:1c:fd:c5:87:41:aa:c1:b9:60:af:f2:81: 02:71:12:f4:87:c8:c9:d1:1d:4f:1a:1c:50:f6:02: 88:c1:50:5d:c9:e9:d4:38:92:74:f9:69:a5:13:b0: bf:79:36:db:f5:1d:0e:6e:80:ca:ae:5e:f2:f8:8e: ce:8d:14:81:d6:46:8c:b3:48:67:33:36:8a:4c:80: 15:1d:f5:34:65:da:71:d7:92:c3:3b:2a:bc:5c:d3: e3:27:7a:aa:d1:f3:72:8a:32:bb:c0:79:5d:c7:be: f2:74:94:ce:18:f8:db:1a:29:7b:59:ff:cc:6d:1e: 5a:16:3f:c2:a6:1b:ac:f2:88:aa:38:2c:7a:43:20: e6:9f:14:08:da:d9:cb:b4:e4:ac:37:40:40:ac:b5: 38:49:af:67:79:96:72:fd:98:7c:41:57:79:1e:1f: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7B:06:7B:C8:1E:21:08:F6:1E:EC:D0:D5:22:F4:A1:55:7E:3D:05 X509v3 Authority Key Identifier: keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:82:a4:51:09:8a:78:c1:0d:54:b4:2a:31:3d:6a:59:73:04: 9f:b4:2b:90:fa:4e:75:60:06:01:3c:5e:54:38:23:46:a3:55: 8a:b1:97:30:26:75:8f:a4:56:1d:66:27:83:70:f8:35:c7:69: db:76:1a:8d:68:b9:8d:3f:d7:f8:56:72:d9:75:de:f4:02:54: be:a1:87:2c:83:e8:7f:e0:6f:a5:12:8f:48:2d:22:76:90:1a: 79:a4:02:fd:bd:23:00:00:72:9b:81:bd:3b:5d:ba:8e:9c:28: e2:c1:34:29:b7:0c:7c:ae:61:dc:7f:ca:7d:41:37:92:1b:f5: ce:95:d9:a2:8e:eb:65:13:29:87:d2:92:05:9d:c0:f6:23:18: 9e:9f:39:99:eb:8d:a8:ac:87:67:35:b9:83:34:22:03:57:4b: 93:c5:68:a6:87:ff:45:83:76:f8:dd:8d:ee:8b:44:8e:26:05: 99:48:42:7a:80:04:d3:ad:8a:b2:fe:58:7a:ca:6a:95:ed:d5: 86:96:4a:9c:be:5e:84:bb:2b:4c:ae:09:68:ee:7f:6b:bd:77: 11:b1:02:86:f5:d9:f1:61:b8:b7:f0:76:ac:82:ef:25:65:db: f7:f4:4c:8b:59:b6:f8:77:c1:44:04:57:3d:ee:17:b5:a7:aa: d8:2b:91:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOrMCUX6oab/3neTcLcDTBGE/fJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQzBGMEI1NzFGREExQzMzMTNCRjhBRjdENjg2Qzc0 QkFGQ0I0MTAeFw0yNDA5MjgxMTAxMzBaFw0yNDA5MjkxMTEwMzBaMDMxMTAvBgNV BAMTKDgxN0IwNjdCQzgxRTIxMDhGNjFFRUNEMEQ1MjJGNEExNTU3RTNEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIxwFs2S0QLzY0SyqMM1McuWd nr4tmMRiwR3jWzDvLAj1q4dhiUPDi8BuK2qDUMtSAvzEHqXer+BWkgd9f9cbwWU8 aQ+vnr6xH5CjCJAXOPbcDvu2QUOf9ZMT0xz9xYdBqsG5YK/ygQJxEvSHyMnRHU8a HFD2AojBUF3J6dQ4knT5aaUTsL95Ntv1HQ5ugMquXvL4js6NFIHWRoyzSGczNopM gBUd9TRl2nHXksM7Krxc0+MneqrR83KKMrvAeV3HvvJ0lM4Y+NsaKXtZ/8xtHloW P8KmG6zyiKo4LHpDIOafFAja2cu05Kw3QECstThJr2d5lnL9mHxBV3keH2ltAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgXsGe8geIQj2HuzQ1SL0oVV+PQUwHwYDVR0j BBgwFoAUIzwPC1cf2hwzE7+K99aGx0uvy0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFB ZjMvMS8yMzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzM0MwRjBCNTcxRkRBMUMz MzEzQkY4QUY3RDY4NkM3NEJBRkNCNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFBZjMvMS8y MzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdoKkUQmKeMENVLQqMT1qWXMEn7QrkPpOdWAGATxeVDgjRqNVirGXMCZ1j6RW HWYng3D4Ncdp23YajWi5jT/X+FZy2XXe9AJUvqGHLIPof+BvpRKPSC0idpAaeaQC /b0jAABym4G9O126jpwo4sE0KbcMfK5h3H/KfUE3khv1zpXZoo7rZRMph9KSBZ3A 9iMYnp85meuNqKyHZzW5gzQiA1dLk8Vopof/RYN2+N2N7otEjiYFmUhCeoAE062K sv5Yespqle3VhpZKnL5ehLsrTK4JaO5/a713EbEChvXZ8WG4t/B2rILvJWXb9/RM i1m2+HfBRARXPe4Xtaeq2CuRWg== -----END CERTIFICATE-----Generated at Sat Sep 28 11:59:56 2024 by rpki-client on console-fra.rpki-client.org