$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: QMtXTMOuJff9LzNzUCl3Hx64hJCFhzi7zvvRbSGTdg0= Subject key identifier: 47:AA:4B:C2:53:FE:75:42:AC:86:E6:F0:47:22:72:D0:4D:31:9A:3C Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 60555C5502CBAD405597C1B2DF9871438D9DA3AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 12:10:01 +0000 Manifest this update: Fri 22 Nov 2024 12:05:01 +0000 Manifest next update: Sat 23 Nov 2024 14:04:01 +0000 Files and hashes: 1: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: 8lemx9M9G5d1eucSo5LqjKEd9fm8zaIvtbK0iBKMLLw=) 2: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: FhXs6owyMCPK+pKyYWeV+ZMD56wtHneHBN0BVLBhBDc=) 3: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: LPMK5ebksY/QJ1KjD1+/I37Z1JfzcirYBsFXclfnJIE=) 4: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: MpqkeR00QEkmxWkmp6YHHqBPxjQWu8R8My9i3sBpqs0=) 5: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: acNtceDHYti/SJyrLw9q6xxQv1mIkrjxOKma+1bm/j0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 14:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:55:5c:55:02:cb:ad:40:55:97:c1:b2:df:98:71:43:8d:9d:a3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Nov 22 12:05:01 2024 GMT Not After : Nov 23 14:04:01 2024 GMT Subject: CN=47AA4BC253FE7542AC86E6F0472272D04D319A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:40:7f:f1:26:e5:00:77:5e:1d:ab:8a:7f: 2c:36:7e:ba:c9:59:62:cb:bc:f0:6e:28:dc:14:2b: 43:1f:15:b0:1e:47:22:cf:eb:c8:db:87:7c:1c:9a: 65:0c:dd:ef:09:a2:3a:70:07:f5:47:2b:0f:0d:28: 56:60:30:e8:ec:ab:fe:3f:25:38:b0:4e:6c:ef:57: 26:34:0b:60:d4:aa:eb:75:5a:3d:8f:8d:fa:0c:75: cb:d1:31:aa:30:2d:fa:c9:7f:8c:5f:3a:d7:e7:15: 0a:c4:a1:e9:93:35:50:cb:aa:23:00:0f:1f:f2:60: d3:a8:d5:05:2f:f0:7c:6c:5b:8c:cd:2d:57:1f:8a: 57:4a:bf:cf:c9:b6:eb:f1:59:51:67:84:4e:54:f0: 88:33:c9:50:9f:60:ab:ff:53:21:95:59:36:29:ec: 70:02:7d:ca:6a:e8:aa:bc:c3:0b:ae:08:a4:1e:d4: ce:71:81:f4:16:02:92:21:22:de:76:ad:34:ea:ff: 43:e6:3b:b1:1f:48:46:a1:75:d7:e1:66:9d:9f:28: 3e:e9:d5:94:a0:03:45:c1:2b:a4:8b:6f:56:ed:10: 93:e0:8b:5a:a7:64:03:54:eb:32:df:de:ab:c1:c0: 88:4d:ea:b4:62:fe:03:6a:05:2f:64:bb:91:1e:2a: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AA:4B:C2:53:FE:75:42:AC:86:E6:F0:47:22:72:D0:4D:31:9A:3C X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e7:d3:5d:c5:8a:74:c2:ab:13:a2:6d:e2:03:d3:25:09:6d: 4d:3d:5c:f7:c8:aa:5e:4c:dc:6f:57:66:b6:c8:f8:66:cc:5f: 9a:df:bf:44:1c:00:ac:44:91:8a:35:f1:2f:d5:0b:78:1e:63: 98:d5:5d:37:0b:e1:b3:f3:ba:56:29:ea:02:a8:7b:f8:b0:ac: df:a1:c7:24:2f:d4:30:ef:42:1b:1a:af:07:8a:f8:62:2c:d9: 8f:15:ab:cc:ef:8d:ca:36:cc:8e:6f:25:81:1c:9d:96:c7:44: e5:5a:d2:a7:67:dc:f3:63:18:33:e5:39:6a:63:65:7d:4e:7d: be:4c:ba:eb:bd:51:11:31:73:c8:e5:3f:4e:63:f2:72:c2:12: 8e:75:17:7c:2f:79:88:d9:4d:9f:8a:c9:64:f0:4e:38:5e:88: ed:0e:72:df:a9:00:bc:b6:25:05:14:a3:69:a7:e8:8f:d0:9e: 8d:33:02:28:98:e1:95:8c:c7:8a:1a:ad:bd:18:4a:6f:dd:39: 9e:be:d1:97:98:ce:63:f6:fb:ff:67:ca:da:83:c3:bb:b9:be: e2:f4:39:92:bd:6a:41:f9:e9:21:75:69:c2:0a:9c:d2:b9:af: 4f:08:5f:3b:2b:4c:20:50:87:14:2a:ba:f6:5f:6b:63:b5:11: ee:84:1e:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYFVcVQLLrUBVl8Gy35hxQ42do64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNDExMjIxMjA1MDFaFw0yNDExMjMxNDA0MDFaMDMxMTAvBgNV BAMTKDQ3QUE0QkMyNTNGRTc1NDJBQzg2RTZGMDQ3MjI3MkQwNEQzMTlBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NUB/8SblAHdeHauKfyw2frrJ WWLLvPBuKNwUK0MfFbAeRyLP68jbh3wcmmUM3e8JojpwB/VHKw8NKFZgMOjsq/4/ JTiwTmzvVyY0C2DUqut1Wj2PjfoMdcvRMaowLfrJf4xfOtfnFQrEoemTNVDLqiMA Dx/yYNOo1QUv8HxsW4zNLVcfildKv8/JtuvxWVFnhE5U8IgzyVCfYKv/UyGVWTYp 7HACfcpq6Kq8wwuuCKQe1M5xgfQWApIhIt52rTTq/0PmO7EfSEahddfhZp2fKD7p 1ZSgA0XBK6SLb1btEJPgi1qnZANU6zLf3qvBwIhN6rRi/gNqBS9ku5EeKomzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUR6pLwlP+dUKshubwRyJy0E0xmjwwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcufTXcWKdMKrE6Jt4gPTJQltTT1c98iqXkzcb1dmtsj4Zsxfmt+/RBwArESR ijXxL9ULeB5jmNVdNwvhs/O6VinqAqh7+LCs36HHJC/UMO9CGxqvB4r4YizZjxWr zO+NyjbMjm8lgRydlsdE5VrSp2fc82MYM+U5amNlfU59vky6671RETFzyOU/TmPy csISjnUXfC95iNlNn4rJZPBOOF6I7Q5y36kAvLYlBRSjaafoj9CejTMCKJjhlYzH ihqtvRhKb905nr7Rl5jOY/b7/2fK2oPDu7m+4vQ5kr1qQfnpIXVpwgqc0rmvTwhf OytMIFCHFCq69l9rY7UR7oQeSw== -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:55 2024 by rpki-client on console-fra.rpki-client.org