$ rpki-client -vvf rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft File: 09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft (raw, json) Hash identifier: lG226I+rRtQN3csTUwNeDVt1POwfuDKMFC/Sp91gZ3A= Subject key identifier: 91:D7:1D:FD:6C:45:58:4A:91:35:B1:EA:ED:25:4B:54:4E:E7:E5:C0 Authority key identifier: 09:D2:BD:A1:1F:5F:30:E7:2C:A0:2E:1F:43:CC:EB:58:3E:00:71:A3 Certificate issuer: /CN=09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3 Certificate serial: 6BBF317570CB23E148CEB83E4DC609B3D67064CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 19:44:17 +0000 Manifest this update: Fri 22 Nov 2024 19:39:17 +0000 Manifest next update: Sat 23 Nov 2024 19:54:17 +0000 Files and hashes: 1: 323830343a313132303a3a2f33322d3334203d3e203532363730.roa (hash: 4/hUPCejGXEr3H6ud3OZea74hY+DXNudHVxfiJEvBVo=) 2: 09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.crl (hash: zcsvXj3MUpRMkCGiN+mYvo5Hl/He7SuzstQc8Qsdc9Y=) 3: 3137302e38322e3136342e302f32322d3234203d3e203532363730.roa (hash: Lcr6WgrPYpmxY4afXWgfP+7OOQAa+Z34RvH72vfxh0s=) 4: 3137372e36372e3138342e302f32312d3234203d3e203532363730.roa (hash: eN6l4W1aibNbdKMLULpBJiMfbRnSbGbysLtr4ND0OqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.crl rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bf:31:75:70:cb:23:e1:48:ce:b8:3e:4d:c6:09:b3:d6:70:64:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3 Validity Not Before: Nov 22 19:39:17 2024 GMT Not After : Nov 23 19:54:17 2024 GMT Subject: CN=91D71DFD6C45584A9135B1EAED254B544EE7E5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e0:63:30:f4:c0:fd:fc:4d:a6:9c:0e:19:8c: c0:ba:11:ba:2c:d7:36:a0:42:ef:04:e5:f5:a0:aa: 2a:d6:aa:58:11:ff:53:cd:be:7f:3c:47:22:ee:e9: 6a:f1:af:d3:fe:8b:a4:e1:e4:f8:e9:fd:f0:7b:a9: 40:18:62:85:12:15:f0:d9:a3:57:1a:f9:86:b8:65: b4:80:4b:c0:11:5b:86:45:57:59:f7:b5:4a:d2:95: 50:25:ee:25:a5:fc:14:15:2e:4b:e5:f3:3f:03:64: 62:80:18:65:e0:63:9d:c1:ed:a3:d1:30:34:ca:81: 0c:16:97:4b:eb:c7:fc:5f:13:e4:6c:ba:8e:c6:f1: 08:b9:66:1c:7c:c2:f0:e9:f2:02:a5:2f:6a:f7:58: 5f:ee:80:b8:c2:1b:a1:14:ae:f3:c4:25:8f:b9:97: 7e:a2:e0:07:1e:66:19:4e:8e:23:bf:6b:34:c3:b6: 29:ad:59:72:19:38:c5:54:c3:34:eb:8a:80:a4:fa: 02:29:5e:9a:e4:4d:50:ff:59:4e:03:43:c6:44:70: c5:e5:39:5a:01:dd:59:8d:1f:6f:26:ce:c8:07:3c: 8f:8b:35:98:bb:76:ee:6b:14:80:d8:1d:54:e2:b3: 42:33:a7:2f:0e:01:fd:3b:51:2e:c8:9a:fa:4f:c9: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D7:1D:FD:6C:45:58:4A:91:35:B1:EA:ED:25:4B:54:4E:E7:E5:C0 X509v3 Authority Key Identifier: keyid:09:D2:BD:A1:1F:5F:30:E7:2C:A0:2E:1F:43:CC:EB:58:3E:00:71:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e6:e4:4b:3c:32:33:88:af:f1:7a:6b:c9:53:4f:3c:17:ab: 7d:df:24:19:74:78:3a:9f:60:bd:54:63:0f:a0:af:77:6b:00: 7d:d7:c3:92:00:fd:79:3b:99:64:5f:c6:0b:f4:6d:2a:c9:e1: 3c:87:d9:b5:97:41:3c:e6:6f:db:b8:fb:98:a6:30:56:6c:41: 82:d3:ec:74:94:5e:24:fe:28:5f:88:50:6e:96:59:69:a6:65: 52:d2:74:40:82:9f:14:c5:4a:f2:b6:7b:7b:88:35:2c:51:5c: f5:3e:30:6d:a3:a0:41:bc:46:0c:81:d7:4e:41:98:93:7e:a5: 7e:b0:39:97:88:52:a2:1b:17:65:a6:f5:ef:a9:d6:5f:92:2a: e3:77:a8:65:a3:50:cb:69:1e:11:5c:11:2a:39:61:77:32:8f: ce:86:a2:ad:96:31:c9:4a:dd:c6:bb:e6:42:bd:12:5f:64:da: 85:f2:00:f4:df:be:d5:39:62:96:6c:ed:a2:db:c7:9c:95:47: aa:5c:4f:00:e0:c3:e0:b7:ba:e4:84:3f:3f:c4:89:d6:4f:08: dd:0c:39:de:f1:5e:5a:7d:11:b4:f1:02:8c:14:8d:0a:98:fe: f5:68:4a:20:6a:6d:ef:f2:28:dd:39:00:63:67:27:8a:bb:12: 2f:db:6c:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa78xdXDLI+FIzrg+TcYJs9ZwZM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEMkJEQTExRjVGMzBFNzJDQTAyRTFGNDNDQ0VCNTgz RTAwNzFBMzAeFw0yNDExMjIxOTM5MTdaFw0yNDExMjMxOTU0MTdaMDMxMTAvBgNV BAMTKDkxRDcxREZENkM0NTU4NEE5MTM1QjFFQUVEMjU0QjU0NEVFN0U1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4GMw9MD9/E2mnA4ZjMC6Ebos 1zagQu8E5fWgqirWqlgR/1PNvn88RyLu6Wrxr9P+i6Th5Pjp/fB7qUAYYoUSFfDZ o1ca+Ya4ZbSAS8ARW4ZFV1n3tUrSlVAl7iWl/BQVLkvl8z8DZGKAGGXgY53B7aPR MDTKgQwWl0vrx/xfE+Rsuo7G8Qi5Zhx8wvDp8gKlL2r3WF/ugLjCG6EUrvPEJY+5 l36i4AceZhlOjiO/azTDtimtWXIZOMVUwzTrioCk+gIpXprkTVD/WU4DQ8ZEcMXl OVoB3VmNH28mzsgHPI+LNZi7du5rFIDYHVTis0Izpy8OAf07US7ImvpPyYB7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkdcd/WxFWEqRNbHq7SVLVE7n5cAwHwYDVR0j BBgwFoAUCdK9oR9fMOcsoC4fQ8zrWD4AcaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVBXdVRFRmtzU054ZHJBWTlDN2dFNzRrdE1NdmhvZVNhYXMzQ2V2akFF RmEvMS8wOUQyQkRBMTFGNUYzMEU3MkNBMDJFMUY0M0NDRUI1ODNFMDA3MUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDJCREExMUY1RjMwRTcy Q0EwMkUxRjQzQ0NFQjU4M0UwMDcxQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVBXdVRFRmtzU054ZHJBWTlDN2dFNzRrdE1NdmhvZVNhYXMzQ2V2akFFRmEvMS8w OUQyQkRBMTFGNUYzMEU3MkNBMDJFMUY0M0NDRUI1ODNFMDA3MUEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAObkSzwyM4iv8XpryVNPPBerfd8kGXR4Op9gvVRjD6Cvd2sAfdfDkgD9eTuZ ZF/GC/RtKsnhPIfZtZdBPOZv27j7mKYwVmxBgtPsdJReJP4oX4hQbpZZaaZlUtJ0 QIKfFMVK8rZ7e4g1LFFc9T4wbaOgQbxGDIHXTkGYk36lfrA5l4hSohsXZab176nW X5Iq43eoZaNQy2keEVwRKjlhdzKPzoairZYxyUrdxrvmQr0SX2TahfIA9N++1Tli lmztotvHnJVHqlxPAODD4Le65IQ/P8SJ1k8I3Qw53vFeWn0RtPECjBSNCpj+9WhK IGpt7/Io3TkAY2cnirsSL9ts/g== -----END CERTIFICATE-----Generated at Fri Nov 22 22:10:06 2024 by rpki-client on console-ams.rpki-client.org