$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: Sky8h5f05SPydoyLa1FBJdL8zLTBhWi2jYVkkNOxcgA= Subject key identifier: 9D:38:51:26:1C:AB:5B:68:AA:87:E1:96:EF:36:E9:66:4D:47:34:7B Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 7EAA2760BDC468D959B7AAA485E1C2707C8E8C17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 08:40:00 +0000 Manifest this update: Fri 22 Nov 2024 08:35:00 +0000 Manifest next update: Sat 23 Nov 2024 09:24:00 +0000 Files and hashes: 1: 3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa (hash: QtcVu1XQAYUwQTPLuTFKN1FgEEgoxsLavRGLPUw9mRs=) 2: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: s8U4fveECI+CAuNCTiAOce0AsjjFdLuIkrwXEGD6yiw=) 3: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: Hk3Jb90Lb9oeg3Zgzl7pCxClvgLfzafPBonA2ro4+M4=) 4: 3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa (hash: e1vivfQZj0tcl6IkDpsHaEBQIUUaJo05ko9IXkK3Vy4=) 5: 3137372e31322e3132322e302f32342d3234203d3e203533313138.roa (hash: 3e6ajgRU7V3lH0hLow04CHO/2bFI5wD1q4fABGZlmSY=) 6: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: VBmHU6G/YrvVumgN2hdyRJQKNBZ9kjVBmZ8zqbd2Y+0=) 7: 3137372e31322e3132332e302f32342d3234203d3e203533313138.roa (hash: 3FHNx3aiy20VTeKP2SlqvE3Dakx5FLSVL94WMi2Ztlg=) 8: 3137372e31322e3131322e302f32302d3230203d3e203533313138.roa (hash: /5+7RnKqOv/F/OJByteShALbCi/XTulERAHO97BvxwY=) 9: 3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa (hash: w84Anik40z83DFX3yj+lx1Zs+2i9lRNW4FQ+f7ZHMcc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 09:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:aa:27:60:bd:c4:68:d9:59:b7:aa:a4:85:e1:c2:70:7c:8e:8c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Nov 22 08:35:00 2024 GMT Not After : Nov 23 09:24:00 2024 GMT Subject: CN=9D3851261CAB5B68AA87E196EF36E9664D47347B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:70:5d:0f:77:2b:58:dc:bf:bd:ab:26:aa:f9: fd:f6:b8:fc:d8:3f:28:75:2d:33:10:a6:f2:9c:69: e1:52:a9:d9:65:b1:32:93:5a:5b:b1:2f:c6:e4:1a: ef:2e:24:f7:bb:dc:b3:47:fc:b8:ac:d8:d7:19:0c: ee:69:43:38:6a:af:bf:2d:c2:1e:5b:a1:35:8f:b1: 17:fa:96:14:a1:e6:ec:12:a6:d7:77:34:76:f7:57: 76:34:d9:1d:ed:b4:b5:ea:33:8c:d1:9c:5f:87:01: 5d:fe:4a:9a:40:9f:d4:57:cd:a0:e4:ac:f1:71:ce: b5:96:f7:8a:63:c4:dc:ee:f8:6f:1f:4a:f9:86:83: 08:a8:62:80:86:86:ca:fe:86:38:1c:ee:f5:96:56: e7:90:18:a9:32:aa:6c:ac:f3:86:68:f5:2a:58:37: ab:5e:66:d9:0f:ac:90:60:c8:44:5e:87:ad:8b:56: 1f:ae:05:4d:33:69:e9:bc:bc:30:f4:55:fd:5a:d2: 0c:5c:12:e8:5e:6e:7d:4c:b5:7d:84:12:3b:cc:f9: 2a:7a:9d:63:07:97:49:46:f7:fd:08:6b:83:4c:66: 15:0f:cc:3c:38:a7:bf:87:0c:bf:38:a6:bc:f4:3b: c6:dd:b6:ad:c8:94:31:33:39:93:93:3e:df:25:de: 3e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:38:51:26:1C:AB:5B:68:AA:87:E1:96:EF:36:E9:66:4D:47:34:7B X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d0:51:f7:c7:d5:3b:cb:6f:ef:be:37:71:12:62:ea:15:c6: 09:df:22:c0:28:c5:da:16:27:80:69:a4:71:1a:61:c8:3d:b3: 89:d1:4d:c6:1c:08:31:59:1e:c0:8e:0f:2f:fa:54:1c:cb:dd: b3:94:52:fb:2a:35:77:6f:92:70:b5:56:02:f9:e2:41:ef:3b: 3f:40:e0:55:58:dc:e9:da:b2:32:20:38:4e:cd:65:2c:f8:ff: 66:78:78:6d:b5:0b:dd:b3:c3:25:be:57:b4:16:e9:ae:a4:20: 6a:c7:dc:a3:72:e0:b6:4f:1b:22:03:06:e5:5a:de:b7:56:72: da:6c:f5:cf:69:57:ef:5c:05:e5:e4:ef:d3:d5:2f:ae:aa:03: 40:32:9e:27:81:21:93:34:73:bc:40:56:95:5a:51:6d:4e:8b: 9b:f9:d1:9d:e1:9f:1d:b3:d3:2c:f7:70:b2:b0:e1:81:7d:40: 3b:5d:ea:a7:d8:5b:29:71:ef:af:54:65:9f:12:e3:09:51:15: e8:5e:ab:a4:c6:ca:26:a3:d7:ef:16:54:90:75:02:25:4f:7a: 38:6c:33:7c:f8:42:b9:37:b8:28:0b:61:a6:df:2c:cd:d4:a4: d2:d8:00:ea:bf:e2:48:6f:7c:93:11:2c:17:ba:ff:3e:ca:2a: 9f:fd:80:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfqonYL3EaNlZt6qkheHCcHyOjBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNDExMjIwODM1MDBaFw0yNDExMjMwOTI0MDBaMDMxMTAvBgNV BAMTKDlEMzg1MTI2MUNBQjVCNjhBQTg3RTE5NkVGMzZFOTY2NEQ0NzM0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcF0PdytY3L+9qyaq+f32uPzY Pyh1LTMQpvKcaeFSqdllsTKTWluxL8bkGu8uJPe73LNH/Lis2NcZDO5pQzhqr78t wh5boTWPsRf6lhSh5uwSptd3NHb3V3Y02R3ttLXqM4zRnF+HAV3+SppAn9RXzaDk rPFxzrWW94pjxNzu+G8fSvmGgwioYoCGhsr+hjgc7vWWVueQGKkyqmys84Zo9SpY N6teZtkPrJBgyEReh62LVh+uBU0zaem8vDD0Vf1a0gxcEuhebn1MtX2EEjvM+Sp6 nWMHl0lG9/0Ia4NMZhUPzDw4p7+HDL84prz0O8bdtq3IlDEzOZOTPt8l3j4/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnThRJhyrW2iqh+GW7zbpZk1HNHswHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcNBR98fVO8tv7743cRJi6hXGCd8iwCjF2hYngGmkcRphyD2zidFNxhwIMVke wI4PL/pUHMvds5RS+yo1d2+ScLVWAvniQe87P0DgVVjc6dqyMiA4Ts1lLPj/Znh4 bbUL3bPDJb5XtBbprqQgasfco3Lgtk8bIgMG5Vret1Zy2mz1z2lX71wF5eTv09Uv rqoDQDKeJ4EhkzRzvEBWlVpRbU6Lm/nRneGfHbPTLPdwsrDhgX1AO13qp9hbKXHv r1RlnxLjCVEV6F6rpMbKJqPX7xZUkHUCJU96OGwzfPhCuTe4KAthpt8szdSk0tgA 6r/iSG98kxEsF7r/Psoqn/2AMg== -----END CERTIFICATE-----Generated at Fri Nov 22 09:39:22 2024 by rpki-client on console-ams.rpki-client.org