$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft File: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft (raw, json) Hash identifier: ruajR1n3Qi7Qc1w5k9X3m0jKu64XjZhPsBMv8EqQMHU= Subject key identifier: 85:E1:89:D5:0B:80:DA:BD:BE:6C:A2:37:60:91:0E:64:7B:3D:64:FF Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA Certificate issuer: /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Certificate serial: 2940A0A9F4ECE6AAB7F064D8B6E1E1A23381A69E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft Manifest number: 41 Signing time: Sun 16 Jun 2024 04:18:07 +0000 Manifest this update: Sun 16 Jun 2024 04:13:07 +0000 Manifest next update: Mon 17 Jun 2024 06:04:07 +0000 Files and hashes: 1: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: kIXRpBjeGdUu2zRGGQfPLSTIVme29IgHP8qxOCQNB6E=) 2: 323830343a333535303a3a2f33322d3336203d3e20323636323830.roa (hash: C6wE7oZkpSZ2xYhbeMpWgIfG3lzxdtXIRGUox74oPoo=) 3: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl (hash: BKHLOzZnCuiobjlIYteuSV7y8CzANeemK+L7e5AeuFg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 16 Jun 2024 19:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:40:a0:a9:f4:ec:e6:aa:b7:f0:64:d8:b6:e1:e1:a2:33:81:a6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Validity Not Before: Jun 16 04:13:07 2024 GMT Not After : Jun 17 06:04:07 2024 GMT Subject: CN=85E189D50B80DABDBE6CA23760910E647B3D64FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:85:25:c3:13:a5:f6:57:e4:6c:0a:cc:68: b2:99:c8:3a:d7:69:5d:53:22:90:08:08:6f:0b:b3: 6c:74:3c:4f:aa:ed:3e:37:db:1c:7c:3f:9e:5a:fc: 92:60:7c:d4:4a:0b:e2:b3:88:4c:b4:41:76:d5:46: 74:bf:c3:dc:d9:96:7e:ee:5f:5f:5b:a3:44:27:78: 25:d7:ae:66:9a:45:1a:d9:17:be:e2:21:9d:6f:ae: 2b:45:6b:da:ac:46:d4:86:b3:a1:b8:71:9b:2c:19: a5:c2:20:35:56:7f:e8:2e:eb:28:1b:b8:21:db:9b: 97:40:9e:5c:40:aa:1c:59:93:7f:95:a2:fa:b7:70: 4f:05:3d:f2:83:29:cf:d4:cd:51:af:0d:cb:78:0f: eb:08:db:13:28:46:38:f8:99:58:97:53:fe:38:b4: 92:fb:48:aa:c0:a2:3b:24:ae:8d:7a:69:f8:4a:57: 8e:3f:cc:62:03:83:c1:35:e1:3c:b6:a8:fd:eb:4e: e5:c6:25:de:3a:7b:85:48:43:12:6d:1e:56:e5:ed: e3:ed:4b:2d:bd:d0:df:69:11:dd:fe:a8:6e:52:5c: 6d:95:e6:29:2f:24:c5:f9:43:cb:76:12:90:ee:e8: 04:81:76:78:b0:3e:f7:66:ff:c2:99:74:38:05:bc: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:89:D5:0B:80:DA:BD:BE:6C:A2:37:60:91:0E:64:7B:3D:64:FF X509v3 Authority Key Identifier: keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:2c:a7:ae:72:cb:30:11:e3:c1:3a:a6:7e:9a:64:57:01:94: b2:e8:98:ec:85:d7:34:0c:70:1c:e4:b9:27:cf:25:eb:f3:2a: 11:65:07:26:2d:a8:ba:d2:cf:15:58:24:04:25:5d:d0:35:12: 30:2b:a1:02:5a:9c:4a:4f:67:e5:50:50:bc:e6:2f:40:33:3b: 42:a2:b8:46:cd:01:e3:d9:72:59:df:57:65:a3:ee:67:c9:3b: 5e:e5:0e:23:7f:d9:ab:2b:35:90:f4:6b:d1:7f:d2:d2:39:9b: b7:a3:81:5f:5f:38:08:b7:80:40:13:83:e0:fc:ee:d8:8d:a2: e3:50:73:50:37:71:eb:10:a7:fd:8a:99:6c:3a:f4:00:13:e4: 23:b1:f7:94:cc:22:da:3f:66:d4:f5:35:1d:28:6a:af:7b:74: 36:e8:21:ea:fa:03:e1:9d:40:91:1d:91:40:62:7b:29:5e:7c: c2:57:c6:a9:8e:91:57:63:f6:59:95:2b:4f:34:53:d7:3f:7a: 76:9e:ff:54:71:8b:a3:06:76:a4:31:a1:b7:06:8e:b9:04:df: b8:56:15:f5:fb:ce:47:cb:c0:48:cd:1f:d1:ef:8b:4a:d4:25: 41:a2:20:7f:93:81:fd:74:9a:6d:89:71:af:f7:58:db:1b:74: c7:08:b9:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKUCgqfTs5qq38GTYtuHhojOBpp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNFQ0Q0RDFEMjkzNjAzQ0VDNDNDMEZCOENENzhERjlD RjI0MTFBQTAeFw0yNDA2MTYwNDEzMDdaFw0yNDA2MTcwNjA0MDdaMDMxMTAvBgNV BAMTKDg1RTE4OUQ1MEI4MERBQkRCRTZDQTIzNzYwOTEwRTY0N0IzRDY0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZoUlwxOl9lfkbArMaLKZyDrX aV1TIpAICG8Ls2x0PE+q7T432xx8P55a/JJgfNRKC+KziEy0QXbVRnS/w9zZln7u X19bo0QneCXXrmaaRRrZF77iIZ1vritFa9qsRtSGs6G4cZssGaXCIDVWf+gu6ygb uCHbm5dAnlxAqhxZk3+Vovq3cE8FPfKDKc/UzVGvDct4D+sI2xMoRjj4mViXU/44 tJL7SKrAojskro16afhKV44/zGIDg8E14Ty2qP3rTuXGJd46e4VIQxJtHlbl7ePt Sy290N9pEd3+qG5SXG2V5ikvJMX5Q8t2EpDu6ASBdniwPvdm/8KZdDgFvK4vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUheGJ1QuA2r2+bKI3YJEOZHs9ZP8wHwYDVR0j BBgwFoAUU+zU0dKTYDzsQ8D7jNeN+c8kEaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3 NDIvMC81M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzRUNENEQxRDI5MzYwM0NF QzQzQzBGQjhDRDc4REY5Q0YyNDExQUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3NDIvMC81 M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuiynrnLLMBHjwTqmfppkVwGUsuiY7IXXNAxwHOS5J88l6/MqEWUHJi2outLP FVgkBCVd0DUSMCuhAlqcSk9n5VBQvOYvQDM7QqK4Rs0B49lyWd9XZaPuZ8k7XuUO I3/Zqys1kPRr0X/S0jmbt6OBX184CLeAQBOD4Pzu2I2i41BzUDdx6xCn/YqZbDr0 ABPkI7H3lMwi2j9m1PU1HShqr3t0Nugh6voD4Z1AkR2RQGJ7KV58wlfGqY6RV2P2 WZUrTzRT1z96dp7/VHGLowZ2pDGhtwaOuQTfuFYV9fvOR8vASM0f0e+LStQlQaIg f5OB/XSabYlxr/dY2xt0xwi5mg== -----END CERTIFICATE-----Generated at Sun Jun 16 04:43:19 2024 by rpki-client on console-fra.rpki-client.org