$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft File: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft (raw, json) Hash identifier: 5whfLqm0yqY++feF4sfBz4g3SwvOY5aDchf3PGBTZjs= Subject key identifier: F0:BA:8D:01:C9:A1:1B:22:C0:E0:D2:E0:21:C3:CD:E4:EC:AE:25:D8 Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA Certificate issuer: /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Certificate serial: 1D368B927048472E56ADB6E7851F07268BDA2D58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft Manifest number: 011A Signing time: Mon 25 Nov 2024 19:30:40 +0000 Manifest this update: Mon 25 Nov 2024 19:25:40 +0000 Manifest next update: Tue 26 Nov 2024 21:18:40 +0000 Files and hashes: 1: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl (hash: V4mAMbeaJhcimS01oovl9uOjIKeJMDIZtxaSEINHIB8=) 2: 323830343a333535303a3a2f33322d3336203d3e20323636323830.roa (hash: C6wE7oZkpSZ2xYhbeMpWgIfG3lzxdtXIRGUox74oPoo=) 3: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: kIXRpBjeGdUu2zRGGQfPLSTIVme29IgHP8qxOCQNB6E=) 4: 323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa (hash: //hWMDP3j37ixCtTNQwyZlAnS8v4oi3ZFATjNGsEs2w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 21:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:36:8b:92:70:48:47:2e:56:ad:b6:e7:85:1f:07:26:8b:da:2d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Validity Not Before: Nov 25 19:25:40 2024 GMT Not After : Nov 26 21:18:40 2024 GMT Subject: CN=F0BA8D01C9A11B22C0E0D2E021C3CDE4ECAE25D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:c4:f8:98:40:74:0e:56:ee:63:16:ca:57: e9:80:93:c7:66:c0:ae:c5:82:46:11:04:b9:b6:bf: b0:db:26:16:4b:06:23:19:9d:d8:c0:71:1e:8e:9f: 29:b1:02:f1:7f:93:48:76:2d:9d:9a:fa:75:38:17: 25:be:7f:a0:4c:60:d2:13:19:67:bf:dc:9e:d6:4a: a9:8f:ca:85:3f:37:f3:0d:74:b3:d8:83:6b:d0:a9: 52:01:c6:81:63:bd:2d:03:ee:b4:e2:3f:60:9c:38: 0d:68:ec:c1:84:43:6a:12:30:fb:ca:dc:e2:1c:0e: 5d:47:59:35:be:4a:7e:4a:f1:f0:0f:34:e7:fe:cd: c9:70:1d:67:b8:18:c3:23:e2:72:c2:a0:ef:17:2d: 16:24:30:4b:24:c1:e1:de:e4:20:49:75:72:ef:61: 6a:62:a0:f8:1f:48:d9:e3:80:ce:74:45:7f:00:ca: 16:a7:71:e7:09:97:14:79:9d:4f:04:7d:b3:b4:4c: b5:67:9b:00:af:6c:c6:d1:15:0c:88:86:31:8a:02: 84:f0:fe:b4:c1:d2:b7:16:2c:45:1f:36:20:1d:e2: 64:cd:d2:51:98:f9:ea:93:7f:26:2b:1f:ca:c2:a6: 06:aa:39:9f:4e:dd:1a:63:b5:4b:1e:91:6a:70:76: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BA:8D:01:C9:A1:1B:22:C0:E0:D2:E0:21:C3:CD:E4:EC:AE:25:D8 X509v3 Authority Key Identifier: keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:30:ae:d8:d4:1c:e9:51:f3:89:be:d8:e5:e3:5c:86:19:1a: 85:58:ac:ec:4c:0b:d2:6d:68:a7:ba:ef:45:5b:28:c5:ba:34: 57:e1:c8:a8:d2:cf:a7:2f:71:6e:50:63:54:c4:60:fe:fe:a2: 79:c4:13:b3:1a:4a:09:5d:bc:87:6c:5e:d8:33:75:19:c3:19: 2e:34:b2:c8:10:1f:e7:2f:07:01:d6:4e:dd:93:d6:b8:df:3e: 22:84:73:ba:93:fc:75:b5:42:38:0c:d4:24:79:6b:84:8f:08: c3:b5:5b:59:68:a7:be:9a:3a:91:aa:eb:3c:1d:0f:0f:e5:80: 13:73:0b:6c:1d:61:2b:16:70:2e:c7:46:7d:31:e0:33:3e:cb: 8a:13:5a:7e:d6:75:c7:09:56:cc:2c:4b:fb:1f:d1:a8:1d:45: 1f:f1:a5:71:7c:33:6a:c0:1f:3c:6a:15:58:e6:11:45:67:a6: 12:81:68:ca:78:64:bf:c3:09:50:ea:4f:4e:aa:ab:07:80:e5: b4:77:cf:52:3f:8a:f1:24:8d:eb:70:45:24:38:98:b9:3f:ca: 91:b0:7a:f6:ad:c2:ef:6e:ed:5d:47:60:02:53:30:89:7e:07: 18:b1:9e:56:37:5c:d5:11:4e:67:e9:59:49:0a:52:e9:78:19: e7:77:44:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHTaLknBIRy5WrbbnhR8HJovaLVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNFQ0Q0RDFEMjkzNjAzQ0VDNDNDMEZCOENENzhERjlD RjI0MTFBQTAeFw0yNDExMjUxOTI1NDBaFw0yNDExMjYyMTE4NDBaMDMxMTAvBgNV BAMTKEYwQkE4RDAxQzlBMTFCMjJDMEUwRDJFMDIxQzNDREU0RUNBRTI1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpsT4mEB0DlbuYxbKV+mAk8dm wK7FgkYRBLm2v7DbJhZLBiMZndjAcR6OnymxAvF/k0h2LZ2a+nU4FyW+f6BMYNIT GWe/3J7WSqmPyoU/N/MNdLPYg2vQqVIBxoFjvS0D7rTiP2CcOA1o7MGEQ2oSMPvK 3OIcDl1HWTW+Sn5K8fAPNOf+zclwHWe4GMMj4nLCoO8XLRYkMEskweHe5CBJdXLv YWpioPgfSNnjgM50RX8AyhancecJlxR5nU8EfbO0TLVnmwCvbMbRFQyIhjGKAoTw /rTB0rcWLEUfNiAd4mTN0lGY+eqTfyYrH8rCpgaqOZ9O3RpjtUsekWpwdqbLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8LqNAcmhGyLA4NLgIcPN5OyuJdgwHwYDVR0j BBgwFoAUU+zU0dKTYDzsQ8D7jNeN+c8kEaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3 NDIvMC81M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzRUNENEQxRDI5MzYwM0NF QzQzQzBGQjhDRDc4REY5Q0YyNDExQUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3NDIvMC81 M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArDCu2NQc6VHzib7Y5eNchhkahVis7EwL0m1op7rvRVsoxbo0V+HIqNLPpy9x blBjVMRg/v6iecQTsxpKCV28h2xe2DN1GcMZLjSyyBAf5y8HAdZO3ZPWuN8+IoRz upP8dbVCOAzUJHlrhI8Iw7VbWWinvpo6karrPB0PD+WAE3MLbB1hKxZwLsdGfTHg Mz7LihNaftZ1xwlWzCxL+x/RqB1FH/GlcXwzasAfPGoVWOYRRWemEoFoynhkv8MJ UOpPTqqrB4DltHfPUj+K8SSN63BFJDiYuT/KkbB69q3C727tXUdgAlMwiX4HGLGe Vjdc1RFOZ+lZSQpS6XgZ53dE+g== -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:54 2024 by rpki-client on console-fra.rpki-client.org