$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft File: 1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft (raw, json) Hash identifier: gecI7g6Ie1s812IM0zOnAtkpIiUT01Eu7zYWqM0EXEk= Subject key identifier: 3F:C5:F6:16:1F:74:52:47:BC:59:83:E6:5F:9D:5A:EB:BC:5C:14:01 Authority key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62 Certificate issuer: /CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62 Certificate serial: 2C4F1AA71E1C7F4B29FEB850004A14AEC954AE8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft Manifest number: 71 Signing time: Wed 26 Jun 2024 09:07:35 +0000 Manifest this update: Wed 26 Jun 2024 09:02:35 +0000 Manifest next update: Thu 27 Jun 2024 10:34:35 +0000 Files and hashes: 1: 323830343a326665303a3a2f33322d3438203d3e20323634393138.roa (hash: 71C7Ns93wj0HbNGwfkVZ1ke/w0tCyHABFNqJiIDFCPc=) 2: 3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa (hash: 5TmttIpFCp5/VvfzpeWWxPc9kOWOfa17Udr1XVelIbo=) 3: 1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl (hash: eIjEaaQ2o/VuRqAUrMuP9PWRNWRgTqrZtZQ30QabYNY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 10:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4f:1a:a7:1e:1c:7f:4b:29:fe:b8:50:00:4a:14:ae:c9:54:ae:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62 Validity Not Before: Jun 26 09:02:35 2024 GMT Not After : Jun 27 10:34:35 2024 GMT Subject: CN=3FC5F6161F745247BC5983E65F9D5AEBBC5C1401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:26:b1:e7:a4:cd:8a:36:e0:d1:12:c0:df: 0f:c4:c1:d4:c4:5a:c1:a6:03:ba:ff:65:cf:f9:1e: b7:7c:1c:fb:82:ab:a0:63:c0:11:33:36:88:af:09: 36:6b:ba:f0:fa:36:0f:09:7e:d5:0b:5f:e1:9a:37: 5c:6b:27:fa:04:6d:ab:ed:54:f2:46:2d:b3:6f:5d: b1:1a:ca:c4:db:3c:7f:67:55:cd:90:7f:f9:7e:3b: 08:bd:7f:93:d2:ff:5f:3a:bb:b6:e1:26:a9:8a:7d: 3c:29:75:24:f2:e7:e1:ad:53:ec:98:65:a4:d3:f5: b9:2c:99:ea:ee:46:44:75:e3:72:83:89:ce:85:d5: 10:5e:fd:00:bb:c0:53:ca:e9:6c:9a:db:40:ab:bd: b6:85:bc:59:14:15:d6:84:84:11:19:79:fd:11:c5: 7d:22:c4:60:13:b4:84:1b:db:f3:8f:08:13:7e:aa: 22:12:bc:8c:7d:52:5f:c3:21:c4:8a:f9:89:1c:f9: 43:a4:49:53:8e:f8:5a:c3:ca:44:a6:c7:1a:64:d0: d0:6f:5b:31:ba:cd:c0:4b:d0:4c:af:c4:cf:dc:17: 00:fe:5a:e1:e3:e6:78:3b:8b:34:0b:7e:34:f2:7c: 19:01:af:e1:35:b9:1e:f8:e4:44:37:14:ad:90:7a: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C5:F6:16:1F:74:52:47:BC:59:83:E6:5F:9D:5A:EB:BC:5C:14:01 X509v3 Authority Key Identifier: keyid:1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:36:9e:42:1e:20:1b:66:96:4b:86:80:2a:8c:68:76:67:b0: a6:2b:89:0c:26:08:94:a7:2a:e0:fb:92:61:a2:dd:9e:19:ac: 3e:5a:6c:b8:6c:94:be:5d:13:9f:0f:9d:0e:bb:44:6b:a1:7b: d6:c5:03:63:50:eb:1f:98:1e:36:63:60:a7:6a:3c:fa:50:e6: d6:1e:53:54:6a:11:79:17:78:54:a2:5b:58:ef:c6:dc:73:21: c9:c1:31:5b:9a:c8:12:54:c7:ea:8a:d4:dc:75:97:77:50:e3: 14:f8:c2:c9:84:a4:a2:66:d2:58:99:26:49:dd:22:ec:49:4d: 9f:b6:63:16:b7:39:3d:9b:34:9c:18:40:b5:51:0a:14:f2:88: 6b:bf:4d:bb:35:35:ee:c9:58:54:71:b9:f3:13:41:9a:a4:fd: ef:4c:c4:68:ca:e5:41:71:54:b3:3a:b5:46:d1:62:24:7f:60: c7:79:59:59:d0:52:d8:93:74:da:32:f0:7a:60:d4:fd:56:0c: 84:cc:9a:6f:b4:69:41:f0:9d:8f:82:3f:37:dc:46:96:bf:fe: 26:07:52:61:5e:c9:a4:53:64:21:b8:94:a6:5c:13:85:d1:5e: 8e:57:ed:09:5b:f9:3f:b1:c4:c6:e9:73:96:f9:1d:23:09:16: fd:67:44:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULE8apx4cf0sp/rhQAEoUrslUro0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RUZGQTUyRTREQjM5M0E3N0VDQTE3QkNCNEM4QTUx QzQxM0U2MjAeFw0yNDA2MjYwOTAyMzVaFw0yNDA2MjcxMDM0MzVaMDMxMTAvBgNV BAMTKDNGQzVGNjE2MUY3NDUyNDdCQzU5ODNFNjVGOUQ1QUVCQkM1QzE0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVtCax56TNijbg0RLA3w/EwdTE WsGmA7r/Zc/5Hrd8HPuCq6BjwBEzNoivCTZruvD6Ng8JftULX+GaN1xrJ/oEbavt VPJGLbNvXbEaysTbPH9nVc2Qf/l+Owi9f5PS/186u7bhJqmKfTwpdSTy5+GtU+yY ZaTT9bksmeruRkR143KDic6F1RBe/QC7wFPK6Wya20CrvbaFvFkUFdaEhBEZef0R xX0ixGATtIQb2/OPCBN+qiISvIx9Ul/DIcSK+Ykc+UOkSVOO+FrDykSmxxpk0NBv WzG6zcBL0EyvxM/cFwD+WuHj5ng7izQLfjTyfBkBr+E1uR745EQ3FK2Qen6rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP8X2Fh90Uke8WYPmX51a67xcFAEwHwYDVR0j BBgwFoAUGo7/pS5Ns5OnfsoXvLTIpRxBPmIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWMxd1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1U RVYvMS8xQThFRkZBNTJFNERCMzkzQTc3RUNBMTdCQ0I0QzhBNTFDNDEzRTYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBOEVGRkE1MkU0REIzOTNB NzdFQ0ExN0JDQjRDOEE1MUM0MTNFNjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWMxd1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1URVYvMS8x QThFRkZBNTJFNERCMzkzQTc3RUNBMTdCQ0I0QzhBNTFDNDEzRTYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASDaeQh4gG2aWS4aAKoxodmewpiuJDCYIlKcq4PuSYaLdnhmsPlpsuGyUvl0T nw+dDrtEa6F71sUDY1DrH5geNmNgp2o8+lDm1h5TVGoReRd4VKJbWO/G3HMhycEx W5rIElTH6orU3HWXd1DjFPjCyYSkombSWJkmSd0i7ElNn7ZjFrc5PZs0nBhAtVEK FPKIa79NuzU17slYVHG58xNBmqT970zEaMrlQXFUszq1RtFiJH9gx3lZWdBS2JN0 2jLwemDU/VYMhMyab7RpQfCdj4I/N9xGlr/+JgdSYV7JpFNkIbiUplwThdFejlft CVv5P7HExulzlvkdIwkW/WdEGA== -----END CERTIFICATE-----Generated at Wed Jun 26 12:54:50 2024 by rpki-client on console-fra.rpki-client.org