$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft File: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json) Hash identifier: jqicaatKwWPpiRU0IKYV+0LZuhpHLrdjyYh0fKGI5HA= Subject key identifier: 1A:84:93:E4:2F:5C:17:8F:39:FA:84:24:50:82:66:C9:77:BD:06:1E Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 Certificate issuer: /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Certificate serial: 2AF1747ED5CC006DD8654404CB233AB4CF67520D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft Manifest number: 72 Signing time: Sat 23 Nov 2024 09:59:18 +0000 Manifest this update: Sat 23 Nov 2024 09:54:18 +0000 Manifest next update: Sun 24 Nov 2024 10:04:18 +0000 Files and hashes: 1: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: GrklC+iJFrsRI0w34SWrbnIjXmvJwXpX2cd9jvwvrmw=) 2: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: B6daVyJaghirt79xvfIbfN4GpwDsvjw5NaxWiYZAtfI=) 3: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: /Thjhh4ouDXHIO38NbEomOF6qiunB6vAHQPeU8I3ln0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f1:74:7e:d5:cc:00:6d:d8:65:44:04:cb:23:3a:b4:cf:67:52:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Validity Not Before: Nov 23 09:54:18 2024 GMT Not After : Nov 24 10:04:18 2024 GMT Subject: CN=1A8493E42F5C178F39FA8424508266C977BD061E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:e9:03:6a:a6:fc:60:f2:ec:3c:cf:20:c2: 05:4f:16:ca:ce:d1:2f:6e:09:86:93:c4:7b:1e:f3: 03:ac:d8:fc:0e:92:b7:85:03:64:dd:ec:82:9d:fb: 74:dc:00:55:f4:99:10:d0:72:ae:70:80:1c:4c:b6: 1f:0a:a2:48:99:a2:25:d6:3d:6e:dd:56:cd:82:de: d0:2b:f4:84:2c:24:b9:61:69:35:9c:13:65:57:3a: 03:3f:80:7f:4a:4c:4f:5e:3f:00:c0:75:d9:c1:e8: 50:19:bf:5c:65:d1:83:8d:ad:0b:83:14:b9:e5:d6: db:a2:5e:50:6f:4e:cc:71:2f:97:0d:3d:60:28:d2: 4c:6f:5e:10:15:62:f3:0b:e2:ae:59:b6:cd:35:4b: 78:5c:41:3c:85:75:f9:4d:c7:3b:8c:cb:84:0c:f6: c1:06:9a:36:5a:b0:04:88:ae:31:15:d1:35:9f:3d: cf:6a:bb:f4:21:21:31:e9:29:39:f2:08:61:78:2b: b7:75:00:64:41:4a:d3:d9:87:3e:e7:e3:bd:f4:d4: c1:2e:0d:7f:bb:f5:0d:12:9b:68:0e:da:8e:0d:bf: 91:68:7f:c8:dd:ed:16:1d:3f:60:a7:e0:30:4e:51: 3e:cf:cc:d7:b5:37:82:5b:bd:4a:d8:01:28:2c:d2: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:84:93:E4:2F:5C:17:8F:39:FA:84:24:50:82:66:C9:77:BD:06:1E X509v3 Authority Key Identifier: keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:11:96:62:0b:96:48:23:91:07:91:30:c3:cf:fe:7a:50:43: 18:34:33:f0:21:7a:c0:01:b5:6a:de:d3:d2:f3:f0:1a:b3:1d: 9f:4f:59:9a:1e:42:4d:3d:27:bb:dc:5b:6f:a2:3c:4a:0f:0c: 07:04:0b:04:80:4e:f5:be:86:19:58:08:2b:fc:8b:65:20:28: c3:f6:69:1b:17:9b:21:9d:42:69:21:ac:4e:d5:76:9e:b8:35: d7:58:dc:a7:cd:46:c6:0b:05:d5:e7:aa:ee:a9:6b:f5:72:b6: d0:79:d7:a8:56:93:4b:a3:07:9a:8e:31:7e:ac:a4:c8:5b:25: 24:97:fe:ad:1a:ff:5d:f6:cc:21:a7:44:5b:39:89:13:e2:b6: 9d:8c:55:ce:bb:bb:0e:9a:36:bb:2d:4d:39:50:2d:10:ab:63: f6:d3:9b:f8:10:12:44:77:9b:1e:11:ad:e9:25:7d:3d:c0:7c: 30:0f:0c:89:fd:19:b2:e3:85:aa:89:cb:5a:45:6b:b4:66:62: 3d:8a:20:99:b8:ca:0d:13:c2:b6:81:87:b5:d5:28:f8:69:ed: c8:0e:75:01:73:de:da:c0:97:55:07:46:6a:53:b4:54:c3:b8: 5d:b1:2f:76:d3:73:b2:20:de:a3:95:59:ce:33:a4:2e:b1:dc: f5:40:3c:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKvF0ftXMAG3YZUQEyyM6tM9nUg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5N0MyOEUzMDY1RkJFNDgxMjU0QUE4QzBDRUY2OTA2 RjY2QUJFOTAeFw0yNDExMjMwOTU0MThaFw0yNDExMjQxMDA0MThaMDMxMTAvBgNV BAMTKDFBODQ5M0U0MkY1QzE3OEYzOUZBODQyNDUwODI2NkM5NzdCRDA2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTOkDaqb8YPLsPM8gwgVPFsrO 0S9uCYaTxHse8wOs2PwOkreFA2Td7IKd+3TcAFX0mRDQcq5wgBxMth8KokiZoiXW PW7dVs2C3tAr9IQsJLlhaTWcE2VXOgM/gH9KTE9ePwDAddnB6FAZv1xl0YONrQuD FLnl1tuiXlBvTsxxL5cNPWAo0kxvXhAVYvML4q5Zts01S3hcQTyFdflNxzuMy4QM 9sEGmjZasASIrjEV0TWfPc9qu/QhITHpKTnyCGF4K7d1AGRBStPZhz7n47301MEu DX+79Q0Sm2gO2o4Nv5Fof8jd7RYdP2Cn4DBOUT7PzNe1N4JbvUrYASgs0uBHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGoST5C9cF485+oQkUIJmyXe9Bh4wHwYDVR0j BBgwFoAUk5fCjjBl++SBJUqowM72kG9mq+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFU aHUvMC85Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTdDMjhFMzA2NUZCRTQ4 MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFUaHUvMC85 Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkRGWYguWSCORB5Eww8/+elBDGDQz8CF6wAG1at7T0vPwGrMdn09Zmh5CTT0n u9xbb6I8Sg8MBwQLBIBO9b6GGVgIK/yLZSAow/ZpGxebIZ1CaSGsTtV2nrg111jc p81GxgsF1eeq7qlr9XK20HnXqFaTS6MHmo4xfqykyFslJJf+rRr/XfbMIadEWzmJ E+K2nYxVzru7Dpo2uy1NOVAtEKtj9tOb+BASRHebHhGt6SV9PcB8MA8Mif0ZsuOF qonLWkVrtGZiPYogmbjKDRPCtoGHtdUo+GntyA51AXPe2sCXVQdGalO0VMO4XbEv dtNzsiDeo5VZzjOkLrHc9UA8Iw== -----END CERTIFICATE-----Generated at Sat Nov 23 11:32:50 2024 by rpki-client on console-fra.rpki-client.org