$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft File: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json) Hash identifier: 2nSHU6B2Wm/an0dcE0+IJ2WdoJ64vmuri/ygLxDbCug= Subject key identifier: F5:06:24:8E:79:61:06:FA:A2:CB:1B:5A:67:9D:FB:95:DD:A8:75:C3 Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED Certificate issuer: /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Certificate serial: 3A785936886B65DC421266003846F3283DBD2FA6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft Manifest number: EC Signing time: Fri 27 Sep 2024 14:03:36 +0000 Manifest this update: Fri 27 Sep 2024 13:58:36 +0000 Manifest next update: Sat 28 Sep 2024 17:40:36 +0000 Files and hashes: 1: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: MqTUtAsWHJCpRpg35CH2JHRHu0qu66axJJKQSMhpItc=) 2: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: ojFUyCiFDJ0uWS9v3j/JKP4gu5IFPqwClA35lY5B7D0=) 3: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: DiDeqOcZzTgI6/aTuUaeSUGxuQaH3lR2lnk7HWFgxME=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Sep 2024 12:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:78:59:36:88:6b:65:dc:42:12:66:00:38:46:f3:28:3d:bd:2f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Validity Not Before: Sep 27 13:58:36 2024 GMT Not After : Sep 28 17:40:36 2024 GMT Subject: CN=F506248E796106FAA2CB1B5A679DFB95DDA875C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7a:31:50:0a:65:8d:b4:c3:40:5f:42:ec:4e: 34:b1:61:f3:92:9e:19:df:48:05:56:51:ca:70:96: fa:7a:ba:53:58:8f:83:b7:ff:f7:32:ed:b3:1e:53: bb:04:7c:b6:bb:78:e2:1b:ab:25:a9:6e:0b:62:bd: db:aa:65:44:84:80:a3:94:9a:9e:19:8d:c5:ca:33: cc:fb:4f:eb:59:2e:5e:81:43:5f:bb:bd:a0:0a:62: dc:e6:b8:f4:bd:1a:f3:85:c8:96:4a:ac:7c:28:cb: ea:1f:3a:c2:35:a8:cb:81:98:3f:cb:c1:e5:5a:7a: 5a:af:48:a3:5d:58:60:3b:13:e7:86:13:2e:8c:99: 29:ad:f6:d1:d9:99:54:99:3e:9f:16:72:5a:04:0c: ea:10:4b:ea:22:84:f9:b4:64:f8:f3:61:3c:b3:5e: 38:e7:27:ef:5e:38:8d:a3:a3:97:c0:e2:fc:f8:28: e4:c9:65:70:ab:30:46:74:c1:a4:15:86:94:83:bd: cf:74:f3:57:89:a8:7d:65:0e:60:53:ed:4b:1a:5e: fc:b7:7c:30:9f:70:af:04:c4:a9:79:a8:76:af:b2: 87:a2:91:e7:47:ee:82:6f:cf:a8:fd:05:71:de:67: ca:37:25:68:49:01:43:dd:a5:db:8a:e9:4d:2c:0f: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:06:24:8E:79:61:06:FA:A2:CB:1B:5A:67:9D:FB:95:DD:A8:75:C3 X509v3 Authority Key Identifier: keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e6:14:52:a0:2b:4c:93:df:3d:b8:25:18:95:5e:a6:e8:3c: 8c:e7:b6:9d:4e:7d:f1:f4:41:70:cb:aa:bd:01:16:40:77:2b: bc:ff:99:ef:a8:18:82:0d:aa:85:b2:42:06:38:47:a8:09:29: 95:de:22:68:38:8d:93:a4:0a:85:c8:1c:2c:46:00:a2:6a:be: 82:99:7f:7e:df:73:86:35:fe:4f:dd:5f:83:3f:65:04:cc:3e: 73:55:75:5c:d1:65:b8:0f:9d:39:97:21:dc:e1:8b:3c:1e:44: b3:50:e3:6a:c4:92:66:38:1a:f3:cc:a1:42:90:0e:a1:80:4f: e0:9c:3c:c1:48:fd:7f:9d:76:ac:5f:99:ef:ee:93:81:96:1a: 96:30:65:8c:7a:fe:7b:6d:7c:dc:dd:2e:09:bf:52:7d:9d:9a: bd:b6:20:bd:98:fa:98:2f:f5:34:9b:2c:dd:06:3d:9e:0d:72: e6:5e:0a:61:9a:b3:af:72:11:09:d0:a4:e8:5f:87:f3:45:69: 94:ca:b4:5a:42:ce:90:df:59:56:f5:69:af:6d:98:6f:70:ff: a7:3a:11:f8:bb:78:21:f1:3c:4d:64:d1:e7:7b:10:27:14:6b: 93:d7:5e:5e:de:6f:ce:66:f5:4f:3e:79:0d:49:7b:56:c9:cf: 9a:ff:5a:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOnhZNohrZdxCEmYAOEbzKD29L6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGOTU1RENCM0ZBNkM2QkE3QUVDM0Q4QkMxMzcyNzA4 Njk2QjhFRDAeFw0yNDA5MjcxMzU4MzZaFw0yNDA5MjgxNzQwMzZaMDMxMTAvBgNV BAMTKEY1MDYyNDhFNzk2MTA2RkFBMkNCMUI1QTY3OURGQjk1RERBODc1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtejFQCmWNtMNAX0LsTjSxYfOS nhnfSAVWUcpwlvp6ulNYj4O3//cy7bMeU7sEfLa7eOIbqyWpbgtivduqZUSEgKOU mp4ZjcXKM8z7T+tZLl6BQ1+7vaAKYtzmuPS9GvOFyJZKrHwoy+ofOsI1qMuBmD/L weVaelqvSKNdWGA7E+eGEy6MmSmt9tHZmVSZPp8WcloEDOoQS+oihPm0ZPjzYTyz XjjnJ+9eOI2jo5fA4vz4KOTJZXCrMEZ0waQVhpSDvc9081eJqH1lDmBT7UsaXvy3 fDCfcK8ExKl5qHavsoeikedH7oJvz6j9BXHeZ8o3JWhJAUPdpduK6U0sD8z7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9QYkjnlhBvqiyxtaZ537ld2odcMwHwYDVR0j BBgwFoAUWvlV3LP6bGunrsPYvBNycIaWuO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4 TmQvMS81QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRjk1NURDQjNGQTZDNkJB N0FFQzNEOEJDMTM3MjcwODY5NkI4RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4TmQvMS81 QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV+YUUqArTJPfPbglGJVepug8jOe2nU598fRBcMuqvQEWQHcrvP+Z76gYgg2q hbJCBjhHqAkpld4iaDiNk6QKhcgcLEYAomq+gpl/ft9zhjX+T91fgz9lBMw+c1V1 XNFluA+dOZch3OGLPB5Es1DjasSSZjga88yhQpAOoYBP4Jw8wUj9f512rF+Z7+6T gZYaljBljHr+e2183N0uCb9SfZ2avbYgvZj6mC/1NJss3QY9ng1y5l4KYZqzr3IR CdCk6F+H80VplMq0WkLOkN9ZVvVpr22Yb3D/pzoR+Lt4IfE8TWTR53sQJxRrk9de Xt5vzmb1Tz55DUl7VsnPmv9a+A== -----END CERTIFICATE-----Generated at Fri Sep 27 15:50:46 2024 by rpki-client on console-ams.rpki-client.org