$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft File: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json) Hash identifier: e816pyTCPibxdLNtQVwT2dzeKBgIqEy0guFRVPsM8HE= Subject key identifier: 5D:A4:8B:F9:71:0C:AE:95:E1:27:20:44:84:DD:98:E7:28:CA:20:E6 Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED Certificate issuer: /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Certificate serial: 74C8BF3F671BA0780EDE00231C4325CCC7338F3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft Manifest number: 013B Signing time: Mon 25 Nov 2024 22:05:46 +0000 Manifest this update: Mon 25 Nov 2024 22:00:46 +0000 Manifest next update: Wed 27 Nov 2024 00:38:46 +0000 Files and hashes: 1: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: MqTUtAsWHJCpRpg35CH2JHRHu0qu66axJJKQSMhpItc=) 2: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: ojFUyCiFDJ0uWS9v3j/JKP4gu5IFPqwClA35lY5B7D0=) 3: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: RWMOvp6zuFV//gYmxYoIX2r9bqhvnYBZZ2IL6YAtkbk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 22:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c8:bf:3f:67:1b:a0:78:0e:de:00:23:1c:43:25:cc:c7:33:8f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Validity Not Before: Nov 25 22:00:46 2024 GMT Not After : Nov 27 00:38:46 2024 GMT Subject: CN=5DA48BF9710CAE95E127204484DD98E728CA20E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:c3:0b:5a:9a:c5:50:a8:7d:d3:60:ca:47: ec:06:42:2f:38:5f:00:82:cb:11:d4:ef:49:1d:53: 45:d2:43:6e:e6:5f:00:ca:ca:af:05:d8:b8:fd:e6: 77:af:2b:fb:35:33:d3:8c:8e:0c:41:0c:57:4f:76: 81:8e:36:48:ee:47:ed:61:43:94:19:37:fe:bd:ba: 6b:c4:23:33:c1:39:db:c6:55:a8:2e:1d:4c:19:66: 6e:7c:ae:34:19:1f:22:a3:df:7a:a5:5f:55:a2:2b: 45:96:d0:60:63:2c:63:29:f3:35:b6:b8:7c:90:0f: 26:57:20:29:8e:a1:e0:0f:4d:13:6e:2d:08:a5:92: 95:2f:03:7b:4a:dc:ab:af:53:74:22:ad:46:bf:11: 32:d0:3a:26:57:66:b9:78:de:25:06:66:cc:17:d1: a1:2f:79:ef:41:25:55:d8:08:52:d8:d1:b6:26:48: ed:f7:01:85:75:e0:ff:be:f3:05:52:c9:ed:39:42: da:f0:ee:f0:e6:bf:98:28:61:8d:8c:00:cb:2c:2f: 39:77:47:c4:09:4d:17:a6:b7:5d:13:c0:7b:a8:0d: 2a:8a:70:5d:9c:1e:72:22:15:35:4f:73:f2:0b:78: 91:75:fd:c5:fb:7c:a6:b5:ec:4c:b2:30:1e:3a:f8: 5b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A4:8B:F9:71:0C:AE:95:E1:27:20:44:84:DD:98:E7:28:CA:20:E6 X509v3 Authority Key Identifier: keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1d:e5:37:f6:48:e7:ef:3d:68:29:40:b0:0e:1f:44:5e:26: fa:33:ff:e5:62:0c:11:ea:66:1b:b9:b9:e2:35:bd:62:51:e6: a0:62:66:dc:f1:e6:7e:20:64:90:d2:75:df:40:67:37:86:53: 7a:51:ec:23:23:5c:8e:fb:12:64:59:dc:18:f9:24:ee:73:7e: f6:4f:bb:a8:1f:45:e5:59:42:e8:fb:d4:ee:bc:f5:33:c2:23: ea:b8:8f:1c:f6:3a:29:24:12:7b:f6:04:43:15:bc:32:15:92: 27:08:9b:af:08:90:b7:93:2e:ae:12:a9:ab:c4:69:7c:95:9d: 5d:25:80:dd:cc:f5:51:78:b7:c7:73:c4:a2:86:02:58:0b:52: 0b:09:73:72:01:34:fe:93:9e:82:f7:ec:3f:cb:b9:1c:34:23: 97:37:7e:1e:82:ce:56:9f:9d:aa:63:1c:12:b1:6a:43:88:42: e9:cb:c7:6b:26:f1:0d:33:e3:11:d3:b9:b8:40:12:72:66:50: 63:70:7e:f5:4b:c4:26:cc:f7:11:16:45:52:26:4b:59:b1:ca: cf:e7:45:d2:be:c8:d7:f7:0f:d1:14:09:3d:1d:4a:8c:89:86: c1:40:0f:d9:19:a8:be:7d:2a:4e:d5:5f:dd:98:ac:8b:3a:a3: 59:04:95:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdMi/P2cboHgO3gAjHEMlzMczjzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGOTU1RENCM0ZBNkM2QkE3QUVDM0Q4QkMxMzcyNzA4 Njk2QjhFRDAeFw0yNDExMjUyMjAwNDZaFw0yNDExMjcwMDM4NDZaMDMxMTAvBgNV BAMTKDVEQTQ4QkY5NzEwQ0FFOTVFMTI3MjA0NDg0REQ5OEU3MjhDQTIwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJI8MLWprFUKh902DKR+wGQi84 XwCCyxHU70kdU0XSQ27mXwDKyq8F2Lj95nevK/s1M9OMjgxBDFdPdoGONkjuR+1h Q5QZN/69umvEIzPBOdvGVaguHUwZZm58rjQZHyKj33qlX1WiK0WW0GBjLGMp8zW2 uHyQDyZXICmOoeAPTRNuLQilkpUvA3tK3KuvU3QirUa/ETLQOiZXZrl43iUGZswX 0aEvee9BJVXYCFLY0bYmSO33AYV14P++8wVSye05Qtrw7vDmv5goYY2MAMssLzl3 R8QJTRemt10TwHuoDSqKcF2cHnIiFTVPc/ILeJF1/cX7fKa17EyyMB46+FuzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXaSL+XEMrpXhJyBEhN2Y5yjKIOYwHwYDVR0j BBgwFoAUWvlV3LP6bGunrsPYvBNycIaWuO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4 TmQvMS81QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRjk1NURDQjNGQTZDNkJB N0FFQzNEOEJDMTM3MjcwODY5NkI4RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4TmQvMS81 QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdB3lN/ZI5+89aClAsA4fRF4m+jP/5WIMEepmG7m54jW9YlHmoGJm3PHmfiBk kNJ130BnN4ZTelHsIyNcjvsSZFncGPkk7nN+9k+7qB9F5VlC6PvU7rz1M8Ij6riP HPY6KSQSe/YEQxW8MhWSJwibrwiQt5MurhKpq8RpfJWdXSWA3cz1UXi3x3PEooYC WAtSCwlzcgE0/pOegvfsP8u5HDQjlzd+HoLOVp+dqmMcErFqQ4hC6cvHaybxDTPj EdO5uEAScmZQY3B+9UvEJsz3ERZFUiZLWbHKz+dF0r7I1/cP0RQJPR1KjImGwUAP 2Rmovn0qTtVf3ZisizqjWQSVGQ== -----END CERTIFICATE-----Generated at Mon Nov 25 23:53:08 2024 by rpki-client on console-ams.rpki-client.org