$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft File: 65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft (raw, json) Hash identifier: z+hWst7gPCBybGWoqGH18epb1DXAxxXBAj7y3Jgwdfk= Subject key identifier: 34:01:FA:4A:80:36:E4:3D:86:26:8E:2C:D9:8E:FC:33:5B:48:37:D8 Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35 Certificate issuer: /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35 Certificate serial: 3839E04D008C3F424C3CBFFD85A536760100F6F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 17:48:13 +0000 Manifest this update: Fri 22 Nov 2024 17:43:13 +0000 Manifest next update: Sat 23 Nov 2024 19:08:13 +0000 Files and hashes: 1: 34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (hash: hOax3uctNdjpQ78bHzgtSAdW6BImUcEh2z33GpKFiVI=) 2: 34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa (hash: mgLVOeIb8DHYEb46RT7uXyK2mJLP9KEoRggYtKNBacA=) 3: 34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa (hash: pUyCQUWFen/5q7gNdiE4VYX+9hZC8w2GxRLFgKQCIR8=) 4: 34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (hash: behxjsdyXVNflapssHl4OwrQZc3PE65aqwdGoMVvpFQ=) 5: 34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa (hash: n9KFAx9lP62ft2Ob8qa4EuC45ZD1uCn/7cWJgLZqnx0=) 6: 65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl (hash: lhv3hp7J44UL1DrMa98fhaLoh6F2fXOqTJe/MddgIMs=) 7: 323830343a346134383a3a2f33322d3332203d3e20323637323239.roa (hash: 7WS+1iTJBW0+uReVk1fiwGCjIaqEqu9DjHLcNC+CH/A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:39:e0:4d:00:8c:3f:42:4c:3c:bf:fd:85:a5:36:76:01:00:f6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35 Validity Not Before: Nov 22 17:43:13 2024 GMT Not After : Nov 23 19:08:13 2024 GMT Subject: CN=3401FA4A8036E43D86268E2CD98EFC335B4837D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:33:19:76:82:56:aa:4d:b2:7d:d1:07:02: 6e:e8:17:71:c4:38:2e:65:79:41:c7:10:ec:e3:0d: 9c:86:a1:b1:cb:78:0e:66:ae:e0:2c:90:d9:15:30: 18:66:a2:81:7a:1f:86:4c:89:74:80:0f:b6:2f:3b: 4c:82:fe:e0:e7:07:f2:2b:0f:96:53:f2:56:1d:74: 41:cd:8b:95:3c:28:4e:bc:09:2c:54:e1:34:68:6b: a2:25:91:5f:bc:80:65:55:2d:c9:53:ab:4e:ad:68: 58:bc:64:fd:f5:d4:6e:20:45:a5:d8:d0:03:b2:7e: d6:da:88:a5:4f:95:54:13:a0:69:56:9a:48:b9:79: 6d:1b:71:13:26:0b:7a:3f:aa:8b:8a:2e:14:ff:3f: cd:a8:f6:fe:6a:7f:20:22:b4:c0:cb:7d:90:12:51: d9:f1:ea:75:98:d2:f8:b5:7b:42:44:c3:e9:d1:f0: da:03:e2:2d:cc:c4:3f:6c:a6:ce:59:95:cd:b5:72: cd:8a:7e:4a:1a:ed:d5:53:45:bf:e4:f4:af:9c:02: aa:56:30:3e:08:b1:fe:45:f1:61:b9:7c:dc:f4:bd: 6d:54:80:ed:4b:69:66:a4:65:a8:f3:27:e8:1f:e1: 63:eb:c3:5c:34:9d:49:ae:65:44:94:05:24:a6:86: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:01:FA:4A:80:36:E4:3D:86:26:8E:2C:D9:8E:FC:33:5B:48:37:D8 X509v3 Authority Key Identifier: keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c4:45:27:99:cb:df:cf:cd:04:ef:7c:ef:00:96:9b:e9:67: 9f:38:78:a0:54:cc:6e:c9:39:53:85:51:3c:2f:6e:83:56:a4: 42:ed:df:f9:e2:1d:d4:96:fa:20:c0:ec:47:50:d0:7a:90:4f: 97:3f:68:4d:8f:55:c0:23:b1:c6:e3:c6:6d:ba:c6:38:bd:06: 23:1e:b6:0f:3b:2d:d5:49:bd:4a:18:d2:86:07:4c:90:9d:ca: 07:81:fe:c0:94:e9:3e:03:7f:aa:45:74:b7:c1:26:b1:fd:1a: 71:f9:f3:5c:47:18:d2:75:80:94:6f:6f:24:88:00:2f:1d:a0: 97:c4:57:4a:dc:ff:b3:a1:4d:e4:a6:2e:c2:62:6a:40:20:fd: d0:4f:81:e3:1c:bf:a7:31:c8:65:c3:1c:25:6b:1f:a4:35:4e: 6b:95:0d:2f:fa:63:cd:08:4b:75:5e:d3:97:80:ad:06:4b:04: e5:18:43:16:08:35:38:ff:a5:1b:2d:03:31:e0:a6:84:74:2b: 2f:8a:13:99:65:59:65:a4:47:12:d7:36:27:ec:e1:4c:a2:d0: 45:b8:96:b8:b5:77:6e:5b:09:70:e3:72:fb:f8:ed:97:9a:49: a0:b8:e5:b6:8f:ef:5d:b3:1c:01:cc:b7:22:e4:26:95:91:4f: 17:9f:b6:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUODngTQCMP0JMPL/9haU2dgEA9vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEMjYxQURERTJEQThENUE4RDBGNzA5QzM4MEEzRDk2 RERDQkEzNTAeFw0yNDExMjIxNzQzMTNaFw0yNDExMjMxOTA4MTNaMDMxMTAvBgNV BAMTKDM0MDFGQTRBODAzNkU0M0Q4NjI2OEUyQ0Q5OEVGQzMzNUI0ODM3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcjMZdoJWqk2yfdEHAm7oF3HE OC5leUHHEOzjDZyGobHLeA5mruAskNkVMBhmooF6H4ZMiXSAD7YvO0yC/uDnB/Ir D5ZT8lYddEHNi5U8KE68CSxU4TRoa6IlkV+8gGVVLclTq06taFi8ZP311G4gRaXY 0AOyftbaiKVPlVQToGlWmki5eW0bcRMmC3o/qouKLhT/P82o9v5qfyAitMDLfZAS Udnx6nWY0vi1e0JEw+nR8NoD4i3MxD9sps5Zlc21cs2Kfkoa7dVTRb/k9K+cAqpW MD4Isf5F8WG5fNz0vW1UgO1LaWakZajzJ+gf4WPrw1w0nUmuZUSUBSSmhnCHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNAH6SoA25D2GJo4s2Y78M1tIN9gwHwYDVR0j BBgwFoAUZdJhrd4tqNWo0PcJw4Cj2W3cujUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h ZXcvMS82NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RDI2MUFEREUyREE4RDVB OEQwRjcwOUMzODBBM0Q5NkREQ0JBMzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5hZXcvMS82 NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlsRFJ5nL38/NBO987wCWm+lnnzh4oFTMbsk5U4VRPC9ug1akQu3f+eId1Jb6 IMDsR1DQepBPlz9oTY9VwCOxxuPGbbrGOL0GIx62Dzst1Um9ShjShgdMkJ3KB4H+ wJTpPgN/qkV0t8Emsf0acfnzXEcY0nWAlG9vJIgALx2gl8RXStz/s6FN5KYuwmJq QCD90E+B4xy/pzHIZcMcJWsfpDVOa5UNL/pjzQhLdV7Tl4CtBksE5RhDFgg1OP+l Gy0DMeCmhHQrL4oTmWVZZaRHEtc2J+zhTKLQRbiWuLV3blsJcONy+/jtl5pJoLjl to/vXbMcAcy3IuQmlZFPF5+2oQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org