$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: GHU4CziQ/dmgSwK9/R4IaV8yauIMA4OZ9eXDjZApLYM= Subject key identifier: 96:8F:00:26:7E:F3:9D:11:94:6B:FC:2E:FE:78:5D:0B:AE:8B:65:97 Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 7CBF484D918DD39932B7E3B7559E9AFB51605A39 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 0136 Signing time: Fri 22 Nov 2024 11:57:19 +0000 Manifest this update: Fri 22 Nov 2024 11:52:19 +0000 Manifest next update: Sat 23 Nov 2024 13:28:19 +0000 Files and hashes: 1: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: a2A+czeoUonIrOR1aNYN0R9UmvOungi1jE85htJEX/8=) 2: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: 8gkUS3yzrU6TIUmV0LVHjKYe9wkkOvQsA6PEMCBuHhE=) 3: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: QphSpaCqw4lqLaBpMfZk7cMngyUWVsZfFgnJg+Pf278=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 13:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bf:48:4d:91:8d:d3:99:32:b7:e3:b7:55:9e:9a:fb:51:60:5a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Nov 22 11:52:19 2024 GMT Not After : Nov 23 13:28:19 2024 GMT Subject: CN=968F00267EF39D11946BFC2EFE785D0BAE8B6597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:78:50:2c:4f:8a:eb:92:35:14:9d:1b:46: 1f:c5:af:4f:7d:a1:e9:c6:c9:7a:e8:1e:34:08:00: 6d:3a:c4:f1:73:38:50:bc:58:f9:94:ec:4c:ab:3d: 35:75:2c:86:9d:1e:03:b4:35:21:ce:49:5a:ea:7f: 20:c2:8e:f8:39:18:87:29:b7:0b:51:26:75:9f:60: 5c:03:7f:b9:fc:d4:4a:5d:28:d5:5c:87:9f:cc:6e: e6:55:6d:a0:08:35:76:9f:0b:d0:06:d9:1a:4d:65: 33:80:cf:24:b6:0f:04:db:72:15:c6:b6:4f:61:d5: 2d:2c:b0:62:cf:7a:2d:53:95:f0:02:3f:38:c1:45: 7f:af:bb:45:04:a3:d7:a0:26:13:a7:9a:a6:f9:7f: 4f:99:cd:98:15:87:bb:c5:99:5e:51:76:73:7a:2d: 32:94:4b:ef:ca:ed:fd:a7:f3:0c:f0:0d:88:74:db: aa:4f:2b:74:3b:47:25:eb:2c:f9:d4:fd:04:a5:76: b0:4f:7b:64:32:3d:72:44:f2:4c:9e:26:d7:b8:ad: b7:a6:bf:96:c6:c2:42:04:6c:43:65:e2:f4:1a:36: aa:8b:ad:67:d3:a7:a6:31:c0:74:76:26:2d:20:40: 2f:6d:e5:04:1f:78:ff:01:46:cc:1b:9a:11:ec:17: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:00:26:7E:F3:9D:11:94:6B:FC:2E:FE:78:5D:0B:AE:8B:65:97 X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c6:34:24:18:74:21:60:dc:3a:e9:4a:4b:0c:64:35:f3:b8: 09:1d:c3:66:52:e8:3b:5d:64:d8:f4:71:44:2f:09:a1:72:b3: 72:86:d5:06:43:01:a1:6c:70:78:a5:20:91:a2:a9:c8:65:2d: 3f:ea:97:2d:36:3d:b4:d9:d7:01:09:bd:e5:e8:51:99:ad:18: bb:16:df:ff:3c:c7:70:c9:32:a9:58:51:ac:01:f3:8d:ab:29: 20:c8:3d:79:4a:3b:f1:50:88:92:86:4c:56:84:eb:06:05:9e: 49:aa:7c:1c:01:94:a6:37:09:f2:30:b1:b6:e7:47:82:56:b3: 32:b1:43:8b:41:e2:ed:31:7c:09:a1:22:be:02:38:95:f2:40: af:49:5f:79:76:c7:6b:60:28:65:97:04:5c:2d:6c:f6:e2:a1: 2b:33:12:0e:ab:33:84:89:61:e8:bc:cf:70:ca:1f:f3:7e:fb: c4:d3:25:d1:a3:3e:b4:3c:ba:64:c4:5f:9a:6c:27:54:e7:f8: a9:2d:71:2a:b0:e3:e4:e9:67:d0:8a:fe:7c:e1:0a:1f:3f:7a: dd:d3:53:45:39:bc:3a:f7:1e:78:85:e9:a7:c0:6f:9a:59:c9: 6e:a8:a6:dc:99:54:86:4c:c4:6a:2f:9a:2b:22:a6:5f:4f:0f: 20:db:e1:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfL9ITZGN05kyt+O3VZ6a+1FgWjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNDExMjIxMTUyMTlaFw0yNDExMjMxMzI4MTlaMDMxMTAvBgNV BAMTKDk2OEYwMDI2N0VGMzlEMTE5NDZCRkMyRUZFNzg1RDBCQUU4QjY1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHXhQLE+K65I1FJ0bRh/Fr099 oenGyXroHjQIAG06xPFzOFC8WPmU7EyrPTV1LIadHgO0NSHOSVrqfyDCjvg5GIcp twtRJnWfYFwDf7n81EpdKNVch5/MbuZVbaAINXafC9AG2RpNZTOAzyS2DwTbchXG tk9h1S0ssGLPei1TlfACPzjBRX+vu0UEo9egJhOnmqb5f0+ZzZgVh7vFmV5RdnN6 LTKUS+/K7f2n8wzwDYh026pPK3Q7RyXrLPnU/QSldrBPe2QyPXJE8kyeJte4rbem v5bGwkIEbENl4vQaNqqLrWfTp6YxwHR2Ji0gQC9t5QQfeP8BRswbmhHsFwT7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlo8AJn7znRGUa/wu/nhdC66LZZcwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX8Y0JBh0IWDcOulKSwxkNfO4CR3DZlLoO11k2PRxRC8JoXKzcobVBkMBoWxw eKUgkaKpyGUtP+qXLTY9tNnXAQm95ehRma0Yuxbf/zzHcMkyqVhRrAHzjaspIMg9 eUo78VCIkoZMVoTrBgWeSap8HAGUpjcJ8jCxtudHglazMrFDi0Hi7TF8CaEivgI4 lfJAr0lfeXbHa2AoZZcEXC1s9uKhKzMSDqszhIlh6LzPcMof8377xNMl0aM+tDy6 ZMRfmmwnVOf4qS1xKrDj5Oln0Ir+fOEKHz963dNTRTm8OvceeIXpp8BvmlnJbqim 3JlUhkzEai+aKyKmX08PINvhfA== -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org