$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft File: CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft (raw, json) Hash identifier: 4EfcVuvqVXw0wmMEUgTVSlyW+zuTZa77DOUbroPm6NM= Subject key identifier: C0:AA:01:06:13:A4:C5:F4:3B:19:CE:3F:F3:E1:76:D5:AC:29:63:C2 Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09 Certificate issuer: /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709 Certificate serial: 79A5E4E9C9ACE0BEFC4CFC4EEA9084C44FCB0344 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft Manifest number: F2 Signing time: Fri 27 Sep 2024 18:38:44 +0000 Manifest this update: Fri 27 Sep 2024 18:33:44 +0000 Manifest next update: Sat 28 Sep 2024 21:46:44 +0000 Files and hashes: 1: 323830343a336436343a3a2f33322d3438203d3e20323636353238.roa (hash: dPDRZUuyCNAERLEW1uzp1kTsm2RpRcwRO5Ac4u15fIk=) 2: CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl (hash: LZ3TH5w0EV2moulZcLOoibhkFhXg3+lFGtwiBXiiD5w=) 3: 34352e36352e3132382e302f32322d3234203d3e20323636353238.roa (hash: aJH/wSL08NehPiCekubLad5Y374l2+W8Z6uBljlZSg4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Sep 2024 21:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a5:e4:e9:c9:ac:e0:be:fc:4c:fc:4e:ea:90:84:c4:4f:cb:03:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709 Validity Not Before: Sep 27 18:33:44 2024 GMT Not After : Sep 28 21:46:44 2024 GMT Subject: CN=C0AA010613A4C5F43B19CE3FF3E176D5AC2963C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:a2:a1:17:1a:f7:f0:05:fc:0c:51:df:36: 29:b7:17:02:02:40:dc:59:92:59:99:9d:83:e4:45: 33:40:87:91:ae:36:2f:a2:0a:f9:2f:67:9f:bd:9b: c0:5a:dd:82:e3:0f:54:73:70:ef:a9:4c:eb:c7:f6: 77:d2:91:da:b2:d7:d0:78:6c:07:bc:1b:ae:e6:4b: 48:84:c4:46:ba:88:d5:64:2c:17:11:49:4d:ce:c5: aa:e9:a1:ef:a9:22:0b:4e:5b:e2:8a:49:20:19:bc: 33:ea:cd:0e:e6:95:43:d9:40:bc:71:1c:df:30:d6: 47:85:52:d4:1c:26:c2:c5:90:f6:be:af:c4:ca:ef: 0a:3b:ad:1a:89:a9:d3:1e:b1:7d:37:0e:11:c6:4d: 28:8b:1a:bd:52:2c:12:64:c3:3c:9f:a1:2b:e3:9f: b9:7d:b2:91:c2:24:3f:8a:2e:b4:00:86:5b:f1:f3: c1:59:74:b2:d7:5c:22:18:17:21:4d:b7:59:58:72: 74:37:e7:5f:03:6c:36:c4:8b:0e:a3:d1:82:a2:19: 64:60:5c:c7:61:27:b0:ca:8b:b5:a2:3c:d7:b0:aa: 21:a0:17:6b:3e:ce:87:62:be:da:df:b2:e4:cd:cf: eb:fc:d7:94:09:24:9c:14:6e:af:02:3c:4c:e8:b8: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AA:01:06:13:A4:C5:F4:3B:19:CE:3F:F3:E1:76:D5:AC:29:63:C2 X509v3 Authority Key Identifier: keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:65:45:5c:6a:6c:38:8b:bf:2b:4e:63:52:4e:64:56:3e:5a: 3a:2d:7d:88:d5:c9:f7:de:07:9a:45:a5:0a:9b:4f:d3:43:f9: 7f:5d:4a:ce:1d:84:f5:a6:25:59:86:06:51:66:9d:50:6e:b5: ca:99:26:ed:3b:53:dc:f9:5f:0d:1e:09:eb:69:4c:17:54:87: 85:b3:fc:07:1d:26:2f:28:60:5f:1c:98:53:9b:55:ad:ca:3d: c8:a0:d7:9e:57:a1:b6:28:bb:cc:eb:3e:8e:07:09:14:9a:2b: f4:39:3f:00:d9:3a:4c:0e:3c:f6:1b:cc:24:a1:50:82:3c:28: 49:18:11:c3:c2:78:0f:e2:4b:56:92:1e:00:01:db:9a:f1:95: 3f:58:01:f0:cd:72:7b:4c:71:65:ac:6f:cc:eb:66:0e:4d:e0: 1a:22:81:d0:ba:c2:11:33:08:ce:30:6b:fd:df:bc:a4:da:4e: fa:b7:67:76:83:c4:ba:bb:06:00:75:db:3f:c2:e8:4d:36:d3: 4f:a7:71:4f:ee:88:12:21:4d:1d:47:61:85:3e:54:03:fa:21: 5d:10:fc:18:15:93:1b:c4:a6:c6:6d:b4:09:74:05:7f:3b:4a: 00:16:95:80:81:d8:5e:a6:39:94:53:0e:a9:78:0b:a1:5d:42: 54:dc:05:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeaXk6cms4L78TPxO6pCExE/LA0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MTk1MDg5MTg2RjQ1QjdEQjZCRjBBRkU0NkRGQzVB RkI0NzcwOTAeFw0yNDA5MjcxODMzNDRaFw0yNDA5MjgyMTQ2NDRaMDMxMTAvBgNV BAMTKEMwQUEwMTA2MTNBNEM1RjQzQjE5Q0UzRkYzRTE3NkQ1QUMyOTYzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExaKhFxr38AX8DFHfNim3FwIC QNxZklmZnYPkRTNAh5GuNi+iCvkvZ5+9m8Ba3YLjD1RzcO+pTOvH9nfSkdqy19B4 bAe8G67mS0iExEa6iNVkLBcRSU3Oxarpoe+pIgtOW+KKSSAZvDPqzQ7mlUPZQLxx HN8w1keFUtQcJsLFkPa+r8TK7wo7rRqJqdMesX03DhHGTSiLGr1SLBJkwzyfoSvj n7l9spHCJD+KLrQAhlvx88FZdLLXXCIYFyFNt1lYcnQ3518DbDbEiw6j0YKiGWRg XMdhJ7DKi7WiPNewqiGgF2s+zodivtrfsuTNz+v815QJJJwUbq8CPEzouAdtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwKoBBhOkxfQ7Gc4/8+F21awpY8IwHwYDVR0j BBgwFoAUy1GVCJGG9Ft9tr8K/kbfxa+0dwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3Uy dzIvMS9DQjUxOTUwODkxODZGNDVCN0RCNkJGMEFGRTQ2REZDNUFGQjQ3NzA5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNTE5NTA4OTE4NkY0NUI3 REI2QkYwQUZFNDZERkM1QUZCNDc3MDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3UydzIvMS9D QjUxOTUwODkxODZGNDVCN0RCNkJGMEFGRTQ2REZDNUFGQjQ3NzA5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQWVFXGpsOIu/K05jUk5kVj5aOi19iNXJ994HmkWlCptP00P5f11Kzh2E9aYl WYYGUWadUG61ypkm7TtT3PlfDR4J62lMF1SHhbP8Bx0mLyhgXxyYU5tVrco9yKDX nlehtii7zOs+jgcJFJor9Dk/ANk6TA489hvMJKFQgjwoSRgRw8J4D+JLVpIeAAHb mvGVP1gB8M1ye0xxZaxvzOtmDk3gGiKB0LrCETMIzjBr/d+8pNpO+rdndoPEursG AHXbP8LoTTbTT6dxT+6IEiFNHUdhhT5UA/ohXRD8GBWTG8Smxm20CXQFfztKABaV gIHYXqY5lFMOqXgLoV1CVNwFvg== -----END CERTIFICATE-----Generated at Fri Sep 27 19:50:14 2024 by rpki-client on console-fra.rpki-client.org