$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft File: CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft (raw, json) Hash identifier: Zi5o2jCSVxtq8Iajbq0SIOseXpPKWyYNXSuwVzRHQR8= Subject key identifier: 83:8A:50:0A:63:E4:B5:44:6E:92:31:AF:71:3D:97:6E:D2:0B:18:9A Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09 Certificate issuer: /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709 Certificate serial: 4EC7007214A0E1C0E91269DE0446E647CC2F228D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft Manifest number: 013B Signing time: Fri 22 Nov 2024 10:45:31 +0000 Manifest this update: Fri 22 Nov 2024 10:40:31 +0000 Manifest next update: Sat 23 Nov 2024 13:41:31 +0000 Files and hashes: 1: 323830343a336436343a3a2f33322d3438203d3e20323636353238.roa (hash: dPDRZUuyCNAERLEW1uzp1kTsm2RpRcwRO5Ac4u15fIk=) 2: CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl (hash: akRccIigHjt/OnDGvI7cGte4hY769S92SsOuTRwROp4=) 3: 34352e36352e3132382e302f32322d3234203d3e20323636353238.roa (hash: aJH/wSL08NehPiCekubLad5Y374l2+W8Z6uBljlZSg4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 13:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c7:00:72:14:a0:e1:c0:e9:12:69:de:04:46:e6:47:cc:2f:22:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709 Validity Not Before: Nov 22 10:40:31 2024 GMT Not After : Nov 23 13:41:31 2024 GMT Subject: CN=838A500A63E4B5446E9231AF713D976ED20B189A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:2d:f1:08:95:93:2b:8c:51:6c:42:f7:7a: b1:dc:3d:10:88:b5:58:cc:d4:7f:0c:0e:ae:aa:4e: 3b:11:0f:4e:5a:0a:e5:95:35:59:5b:90:94:c6:e4: 92:30:c2:1f:c0:14:f7:3e:6c:e8:74:0f:46:91:26: cb:4f:8a:2a:a5:16:98:3d:98:8b:96:56:59:21:6a: bb:d4:34:4a:d5:03:09:b9:25:59:bb:e2:dd:7e:8f: 2c:87:06:c1:7b:3c:e8:e8:da:3a:af:17:40:98:41: 7c:0d:3b:5a:e5:65:60:18:31:d1:c8:dc:36:2c:b5: 5f:03:d4:47:c5:f6:d0:82:bd:1a:00:43:c9:ba:71: 09:dd:f9:e1:f4:6a:8f:c2:b6:8f:02:b7:c4:f2:04: c5:2b:e3:10:af:42:1d:70:65:0b:93:ab:53:40:8b: 2e:b1:c6:7e:f4:cd:e3:73:6c:ef:d8:ed:74:d7:33: 26:02:8e:ad:0c:b3:ee:88:28:16:88:e7:3c:4c:a9: c4:08:7c:e6:f0:5d:ef:07:2d:33:a7:57:e1:95:f0: cd:0a:3b:dc:a4:28:73:24:37:9a:0c:d7:cb:66:80: cf:44:08:a3:57:27:3f:df:c5:6c:eb:13:32:0c:17: 52:45:cd:35:3f:3b:15:52:f4:45:ac:66:0c:22:39: 33:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8A:50:0A:63:E4:B5:44:6E:92:31:AF:71:3D:97:6E:D2:0B:18:9A X509v3 Authority Key Identifier: keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:17:52:e6:45:f3:cb:40:d0:40:7f:4f:08:43:56:11:23:fa: a7:b9:6e:de:0b:1e:13:ca:32:6f:69:41:15:ae:9f:82:df:2e: e0:77:84:9e:ef:99:3f:d0:1a:e6:ca:90:d7:ff:20:cc:03:6e: 19:2b:25:3f:b8:ee:cf:ec:e1:e2:0b:ca:a5:ac:2f:5c:09:9b: f7:56:aa:41:e6:75:90:8b:11:44:f5:0a:20:6e:9e:92:e3:85: 3e:24:f8:0e:56:8d:70:c6:2b:3b:7f:59:4d:0d:0e:2b:33:f0: 12:b5:a8:9b:be:b5:7a:00:21:78:43:66:0c:b8:9f:b8:79:c1: ba:3d:13:74:4b:eb:93:47:00:40:1f:d8:cd:db:61:10:f9:cc: 71:d0:a7:51:a3:23:b6:2c:f8:0a:8e:07:dd:da:93:c0:5f:10: 42:ae:1a:2a:ae:9a:9f:ea:36:ff:18:10:dd:df:05:26:29:42: db:31:36:30:ed:8d:b8:da:8b:28:45:13:8a:56:69:09:9a:c5: 3c:a9:b1:a7:ff:90:bc:f0:23:2a:73:9e:a0:b5:71:1f:c0:a4: cb:5e:25:ef:de:09:ef:79:92:37:1d:52:01:54:cf:37:41:02: 78:d3:48:7f:ed:d8:0a:7e:49:c4:24:dd:45:a1:01:5e:f4:8d: 58:ab:b1:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTscAchSg4cDpEmneBEbmR8wvIo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1MTk1MDg5MTg2RjQ1QjdEQjZCRjBBRkU0NkRGQzVB RkI0NzcwOTAeFw0yNDExMjIxMDQwMzFaFw0yNDExMjMxMzQxMzFaMDMxMTAvBgNV BAMTKDgzOEE1MDBBNjNFNEI1NDQ2RTkyMzFBRjcxM0Q5NzZFRDIwQjE4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsC3xCJWTK4xRbEL3erHcPRCI tVjM1H8MDq6qTjsRD05aCuWVNVlbkJTG5JIwwh/AFPc+bOh0D0aRJstPiiqlFpg9 mIuWVlkharvUNErVAwm5JVm74t1+jyyHBsF7POjo2jqvF0CYQXwNO1rlZWAYMdHI 3DYstV8D1EfF9tCCvRoAQ8m6cQnd+eH0ao/Cto8Ct8TyBMUr4xCvQh1wZQuTq1NA iy6xxn70zeNzbO/Y7XTXMyYCjq0Ms+6IKBaI5zxMqcQIfObwXe8HLTOnV+GV8M0K O9ykKHMkN5oM18tmgM9ECKNXJz/fxWzrEzIMF1JFzTU/OxVS9EWsZgwiOTNpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUg4pQCmPktURukjGvcT2XbtILGJowHwYDVR0j BBgwFoAUy1GVCJGG9Ft9tr8K/kbfxa+0dwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3Uy dzIvMS9DQjUxOTUwODkxODZGNDVCN0RCNkJGMEFGRTQ2REZDNUFGQjQ3NzA5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNTE5NTA4OTE4NkY0NUI3 REI2QkYwQUZFNDZERkM1QUZCNDc3MDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3UydzIvMS9D QjUxOTUwODkxODZGNDVCN0RCNkJGMEFGRTQ2REZDNUFGQjQ3NzA5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUBdS5kXzy0DQQH9PCENWESP6p7lu3gseE8oyb2lBFa6fgt8u4HeEnu+ZP9Aa 5sqQ1/8gzANuGSslP7juz+zh4gvKpawvXAmb91aqQeZ1kIsRRPUKIG6ekuOFPiT4 DlaNcMYrO39ZTQ0OKzPwErWom761egAheENmDLifuHnBuj0TdEvrk0cAQB/Yzdth EPnMcdCnUaMjtiz4Co4H3dqTwF8QQq4aKq6an+o2/xgQ3d8FJilC2zE2MO2NuNqL KEUTilZpCZrFPKmxp/+QvPAjKnOeoLVxH8Cky14l794J73mSNx1SAVTPN0ECeNNI f+3YCn5JxCTdRaEBXvSNWKuxhw== -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org