$ rpki-client -vvf rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft File: 7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft (raw, json) Hash identifier: +cG6lbCA4eyrlWVLu9NyNfaaa8s+G5LsOU5/U0HkPdA= Subject key identifier: FA:8F:C2:7D:F2:2D:6B:5B:00:0B:74:48:4F:F1:D0:FD:06:97:27:8B Authority key identifier: 7C:FB:4C:B8:D8:AD:64:B7:57:F3:3E:83:AD:9B:3C:20:B7:4A:3B:16 Certificate issuer: /CN=7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16 Certificate serial: 23E1089CD76097A63D0E3B6C9935C8BA1520E147 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 17:26:00 +0000 Manifest this update: Fri 22 Nov 2024 17:21:00 +0000 Manifest next update: Sat 23 Nov 2024 18:10:00 +0000 Files and hashes: 1: 323830343a356237383a3a2f33322d3438203d3e20323638383437.roa (hash: w7izE1Lr4EmImVPosuMpXDdKblTMLQ7TDRbHqvfY4eQ=) 2: 34352e3137332e3235322e302f32322d3234203d3e20323638383437.roa (hash: lIx8GJQzLZCX6DvYqR/zf8/HHSX0Bd/DiOPvUOMRKQk=) 3: 7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.crl (hash: CSs2KBRXJ2OubDCWL+EW7dliDLkhrQEe/8XS+wf765Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.crl rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 18:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e1:08:9c:d7:60:97:a6:3d:0e:3b:6c:99:35:c8:ba:15:20:e1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16 Validity Not Before: Nov 22 17:21:00 2024 GMT Not After : Nov 23 18:10:00 2024 GMT Subject: CN=FA8FC27DF22D6B5B000B74484FF1D0FD0697278B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:f2:3f:87:d8:ca:84:79:75:ba:5c:d8:16: 8f:91:c8:87:1c:6e:42:03:85:37:98:54:5c:1c:d4: 5b:a9:91:1c:d6:ac:5b:6b:0e:67:46:eb:08:1f:67: e9:08:74:ce:c4:13:9a:a4:72:bf:61:5f:70:04:a7: e2:75:40:67:59:94:98:02:dd:4d:d9:04:76:3d:1e: 0a:e9:e5:05:79:92:43:4e:74:75:7e:9e:93:88:de: 18:a9:68:15:8c:b4:fc:d4:20:2d:59:12:51:da:a9: 23:47:fd:7d:45:1c:89:6e:dc:39:e3:64:5e:fe:e7: d8:d0:5b:19:39:70:8a:fe:17:19:cc:69:5a:06:a1: 91:97:56:ea:fc:96:7b:3b:50:7d:33:84:31:30:93: d7:ee:e2:de:40:8f:f6:44:e2:61:f3:d1:26:b1:fc: bd:8f:4d:43:8f:8b:56:b4:57:72:e4:7d:45:79:89: ff:50:97:0d:2d:8b:96:fb:82:b2:eb:bd:5a:c7:da: fd:eb:ec:b7:ad:1c:1b:01:97:cc:af:d8:a6:79:4b: c4:8c:cf:63:86:8d:c9:db:0f:b9:f0:99:26:c4:1d: 19:83:dc:49:f2:84:6f:6d:7d:43:6a:ae:6c:e0:86: d4:ca:98:2c:d9:e3:4e:a8:7c:4a:62:3d:73:49:18: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8F:C2:7D:F2:2D:6B:5B:00:0B:74:48:4F:F1:D0:FD:06:97:27:8B X509v3 Authority Key Identifier: keyid:7C:FB:4C:B8:D8:AD:64:B7:57:F3:3E:83:AD:9B:3C:20:B7:4A:3B:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d1:72:65:bd:49:6e:4d:57:85:ee:39:bf:2d:90:23:b8:d9: 95:62:14:47:36:00:ac:57:a4:6a:fb:f9:e3:a4:59:e9:74:6d: c9:fe:41:6d:3f:48:fa:0a:1c:d7:00:fb:f9:de:75:2f:cc:04: a4:f5:c3:e0:d0:c0:4c:21:81:af:a2:51:69:16:81:50:8c:38: 42:70:0d:8e:81:b6:de:20:2b:e4:f8:0a:a9:19:4f:1f:d9:a8: d1:1d:1e:aa:ff:d2:16:49:16:5e:b6:26:0b:41:4d:b4:fb:1f: 1e:4e:3e:64:ac:ed:66:c7:e5:10:88:bd:05:73:5c:fd:2b:58: 1a:ef:08:ea:f6:98:1c:08:12:cd:10:b8:fe:e4:f1:8b:5f:ae: ab:81:8b:2c:b9:9c:6f:d2:38:a8:16:cb:0c:35:a1:67:24:90: c0:8a:6a:01:d4:8d:1d:d9:d2:a3:00:a2:c1:76:f8:1f:64:fd: 75:80:45:c5:54:c5:7e:d1:4a:92:bb:30:15:dd:73:4e:f7:78: 53:c2:96:6c:31:77:23:78:2a:6b:78:27:98:5e:00:05:08:fb: a3:ab:bb:b6:a9:5b:96:14:e4:dc:e5:10:04:2e:1c:6b:6d:51: 33:2c:bd:bd:dd:d2:92:6f:25:27:5c:0e:9a:1f:cb:01:d0:da: 91:08:2d:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI+EInNdgl6Y9DjtsmTXIuhUg4UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGQjRDQjhEOEFENjRCNzU3RjMzRTgzQUQ5QjNDMjBC NzRBM0IxNjAeFw0yNDExMjIxNzIxMDBaFw0yNDExMjMxODEwMDBaMDMxMTAvBgNV BAMTKEZBOEZDMjdERjIyRDZCNUIwMDBCNzQ0ODRGRjFEMEZEMDY5NzI3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVfI/h9jKhHl1ulzYFo+RyIcc bkIDhTeYVFwc1FupkRzWrFtrDmdG6wgfZ+kIdM7EE5qkcr9hX3AEp+J1QGdZlJgC 3U3ZBHY9Hgrp5QV5kkNOdHV+npOI3hipaBWMtPzUIC1ZElHaqSNH/X1FHIlu3Dnj ZF7+59jQWxk5cIr+FxnMaVoGoZGXVur8lns7UH0zhDEwk9fu4t5Aj/ZE4mHz0Sax /L2PTUOPi1a0V3LkfUV5if9Qlw0ti5b7grLrvVrH2v3r7LetHBsBl8yv2KZ5S8SM z2OGjcnbD7nwmSbEHRmD3EnyhG9tfUNqrmzghtTKmCzZ406ofEpiPXNJGFBLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+o/CffIta1sAC3RIT/HQ/QaXJ4swHwYDVR0j BBgwFoAUfPtMuNitZLdX8z6DrZs8ILdKOxYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0JVS3E0bVdSd0VHWlo5NDNqeUFOdUozNUhReURtUnJjYkxVY1Nud2Nn dUwvMS83Q0ZCNENCOEQ4QUQ2NEI3NTdGMzNFODNBRDlCM0MyMEI3NEEzQjE2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRkI0Q0I4RDhBRDY0Qjc1 N0YzM0U4M0FEOUIzQzIwQjc0QTNCMTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0JVS3E0bVdSd0VHWlo5NDNqeUFOdUozNUhReURtUnJjYkxVY1Nud2NndUwvMS83 Q0ZCNENCOEQ4QUQ2NEI3NTdGMzNFODNBRDlCM0MyMEI3NEEzQjE2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV9FyZb1Jbk1Xhe45vy2QI7jZlWIURzYArFekavv546RZ6XRtyf5BbT9I+goc 1wD7+d51L8wEpPXD4NDATCGBr6JRaRaBUIw4QnANjoG23iAr5PgKqRlPH9mo0R0e qv/SFkkWXrYmC0FNtPsfHk4+ZKztZsflEIi9BXNc/StYGu8I6vaYHAgSzRC4/uTx i1+uq4GLLLmcb9I4qBbLDDWhZySQwIpqAdSNHdnSowCiwXb4H2T9dYBFxVTFftFK krswFd1zTvd4U8KWbDF3I3gqa3gnmF4ABQj7o6u7tqlblhTk3OUQBC4ca21RMyy9 vd3Skm8lJ1wOmh/LAdDakQgtzQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org