$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft File: 8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft (raw, json) Hash identifier: ORtmc86f/AywtLQXhq+pxiGwyHvMrgNxT4gQHhhZHN0= Subject key identifier: 8E:A2:AC:EE:A3:97:4F:3D:E2:7B:95:9A:92:37:21:F6:85:4E:92:48 Authority key identifier: 8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8 Certificate issuer: /CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8 Certificate serial: 0737583CA049C0CA9A3815EC0DE0E147B1E0A6FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft Manifest number: 0144 Signing time: Fri 22 Nov 2024 14:45:50 +0000 Manifest this update: Fri 22 Nov 2024 14:40:50 +0000 Manifest next update: Sat 23 Nov 2024 18:05:50 +0000 Files and hashes: 1: 323830343a3661633a3a2f33322d3332203d3e20323632363031.roa (hash: e2uKxdfIG1VyWVCtqqbDn1LZcztF4mTwF4C3JOHRSUU=) 2: 3137372e37352e3234302e302f32302d3234203d3e20323632363031.roa (hash: gfBJAuNHH60Mk6JXfLpN58DbrfIj+i/D/Aa1r4O8jp4=) 3: 8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl (hash: dV0ywii1ygJQYsLwzMldq54C41Wj1Na+9V9JW9bQUUg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 15:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:37:58:3c:a0:49:c0:ca:9a:38:15:ec:0d:e0:e1:47:b1:e0:a6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8 Validity Not Before: Nov 22 14:40:50 2024 GMT Not After : Nov 23 18:05:50 2024 GMT Subject: CN=8EA2ACEEA3974F3DE27B959A923721F6854E9248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:e1:3c:de:1f:00:aa:7e:fb:1f:12:01:56: 41:ef:a9:86:df:f2:76:4a:08:94:f9:12:9c:8e:73: 48:3b:1f:ac:6c:c2:be:3e:80:8f:cd:51:1b:93:30: d3:ae:0a:24:09:4d:95:c2:37:96:d1:7e:43:eb:04: 1e:09:da:12:c9:76:c9:de:9d:44:7d:bd:4f:3c:e2: 38:5f:f6:38:71:46:b5:7e:ca:83:d6:33:ce:38:ff: e4:5c:50:76:5f:41:90:32:1e:5f:61:99:b4:00:fa: 21:fb:1e:99:b3:ce:58:a2:1f:51:75:70:17:7d:cf: 5a:98:af:f8:c4:7d:58:df:fe:7f:c6:8c:e1:d7:98: 64:85:d1:bf:d8:16:4e:40:f9:e1:e6:2f:1c:95:86: 58:9c:79:b3:57:9f:aa:92:52:aa:ca:19:ea:22:01: dd:ff:e7:15:e9:32:60:de:e0:48:12:28:a5:5c:ac: ff:66:34:24:9a:a2:a0:b9:00:91:36:6d:17:33:0e: 77:73:aa:64:7c:b9:db:45:c2:01:ad:64:ea:d7:05: b9:54:97:c8:58:98:4f:d3:a5:81:8e:88:5d:97:28: 24:d1:97:08:ee:74:8d:c3:86:3e:b4:88:df:c4:3e: 56:43:fc:43:a9:9d:4f:57:32:64:d4:69:d8:91:73: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A2:AC:EE:A3:97:4F:3D:E2:7B:95:9A:92:37:21:F6:85:4E:92:48 X509v3 Authority Key Identifier: keyid:8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d3:b2:c8:9d:3b:0b:ca:85:b6:5f:5e:44:f9:b3:65:6a:d3: e9:e1:c9:b9:21:e7:00:5f:10:84:d6:6b:36:39:c6:10:d8:b9: d4:ef:af:22:dd:57:8b:03:43:3f:63:a1:07:e9:4e:c3:31:62: a3:ed:8e:62:f7:f1:21:a2:1c:80:42:7f:8f:0a:7d:fc:17:ee: 20:34:9f:91:bb:01:8d:58:17:eb:02:96:a0:c8:77:60:bc:34: 7a:e1:00:86:52:b1:d7:22:59:18:4c:88:d7:6e:40:7a:5d:4d: b8:86:cd:5f:e1:a8:cb:46:32:8f:53:cc:7e:df:e8:4b:93:4a: 75:ea:61:a1:08:e7:a9:fb:57:82:58:c1:2d:f1:72:44:bb:e0: b9:bb:e4:d5:30:54:ce:7f:af:eb:2e:35:84:fe:6b:5c:74:41: e9:48:82:e6:23:24:e3:5e:63:19:cd:3b:07:2e:1c:3e:3c:11: 64:3b:1b:7a:4f:c0:8f:a0:61:3d:e6:b8:5b:97:fc:73:f0:0a: 96:87:f7:93:28:9f:ca:78:e0:7a:8a:57:fe:aa:82:a3:b7:ad: 17:00:aa:73:c5:fa:5c:2f:d9:3a:ac:04:75:4c:db:2e:06:e0: df:cb:ae:44:01:2a:54:95:b0:0e:ba:96:d1:d5:6f:c3:bf:af: 1c:22:e4:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBzdYPKBJwMqaOBXsDeDhR7HgpvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBNURFOTY4MjIwRDY2QTkxNjRDQTNBQTI0Njc3RUY5 QzEyN0VFODAeFw0yNDExMjIxNDQwNTBaFw0yNDExMjMxODA1NTBaMDMxMTAvBgNV BAMTKDhFQTJBQ0VFQTM5NzRGM0RFMjdCOTU5QTkyMzcyMUY2ODU0RTkyNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7OE83h8Aqn77HxIBVkHvqYbf 8nZKCJT5EpyOc0g7H6xswr4+gI/NURuTMNOuCiQJTZXCN5bRfkPrBB4J2hLJdsne nUR9vU884jhf9jhxRrV+yoPWM844/+RcUHZfQZAyHl9hmbQA+iH7HpmzzliiH1F1 cBd9z1qYr/jEfVjf/n/GjOHXmGSF0b/YFk5A+eHmLxyVhlicebNXn6qSUqrKGeoi Ad3/5xXpMmDe4EgSKKVcrP9mNCSaoqC5AJE2bRczDndzqmR8udtFwgGtZOrXBblU l8hYmE/TpYGOiF2XKCTRlwjudI3Dhj60iN/EPlZD/EOpnU9XMmTUadiRc19rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjqKs7qOXTz3ie5Wakjch9oVOkkgwHwYDVR0j BBgwFoAUj6XeloIg1mqRZMo6okZ375wSfugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4 TnAvMS84RkE1REU5NjgyMjBENjZBOTE2NENBM0FBMjQ2NzdFRjlDMTI3RUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQTVERTk2ODIyMEQ2NkE5 MTY0Q0EzQUEyNDY3N0VGOUMxMjdFRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4TnAvMS84 RkE1REU5NjgyMjBENjZBOTE2NENBM0FBMjQ2NzdFRjlDMTI3RUU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAetOyyJ07C8qFtl9eRPmzZWrT6eHJuSHnAF8QhNZrNjnGENi51O+vIt1XiwND P2OhB+lOwzFio+2OYvfxIaIcgEJ/jwp9/BfuIDSfkbsBjVgX6wKWoMh3YLw0euEA hlKx1yJZGEyI125Ael1NuIbNX+Goy0Yyj1PMft/oS5NKdephoQjnqftXgljBLfFy RLvgubvk1TBUzn+v6y41hP5rXHRB6UiC5iMk415jGc07By4cPjwRZDsbek/Aj6Bh Pea4W5f8c/AKlof3kyifynjgeopX/qqCo7etFwCqc8X6XC/ZOqwEdUzbLgbg38uu RAEqVJWwDrqW0dVvw7+vHCLk8w== -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org