$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft File: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json) Hash identifier: i7V0csJPcrDpNp8JDHpis+q+0zuP7ZNLumZqzWrnqG0= Subject key identifier: 54:63:36:F4:35:67:B0:CC:D7:47:1A:CD:87:A2:0D:2E:02:A3:77:AC Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 Certificate issuer: /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Certificate serial: 65783CA4C02E69E6D7413A047D17DEB78F9DA145 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 14:33:25 +0000 Manifest this update: Fri 22 Nov 2024 14:28:25 +0000 Manifest next update: Sat 23 Nov 2024 15:16:25 +0000 Files and hashes: 1: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: fVpbD9X6wqpPxrOPbXlB5CCy9FGeM3cXsa7bEyoIlQA=) 2: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: SIHpfJoJFNsI4PX21TPM6HC9SNqU/2Vw2jjdchDdQbk=) 3: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: r0aIbm7o7Cs4HZ33SKc4ioXr8qJbPh4B1oL0qXI+2Yk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 15:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:78:3c:a4:c0:2e:69:e6:d7:41:3a:04:7d:17:de:b7:8f:9d:a1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Validity Not Before: Nov 22 14:28:25 2024 GMT Not After : Nov 23 15:16:25 2024 GMT Subject: CN=546336F43567B0CCD7471ACD87A20D2E02A377AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:6d:10:38:80:d0:3f:01:67:f9:f4:48:a9: 1f:9e:a1:f5:b6:ad:92:6f:8b:21:4f:dc:f9:7f:aa: b4:bc:c7:35:cd:6a:6c:1c:18:17:70:a7:60:0f:f5: 28:f7:b4:66:05:7e:db:f6:9f:45:88:f1:dc:0b:d9: f2:39:1a:46:e1:cd:f4:d0:6a:29:4b:64:a8:b1:09: 78:22:14:24:ee:38:34:1d:c2:71:6e:9d:7a:cf:71: f3:f1:be:90:b0:81:5a:a2:67:78:33:42:cc:dc:d2: f5:43:6e:76:e0:29:45:35:ed:28:83:ce:55:af:9d: 9f:9e:5d:8b:8f:24:15:e1:c7:04:d4:a2:b5:96:ba: a1:7f:a2:e8:bd:76:33:31:2f:e7:46:dc:f4:66:4c: 1a:f1:d8:d4:86:60:30:51:1f:c7:d5:f1:09:05:03: de:49:66:ad:19:2f:12:f5:26:99:41:00:36:92:a3: 1f:0d:0c:29:60:0f:f3:ff:d6:2f:e9:93:64:51:ec: cb:cf:da:0f:ab:49:2f:de:30:ea:ea:00:00:3d:9c: 7d:6f:ad:6a:7d:b9:e1:ed:9d:39:c7:f8:33:94:42: 56:35:37:d8:97:ed:7e:ce:0a:90:7c:59:b8:49:be: 20:a7:e9:9c:2d:19:80:d8:b5:bf:b6:b3:b1:75:cf: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:63:36:F4:35:67:B0:CC:D7:47:1A:CD:87:A2:0D:2E:02:A3:77:AC X509v3 Authority Key Identifier: keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cb:c6:7e:75:fa:5c:17:e8:3c:d4:65:80:2e:1b:78:b5:ae: a9:6a:9b:d6:31:8a:ed:b9:01:07:ea:23:3e:23:03:3b:75:db: cb:17:69:53:04:2f:bd:a7:77:fe:c0:1e:71:46:a8:45:a9:bc: 19:93:dc:01:21:20:87:04:e1:9b:3d:55:f0:80:9a:74:4a:ec: 66:0d:48:9c:64:92:c1:1f:29:ca:9c:7a:b3:c9:7a:bc:59:55: 98:a3:5a:8c:2b:55:f8:0d:01:26:c4:1a:e2:6a:eb:b7:76:90: 29:1c:7d:42:10:07:77:fe:ae:2a:bf:80:be:3b:28:f7:cb:fa: fa:c6:4f:1d:ff:fd:79:6b:e5:94:45:d6:76:29:0a:52:32:9e: ee:09:d4:7a:15:95:68:30:0c:fd:f3:ec:fe:aa:f9:0e:68:4a: e5:87:44:dc:9f:f6:44:09:4d:87:ea:08:93:25:7f:db:43:d0: 4e:09:1d:ff:2b:ae:1f:21:cb:f6:e5:2a:4b:5d:ac:8d:45:56: 27:00:21:59:35:f8:2e:43:85:bb:cd:74:77:06:c6:c9:c4:13: 33:7e:a9:f9:4a:4a:20:4b:3b:e0:bf:c5:b8:95:aa:5f:83:d6: 4d:4a:1b:db:88:35:07:74:c5:1f:a9:97:6e:4f:1a:3f:93:5f: 23:46:3f:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZXg8pMAuaebXQToEfRfet4+doUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC QkFGRDZCNDAeFw0yNDExMjIxNDI4MjVaFw0yNDExMjMxNTE2MjVaMDMxMTAvBgNV BAMTKDU0NjMzNkY0MzU2N0IwQ0NENzQ3MUFDRDg3QTIwRDJFMDJBMzc3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqW0QOIDQPwFn+fRIqR+eofW2 rZJviyFP3Pl/qrS8xzXNamwcGBdwp2AP9Sj3tGYFftv2n0WI8dwL2fI5GkbhzfTQ ailLZKixCXgiFCTuODQdwnFunXrPcfPxvpCwgVqiZ3gzQszc0vVDbnbgKUU17SiD zlWvnZ+eXYuPJBXhxwTUorWWuqF/oui9djMxL+dG3PRmTBrx2NSGYDBRH8fV8QkF A95JZq0ZLxL1JplBADaSox8NDClgD/P/1i/pk2RR7MvP2g+rSS/eMOrqAAA9nH1v rWp9ueHtnTnH+DOUQlY1N9iX7X7OCpB8WbhJviCn6ZwtGYDYtb+2s7F1zwqbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVGM29DVnsMzXRxrNh6INLgKjd6wwHwYDVR0j BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS9F NzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUMvGfnX6XBfoPNRlgC4beLWuqWqb1jGK7bkBB+ojPiMDO3XbyxdpUwQvvad3 /sAecUaoRam8GZPcASEghwThmz1V8ICadErsZg1InGSSwR8pypx6s8l6vFlVmKNa jCtV+A0BJsQa4mrrt3aQKRx9QhAHd/6uKr+Avjso98v6+sZPHf/9eWvllEXWdikK UjKe7gnUehWVaDAM/fPs/qr5DmhK5YdE3J/2RAlNh+oIkyV/20PQTgkd/yuuHyHL 9uUqS12sjUVWJwAhWTX4LkOFu810dwbGycQTM36p+UpKIEs74L/FuJWqX4PWTUob 24g1B3TFH6mXbk8aP5NfI0Y/5Q== -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org