$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft File: A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft (raw, json) Hash identifier: nbrABdH/5dkheDoFyHIAEEjg6efRXnFNXPTVhc72AnI= Subject key identifier: 21:C9:EB:58:86:49:A3:95:4C:AF:BE:47:E7:F7:5F:60:30:46:3D:48 Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0 Certificate issuer: /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0 Certificate serial: 6A0DDC41733F7A27E973E2CFEE622C545130AF83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer Subject info access: rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft Manifest number: 0136 Signing time: Fri 22 Nov 2024 22:05:46 +0000 Manifest this update: Fri 22 Nov 2024 22:00:46 +0000 Manifest next update: Sat 23 Nov 2024 22:52:46 +0000 Files and hashes: 1: 34352e3232362e39322e302f32322d3234203d3e20323636393932.roa (hash: Z1r8kkaLaUmL+yvmGkHP+Ns8GPrPuGvVThoKvT0Ic94=) 2: 323830343a343637633a3a2f33322d3438203d3e20323636393932.roa (hash: 821W2LCNXVN/lOG41Rq8QjUVJM6cnj4zLl84JbXg+MI=) 3: A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl (hash: jtBpgro1ZIWJGG7N6pc0dC1/qs2gitC+HFIb1X/C8TA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 22:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0d:dc:41:73:3f:7a:27:e9:73:e2:cf:ee:62:2c:54:51:30:af:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0 Validity Not Before: Nov 22 22:00:46 2024 GMT Not After : Nov 23 22:52:46 2024 GMT Subject: CN=21C9EB588649A3954CAFBE47E7F75F6030463D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:dd:be:65:11:45:e5:3f:d5:d9:fb:5f:9d: 22:0c:97:63:4c:d3:c5:d8:55:c4:10:fe:e2:24:47: 17:92:f7:5a:c5:aa:4c:b1:aa:99:14:09:b7:d4:2d: 87:fb:5e:b3:ae:64:34:cc:c0:ca:ea:6f:e3:72:b2: a1:c9:20:22:72:e1:cf:6e:df:f3:1e:48:03:1d:4b: 49:39:4c:ec:27:1a:17:3f:e7:e4:8e:46:e9:39:8f: b5:8c:71:db:09:ef:b8:61:74:8b:26:83:eb:31:59: 56:0a:93:84:ef:92:e4:11:9d:38:c4:52:8b:f5:1a: 75:5d:2b:ef:7b:46:b1:45:c8:df:aa:0c:97:99:62: bf:eb:81:b9:34:ae:f6:50:c1:ed:dc:11:7f:e4:e7: ec:22:28:fa:38:b8:ff:d8:9a:d4:cb:28:df:14:fd: c7:58:5e:8a:f3:b1:48:e1:a8:f0:f2:12:73:a3:4c: 96:38:9c:d1:87:50:86:03:8f:11:d7:3e:e3:a7:9d: 9f:b7:74:d2:41:16:c4:ae:b2:0c:f9:29:71:a0:af: b6:7c:5d:9f:ad:f0:50:03:ea:f9:ad:fa:13:cf:0f: c3:c8:7e:23:da:29:24:a4:41:46:28:05:0b:2d:5c: 03:1e:98:0f:23:69:df:ef:3a:39:01:25:cb:1a:3e: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C9:EB:58:86:49:A3:95:4C:AF:BE:47:E7:F7:5F:60:30:46:3D:48 X509v3 Authority Key Identifier: keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8a:18:d5:49:2b:7b:ee:c9:87:28:cc:9e:30:9b:61:85:2c: 81:b8:89:dc:10:e6:14:b3:e9:57:51:a7:6f:01:01:da:f6:7f: 92:0f:ff:81:a9:79:e9:54:d4:e1:ca:06:a7:9c:ed:c4:f2:7a: 4b:ba:a2:af:48:4a:00:5f:b9:b0:e0:04:86:88:e4:c3:55:86: b2:4e:0a:b4:27:2f:09:8a:2c:ec:4d:3d:c0:fd:1a:25:6f:60: b4:07:87:89:af:af:5b:db:dc:89:6e:3c:cb:f6:a4:92:12:b9: 01:c6:fb:16:50:c4:85:b8:71:ce:c9:53:8a:fe:7d:57:3d:20: bc:40:05:76:35:29:7f:b6:60:00:54:50:c4:51:19:60:95:5f: 13:81:a4:77:97:ba:36:70:0f:6f:71:21:ef:aa:df:96:1f:98: c2:d9:c8:ed:62:fc:f3:12:5e:8d:9e:a2:b0:53:ff:2c:5f:c3: 41:6c:b0:aa:76:31:23:cb:b8:cd:31:34:2f:3d:c0:f4:52:95: 40:37:94:37:1c:d3:92:5d:1c:68:b7:be:b9:de:ae:90:ff:79: 06:ad:e3:a3:1a:6d:8b:13:be:b7:5e:ce:b1:31:6e:4d:12:d8: ea:52:f1:9d:18:77:77:85:92:90:fd:df:fc:ba:c6:bd:b2:88: 42:06:db:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUag3cQXM/eifpc+LP7mIsVFEwr4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRFMTI5QUQ4RUJEMkNCNjVGOEZBQkNEMDRCQzE4MjI0 Q0ZFQ0VCMDAeFw0yNDExMjIyMjAwNDZaFw0yNDExMjMyMjUyNDZaMDMxMTAvBgNV BAMTKDIxQzlFQjU4ODY0OUEzOTU0Q0FGQkU0N0U3Rjc1RjYwMzA0NjNENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiw92+ZRFF5T/V2ftfnSIMl2NM 08XYVcQQ/uIkRxeS91rFqkyxqpkUCbfULYf7XrOuZDTMwMrqb+NysqHJICJy4c9u 3/MeSAMdS0k5TOwnGhc/5+SORuk5j7WMcdsJ77hhdIsmg+sxWVYKk4TvkuQRnTjE Uov1GnVdK+97RrFFyN+qDJeZYr/rgbk0rvZQwe3cEX/k5+wiKPo4uP/YmtTLKN8U /cdYXorzsUjhqPDyEnOjTJY4nNGHUIYDjxHXPuOnnZ+3dNJBFsSusgz5KXGgr7Z8 XZ+t8FAD6vmt+hPPD8PIfiPaKSSkQUYoBQstXAMemA8jad/vOjkBJcsaPuAnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIcnrWIZJo5VMr75H5/dfYDBGPUgwHwYDVR0j BBgwFoAUpOEprY69LLZfj6vNBLwYIkz+zrAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1g4R3hyTms3UkR6alVRZlZodDNGWUdWYmdUcFJXSkxMcDRBcXh1ZlA0 YmIvMC9BNEUxMjlBRDhFQkQyQ0I2NUY4RkFCQ0QwNEJDMTgyMjRDRkVDRUIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0RTEyOUFEOEVCRDJDQjY1 RjhGQUJDRDA0QkMxODIyNENGRUNFQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1g4R3hyTms3UkR6alVRZlZodDNGWUdWYmdUcFJXSkxMcDRBcXh1ZlA0YmIvMC9B NEUxMjlBRDhFQkQyQ0I2NUY4RkFCQ0QwNEJDMTgyMjRDRkVDRUIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANYoY1Ukre+7JhyjMnjCbYYUsgbiJ3BDmFLPpV1GnbwEB2vZ/kg//gal56VTU 4coGp5ztxPJ6S7qir0hKAF+5sOAEhojkw1WGsk4KtCcvCYos7E09wP0aJW9gtAeH ia+vW9vciW48y/akkhK5Acb7FlDEhbhxzslTiv59Vz0gvEAFdjUpf7ZgAFRQxFEZ YJVfE4Gkd5e6NnAPb3Eh76rflh+YwtnI7WL88xJejZ6isFP/LF/DQWywqnYxI8u4 zTE0Lz3A9FKVQDeUNxzTkl0caLe+ud6ukP95Bq3joxptixO+t17OsTFuTRLY6lLx nRh3d4WSkP3f/LrGvbKIQgbbUA== -----END CERTIFICATE-----Generated at Fri Nov 22 23:37:35 2024 by rpki-client on console-fra.rpki-client.org