$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft File: 0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft (raw, json) Hash identifier: tiXGn9XulHp0sXF1yokJXiM76GV1zNt8dsJaG2GCoXA= Subject key identifier: 81:E0:6A:32:A3:35:74:CA:44:45:B4:D2:1A:C6:AE:FB:4F:4A:E2:98 Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9 Certificate issuer: /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9 Certificate serial: 6A205236C5CC774AF16218E889C1A0A420BA6A79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft Manifest number: 013A Signing time: Fri 22 Nov 2024 23:31:55 +0000 Manifest this update: Fri 22 Nov 2024 23:26:55 +0000 Manifest next update: Sun 24 Nov 2024 03:26:55 +0000 Files and hashes: 1: 0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl (hash: tv9t9SXMZbY9tHJNVPlEfdsxBhvgnhU8zivvfGT67C4=) 2: 323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (hash: GbtBYK7tURSpirrclKHm/q3LG/8pc+6VAzL3zzPx3w4=) 3: 3133382e302e3131322e302f32322d3233203d3e20323634353434.roa (hash: t0HlX2PxrzIfkYvkgk3DqFDq9MqwfjNIT0gSyEmkw1A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:20:52:36:c5:cc:77:4a:f1:62:18:e8:89:c1:a0:a4:20:ba:6a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9 Validity Not Before: Nov 22 23:26:55 2024 GMT Not After : Nov 24 03:26:55 2024 GMT Subject: CN=81E06A32A33574CA4445B4D21AC6AEFB4F4AE298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:fc:07:be:7c:62:01:d5:c1:fb:f1:90:0e: d6:be:07:29:99:7d:e6:5d:fc:5a:55:d8:54:0b:db: a2:63:e2:94:04:66:6b:fc:f8:ac:52:27:8e:14:5f: 87:fa:d1:0f:f1:99:89:9b:6e:b9:73:1e:41:54:eb: af:d3:88:af:4f:c8:b1:af:f7:d2:01:88:ee:0e:1b: 1f:71:ec:2d:7e:af:54:6c:b5:ab:68:28:60:a4:be: c0:0e:f2:f2:a3:6b:c6:fe:fd:ef:0e:97:5d:a5:e6: 27:09:64:6b:13:ae:86:c3:41:0a:d9:8e:cb:64:42: 91:61:49:6b:27:8f:82:97:80:9a:b3:5e:d9:e4:f4: 34:15:3c:e5:1e:60:b3:8d:f9:3a:3f:38:ca:f6:e1: ed:92:16:50:be:03:25:e7:86:a1:92:5a:9e:81:76: 98:54:a5:96:87:af:31:05:3f:a9:d9:ef:cf:60:aa: 73:63:8e:94:07:40:96:d1:b2:2d:49:74:ce:c4:f7: 29:7a:ac:7f:47:9a:4c:3a:46:71:ac:3e:1e:e1:83: 21:71:c9:a4:fb:67:a9:33:dd:03:8e:87:0a:e7:36: ce:97:61:b1:1d:38:4b:97:c7:af:25:f4:2a:55:9e: d5:ce:11:71:7c:df:09:c1:54:7f:0b:e6:50:93:94: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E0:6A:32:A3:35:74:CA:44:45:B4:D2:1A:C6:AE:FB:4F:4A:E2:98 X509v3 Authority Key Identifier: keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:22:55:98:01:a3:41:27:c9:33:61:24:9c:ac:ee:0d:1a:96: 30:e1:e0:8d:ec:00:f4:4e:c7:64:04:b9:9a:38:8d:2d:51:5f: c9:3c:e3:3e:f4:08:3e:98:d4:42:46:96:b7:45:1f:9e:65:34: 5a:d5:32:98:cf:28:73:74:88:61:94:c8:1d:76:23:8e:53:0d: 4c:c3:ab:e2:c1:55:c9:b5:3e:85:41:cd:45:92:47:85:27:45: f8:25:36:3c:eb:6b:37:8d:e0:45:f3:61:01:b2:0f:2e:e5:c8: 27:1c:0c:86:83:13:7c:83:0f:73:1d:ec:aa:39:7c:4f:07:3d: 07:58:37:c0:72:4e:b9:1b:8b:29:5a:c2:c7:7a:bf:16:c7:95: 2f:6c:d6:e8:8b:1b:cd:df:16:b7:16:ec:85:81:38:f4:45:86: b5:e8:24:93:6b:ca:51:24:32:80:c7:99:f6:19:f8:36:fe:36: b4:45:23:a9:03:bd:e5:f8:66:c8:43:d2:d4:43:93:8a:e6:0e: c5:26:aa:ea:d0:c8:3d:7b:0e:5b:a3:64:89:96:ae:e1:23:71: 57:14:17:4f:7d:74:fc:52:ce:d5:a2:fd:f0:08:e1:3e:14:4f: 6c:19:70:cd:ef:37:0d:e5:60:2a:b5:c9:86:7d:93:11:bb:29: 18:8b:e8:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaiBSNsXMd0rxYhjoicGgpCC6ankwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3QzMyNTdGQTE5NjNDRUI3Q0UxNEU5NTk5RENFOTJF NzM2NjJGOTAeFw0yNDExMjIyMzI2NTVaFw0yNDExMjQwMzI2NTVaMDMxMTAvBgNV BAMTKDgxRTA2QTMyQTMzNTc0Q0E0NDQ1QjREMjFBQzZBRUZCNEY0QUUyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFPwHvnxiAdXB+/GQDta+BymZ feZd/FpV2FQL26Jj4pQEZmv8+KxSJ44UX4f60Q/xmYmbbrlzHkFU66/TiK9PyLGv 99IBiO4OGx9x7C1+r1RstatoKGCkvsAO8vKja8b+/e8Ol12l5icJZGsTrobDQQrZ jstkQpFhSWsnj4KXgJqzXtnk9DQVPOUeYLON+To/OMr24e2SFlC+AyXnhqGSWp6B dphUpZaHrzEFP6nZ789gqnNjjpQHQJbRsi1JdM7E9yl6rH9Hmkw6RnGsPh7hgyFx yaT7Z6kz3QOOhwrnNs6XYbEdOEuXx68l9CpVntXOEXF83wnBVH8L5lCTlEhvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgeBqMqM1dMpERbTSGsau+09K4pgwHwYDVR0j BBgwFoAUCnwyV/oZY863zhTpWZ3Okuc2YvkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpY OWIvMi8wQTdDMzI1N0ZBMTk2M0NFQjdDRTE0RTk1OTlEQ0U5MkU3MzY2MkY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBN0MzMjU3RkExOTYzQ0VC N0NFMTRFOTU5OURDRTkyRTczNjYyRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpYOWIvMi8w QTdDMzI1N0ZBMTk2M0NFQjdDRTE0RTk1OTlEQ0U5MkU3MzY2MkY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHiJVmAGjQSfJM2EknKzuDRqWMOHgjewA9E7HZAS5mjiNLVFfyTzjPvQIPpjU QkaWt0UfnmU0WtUymM8oc3SIYZTIHXYjjlMNTMOr4sFVybU+hUHNRZJHhSdF+CU2 POtrN43gRfNhAbIPLuXIJxwMhoMTfIMPcx3sqjl8Twc9B1g3wHJOuRuLKVrCx3q/ FseVL2zW6Isbzd8WtxbshYE49EWGtegkk2vKUSQygMeZ9hn4Nv42tEUjqQO95fhm yEPS1EOTiuYOxSaq6tDIPXsOW6NkiZau4SNxVxQXT310/FLO1aL98AjhPhRPbBlw ze83DeVgKrXJhn2TEbspGIvoWA== -----END CERTIFICATE-----Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org