$ rpki-client -vvf rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft File: BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft (raw, json) Hash identifier: gagKeyoQZ0y6fahSVgg+XgK3MwMSY1IJyFZEMY6X7ag= Subject key identifier: 3A:8E:A1:15:F1:AA:CA:51:06:8D:8D:B4:70:66:6B:8F:53:C4:3F:15 Authority key identifier: BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41 Certificate issuer: /CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741 Certificate serial: 605168B86DA71DE97DF7C6821D613E80CCC27D8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer Subject info access: rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft Manifest number: 71 Signing time: Wed 26 Jun 2024 10:40:01 +0000 Manifest this update: Wed 26 Jun 2024 10:35:01 +0000 Manifest next update: Thu 27 Jun 2024 12:05:01 +0000 Files and hashes: 1: 323830343a386465383a3a2f33322d3332203d3e20323733333839.roa (hash: Jmf8h4YuKFrLNzRLfmEcOqBX/1uZ15y5+r+f50pVkFI=) 2: BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl (hash: 3RsuZmB94zySQOiiofmV6fWevbQcGjjLi4uWNf6kr5k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 10:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:51:68:b8:6d:a7:1d:e9:7d:f7:c6:82:1d:61:3e:80:cc:c2:7d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741 Validity Not Before: Jun 26 10:35:01 2024 GMT Not After : Jun 27 12:05:01 2024 GMT Subject: CN=3A8EA115F1AACA51068D8DB470666B8F53C43F15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:53:1a:9d:38:a7:4a:57:c7:2f:67:1e:e8: e1:42:b2:c9:cf:43:da:a1:42:68:f3:b1:12:65:0e: a1:6a:ba:0e:4c:dc:1d:09:77:1d:e1:e0:c5:bb:0a: 6f:00:57:95:bc:e8:b0:7e:d4:38:ca:ed:08:e7:c5: 93:52:f1:74:06:3f:fe:a7:90:e5:3b:26:83:79:1c: 98:d7:7a:ac:ff:db:69:90:bc:a2:96:29:dc:cd:6b: 05:ac:d6:d9:25:5b:3b:51:6d:f6:a1:4f:d8:9d:27: ba:f5:86:7e:6b:91:e8:74:bd:c8:58:d9:e1:a0:93: 41:da:91:3b:30:76:14:7e:75:5c:74:c8:0c:71:b3: 33:dd:a0:c8:2f:35:24:66:f1:5e:d6:8d:06:7a:6d: bd:78:6b:01:f1:1c:54:a5:5e:e8:cb:b2:1d:ff:80: 18:9e:3a:a3:d9:04:f8:98:48:c7:0b:37:ff:1f:87: 24:70:49:f6:4e:bf:cb:df:57:de:0e:7d:d2:67:27: 43:7d:60:18:93:33:02:a7:63:71:e8:4d:73:b1:4b: 26:53:af:3e:85:ed:55:49:3f:97:92:5c:40:6c:48: f1:8d:93:06:c1:19:7c:c6:ac:d0:e3:d0:a8:6d:86: 47:e9:e7:28:88:65:75:05:c2:c3:89:ce:4a:79:13: a5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8E:A1:15:F1:AA:CA:51:06:8D:8D:B4:70:66:6B:8F:53:C4:3F:15 X509v3 Authority Key Identifier: keyid:BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a0:c0:cf:1c:7b:86:31:ef:cb:1b:4f:3e:e4:5d:92:cf:d5: e4:80:0c:69:ee:2d:b9:d4:c6:ec:cd:9a:09:6b:a9:77:52:7b: 3a:c4:eb:ba:62:ed:de:d3:69:fa:c3:4b:64:2f:a5:b8:0f:de: 1e:9e:fc:eb:29:7a:82:5d:2d:d8:f5:83:4d:8f:b3:dd:6f:ad: 10:52:fb:1d:23:f5:3c:02:6b:8f:0a:42:2e:c4:5c:63:e7:e0: a6:3d:1d:59:90:b3:d1:ee:dc:d1:ab:51:0a:b1:e8:29:be:5f: 24:8c:87:57:0e:60:22:73:a4:8b:e7:3d:e9:ab:be:60:29:be: c3:8a:84:ab:6a:ba:8a:47:b8:b4:c6:76:52:20:c0:41:ea:c5: 7b:d1:96:7a:aa:2d:67:07:a3:c1:71:ba:92:25:8a:8a:92:49: 56:cf:0e:78:92:57:1e:d6:1c:d3:ea:cb:4d:cb:90:60:f2:fd: bc:69:31:2f:3a:af:81:2b:2b:a4:4c:e4:88:91:04:76:a0:a1: 5d:08:5a:7a:07:51:75:d0:38:81:d0:12:39:5e:e0:18:9e:5d: 7d:70:b9:8d:e9:21:3b:c0:4e:f9:fc:47:4e:c3:43:8a:75:f3: 0f:c5:dc:9e:05:4d:7f:ec:47:84:75:c8:ad:10:a7:d8:2f:45: ec:03:15:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYFFouG2nHel998aCHWE+gMzCfY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEOTlEREYxMzJDQTdGNEYzOEU3REVFQTRGNkVCRERE MkU4Rjc0MTAeFw0yNDA2MjYxMDM1MDFaFw0yNDA2MjcxMjA1MDFaMDMxMTAvBgNV BAMTKDNBOEVBMTE1RjFBQUNBNTEwNjhEOERCNDcwNjY2QjhGNTNDNDNGMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXVManTinSlfHL2ce6OFCssnP Q9qhQmjzsRJlDqFqug5M3B0Jdx3h4MW7Cm8AV5W86LB+1DjK7QjnxZNS8XQGP/6n kOU7JoN5HJjXeqz/22mQvKKWKdzNawWs1tklWztRbfahT9idJ7r1hn5rkeh0vchY 2eGgk0HakTswdhR+dVx0yAxxszPdoMgvNSRm8V7WjQZ6bb14awHxHFSlXujLsh3/ gBieOqPZBPiYSMcLN/8fhyRwSfZOv8vfV94OfdJnJ0N9YBiTMwKnY3HoTXOxSyZT rz6F7VVJP5eSXEBsSPGNkwbBGXzGrNDj0Khthkfp5yiIZXUFwsOJzkp5E6U9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOo6hFfGqylEGjY20cGZrj1PEPxUwHwYDVR0j BBgwFoAUv9md3xMsp/Tzjn3upPbr3dLo90EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dlSHJZN3RyN2J0aDVxZmRibkRIRjd5OXlacEd4Ulk3NDlxN1NVMTZp elgvMS9CRkQ5OURERjEzMkNBN0Y0RjM4RTdERUVBNEY2RUJEREQyRThGNzQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGRDk5RERGMTMyQ0E3RjRG MzhFN0RFRUE0RjZFQkRERDJFOEY3NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3dlSHJZN3RyN2J0aDVxZmRibkRIRjd5OXlacEd4Ulk3NDlxN1NVMTZpelgvMS9C RkQ5OURERjEzMkNBN0Y0RjM4RTdERUVBNEY2RUJEREQyRThGNzQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtqDAzxx7hjHvyxtPPuRdks/V5IAMae4tudTG7M2aCWupd1J7OsTrumLt3tNp +sNLZC+luA/eHp786yl6gl0t2PWDTY+z3W+tEFL7HSP1PAJrjwpCLsRcY+fgpj0d WZCz0e7c0atRCrHoKb5fJIyHVw5gInOki+c96au+YCm+w4qEq2q6ike4tMZ2UiDA QerFe9GWeqotZwejwXG6kiWKipJJVs8OeJJXHtYc0+rLTcuQYPL9vGkxLzqvgSsr pEzkiJEEdqChXQhaegdRddA4gdASOV7gGJ5dfXC5jekhO8BO+fxHTsNDinXzD8Xc ngVNf+xHhHXIrRCn2C9F7AMVsQ== -----END CERTIFICATE-----Generated at Wed Jun 26 11:42:30 2024 by rpki-client on console-ams.rpki-client.org