$ rpki-client -vvf rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft File: B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft (raw, json) Hash identifier: E0z+4Bj6ffmRhUclC8nPNKJLD1TKp40OvONIvHcv66w= Subject key identifier: 5F:14:33:A4:69:11:2A:BB:44:6E:C3:D9:EC:D5:34:98:9C:55:C9:9F Authority key identifier: B0:AA:59:C2:F8:67:6F:E9:8E:CD:BD:7D:6D:55:78:22:D8:DD:49:F2 Certificate issuer: /CN=B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2 Certificate serial: 3B13F4B4B5579320389DA93D6FE8D3877AB0D850 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft Manifest number: 0136 Signing time: Sat 23 Nov 2024 02:37:30 +0000 Manifest this update: Sat 23 Nov 2024 02:32:30 +0000 Manifest next update: Sun 24 Nov 2024 05:58:30 +0000 Files and hashes: 1: 323830343a356362633a3a2f33322d3438203d3e20323638393237.roa (hash: V3XWoSVwSGQLGjskTFA+qGbuw+TyuOzAH4L8fcf2nHU=) 2: 34352e3137362e32382e302f32322d3234203d3e20323638393237.roa (hash: mnlu2xpRVfY9cxyl9dfNwtYiTOcKExs3Td90G3GIPS0=) 3: B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.crl (hash: 1hfvmjiNJ5p5AMJqVg6hLookdssfEQgrr2gQifZOqP4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.crl rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 05:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:13:f4:b4:b5:57:93:20:38:9d:a9:3d:6f:e8:d3:87:7a:b0:d8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2 Validity Not Before: Nov 23 02:32:30 2024 GMT Not After : Nov 24 05:58:30 2024 GMT Subject: CN=5F1433A469112ABB446EC3D9ECD534989C55C99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:3d:91:e3:55:ea:71:e2:67:59:82:f3:e8: 4f:c3:a5:d7:4a:bf:86:5f:8c:b1:3f:6c:47:e5:45: c7:0a:e7:a0:9a:c3:4d:51:bb:7e:9f:66:0b:d5:75: 2b:cd:ef:5e:b0:fd:0d:0e:3d:a9:00:d9:c7:ff:9f: 5a:91:97:a8:2d:56:45:22:a7:c6:9d:51:19:c0:25: f7:85:c9:36:57:fa:f0:76:1c:2d:54:9b:20:7e:8a: 75:e7:32:ca:b6:05:9d:94:3a:e1:05:6c:df:2f:e6: d3:cc:c4:91:84:01:2a:e9:82:68:fe:71:93:94:2b: bf:2e:97:17:ed:be:c1:9d:6a:d0:0a:9a:b7:93:12: 9f:cb:c2:18:d7:20:60:bc:2a:96:99:5f:bc:b8:6d: 60:9d:5a:07:77:4e:31:0f:d3:31:64:9b:84:b8:d7: 7d:5d:18:12:61:23:cc:be:d7:2c:b8:e0:5b:a8:dc: 35:66:e3:98:bf:f7:67:0d:41:ef:4b:50:b5:d1:33: ea:b5:3a:2b:9f:7f:9f:ee:3e:5a:e2:dc:a7:a8:05: dc:64:b9:34:db:44:1f:69:7d:65:d2:bd:05:a1:bb: cb:ba:9e:50:b3:b5:5a:08:f3:75:35:01:c1:65:fe: 84:6b:35:51:6c:08:b4:d8:31:b6:f7:bb:6f:dd:60: 66:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:14:33:A4:69:11:2A:BB:44:6E:C3:D9:EC:D5:34:98:9C:55:C9:9F X509v3 Authority Key Identifier: keyid:B0:AA:59:C2:F8:67:6F:E9:8E:CD:BD:7D:6D:55:78:22:D8:DD:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/2/B0AA59C2F8676FE98ECDBD7D6D557822D8DD49F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c2:34:cf:c9:14:bf:98:61:8a:40:2c:c3:ca:00:e5:af:58: 12:28:9a:b8:e2:8a:a2:e9:2e:b4:fd:2b:ae:2a:ff:7d:61:0c: d6:d6:4e:26:f6:bd:ab:7b:9e:f8:2d:84:70:4f:57:00:b6:4b: d4:3e:1c:71:46:c5:6f:b8:6c:4c:12:ea:88:e4:3e:19:f9:12: 6a:1c:90:7e:1d:33:75:5f:03:5e:37:45:c4:2e:ea:c9:c8:52: 64:22:07:05:0e:fd:21:87:5a:a4:96:b9:84:9c:55:b7:d1:dd: fe:16:3b:06:78:3c:48:b2:4a:69:2c:a4:a5:67:61:90:c3:4b: 24:0d:1d:41:52:39:92:c7:8b:61:f0:59:4b:9a:d3:b1:9a:61: 3d:44:71:9d:39:c4:95:25:1b:20:c4:c3:68:b8:a6:bb:8b:f3: 93:cd:39:d8:52:1a:92:d5:76:f8:d1:b2:25:f4:df:ac:22:01: f9:30:60:d0:0b:62:0e:16:fc:fb:b2:b0:64:93:14:c1:44:88: 36:29:67:73:1a:c8:1f:92:b1:e1:a1:c3:87:85:37:80:ec:d7: d2:f9:b6:3d:a7:22:b5:b9:0c:c9:07:54:98:9d:ec:ab:8b:c5: 97:35:11:12:20:73:d5:8f:10:f1:fa:4c:e8:cf:e0:4b:dd:8b: 60:01:6b:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOxP0tLVXkyA4nak9b+jTh3qw2FAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQTU5QzJGODY3NkZFOThFQ0RCRDdENkQ1NTc4MjJE OERENDlGMjAeFw0yNDExMjMwMjMyMzBaFw0yNDExMjQwNTU4MzBaMDMxMTAvBgNV BAMTKDVGMTQzM0E0NjkxMTJBQkI0NDZFQzNEOUVDRDUzNDk4OUM1NUM5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRT2R41XqceJnWYLz6E/DpddK v4ZfjLE/bEflRccK56Caw01Ru36fZgvVdSvN716w/Q0OPakA2cf/n1qRl6gtVkUi p8adURnAJfeFyTZX+vB2HC1UmyB+inXnMsq2BZ2UOuEFbN8v5tPMxJGEASrpgmj+ cZOUK78ulxftvsGdatAKmreTEp/LwhjXIGC8KpaZX7y4bWCdWgd3TjEP0zFkm4S4 131dGBJhI8y+1yy44Fuo3DVm45i/92cNQe9LULXRM+q1Oiuff5/uPlri3KeoBdxk uTTbRB9pfWXSvQWhu8u6nlCztVoI83U1AcFl/oRrNVFsCLTYMbb3u2/dYGYxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXxQzpGkRKrtEbsPZ7NU0mJxVyZ8wHwYDVR0j BBgwFoAUsKpZwvhnb+mOzb19bVV4ItjdSfIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDEyelBUQ2N5eGliekNTdkxteWM3a1F5N2c0YlNyR1lxZnNIVGlBYkRM VW8vMi9CMEFBNTlDMkY4Njc2RkU5OEVDREJEN0Q2RDU1NzgyMkQ4REQ0OUYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQUE1OUMyRjg2NzZGRTk4 RUNEQkQ3RDZENTU3ODIyRDhERDQ5RjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDEyelBUQ2N5eGliekNTdkxteWM3a1F5N2c0YlNyR1lxZnNIVGlBYkRMVW8vMi9C MEFBNTlDMkY4Njc2RkU5OEVDREJEN0Q2RDU1NzgyMkQ4REQ0OUYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicI0z8kUv5hhikAsw8oA5a9YEiiauOKKoukutP0rrir/fWEM1tZOJva9q3ue +C2EcE9XALZL1D4ccUbFb7hsTBLqiOQ+GfkSahyQfh0zdV8DXjdFxC7qychSZCIH BQ79IYdapJa5hJxVt9Hd/hY7Bng8SLJKaSykpWdhkMNLJA0dQVI5kseLYfBZS5rT sZphPURxnTnElSUbIMTDaLimu4vzk8052FIaktV2+NGyJfTfrCIB+TBg0AtiDhb8 +7KwZJMUwUSINilncxrIH5Kx4aHDh4U3gOzX0vm2PacitbkMyQdUmJ3sq4vFlzUR EiBz1Y8Q8fpM6M/gS92LYAFrVg== -----END CERTIFICATE-----Generated at Sat Nov 23 05:01:02 2024 by rpki-client on console-fra.rpki-client.org