$ rpki-client -vvf rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft File: 3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft (raw, json) Hash identifier: p1Z9hl+ZTlqKL9qHdXFcRfGuXTnBKg2l7jYjMc01Zy4= Subject key identifier: 34:14:6A:28:22:C3:40:44:83:8E:C2:BA:E0:09:94:4E:D0:B4:97:6C Authority key identifier: 3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75 Certificate issuer: /CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075 Certificate serial: 347AAB17769F4F8FD48AC140B70330EC56BBD499 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer Subject info access: rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft Manifest number: 0138 Signing time: Sat 23 Nov 2024 09:07:23 +0000 Manifest this update: Sat 23 Nov 2024 09:02:23 +0000 Manifest next update: Sun 24 Nov 2024 12:21:23 +0000 Files and hashes: 1: 323830343a373339303a3a2f33322d3438203d3e20323730393233.roa (hash: CEarDEIPbNxZRaFKZ1QDRIZJ/GdSI4rj8Fzp2hBZ6Bw=) 2: 3138362e32362e36382e302f32322d3234203d3e20323730393233.roa (hash: GBqgHMiubPADu2k+xIj3a3QzsSPr+Whrfwsk/yjfvQc=) 3: 3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl (hash: hsQdl9y12jYvD5ptxPPknEJa1t6hjuIkk/LKBxdbdwU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7a:ab:17:76:9f:4f:8f:d4:8a:c1:40:b7:03:30:ec:56:bb:d4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075 Validity Not Before: Nov 23 09:02:23 2024 GMT Not After : Nov 24 12:21:23 2024 GMT Subject: CN=34146A2822C34044838EC2BAE009944ED0B4976C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:2c:4d:29:08:e4:b1:30:fd:b9:c9:6b:b0: dd:66:3a:88:7e:57:b6:96:16:03:c1:25:91:b6:e8: dd:c2:a0:1b:9e:d8:9d:00:e1:58:89:e0:78:37:d7: 53:26:b0:0c:a8:db:52:86:4a:3e:22:28:0e:8d:35: aa:07:e4:9f:d0:3d:67:4a:6a:95:ea:ec:11:2b:51: 97:93:97:aa:47:71:fb:ce:f1:73:ff:86:16:dc:bf: 2d:be:1c:6f:32:0e:c9:0d:cf:80:e9:75:f9:55:bf: 1a:bf:f3:c8:ea:1e:06:0e:e8:a3:98:8d:b3:52:74: 83:0b:bd:3f:a8:16:43:d9:7f:61:7d:f0:fc:4e:0c: ef:75:f8:9f:23:48:66:ed:a8:d2:7d:e4:ae:44:bd: bc:b1:33:24:0d:ec:c4:7d:89:7c:d5:00:67:61:bd: 2b:2f:c7:10:4b:ad:6f:19:94:62:6e:39:6c:02:46: d9:46:60:96:f0:cf:ee:9b:b9:19:36:ba:b4:02:4f: 6b:9d:25:ee:14:94:f9:67:18:ec:8a:ab:00:9a:10: b1:5b:1f:ab:e4:14:e7:16:4c:58:8b:d9:ee:c2:ea: 94:27:ed:14:2e:73:a4:30:a7:27:18:34:dc:61:be: e6:d9:0d:80:e7:60:bd:4e:26:ed:04:fb:4e:de:e9: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:6A:28:22:C3:40:44:83:8E:C2:BA:E0:09:94:4E:D0:B4:97:6C X509v3 Authority Key Identifier: keyid:3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:93:9a:45:41:b0:c3:01:5e:79:b5:8e:34:02:b8:50:ed:23: f0:18:64:f1:f8:a1:04:12:96:8b:95:a0:b0:dd:a1:e0:43:b6: 0a:ef:b1:45:ed:c9:ce:2e:82:2c:d9:de:2e:90:c3:eb:fc:2f: 01:29:57:d5:39:af:0d:68:47:62:92:1e:4e:18:28:7a:a9:ae: 3c:0a:40:a0:94:ff:2f:62:a4:c1:03:ce:b9:a2:6c:84:27:bf: c0:2d:e7:7a:8d:17:db:0c:4e:96:6a:60:84:0c:9d:b3:16:01: 46:36:36:6f:5d:bf:ee:8e:d4:cd:3b:d6:88:f5:80:7e:6c:e0: 72:31:88:a1:f1:29:e4:7e:28:21:7f:74:c5:9c:cf:f3:be:d1: 75:5c:0a:18:0e:94:e2:d1:57:71:5d:15:f7:d2:62:b3:06:48: 20:d0:7e:56:13:5f:b9:77:b8:9c:a2:2e:54:b3:b9:57:7b:7e: 45:fd:f0:a3:7e:95:13:80:da:76:d8:5f:ce:2d:68:94:79:f4: 84:34:a0:3c:54:ff:96:31:c3:b4:75:0d:3a:d2:ee:02:ce:66: 69:0d:d3:8f:bd:97:2c:93:1b:72:86:68:b4:42:b1:2f:5c:63: e6:88:4f:3a:30:d5:e5:f0:62:f0:26:42:5f:fa:28:25:fb:d7: e3:d4:35:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNHqrF3afT4/UisFAtwMw7Fa71JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NDM0I1NjFCNTU5MjdFOUE2NzdGQjZBRjg1NTY5QkNE RjRGRjA3NTAeFw0yNDExMjMwOTAyMjNaFw0yNDExMjQxMjIxMjNaMDMxMTAvBgNV BAMTKDM0MTQ2QTI4MjJDMzQwNDQ4MzhFQzJCQUUwMDk5NDRFRDBCNDk3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhSxNKQjksTD9uclrsN1mOoh+ V7aWFgPBJZG26N3CoBue2J0A4ViJ4Hg311MmsAyo21KGSj4iKA6NNaoH5J/QPWdK apXq7BErUZeTl6pHcfvO8XP/hhbcvy2+HG8yDskNz4DpdflVvxq/88jqHgYO6KOY jbNSdIMLvT+oFkPZf2F98PxODO91+J8jSGbtqNJ95K5EvbyxMyQN7MR9iXzVAGdh vSsvxxBLrW8ZlGJuOWwCRtlGYJbwz+6buRk2urQCT2udJe4UlPlnGOyKqwCaELFb H6vkFOcWTFiL2e7C6pQn7RQuc6QwpycYNNxhvubZDYDnYL1OJu0E+07e6VrJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNBRqKCLDQESDjsK64AmUTtC0l2wwHwYDVR0j BBgwFoAUPMO1YbVZJ+mmd/tq+FVpvN9P8HUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREU0RHUzN012VWtNdkQzV2RReXh0NmhEZFRnamt2dHFaMkgyZURqbktU V3YvMS8zQ0MzQjU2MUI1NTkyN0U5QTY3N0ZCNkFGODU1NjlCQ0RGNEZGMDc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQzNCNTYxQjU1OTI3RTlB Njc3RkI2QUY4NTU2OUJDREY0RkYwNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REU0RHUzN012VWtNdkQzV2RReXh0NmhEZFRnamt2dHFaMkgyZURqbktUV3YvMS8z Q0MzQjU2MUI1NTkyN0U5QTY3N0ZCNkFGODU1NjlCQ0RGNEZGMDc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg5OaRUGwwwFeebWONAK4UO0j8Bhk8fihBBKWi5WgsN2h4EO2Cu+xRe3Jzi6C LNneLpDD6/wvASlX1TmvDWhHYpIeThgoeqmuPApAoJT/L2KkwQPOuaJshCe/wC3n eo0X2wxOlmpghAydsxYBRjY2b12/7o7UzTvWiPWAfmzgcjGIofEp5H4oIX90xZzP 877RdVwKGA6U4tFXcV0V99JiswZIINB+VhNfuXe4nKIuVLO5V3t+Rf3wo36VE4Da dthfzi1olHn0hDSgPFT/ljHDtHUNOtLuAs5maQ3Tj72XLJMbcoZotEKxL1xj5ohP OjDV5fBi8CZCX/ooJfvX49Q18A== -----END CERTIFICATE-----Generated at Sat Nov 23 09:50:06 2024 by rpki-client on console-fra.rpki-client.org