$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft File: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json) Hash identifier: LglG8G01335tKSxJciWuDRL90XD5dOlfzxvGRc72uNk= Subject key identifier: C1:C4:7A:F3:2F:77:E9:C3:23:C7:8A:47:82:88:4D:60:55:D6:44:B1 Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 Certificate issuer: /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Certificate serial: 4E2BC9D0E9BA5CA884865A07A57192372836DD4C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft Manifest number: 0138 Signing time: Sat 23 Nov 2024 05:16:35 +0000 Manifest this update: Sat 23 Nov 2024 05:11:35 +0000 Manifest next update: Sun 24 Nov 2024 05:40:35 +0000 Files and hashes: 1: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: W1kChvCgV2D9XeU0kZnRupRK3hOoz9AOZ2kR7URcCt8=) 2: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: LT8645W+u/Wfg+8ofiHzcGF7xPNwYaPoYHx0gOZGTJo=) 3: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: mgTnNpCc8jJXJ+brQV3Q/7JI32WQ8gzjfioA7UYgSLU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 05:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2b:c9:d0:e9:ba:5c:a8:84:86:5a:07:a5:71:92:37:28:36:dd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Validity Not Before: Nov 23 05:11:35 2024 GMT Not After : Nov 24 05:40:35 2024 GMT Subject: CN=C1C47AF32F77E9C323C78A4782884D6055D644B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:f0:45:a2:d7:ef:40:b2:40:48:df:56:2e: 0d:18:3c:8c:af:41:0a:9f:7b:72:8e:43:82:e2:b1: 77:5e:b8:5f:14:ba:73:42:c6:35:67:98:d4:e1:af: 60:c3:92:10:83:2a:dc:df:65:6d:d0:db:79:b2:81: 0f:15:0f:80:bf:0d:d2:bc:c1:3a:9f:27:6c:d1:68: 58:3f:56:6b:8c:a6:88:86:36:6c:d1:fb:77:d2:61: f9:30:c0:46:26:8b:ba:65:59:20:16:81:94:64:c6: da:4c:4a:9e:0a:b7:23:2f:41:d9:7a:ae:90:39:e1: 9b:41:df:93:ac:fa:23:dd:8e:b6:0d:b5:95:73:15: 82:e1:11:db:f0:34:85:eb:29:3a:85:97:88:14:a2: 84:b8:a1:81:d2:79:70:1b:cf:79:51:5e:e5:17:48: 68:97:d6:8c:95:88:b8:c5:e2:6f:35:c9:55:4a:2e: 90:90:59:b1:16:a9:bd:50:53:e1:d6:2b:fc:f7:69: e0:b0:a5:06:e4:d1:52:51:97:86:95:4b:b8:02:00: d4:7b:e7:b1:c5:ab:10:5a:49:96:73:90:43:f8:a8: 79:35:bf:4d:37:3b:df:a6:c5:16:90:45:91:cc:03: 1e:60:fe:c8:dc:06:c7:2a:70:1d:5d:46:78:2d:ff: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C4:7A:F3:2F:77:E9:C3:23:C7:8A:47:82:88:4D:60:55:D6:44:B1 X509v3 Authority Key Identifier: keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c6:a6:9f:b5:cc:9b:4e:75:68:d2:40:d7:d0:43:d1:3c:a5: 30:69:0b:5c:db:1b:8c:3a:c3:fb:0c:ca:35:4c:85:51:d8:de: 9b:16:72:de:7f:5c:e2:95:5b:8e:a3:7e:3e:0c:02:db:42:7d: 42:cc:d0:5d:8f:69:c9:1a:2d:9f:8e:18:99:b0:b8:e1:1b:ee: c2:98:1e:1b:b3:e7:55:c8:43:ee:65:4a:ce:52:a3:10:41:ee: 13:9a:85:28:bd:05:88:76:a8:c2:eb:16:1a:60:41:28:be:7b: ac:31:73:8f:e9:f7:d5:04:bf:1b:87:24:73:56:f1:a5:f3:b2: fc:a5:de:78:5d:47:c4:a6:a1:ee:55:44:59:57:b9:c9:d2:0a: 5a:69:53:d9:3e:b6:69:25:22:dd:25:e6:95:b5:e1:d4:ca:36: b8:22:38:50:c2:b3:7c:58:ae:9d:f4:05:08:52:20:7e:41:97: 0a:64:7a:c9:a9:58:6f:47:70:9f:d1:7a:76:87:1c:72:52:d6: f1:44:d4:0d:6a:17:55:b5:b7:90:f1:90:e6:4e:e4:78:18:6b: b4:3f:82:5a:b9:81:53:a5:f6:ae:35:7d:75:64:4f:06:41:7e: 5d:b9:e5:47:b0:88:9b:af:10:79:c6:34:47:0f:bf:67:b4:32: 2c:73:a4:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTivJ0Om6XKiEhloHpXGSNyg23UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx MzUwREUwODAeFw0yNDExMjMwNTExMzVaFw0yNDExMjQwNTQwMzVaMDMxMTAvBgNV BAMTKEMxQzQ3QUYzMkY3N0U5QzMyM0M3OEE0NzgyODg0RDYwNTVENjQ0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQ/BFotfvQLJASN9WLg0YPIyv QQqfe3KOQ4LisXdeuF8UunNCxjVnmNThr2DDkhCDKtzfZW3Q23mygQ8VD4C/DdK8 wTqfJ2zRaFg/VmuMpoiGNmzR+3fSYfkwwEYmi7plWSAWgZRkxtpMSp4KtyMvQdl6 rpA54ZtB35Os+iPdjrYNtZVzFYLhEdvwNIXrKTqFl4gUooS4oYHSeXAbz3lRXuUX SGiX1oyViLjF4m81yVVKLpCQWbEWqb1QU+HWK/z3aeCwpQbk0VJRl4aVS7gCANR7 57HFqxBaSZZzkEP4qHk1v003O9+mxRaQRZHMAx5g/sjcBscqcB1dRngt/5K3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwcR68y936cMjx4pHgohNYFXWRLEwHwYDVR0j BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6 UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6UmsvMS8w RjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARMamn7XMm051aNJA19BD0TylMGkLXNsbjDrD+wzKNUyFUdjemxZy3n9c4pVb jqN+PgwC20J9QszQXY9pyRotn44YmbC44RvuwpgeG7PnVchD7mVKzlKjEEHuE5qF KL0FiHaowusWGmBBKL57rDFzj+n31QS/G4ckc1bxpfOy/KXeeF1HxKah7lVEWVe5 ydIKWmlT2T62aSUi3SXmlbXh1Mo2uCI4UMKzfFiunfQFCFIgfkGXCmR6yalYb0dw n9F6doccclLW8UTUDWoXVbW3kPGQ5k7keBhrtD+CWrmBU6X2rjV9dWRPBkF+Xbnl R7CIm68QecY0Rw+/Z7QyLHOkMw== -----END CERTIFICATE-----Generated at Sat Nov 23 06:20:56 2024 by rpki-client on console-fra.rpki-client.org