$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft File: 9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft (raw, json) Hash identifier: 3tlO6LYmoCe4AQExd8UVuTXL3ZKQ9UQDQz8Jc4kGsiA= Subject key identifier: 14:C1:96:F3:64:F9:13:D1:B1:12:5F:15:98:EC:BB:54:0B:C5:17:0D Authority key identifier: 9C:DD:5E:D9:F3:81:FA:7C:7C:F5:58:70:AB:5A:C7:1F:AB:D4:AD:A1 Certificate issuer: /CN=9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1 Certificate serial: 38F48EDB7D514A2DEAE0E09C38B49B7C09CD91A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft Manifest number: 013B Signing time: Fri 22 Nov 2024 07:15:19 +0000 Manifest this update: Fri 22 Nov 2024 07:10:19 +0000 Manifest next update: Sat 23 Nov 2024 10:16:19 +0000 Files and hashes: 1: 323830343a353764303a3a2f33322d3438203d3e20323638303838.roa (hash: bYEra2StC4d5or6+nuaMYzELgOVLkflt5LxwOnHuI6o=) 2: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: gbo1ZzkUCZWG5+l5CgTYJZtfpThAgQk/L6rli7IY0ZY=) 3: 9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.crl (hash: 3/Q6r3L8KDHWF0cnBDdHELxnbpfY8Oi7NFkLnh8LcEY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.crl rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f4:8e:db:7d:51:4a:2d:ea:e0:e0:9c:38:b4:9b:7c:09:cd:91:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1 Validity Not Before: Nov 22 07:10:19 2024 GMT Not After : Nov 23 10:16:19 2024 GMT Subject: CN=14C196F364F913D1B1125F1598ECBB540BC5170D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:a2:88:5d:4f:ce:a7:5a:29:76:bc:ce:bf: af:5c:26:23:ef:38:1a:43:c8:53:fb:3a:4d:3e:2a: 4d:c9:1d:fe:b4:93:ff:6b:9b:26:bb:1e:fd:79:62: 2d:fc:c0:e3:d6:6b:19:09:03:29:c3:bb:13:85:e2: 03:01:23:07:89:ea:e2:5b:0d:af:f4:12:17:c1:80: 4b:49:1a:b0:9c:76:d5:f7:67:12:bc:29:b9:c0:c0: 8a:fe:f0:42:f9:c7:53:f1:5d:4a:d8:4d:f4:fa:51: c3:5b:70:0d:c1:73:67:2f:e7:a8:3c:ee:91:1e:5a: 3a:6d:b7:3a:8f:d0:75:6d:0d:76:b3:54:5d:96:16: 3f:90:af:0c:77:6a:32:19:ab:e7:64:c2:b7:05:b3: 72:28:e6:19:9f:1c:55:03:2d:82:ce:67:b7:8a:f2: c3:a9:68:3a:bf:1e:8d:5c:e9:1c:7b:82:88:fb:8d: 7c:80:eb:52:b5:e7:9c:1d:84:71:e0:ae:3c:48:48: 91:67:d7:a8:ba:ba:6f:ee:f3:92:76:0d:14:74:55: f7:60:ff:b2:59:f5:eb:d3:da:9f:44:bb:7f:05:84: 05:8e:2e:d9:1a:d4:05:9c:0b:7d:51:0f:03:5d:88: 86:8e:2a:ef:07:38:af:99:4d:f9:45:03:46:97:01: 32:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C1:96:F3:64:F9:13:D1:B1:12:5F:15:98:EC:BB:54:0B:C5:17:0D X509v3 Authority Key Identifier: keyid:9C:DD:5E:D9:F3:81:FA:7C:7C:F5:58:70:AB:5A:C7:1F:AB:D4:AD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fe:b1:27:d0:3a:47:e3:c2:b0:e7:50:30:ee:9f:aa:f1:12: 77:d1:46:b0:d9:9f:85:bd:04:37:60:46:d1:ab:20:e5:2e:a8: 85:d3:b9:1d:33:b0:18:5c:87:1b:bc:80:9b:08:d0:b8:d1:01: 0b:06:24:2c:8e:bb:af:db:28:ae:14:43:6b:9f:05:76:42:af: 12:91:7d:7f:61:07:31:a3:08:69:95:7e:36:09:88:04:de:d9: f0:47:7b:d4:ad:b8:99:28:e5:f2:89:77:21:5e:35:f3:2a:00: 80:02:cf:99:84:aa:53:4f:ae:68:6e:95:0d:df:ca:70:40:0e: 0e:4a:f8:cf:0a:36:35:ac:b4:bc:46:63:60:a0:f7:65:3f:85: 20:c4:63:65:ac:25:d5:71:2a:3b:20:4b:06:f5:28:98:6f:1a: f8:2c:fb:e5:30:65:8a:76:29:89:09:6b:bd:75:c4:21:02:f6: dd:ba:b3:cc:d3:2c:87:60:0d:81:90:37:a6:c1:0c:3a:13:99: ea:e1:e9:91:d7:5a:3f:42:4d:5e:9d:9f:71:7b:10:9a:20:ca: 79:f7:ee:60:9c:ae:df:6a:80:6b:ca:76:c3:78:f9:83:9a:ce: 7e:e0:85:1e:87:52:58:10:0f:ee:b0:f3:67:61:7d:ef:2d:47: 82:11:d2:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOPSO231RSi3q4OCcOLSbfAnNkaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDVFRDlGMzgxRkE3QzdDRjU1ODcwQUI1QUM3MUZB QkQ0QURBMTAeFw0yNDExMjIwNzEwMTlaFw0yNDExMjMxMDE2MTlaMDMxMTAvBgNV BAMTKDE0QzE5NkYzNjRGOTEzRDFCMTEyNUYxNTk4RUNCQjU0MEJDNTE3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXA6KIXU/Op1opdrzOv69cJiPv OBpDyFP7Ok0+Kk3JHf60k/9rmya7Hv15Yi38wOPWaxkJAynDuxOF4gMBIweJ6uJb Da/0EhfBgEtJGrCcdtX3ZxK8KbnAwIr+8EL5x1PxXUrYTfT6UcNbcA3Bc2cv56g8 7pEeWjpttzqP0HVtDXazVF2WFj+Qrwx3ajIZq+dkwrcFs3Io5hmfHFUDLYLOZ7eK 8sOpaDq/Ho1c6Rx7goj7jXyA61K155wdhHHgrjxISJFn16i6um/u85J2DRR0Vfdg /7JZ9evT2p9Eu38FhAWOLtka1AWcC31RDwNdiIaOKu8HOK+ZTflFA0aXATIhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFMGW82T5E9GxEl8VmOy7VAvFFw0wHwYDVR0j BBgwFoAUnN1e2fOB+nx89Vhwq1rHH6vUraEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy dUUvMS85Q0RENUVEOUYzODFGQTdDN0NGNTU4NzBBQjVBQzcxRkFCRDRBREExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDREQ1RUQ5RjM4MUZBN0M3 Q0Y1NTg3MEFCNUFDNzFGQUJENEFEQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhydUUvMS85 Q0RENUVEOUYzODFGQTdDN0NGNTU4NzBBQjVBQzcxRkFCRDRBREExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJP6xJ9A6R+PCsOdQMO6fqvESd9FGsNmfhb0EN2BG0asg5S6ohdO5HTOwGFyH G7yAmwjQuNEBCwYkLI67r9sorhRDa58FdkKvEpF9f2EHMaMIaZV+NgmIBN7Z8Ed7 1K24mSjl8ol3IV418yoAgALPmYSqU0+uaG6VDd/KcEAODkr4zwo2Nay0vEZjYKD3 ZT+FIMRjZawl1XEqOyBLBvUomG8a+Cz75TBlinYpiQlrvXXEIQL23bqzzNMsh2AN gZA3psEMOhOZ6uHpkddaP0JNXp2fcXsQmiDKeffuYJyu32qAa8p2w3j5g5rOfuCF HodSWBAP7rDzZ2F97y1HghHSYw== -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org