$ rpki-client -vvf rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft File: 4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft (raw, json) Hash identifier: 1tJGVQdok+IY69CDNHiCaC56Tvx9oerSPwP4C+CVI2g= Subject key identifier: 95:8B:DF:D3:94:84:A6:E0:9D:88:19:30:88:0D:32:C9:03:E1:2D:BB Authority key identifier: 4B:27:29:CF:8C:18:40:2C:5D:C7:D2:5D:3A:9C:D2:09:AD:82:00:96 Certificate issuer: /CN=4B2729CF8C18402C5DC7D25D3A9CD209AD820096 Certificate serial: 3CD0E9D0A5C4512251ACEB3B862F35B8BBAB33A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.cer Subject info access: rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft Manifest number: 013D Signing time: Mon 25 Nov 2024 18:46:34 +0000 Manifest this update: Mon 25 Nov 2024 18:41:34 +0000 Manifest next update: Tue 26 Nov 2024 20:08:34 +0000 Files and hashes: 1: 323830343a373735383a3a2f33322d3438203d3e20323731313732.roa (hash: Vpd+7BslgGqqy0PwoUUAgHhZ4hHwTsbbsJJmKG3tqTs=) 2: 3137372e3232332e3133362e302f32322d3234203d3e20323731313732.roa (hash: zwVVXTDlcigPhHpqAdMsNtccpuvxr97dWalSgqlSl1M=) 3: 4B2729CF8C18402C5DC7D25D3A9CD209AD820096.crl (hash: IHpeR8ik0yFLsSgjbZHoZIEBBfWtWGOvtfgJBZ2Dbn8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.crl rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 20:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d0:e9:d0:a5:c4:51:22:51:ac:eb:3b:86:2f:35:b8:bb:ab:33:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2729CF8C18402C5DC7D25D3A9CD209AD820096 Validity Not Before: Nov 25 18:41:34 2024 GMT Not After : Nov 26 20:08:34 2024 GMT Subject: CN=958BDFD39484A6E09D881930880D32C903E12DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:2b:17:c9:d5:d2:d2:8b:3e:ec:db:05:1e: 30:59:31:b6:75:dc:37:b8:60:9d:d2:19:22:26:b7: af:4b:ad:9e:e2:de:3b:74:cf:f4:52:e0:b8:5b:17: dc:fa:87:73:86:33:8e:fc:9a:e6:2c:8d:74:4d:1f: 60:0b:47:bd:46:31:52:c4:65:09:a7:6e:d2:15:12: 19:74:25:63:5c:4d:60:db:2b:24:1e:f4:f4:d5:2b: 08:69:f7:8a:05:71:d2:08:5c:7f:e9:e9:fc:ed:18: de:0b:73:41:9a:18:c7:29:f2:dd:95:da:8d:bb:bb: d2:ca:1c:23:4f:7e:96:01:cc:f1:d5:8e:a0:2a:89: 48:90:43:ff:5c:73:3c:0d:3a:cf:93:7f:25:1a:48: 00:42:f0:b2:d3:2c:a0:37:bb:66:f1:3f:29:1e:14: be:66:82:8c:79:84:3b:2a:34:28:61:51:5c:bf:b1: fd:cb:1b:f2:b2:b8:78:0a:41:41:75:34:da:31:6c: cd:86:c7:17:20:98:17:14:a5:d0:71:36:f1:f5:af: b1:65:4f:61:21:31:00:97:49:b1:b9:04:dd:78:59: a0:50:15:05:1a:4d:e7:c2:5a:82:4e:a5:ee:8e:3b: fc:03:20:f9:23:f6:5f:1c:a7:af:88:37:92:e1:e9: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8B:DF:D3:94:84:A6:E0:9D:88:19:30:88:0D:32:C9:03:E1:2D:BB X509v3 Authority Key Identifier: keyid:4B:27:29:CF:8C:18:40:2C:5D:C7:D2:5D:3A:9C:D2:09:AD:82:00:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2FSX6tpVNLyQp2p9YDk58RPZ3CEA2FFyDnRDTJyvVaX/1/4B2729CF8C18402C5DC7D25D3A9CD209AD820096.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:3b:fa:f1:a0:9b:b4:47:60:01:84:17:d8:cf:02:75:a9:17: 3d:6c:a6:f1:52:96:af:83:7e:41:ec:25:d1:c6:ca:0c:72:f6: 56:7d:3c:b7:ce:51:97:93:1f:4c:27:c9:5e:58:61:81:f4:08: 02:6f:ba:74:35:15:ba:a0:9a:de:4d:69:dd:69:55:b4:3f:3e: d9:da:50:7c:41:b9:8d:e0:fb:40:ad:9d:7d:1d:51:13:1b:d3: c8:2f:13:8e:d5:87:4a:80:67:85:4e:4e:17:23:39:aa:4b:b1: 56:3e:f1:4b:25:69:5a:6b:d6:34:a3:0d:62:75:30:f4:e6:55: ce:c5:15:85:e1:50:8d:7b:db:e6:1f:ba:69:d4:d5:c9:3d:88: 6c:c0:77:26:d0:04:1d:54:c3:05:18:50:c5:20:11:b4:44:42: 73:8e:92:68:8a:08:be:21:43:d5:23:bb:4e:94:43:ac:b9:11: b3:9b:0f:db:83:6f:3e:a5:54:2c:8b:af:92:52:de:1c:e3:7a: d9:cd:37:bc:a8:0f:b8:c3:07:50:22:65:52:22:63:3c:dc:d8: 1e:15:2d:b7:e2:d2:37:1d:1e:3e:97:e0:3c:c9:55:48:2d:74: 43:e0:3d:d1:6c:1a:5e:4c:fd:53:b1:48:19:7b:20:9e:c4:f1: 9a:a3:ff:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPNDp0KXEUSJRrOs7hi81uLurM6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyNzI5Q0Y4QzE4NDAyQzVEQzdEMjVEM0E5Q0QyMDlB RDgyMDA5NjAeFw0yNDExMjUxODQxMzRaFw0yNDExMjYyMDA4MzRaMDMxMTAvBgNV BAMTKDk1OEJERkQzOTQ4NEE2RTA5RDg4MTkzMDg4MEQzMkM5MDNFMTJEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97ysXydXS0os+7NsFHjBZMbZ1 3De4YJ3SGSImt69LrZ7i3jt0z/RS4LhbF9z6h3OGM478muYsjXRNH2ALR71GMVLE ZQmnbtIVEhl0JWNcTWDbKyQe9PTVKwhp94oFcdIIXH/p6fztGN4Lc0GaGMcp8t2V 2o27u9LKHCNPfpYBzPHVjqAqiUiQQ/9cczwNOs+TfyUaSABC8LLTLKA3u2bxPyke FL5mgox5hDsqNChhUVy/sf3LG/KyuHgKQUF1NNoxbM2GxxcgmBcUpdBxNvH1r7Fl T2EhMQCXSbG5BN14WaBQFQUaTefCWoJOpe6OO/wDIPkj9l8cp6+IN5Lh6VbFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlYvf05SEpuCdiBkwiA0yyQPhLbswHwYDVR0j BBgwFoAUSycpz4wYQCxdx9JdOpzSCa2CAJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTJGU1g2dHBWTkx5UXAycDlZRGs1OFJQWjNDRUEyRkZ5RG5SRFRKeXZW YVgvMS80QjI3MjlDRjhDMTg0MDJDNURDN0QyNUQzQTlDRDIwOUFEODIwMDk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMjcyOUNGOEMxODQwMkM1 REM3RDI1RDNBOUNEMjA5QUQ4MjAwOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RTJGU1g2dHBWTkx5UXAycDlZRGs1OFJQWjNDRUEyRkZ5RG5SRFRKeXZWYVgvMS80 QjI3MjlDRjhDMTg0MDJDNURDN0QyNUQzQTlDRDIwOUFEODIwMDk2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuzv68aCbtEdgAYQX2M8CdakXPWym8VKWr4N+Qewl0cbKDHL2Vn08t85Rl5Mf TCfJXlhhgfQIAm+6dDUVuqCa3k1p3WlVtD8+2dpQfEG5jeD7QK2dfR1RExvTyC8T jtWHSoBnhU5OFyM5qkuxVj7xSyVpWmvWNKMNYnUw9OZVzsUVheFQjXvb5h+6adTV yT2IbMB3JtAEHVTDBRhQxSARtERCc46SaIoIviFD1SO7TpRDrLkRs5sP24NvPqVU LIuvklLeHON62c03vKgPuMMHUCJlUiJjPNzYHhUtt+LSNx0ePpfgPMlVSC10Q+A9 0WwaXkz9U7FIGXsgnsTxmqP/tQ== -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:46 2024 by rpki-client on console-ams.rpki-client.org