$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft File: BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft (raw, json) Hash identifier: 35Uq6yN/wTSgtOV0i7R6obZhjgTPNIyHhSAT/ayyeic= Subject key identifier: A2:53:9C:0B:F0:CA:63:EE:A6:30:0B:65:F6:45:09:B3:DB:FA:3D:44 Authority key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29 Certificate issuer: /CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629 Certificate serial: 13A62F7A41B38F822F58C8959F1D8A350154A4EE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer Subject info access: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft Manifest number: DE Signing time: Fri 20 Sep 2024 17:09:41 +0000 Manifest this update: Fri 20 Sep 2024 17:04:41 +0000 Manifest next update: Sat 21 Sep 2024 17:42:41 +0000 Files and hashes: 1: 34352e3138392e32302e302f32322d3332203d3e20323639363439.roa (hash: THzG1irdLu6oRplZDvsfV5bFjwEHrLs8L2adlAvOW80=) 2: 323830343a363763343a3a2f33322d313238203d3e20323639363439.roa (hash: LNvle2Nx+NrdKHBtn2B2YvIxRHgPFzrWyDAwiGZFlJQ=) 3: BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl (hash: S0IUuEUeNyiWNCXlbn/LBfPPPUDJ0t/nSylDFLzIS+c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Sep 2024 17:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a6:2f:7a:41:b3:8f:82:2f:58:c8:95:9f:1d:8a:35:01:54:a4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629 Validity Not Before: Sep 20 17:04:41 2024 GMT Not After : Sep 21 17:42:41 2024 GMT Subject: CN=A2539C0BF0CA63EEA6300B65F64509B3DBFA3D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:79:f3:93:9e:65:20:bc:bd:ef:0d:b2:b6: 2a:32:93:c7:e4:69:58:96:99:93:00:fb:a5:68:3b: 93:38:9a:15:19:92:03:27:e3:f8:de:64:b1:7f:02: 36:3a:90:9b:2b:5f:5f:96:ae:59:42:3d:b1:e0:6c: 76:23:d9:d7:44:9e:15:74:54:7b:34:7a:99:6d:d3: ba:a6:5d:ca:f2:22:07:2c:5c:3d:6c:15:83:dd:9c: aa:3c:cb:10:5f:29:07:8b:fc:8b:74:b9:98:18:05: e7:9b:cc:7a:4d:2a:dd:e8:e0:cb:6c:26:62:36:68: e3:5e:31:3f:e7:d3:6b:be:74:78:05:4e:7d:ef:cc: 33:02:34:cb:d7:8f:c4:bd:84:68:4a:70:cc:1c:fc: 3c:d4:e1:82:04:97:73:15:ad:10:9f:ce:38:55:39: a2:5c:2c:94:37:a8:ab:ef:da:56:4c:6a:e8:2c:f9: 04:39:f5:28:42:9f:70:02:c0:6d:e6:26:25:b5:c2: 99:c5:34:8e:d7:e3:3b:31:5c:22:5d:6d:05:f1:16: 04:36:9c:3d:d5:cf:8d:c6:4e:e6:f4:da:d2:16:54: b1:7d:f0:5e:91:c2:09:97:67:70:9a:f4:29:df:a8: 9e:c6:c5:a9:42:40:3a:06:73:ca:01:6f:a5:75:5e: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:9C:0B:F0:CA:63:EE:A6:30:0B:65:F6:45:09:B3:DB:FA:3D:44 X509v3 Authority Key Identifier: keyid:BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:86:1a:a3:8f:62:d8:6b:0e:e6:11:9a:9a:4d:c3:70:59:30: e1:84:b8:52:54:f8:7d:76:79:3e:76:db:9e:0b:04:c5:46:4d: 96:09:14:8a:f7:99:93:92:01:5c:fd:a9:8d:7a:ea:d9:27:4d: ed:c4:6f:c7:c5:e7:b0:c7:97:22:b0:15:f1:b6:cd:a3:fb:6d: 7b:84:9b:71:69:7c:24:6e:88:dc:33:2f:15:e9:f5:03:5a:73: 13:51:76:6a:54:2e:92:37:40:98:5b:fd:f6:ff:75:d6:31:25: 60:14:5b:e5:02:0a:c7:e3:4e:4d:ef:f0:18:c2:57:66:fe:6f: 03:de:30:4b:53:d1:7f:f0:5c:e7:06:2b:c4:28:60:b5:3c:16: dc:71:bc:51:b8:2a:1f:9b:52:7b:c9:d0:cf:12:c7:c7:a2:60: 3c:c3:fb:70:9b:2e:03:cf:19:47:e3:b6:36:77:5e:8f:33:90: 58:26:55:96:56:26:01:6f:98:83:f4:e8:f3:84:a5:3c:25:57: 78:03:88:52:d6:5c:44:e6:ea:b0:d2:a9:dd:92:62:50:36:69: 9f:e5:91:c9:4b:aa:69:e2:65:f4:10:dc:9f:a4:a2:47:ef:38: 99:ff:26:df:85:d4:75:c6:8d:f5:47:bc:a9:3f:4d:75:1b:d5: da:2d:9b:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE6YvekGzj4IvWMiVnx2KNQFUpO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEMTFERjQ5MjczRDFDNUIxMzAxNjVFQkQ3MTYxQTNF OTNEMTYyOTAeFw0yNDA5MjAxNzA0NDFaFw0yNDA5MjExNzQyNDFaMDMxMTAvBgNV BAMTKEEyNTM5QzBCRjBDQTYzRUVBNjMwMEI2NUY2NDUwOUIzREJGQTNENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Pnnzk55lILy97w2ytioyk8fk aViWmZMA+6VoO5M4mhUZkgMn4/jeZLF/AjY6kJsrX1+WrllCPbHgbHYj2ddEnhV0 VHs0eplt07qmXcryIgcsXD1sFYPdnKo8yxBfKQeL/It0uZgYBeebzHpNKt3o4Mts JmI2aONeMT/n02u+dHgFTn3vzDMCNMvXj8S9hGhKcMwc/DzU4YIEl3MVrRCfzjhV OaJcLJQ3qKvv2lZMaugs+QQ59ShCn3ACwG3mJiW1wpnFNI7X4zsxXCJdbQXxFgQ2 nD3Vz43GTub02tIWVLF98F6RwgmXZ3Ca9CnfqJ7GxalCQDoGc8oBb6V1XpPLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUolOcC/DKY+6mMAtl9kUJs9v6PUQwHwYDVR0j BBgwFoAUu9Ed9JJz0cWxMBZevXFho+k9FikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUJwZVpMcXZVZFo4V1VjUU16Uml5QXRDdjRTWktQTDVWdFZUTHZaRmlD Y04vMS9CQkQxMURGNDkyNzNEMUM1QjEzMDE2NUVCRDcxNjFBM0U5M0QxNjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRDExREY0OTI3M0QxQzVC MTMwMTY1RUJENzE2MUEzRTkzRDE2MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUJwZVpMcXZVZFo4V1VjUU16Uml5QXRDdjRTWktQTDVWdFZUTHZaRmlDY04vMS9C QkQxMURGNDkyNzNEMUM1QjEzMDE2NUVCRDcxNjFBM0U5M0QxNjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAToYao49i2GsO5hGamk3DcFkw4YS4UlT4fXZ5PnbbngsExUZNlgkUiveZk5IB XP2pjXrq2SdN7cRvx8XnsMeXIrAV8bbNo/tte4SbcWl8JG6I3DMvFen1A1pzE1F2 alQukjdAmFv99v911jElYBRb5QIKx+NOTe/wGMJXZv5vA94wS1PRf/Bc5wYrxChg tTwW3HG8UbgqH5tSe8nQzxLHx6JgPMP7cJsuA88ZR+O2NndejzOQWCZVllYmAW+Y g/To84SlPCVXeAOIUtZcRObqsNKp3ZJiUDZpn+WRyUuqaeJl9BDcn6SiR+84mf8m 34XUdcaN9Ue8qT9NdRvV2i2bEg== -----END CERTIFICATE-----Generated at Fri Sep 20 20:56:57 2024 by rpki-client on console-ams.rpki-client.org