$ rpki-client -vvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft File: DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft (raw, json) Hash identifier: Kp36n4XpIK481Rz3VAJqm88XH4VYuDqERZ9ZLJ8qRaU= Subject key identifier: 08:BD:FB:09:3C:37:36:4A:41:18:E9:82:A3:E8:4C:2E:2D:04:53:53 Authority key identifier: DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32 Certificate issuer: /CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32 Certificate serial: 086AD40A20967DE9B0A196D6463DB907D10F2452 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer Subject info access: rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 18:09:21 +0000 Manifest this update: Fri 22 Nov 2024 18:04:21 +0000 Manifest next update: Sat 23 Nov 2024 19:04:21 +0000 Files and hashes: 1: 323830343a323163383a3a2f33322d3438203d3e20323634353733.roa (hash: VR63Efa268I0ZrM67ciTftBstiAUx3CTCoo5zgcgg2c=) 2: 3133382e302e3233362e302f32322d3234203d3e20323634353733.roa (hash: hcNLzx2V1OBcYxB4xcaFQWxaU+f/dtkXkuw1bUuo0T0=) 3: DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl (hash: UP67dG3R4UnK1MOfJ2wOL2l95yMSLdf0dTYOCPZsFmQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6a:d4:0a:20:96:7d:e9:b0:a1:96:d6:46:3d:b9:07:d1:0f:24:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32 Validity Not Before: Nov 22 18:04:21 2024 GMT Not After : Nov 23 19:04:21 2024 GMT Subject: CN=08BDFB093C37364A4118E982A3E84C2E2D045353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:e6:72:de:91:3d:f2:40:88:97:74:da:29: 02:2b:d5:75:41:10:d8:02:09:f0:cb:e1:4c:76:17: b6:89:51:06:af:ce:6e:84:9f:f7:20:f0:de:01:12: 88:d9:24:82:18:03:47:d8:e8:52:d3:db:27:b7:7c: 4f:71:02:34:79:d4:64:2d:82:c5:b2:95:37:17:7d: 72:f7:d4:dd:70:80:86:9f:ab:29:2d:ad:37:72:1b: 9d:0a:98:09:97:4f:55:d4:92:59:b4:b8:ea:6e:bf: eb:22:f6:e3:e6:39:ad:67:c7:56:84:f6:d1:c7:18: b1:3e:8b:b1:f4:b6:d9:7f:89:0a:c1:f7:90:de:00: 3d:41:61:f7:bc:f3:f0:30:1d:1f:54:95:16:cf:08: c9:25:98:ec:95:5d:7e:6c:32:d1:37:8e:34:ef:fc: d5:7e:b7:c6:6a:26:39:74:aa:e5:3a:67:b2:6f:0d: 4e:42:08:f2:6d:4e:0b:32:84:1d:eb:d0:ef:e8:31: f8:80:3c:9b:18:38:90:ce:f1:a1:a8:b2:0d:e4:69: 46:81:6f:09:c7:c7:a0:16:60:ff:06:5c:9d:a2:f4: 77:31:c5:52:ba:18:0f:b6:80:ce:05:9a:e5:a9:2a: 41:72:fa:c7:1f:8c:27:c4:95:4b:0d:ca:99:c6:b8: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:FB:09:3C:37:36:4A:41:18:E9:82:A3:E8:4C:2E:2D:04:53:53 X509v3 Authority Key Identifier: keyid:DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:15:24:2a:01:66:12:db:1d:9f:02:fc:da:c7:2e:b7:ef:a4: 38:9f:ce:02:cc:ad:95:3a:dd:66:74:04:50:28:55:56:88:61: 15:21:5b:fd:67:27:2e:7e:13:86:d3:9e:1d:20:a7:54:67:67: 81:34:07:ba:5a:c0:f4:e8:ac:2d:02:d0:d8:67:4a:4f:b7:84: 70:76:85:d6:96:33:ce:54:c2:f9:04:a2:ae:e5:4f:47:83:f4: fb:76:bb:f7:ec:05:db:3f:2b:0e:be:a1:1f:df:e0:6c:bf:98: 02:97:42:72:b9:6b:8e:2c:c4:9c:78:95:56:05:f3:fc:ed:d7: 6b:81:5b:2a:c6:ed:34:ad:d2:8f:4b:31:3e:76:75:1e:11:3c: 8d:90:f2:11:d2:28:f1:e6:a5:fc:4e:99:d9:84:a8:f0:45:e7: 84:1c:26:16:27:19:7c:ca:09:00:d8:15:58:4a:10:39:7a:18: d8:ea:5b:41:ad:7b:eb:43:1f:51:b8:f0:a9:9d:0b:f2:7a:8e: 56:a4:2a:04:3c:cd:ad:3e:de:ce:f3:78:80:58:39:85:97:68: 2d:76:96:84:b9:f1:a3:c8:b0:ef:33:61:6c:0e:29:42:99:84: 4b:53:53:08:95:1e:28:98:70:fb:59:c2:d9:e7:69:d8:44:83: c2:cd:97:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCGrUCiCWfemwoZbWRj25B9EPJFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY5MTVGQzcwMUQyOUJBN0FCQjFFOThDMkE0MjA3RTUx MDU4RUUzMjAeFw0yNDExMjIxODA0MjFaFw0yNDExMjMxOTA0MjFaMDMxMTAvBgNV BAMTKDA4QkRGQjA5M0MzNzM2NEE0MTE4RTk4MkEzRTg0QzJFMkQwNDUzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqeZy3pE98kCIl3TaKQIr1XVB ENgCCfDL4Ux2F7aJUQavzm6En/cg8N4BEojZJIIYA0fY6FLT2ye3fE9xAjR51GQt gsWylTcXfXL31N1wgIafqyktrTdyG50KmAmXT1XUklm0uOpuv+si9uPmOa1nx1aE 9tHHGLE+i7H0ttl/iQrB95DeAD1BYfe88/AwHR9UlRbPCMklmOyVXX5sMtE3jjTv /NV+t8ZqJjl0quU6Z7JvDU5CCPJtTgsyhB3r0O/oMfiAPJsYOJDO8aGosg3kaUaB bwnHx6AWYP8GXJ2i9HcxxVK6GA+2gM4FmuWpKkFy+scfjCfElUsNypnGuJ2/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCL37CTw3NkpBGOmCo+hMLi0EU1MwHwYDVR0j BBgwFoAU35FfxwHSm6ersemMKkIH5RBY7jIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVozMWkyaVZ6UVBDRGpZdTg5Qng3OG1WYUxMOWI2alp0eVNVUzN0NHZH a0UvMS9ERjkxNUZDNzAxRDI5QkE3QUJCMUU5OEMyQTQyMDdFNTEwNThFRTMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGOTE1RkM3MDFEMjlCQTdB QkIxRTk4QzJBNDIwN0U1MTA1OEVFMzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVozMWkyaVZ6UVBDRGpZdTg5Qng3OG1WYUxMOWI2alp0eVNVUzN0NHZHa0UvMS9E RjkxNUZDNzAxRDI5QkE3QUJCMUU5OEMyQTQyMDdFNTEwNThFRTMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsxUkKgFmEtsdnwL82scut++kOJ/OAsytlTrdZnQEUChVVohhFSFb/WcnLn4T htOeHSCnVGdngTQHulrA9OisLQLQ2GdKT7eEcHaF1pYzzlTC+QSiruVPR4P0+3a7 9+wF2z8rDr6hH9/gbL+YApdCcrlrjizEnHiVVgXz/O3Xa4FbKsbtNK3Sj0sxPnZ1 HhE8jZDyEdIo8eal/E6Z2YSo8EXnhBwmFicZfMoJANgVWEoQOXoY2OpbQa1760Mf UbjwqZ0L8nqOVqQqBDzNrT7ezvN4gFg5hZdoLXaWhLnxo8iw7zNhbA4pQpmES1NT CJUeKJhw+1nC2edp2ESDws2XpQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org