$ rpki-client -vvf rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft File: 48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft (raw, json) Hash identifier: 8E8g+dyy6fadqmNwHAomFjfhJY6SP1CBpxoxTJFolxo= Subject key identifier: 34:4D:56:A8:FE:17:B4:23:FF:91:34:30:D6:5F:51:53:44:92:6D:D5 Authority key identifier: 48:C2:D7:51:D7:A0:E9:A9:3A:E1:A1:B2:BC:A1:73:62:21:09:42:70 Certificate issuer: /CN=48C2D751D7A0E9A93AE1A1B2BCA1736221094270 Certificate serial: 09BE70D997D5F0CAF94819D118C05AD8522E5851 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer Subject info access: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft Manifest number: D7 Signing time: Mon 25 Nov 2024 22:46:46 +0000 Manifest this update: Mon 25 Nov 2024 22:41:46 +0000 Manifest next update: Tue 26 Nov 2024 23:14:46 +0000 Files and hashes: 1: 48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl (hash: Wu9driD2xgkhr0Orm5+c+V14PvUOfgmJr+s1yivTOho=) 2: 3133312e3130302e3232342e302f32322d3332203d3e203631363533.roa (hash: tfsNsn7ZQENkIB6GX0+IduzNfnpHOtQKUYjaMl4CYkY=) 3: 323830343a316336343a3a2f33322d313238203d3e203631363533.roa (hash: VndWTYuktyiOfdIPlOH+c1mIrew4U9J7u+DLrDZ4oSE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 22:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:be:70:d9:97:d5:f0:ca:f9:48:19:d1:18:c0:5a:d8:52:2e:58:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48C2D751D7A0E9A93AE1A1B2BCA1736221094270 Validity Not Before: Nov 25 22:41:46 2024 GMT Not After : Nov 26 23:14:46 2024 GMT Subject: CN=344D56A8FE17B423FF913430D65F515344926DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:0c:29:0b:2f:b7:e6:88:c8:83:2a:41:8a: e3:98:d7:cf:70:13:7f:17:03:57:28:fa:fd:75:a8: 60:5d:08:a0:b0:fb:9d:35:99:02:4b:40:2a:c7:27: 99:7b:1f:cf:81:80:d3:dc:82:3d:d8:6c:70:25:5d: 52:78:4c:18:81:88:44:d5:59:d0:4d:3b:f6:96:af: 30:b6:d9:79:a8:11:7f:2d:8b:c6:05:de:ce:2c:51: 63:c8:a8:9b:a1:8e:45:60:27:f8:d5:96:bc:cd:30: 7b:3d:3e:5f:32:fd:1c:22:5e:59:ff:ef:ac:23:88: da:45:55:a8:a0:3c:07:e7:64:8c:bf:01:6e:d0:84: 1a:b3:cb:a9:05:33:08:07:3d:62:0e:81:a0:31:69: 46:2e:ab:7f:6d:b5:29:78:61:d7:f3:07:01:86:e9: 79:95:6d:6e:d4:36:57:40:53:40:5c:14:02:d5:d6: 39:94:e0:d0:f1:9a:2a:34:80:e7:67:19:85:dc:b2: 33:bc:f6:9f:b9:6b:15:89:2f:3d:ea:c9:bd:a0:8b: a6:d0:59:52:ab:8c:7b:df:fe:10:98:ff:90:20:f5: c5:2e:2e:4d:60:be:d1:f7:b1:8f:29:54:51:35:93: d1:6c:00:3a:4f:97:2f:e4:fc:c3:cf:1e:1d:27:eb: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4D:56:A8:FE:17:B4:23:FF:91:34:30:D6:5F:51:53:44:92:6D:D5 X509v3 Authority Key Identifier: keyid:48:C2:D7:51:D7:A0:E9:A9:3A:E1:A1:B2:BC:A1:73:62:21:09:42:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/48C2D751D7A0E9A93AE1A1B2BCA1736221094270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c8:78:42:95:73:cc:5c:4e:72:f6:8b:45:bf:8a:e2:d5:2f: d4:82:72:5e:72:3f:b1:a5:e9:13:d1:6e:88:74:ef:2c:83:1f: 84:ab:91:4d:75:9f:73:38:1e:09:ff:88:d9:6a:ed:ad:49:09: 85:39:e7:18:79:9a:ec:fe:00:d8:ca:64:3f:ea:f7:da:1b:dd: c2:bc:eb:eb:a1:f1:14:bc:21:1b:a0:81:c9:15:e3:49:ff:3c: ae:59:8c:be:d5:1f:53:d2:42:c8:44:ca:4e:10:fa:f1:82:07: 59:5c:48:fa:19:4b:15:78:29:92:a2:83:78:69:de:70:6e:cb: 87:22:1c:91:1b:b6:df:de:5f:c7:cf:e0:8f:54:03:1c:b9:b4: 1d:38:8c:10:f6:2c:7f:06:d7:c4:0e:bf:7d:1b:e8:78:f2:03: bb:c4:aa:c5:62:77:67:c3:53:9f:9d:b5:e4:90:8b:84:f2:0c: c9:8e:80:0a:3e:8b:ac:97:c4:96:00:5a:16:56:5d:ce:ac:6c: 81:bd:54:90:36:f2:2a:0c:ec:70:66:a9:3e:90:45:ad:24:51: 51:cc:47:4a:be:1d:d5:58:e4:97:96:68:ea:a2:5e:93:44:04: 84:c2:fb:98:4b:c2:ab:75:47:ac:22:12:f7:25:7e:db:4d:64: d0:6b:bc:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCb5w2ZfV8Mr5SBnRGMBa2FIuWFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDMkQ3NTFEN0EwRTlBOTNBRTFBMUIyQkNBMTczNjIy MTA5NDI3MDAeFw0yNDExMjUyMjQxNDZaFw0yNDExMjYyMzE0NDZaMDMxMTAvBgNV BAMTKDM0NEQ1NkE4RkUxN0I0MjNGRjkxMzQzMEQ2NUY1MTUzNDQ5MjZERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRTAwpCy+35ojIgypBiuOY189w E38XA1co+v11qGBdCKCw+501mQJLQCrHJ5l7H8+BgNPcgj3YbHAlXVJ4TBiBiETV WdBNO/aWrzC22XmoEX8ti8YF3s4sUWPIqJuhjkVgJ/jVlrzNMHs9Pl8y/RwiXln/ 76wjiNpFVaigPAfnZIy/AW7QhBqzy6kFMwgHPWIOgaAxaUYuq39ttSl4YdfzBwGG 6XmVbW7UNldAU0BcFALV1jmU4NDxmio0gOdnGYXcsjO89p+5axWJLz3qyb2gi6bQ WVKrjHvf/hCY/5Ag9cUuLk1gvtH3sY8pVFE1k9FsADpPly/k/MPPHh0n6/alAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNE1WqP4XtCP/kTQw1l9RU0SSbdUwHwYDVR0j BBgwFoAUSMLXUdeg6ak64aGyvKFzYiEJQnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmd6TnBxMnZIWEpxdHUzd3Vib3g3UlkyV0duZ05ockdUVEFGRTlpemJI WUovMC80OEMyRDc1MUQ3QTBFOUE5M0FFMUExQjJCQ0ExNzM2MjIxMDk0MjcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4QzJENzUxRDdBMEU5QTkz QUUxQTFCMkJDQTE3MzYyMjEwOTQyNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rmd6TnBxMnZIWEpxdHUzd3Vib3g3UlkyV0duZ05ockdUVEFGRTlpemJIWUovMC80 OEMyRDc1MUQ3QTBFOUE5M0FFMUExQjJCQ0ExNzM2MjIxMDk0MjcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPsh4QpVzzFxOcvaLRb+K4tUv1IJyXnI/saXpE9FuiHTvLIMfhKuRTXWfczge Cf+I2WrtrUkJhTnnGHma7P4A2MpkP+r32hvdwrzr66HxFLwhG6CByRXjSf88rlmM vtUfU9JCyETKThD68YIHWVxI+hlLFXgpkqKDeGnecG7LhyIckRu2395fx8/gj1QD HLm0HTiMEPYsfwbXxA6/fRvoePIDu8SqxWJ3Z8NTn5215JCLhPIMyY6ACj6LrJfE lgBaFlZdzqxsgb1UkDbyKgzscGapPpBFrSRRUcxHSr4d1Vjkl5Zo6qJek0QEhML7 mEvCq3VHrCIS9yV+201k0Gu8kQ== -----END CERTIFICATE-----Generated at Mon Nov 25 23:58:58 2024 by rpki-client on console-fra.rpki-client.org