$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft File: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json) Hash identifier: kcTt21tigc1HrnFie/25rc2PA3ujp/rqQvK7Zsik6j4= Subject key identifier: C1:87:EE:C1:22:9B:67:58:88:CD:3B:B4:CB:C3:AF:A4:76:56:C6:2D Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 Certificate issuer: /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Certificate serial: 51D7DACFEEEEA53CB690FC6BE9F52B91EC873B0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject info access: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft Manifest number: 0137 Signing time: Fri 22 Nov 2024 07:37:17 +0000 Manifest this update: Fri 22 Nov 2024 07:32:17 +0000 Manifest next update: Sat 23 Nov 2024 09:46:17 +0000 Files and hashes: 1: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: cTOltgP9WGOa5e7Mk21qcPO/+hYRrKEM7ctTF/zmPSI=) 2: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: Z1yESvf7E+Or/7zaqe9MGyd4pATU0fGXGWDrLoFcg0g=) 3: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: vSjWFyLCbxRNnAIpFNo09HS9XE2sFQ0xO8i2PGP88MM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d7:da:cf:ee:ee:a5:3c:b6:90:fc:6b:e9:f5:2b:91:ec:87:3b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Validity Not Before: Nov 22 07:32:17 2024 GMT Not After : Nov 23 09:46:17 2024 GMT Subject: CN=C187EEC1229B675888CD3BB4CBC3AFA47656C62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:0a:d6:12:e5:dc:78:58:b5:da:9a:0a:ae: 57:8a:85:64:d4:be:95:a2:f8:cb:72:cf:1a:3f:b7: 8b:2d:ba:2f:ec:3f:b0:b7:ee:72:a1:85:27:6f:c6: df:c4:17:ed:78:31:b8:04:8b:27:4b:86:e6:12:a0: 1b:10:b0:13:2a:0a:67:a8:f0:86:19:17:d6:27:b3: 6d:11:1d:3f:23:cb:d7:e6:30:b3:00:45:db:8e:8c: 92:8a:f2:b8:2d:ae:a1:90:36:50:ac:bd:e6:53:23: 3b:3f:01:65:ec:4f:cf:86:11:f3:02:49:30:f5:ca: e2:90:36:b7:4c:06:de:1c:81:9a:fa:8b:51:6a:c1: 59:ce:46:5d:41:93:82:c6:e7:1a:5b:b8:27:db:89: 45:4b:38:b1:64:93:65:17:d9:6e:8a:a1:40:f0:dc: c2:51:86:f0:71:d8:9e:93:45:a4:a0:17:67:84:f5: 6b:e6:e7:b6:6a:4d:7e:9b:d7:f0:1d:c9:02:f9:6b: 18:ac:18:70:4c:6e:60:d9:09:fe:2f:0c:9b:cd:e8: 73:a5:4b:66:5d:f3:9e:8a:d0:69:3b:94:0a:5e:37: 79:cd:9b:33:f4:3d:94:6d:a4:9f:83:79:71:50:9a: ae:de:94:df:49:41:a8:0f:b0:25:29:fb:fb:0d:fe: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:87:EE:C1:22:9B:67:58:88:CD:3B:B4:CB:C3:AF:A4:76:56:C6:2D X509v3 Authority Key Identifier: keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:9b:c1:53:06:1b:16:ed:0b:08:20:35:d0:ff:35:45:dc:50: 10:9b:3b:39:2a:b3:53:0e:da:17:f1:f3:37:a0:83:a9:d8:6e: ef:b5:80:5e:31:d6:27:e0:c0:af:ec:05:03:8d:fc:e4:7c:68: 24:0c:e6:c7:64:9e:92:bc:c2:bf:5b:79:ff:72:f0:7a:d5:cb: 98:f2:ab:61:4a:ac:7a:bc:f8:34:03:90:6e:2c:07:c9:80:10: bc:0d:1d:cc:d3:cb:56:95:a6:c6:3c:f7:e0:34:24:6e:5d:7a: 25:52:70:57:23:74:87:63:36:0a:2b:f0:06:cf:af:27:f1:c4: 58:f8:9c:d5:f5:b4:85:22:28:76:40:2e:54:06:25:bf:11:3a: 74:52:45:51:69:15:15:3c:4c:57:73:be:10:3d:1a:ee:13:86: ad:73:33:e8:05:db:9c:76:ea:72:e9:75:84:34:83:ea:a6:95: 33:93:e3:97:f8:14:e4:33:68:24:fd:1b:93:c1:d7:79:a0:ff: 9e:f2:85:fc:97:4b:d0:79:b0:82:67:0d:53:0e:b0:6a:aa:90: f2:c0:28:f0:7b:d9:be:9a:fb:47:90:26:4e:9c:f4:3c:c2:87: 37:e2:b7:0b:9a:be:7f:fe:34:f1:e4:af:0d:15:40:15:ef:cd: 7f:ea:be:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUdfaz+7upTy2kPxr6fUrkeyHOw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNkYyRDJDRTFGQjg5MDE4RkU3MDkwOUMzQUQyMkVF NDY1OTIxODAeFw0yNDExMjIwNzMyMTdaFw0yNDExMjMwOTQ2MTdaMDMxMTAvBgNV BAMTKEMxODdFRUMxMjI5QjY3NTg4OENEM0JCNENCQzNBRkE0NzY1NkM2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAgrWEuXceFi12poKrleKhWTU vpWi+Mtyzxo/t4stui/sP7C37nKhhSdvxt/EF+14MbgEiydLhuYSoBsQsBMqCmeo 8IYZF9Yns20RHT8jy9fmMLMARduOjJKK8rgtrqGQNlCsveZTIzs/AWXsT8+GEfMC STD1yuKQNrdMBt4cgZr6i1FqwVnORl1Bk4LG5xpbuCfbiUVLOLFkk2UX2W6KoUDw 3MJRhvBx2J6TRaSgF2eE9Wvm57ZqTX6b1/AdyQL5axisGHBMbmDZCf4vDJvN6HOl S2Zd856K0Gk7lApeN3nNmzP0PZRtpJ+DeXFQmq7elN9JQagPsCUp+/sN/mYdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwYfuwSKbZ1iIzTu0y8OvpHZWxi0wHwYDVR0j BBgwFoAUNbby0s4fuJAY/nCQnDrSLuRlkhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxK VVkvMS8zNUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjZGMkQyQ0UxRkI4OTAx OEZFNzA5MDlDM0FEMjJFRTQ2NTkyMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxKVVkvMS8z NUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs5vBUwYbFu0LCCA10P81RdxQEJs7OSqzUw7aF/HzN6CDqdhu77WAXjHWJ+DA r+wFA4385HxoJAzmx2SekrzCv1t5/3LwetXLmPKrYUqserz4NAOQbiwHyYAQvA0d zNPLVpWmxjz34DQkbl16JVJwVyN0h2M2CivwBs+vJ/HEWPic1fW0hSIodkAuVAYl vxE6dFJFUWkVFTxMV3O+ED0a7hOGrXMz6AXbnHbqcul1hDSD6qaVM5Pjl/gU5DNo JP0bk8HXeaD/nvKF/JdL0HmwgmcNUw6waqqQ8sAo8HvZvpr7R5AmTpz0PMKHN+K3 C5q+f/408eSvDRVAFe/Nf+q+Sg== -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:13 2024 by rpki-client on console-fra.rpki-client.org