$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.mft File: BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.mft (raw, json) Hash identifier: rol3VDpRM433jiq1J8z4ERk/vqIyzzkjHGXyoXmx1Ic= Subject key identifier: 5C:22:82:0D:45:EA:08:7E:6C:AE:81:4F:85:3C:A5:1A:04:E3:CE:11 Authority key identifier: BB:94:D2:AF:04:F8:72:8E:A2:60:8D:9E:D6:FB:6C:36:C2:9B:6A:AD Certificate issuer: /CN=BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD Certificate serial: 5A87E24B2859A22BDC3BF058753836E3EC0D4109 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer Subject info access: rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.mft Manifest number: 1A Signing time: Sat 23 Nov 2024 06:32:58 +0000 Manifest this update: Sat 23 Nov 2024 06:27:58 +0000 Manifest next update: Sun 24 Nov 2024 07:50:58 +0000 Files and hashes: 1: 323830343a353565343a3a2f33322d3438203d3e20323637393633.roa (hash: o8GZPaFX5blw70ctZvsrIO+Xo4JGsfQwLl/v0cHc6e8=) 2: BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.crl (hash: WUD2FJgFswr4m+qDWairM5+RJF774auL0kPDm9iqQ+Q=) 3: 34352e3136362e3134382e302f32322d3234203d3e20323637393633.roa (hash: Bq3KWPb7FRZ/Ut6rMXhfDrCsRN45oo5vlisWRC2BCkk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.crl rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:87:e2:4b:28:59:a2:2b:dc:3b:f0:58:75:38:36:e3:ec:0d:41:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD Validity Not Before: Nov 23 06:27:58 2024 GMT Not After : Nov 24 07:50:58 2024 GMT Subject: CN=5C22820D45EA087E6CAE814F853CA51A04E3CE11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:c5:78:ca:fc:82:83:9f:00:76:0e:4c:6b: 53:d7:d4:a9:87:65:13:d3:61:ac:05:95:cf:9f:d6: 70:d0:11:c6:a9:63:3d:ec:6e:8e:84:d3:b4:ae:87: d4:be:de:23:bc:4f:2b:e8:19:1f:69:ef:49:9b:52: 89:1a:82:13:1c:a8:20:ec:b7:28:68:81:56:cb:7a: 85:fe:d9:08:f4:3b:01:79:99:5f:2c:ad:3b:ff:53: 50:c6:92:7a:c5:08:e8:2a:47:ad:38:8e:85:50:bd: 52:6c:4c:c8:f7:85:4a:51:5e:ff:a1:64:a4:bc:c7: e4:a1:0e:7d:58:4a:ca:7c:71:2b:ae:d2:d2:d7:92: a2:a0:96:98:1d:75:83:03:18:43:59:9f:44:e6:4e: 0e:5e:c9:87:04:d9:e7:b8:b1:2c:98:70:81:8e:9d: c8:a5:ea:77:d2:56:e5:98:7f:4f:1c:2a:9f:e3:90: 4d:68:9a:0a:34:92:82:07:82:38:c7:95:be:7f:c1: a4:1f:04:d4:27:15:88:7e:72:4e:87:af:5e:77:6f: 75:6d:76:a6:32:b9:54:c4:dd:2c:4a:5b:c2:fb:77: e0:cb:5f:e1:c2:ce:0c:d9:0e:eb:19:d5:94:93:29: 83:a0:a6:66:eb:8b:89:10:46:d9:b9:cf:cb:76:a3: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:22:82:0D:45:EA:08:7E:6C:AE:81:4F:85:3C:A5:1A:04:E3:CE:11 X509v3 Authority Key Identifier: keyid:BB:94:D2:AF:04:F8:72:8E:A2:60:8D:9E:D6:FB:6C:36:C2:9B:6A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/BB94D2AF04F8728EA2608D9ED6FB6C36C29B6AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:01:f7:ff:46:74:cf:57:de:f2:38:b6:a9:98:7d:80:8a:e5: 8f:6f:9e:fb:95:a4:1b:ff:04:c0:5d:05:5c:be:4c:88:4c:a6: 3e:c0:72:d0:67:b6:1f:b7:41:6d:f2:76:bb:8d:4c:56:5b:22: 94:3d:ff:54:ff:80:5e:c0:a6:ee:18:18:34:c0:3f:6d:6a:04: 0c:9a:92:2a:07:2c:b2:f1:1c:4a:17:4f:e8:ce:25:57:e2:a4: 5e:f1:14:1b:88:8c:11:49:22:5a:f3:2c:76:fd:2c:2f:81:ee: 4d:46:3b:ef:d3:74:0c:d1:2a:ee:dc:7b:46:5a:49:33:91:38: f4:43:e8:80:03:67:c2:00:af:af:70:8f:2b:47:02:cc:c0:b1: fb:f0:09:1b:0c:d7:07:1d:49:13:97:49:f2:d6:9f:60:c0:ab: de:b6:20:8c:a2:df:f5:eb:c7:ad:a3:e3:90:52:d1:6c:06:3e: 7d:6a:8e:a4:06:3a:5d:38:0e:41:9b:5c:11:7c:fa:51:70:23: 85:22:ad:49:ad:9f:0e:10:64:2e:cc:03:62:67:cb:9d:a2:cf: 85:12:c8:6e:32:ca:5b:56:68:d4:00:0b:32:56:fc:8c:50:f9: bb:7f:df:9d:0a:05:22:ba:8f:a0:e2:e9:b7:43:f6:c3:48:dd: 81:9d:9b:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWofiSyhZoivcO/BYdTg24+wNQQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5NEQyQUYwNEY4NzI4RUEyNjA4RDlFRDZGQjZDMzZD MjlCNkFBRDAeFw0yNDExMjMwNjI3NThaFw0yNDExMjQwNzUwNThaMDMxMTAvBgNV BAMTKDVDMjI4MjBENDVFQTA4N0U2Q0FFODE0Rjg1M0NBNTFBMDRFM0NFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeo8V4yvyCg58Adg5Ma1PX1KmH ZRPTYawFlc+f1nDQEcapYz3sbo6E07Suh9S+3iO8TyvoGR9p70mbUokaghMcqCDs tyhogVbLeoX+2Qj0OwF5mV8srTv/U1DGknrFCOgqR604joVQvVJsTMj3hUpRXv+h ZKS8x+ShDn1YSsp8cSuu0tLXkqKglpgddYMDGENZn0TmTg5eyYcE2ee4sSyYcIGO ncil6nfSVuWYf08cKp/jkE1omgo0koIHgjjHlb5/waQfBNQnFYh+ck6Hr153b3Vt dqYyuVTE3SxKW8L7d+DLX+HCzgzZDusZ1ZSTKYOgpmbri4kQRtm5z8t2o7GVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXCKCDUXqCH5sroFPhTylGgTjzhEwHwYDVR0j BBgwFoAUu5TSrwT4co6iYI2e1vtsNsKbaq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzRFOVpHNDd6V1FqanpCRDlCaXFWSFRza0tpMnpSV3R3MTN5Q0VDR0Vx ZXQvMC9CQjk0RDJBRjA0Rjg3MjhFQTI2MDhEOUVENkZCNkMzNkMyOUI2QUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCOTREMkFGMDRGODcyOEVB MjYwOEQ5RUQ2RkI2QzM2QzI5QjZBQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzRFOVpHNDd6V1FqanpCRDlCaXFWSFRza0tpMnpSV3R3MTN5Q0VDR0VxZXQvMC9C Qjk0RDJBRjA0Rjg3MjhFQTI2MDhEOUVENkZCNkMzNkMyOUI2QUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzwH3/0Z0z1fe8ji2qZh9gIrlj2+e+5WkG/8EwF0FXL5MiEymPsBy0Ge2H7dB bfJ2u41MVlsilD3/VP+AXsCm7hgYNMA/bWoEDJqSKgcssvEcShdP6M4lV+KkXvEU G4iMEUkiWvMsdv0sL4HuTUY779N0DNEq7tx7RlpJM5E49EPogANnwgCvr3CPK0cC zMCx+/AJGwzXBx1JE5dJ8tafYMCr3rYgjKLf9evHraPjkFLRbAY+fWqOpAY6XTgO QZtcEXz6UXAjhSKtSa2fDhBkLswDYmfLnaLPhRLIbjLKW1Zo1AALMlb8jFD5u3/f nQoFIrqPoOLpt0P2w0jdgZ2bdg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:37 2024 by rpki-client on console-ams.rpki-client.org