$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft File: A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft (raw, json) Hash identifier: OiRXlcRAzw9nnUFgH+JKGjm1pt7GXhBqE14Iv/rwbJk= Subject key identifier: 9A:B3:2D:C6:8C:02:3A:23:99:41:3A:F4:D4:48:A8:7F:B3:C3:BB:BC Authority key identifier: A1:25:E3:4C:BB:9E:F2:E8:9F:FA:32:29:9D:80:F0:A2:1A:0D:DC:9F Certificate issuer: /CN=A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F Certificate serial: 26F71C5B47AA96340FBC9D5885AF5B83A9AADABB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft Manifest number: EF Signing time: Sat 28 Sep 2024 16:25:13 +0000 Manifest this update: Sat 28 Sep 2024 16:20:13 +0000 Manifest next update: Sun 29 Sep 2024 19:55:13 +0000 Files and hashes: 1: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: UmBFZh0jE6l01oioZL36G64F042pWBVJuxlqkLZuYrw=) 2: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: kEnc1TLMmcwHbbXNnwN9IRE7I/0BfCVy8Ye4Yzs5J5k=) 3: A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.crl (hash: zDwY9pYlNF+1HxFXxJmFYskMkjv2BSog4reXlwMJ65I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 18:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f7:1c:5b:47:aa:96:34:0f:bc:9d:58:85:af:5b:83:a9:aa:da:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F Validity Not Before: Sep 28 16:20:13 2024 GMT Not After : Sep 29 19:55:13 2024 GMT Subject: CN=9AB32DC68C023A2399413AF4D448A87FB3C3BBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:55:09:5c:a9:75:53:25:26:19:02:84:52: e9:99:c3:28:18:39:b4:51:13:9b:02:96:b0:49:7a: 26:f4:2a:64:d5:b9:c2:04:cf:06:9a:ac:42:d8:1b: b2:25:7d:d4:96:89:42:73:df:e4:8f:8e:9a:7e:69: be:28:c3:bb:1e:a8:18:c5:c4:a8:b8:b4:5f:f6:56: 6e:8e:fb:50:5f:fb:be:8a:ed:5e:99:7e:6a:45:70: 05:79:3d:95:cb:cd:b1:69:7f:e2:15:b0:87:ff:09: 91:4e:5b:91:4f:e7:c5:76:14:b2:52:fb:aa:cb:31: d4:3e:59:c0:f7:cd:e9:a9:d5:b0:e1:13:fb:1d:23: da:58:f2:a6:7c:6f:12:e9:31:e4:71:2d:a5:11:60: a5:f4:52:df:d7:96:c3:40:4f:3b:24:b0:9e:38:71: 18:7a:63:40:57:de:3a:da:a2:63:1d:41:30:6d:4b: ab:26:1f:50:95:a0:79:77:13:b0:38:06:f2:a9:bb: ac:22:fc:eb:a0:49:11:cb:0b:34:b2:7b:9e:5f:ad: 20:05:5a:91:94:28:38:be:1c:c6:c7:31:22:0d:08: cf:f7:c6:19:a0:48:a7:80:3f:c0:33:ed:f9:ad:01: e4:b0:5d:99:1f:4f:c1:97:3e:49:41:47:da:12:8a: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B3:2D:C6:8C:02:3A:23:99:41:3A:F4:D4:48:A8:7F:B3:C3:BB:BC X509v3 Authority Key Identifier: keyid:A1:25:E3:4C:BB:9E:F2:E8:9F:FA:32:29:9D:80:F0:A2:1A:0D:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:48:da:47:02:40:63:a9:e3:32:d1:64:ba:dc:6a:85:da:8c: c2:29:16:6a:5b:0b:04:e7:74:a5:d0:a3:ce:aa:fd:d4:97:b3: 25:35:33:11:31:d8:a2:32:54:05:08:fa:79:ba:b6:f8:f4:dd: 7e:b5:ac:d3:9f:4f:b6:87:9b:c5:87:17:56:d1:2f:92:66:f6: 93:76:34:14:44:6c:5e:e7:91:c5:6e:48:a3:18:c8:e4:84:8f: d0:36:5f:77:fc:c9:02:f3:38:c8:69:00:57:1a:3f:96:58:97: 57:8a:20:e1:de:5c:6d:2c:35:1b:a7:77:4d:be:2e:6e:62:3a: 0a:42:e1:80:83:0b:69:1e:b7:b1:88:f2:c1:eb:50:29:9f:38: a6:c6:59:60:55:d8:56:62:ac:0e:ba:78:b7:fa:53:bb:82:92: ed:07:b9:ac:f5:0a:8c:07:57:1c:1b:ab:3f:a5:70:05:7f:55: dd:96:90:f2:54:48:f8:e3:b1:23:e0:b2:cc:61:b5:9d:23:d3: f6:e4:24:e5:3a:c5:7a:05:61:cc:79:a3:33:71:c7:8e:c9:4c: 6f:47:d0:c1:55:28:0f:39:5a:77:9a:d9:33:09:7c:72:94:21: bc:10:31:1e:49:25:6f:0b:c9:79:b3:6d:df:56:40:ad:47:66: b6:95:3a:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJvccW0eqljQPvJ1Yha9bg6mq2rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTEyNUUzNENCQjlFRjJFODlGRkEzMjI5OUQ4MEYwQTIx QTBEREM5RjAeFw0yNDA5MjgxNjIwMTNaFw0yNDA5MjkxOTU1MTNaMDMxMTAvBgNV BAMTKDlBQjMyREM2OEMwMjNBMjM5OTQxM0FGNEQ0NDhBODdGQjNDM0JCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkqFUJXKl1UyUmGQKEUumZwygY ObRRE5sClrBJeib0KmTVucIEzwaarELYG7IlfdSWiUJz3+SPjpp+ab4ow7seqBjF xKi4tF/2Vm6O+1Bf+76K7V6ZfmpFcAV5PZXLzbFpf+IVsIf/CZFOW5FP58V2FLJS +6rLMdQ+WcD3zemp1bDhE/sdI9pY8qZ8bxLpMeRxLaURYKX0Ut/XlsNATzsksJ44 cRh6Y0BX3jraomMdQTBtS6smH1CVoHl3E7A4BvKpu6wi/OugSRHLCzSye55frSAF WpGUKDi+HMbHMSINCM/3xhmgSKeAP8Az7fmtAeSwXZkfT8GXPklBR9oSigXlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmrMtxowCOiOZQTr01Eiof7PDu7wwHwYDVR0j BBgwFoAUoSXjTLue8uif+jIpnYDwohoN3J8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMS9BMTI1RTM0Q0JCOUVGMkU4OUZGQTMyMjk5RDgwRjBBMjFBMEREQzlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExMjVFMzRDQkI5RUYyRTg5 RkZBMzIyOTlEODBGMEEyMUEwRERDOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMS9B MTI1RTM0Q0JCOUVGMkU4OUZGQTMyMjk5RDgwRjBBMjFBMEREQzlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANUjaRwJAY6njMtFkutxqhdqMwikWalsLBOd0pdCjzqr91JezJTUzETHYojJU BQj6ebq2+PTdfrWs059PtoebxYcXVtEvkmb2k3Y0FERsXueRxW5IoxjI5ISP0DZf d/zJAvM4yGkAVxo/lliXV4og4d5cbSw1G6d3Tb4ubmI6CkLhgIMLaR63sYjywetQ KZ84psZZYFXYVmKsDrp4t/pTu4KS7Qe5rPUKjAdXHBurP6VwBX9V3ZaQ8lRI+OOx I+CyzGG1nSPT9uQk5TrFegVhzHmjM3HHjslMb0fQwVUoDzlad5rZMwl8cpQhvBAx HkklbwvJebNt31ZArUdmtpU6Kw== -----END CERTIFICATE-----Generated at Sat Sep 28 17:27:56 2024 by rpki-client on console-fra.rpki-client.org