$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft File: AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft (raw, json) Hash identifier: bPo9WRIU6rYck+UMk3NZUVg3Ofi2P5Y2HqwkOh5ALEQ= Subject key identifier: FD:B3:D6:17:EC:D8:9E:8B:AB:43:2A:09:FB:13:EC:DA:BA:B6:A3:67 Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 Certificate issuer: /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Certificate serial: 199C14AB01101CA2B4E5F9D3FBE8216F0FFE24C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft Manifest number: 0136 Signing time: Fri 22 Nov 2024 18:46:32 +0000 Manifest this update: Fri 22 Nov 2024 18:41:32 +0000 Manifest next update: Sat 23 Nov 2024 21:48:32 +0000 Files and hashes: 1: AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl (hash: Ucs7yXs31to1XSPRNIRHz06yiPViRMUcnnBR70Kjhh0=) 2: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: B8lcgehe2AbBwZBavQEqzh6h6Qh5P3HO4CT6JPurC4g=) 3: 3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (hash: 2R55eTqtR5zKWIOqurdSY/K1wN3cznGWZv2i9wPmfsM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9c:14:ab:01:10:1c:a2:b4:e5:f9:d3:fb:e8:21:6f:0f:fe:24:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Validity Not Before: Nov 22 18:41:32 2024 GMT Not After : Nov 23 21:48:32 2024 GMT Subject: CN=FDB3D617ECD89E8BAB432A09FB13ECDABAB6A367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:a8:1a:81:85:76:d6:54:f1:e0:ab:2c:a9: 8e:55:3a:bc:a3:37:2f:5b:c1:8f:5f:48:e2:e4:f6: 5e:0e:74:2a:21:06:6b:be:d5:89:7d:ae:c0:30:01: 02:50:ae:59:be:5c:31:62:77:d2:63:ea:b6:34:ab: b6:6b:5f:da:84:52:e0:00:97:1c:f3:07:81:57:fb: 2a:d9:db:28:d2:18:49:b8:4c:5d:6a:b7:24:e2:99: 6a:5e:7d:96:0d:b4:45:26:ea:5c:c6:f0:5b:0b:51: 4f:8c:6a:60:c0:56:36:89:5b:8d:21:ea:dc:c3:95: 3b:2f:bf:c0:2b:f6:c9:49:c2:af:d7:58:d7:ab:07: 26:f8:c0:15:f8:a1:c0:d7:f1:16:2d:e5:71:e9:8a: c4:e8:d3:59:f1:1e:be:9f:b4:04:77:25:43:8b:cf: 83:10:5e:50:d9:8d:dd:6a:a4:08:1d:8e:1c:79:32: ab:4e:9d:a9:63:43:cd:e0:fb:db:40:f7:54:0d:dc: 19:8e:ff:0b:a2:f9:d4:10:88:5c:07:60:cf:af:3d: c7:63:7a:70:27:f4:fa:dc:3e:21:64:b1:fe:4e:a4: 06:f7:17:91:84:66:50:35:40:ad:bf:f1:2f:82:29: fd:4b:e3:65:e6:ce:35:10:33:7f:a5:b7:55:27:39: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:D6:17:EC:D8:9E:8B:AB:43:2A:09:FB:13:EC:DA:BA:B6:A3:67 X509v3 Authority Key Identifier: keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:80:bc:69:7f:96:cc:b7:d0:e4:aa:8f:dd:f2:f6:bc:ee:f9: 77:73:c8:84:7c:53:12:6c:b4:8a:93:4f:83:f5:2c:84:ba:d6: 44:17:cb:3f:e1:6e:e7:f0:3c:fc:5e:df:36:37:0f:5f:79:38: 16:57:ce:f1:47:34:24:f7:4c:17:da:b5:9e:9a:3d:cb:a7:f0: f4:53:80:9b:ed:78:9b:8e:4b:87:d0:0d:b3:78:04:20:cc:e2: 39:8c:6a:c4:02:5c:4b:60:1a:49:59:02:69:bd:fd:da:f6:b4: c8:63:e8:d4:c9:26:31:8c:34:a3:a4:78:17:4e:c3:14:07:26: 51:a2:b7:7a:8d:dd:99:7b:22:c0:bf:0c:d8:80:78:71:98:44: a3:fd:7d:87:2e:3d:ed:0d:8d:06:20:10:c2:12:63:72:c5:1c: 11:f5:db:fe:4d:ba:d7:92:44:ee:fe:d3:a1:81:4f:77:28:c8: ae:1b:ee:d2:f6:9a:6b:aa:3e:05:ce:9c:a5:d9:29:f6:0c:7d: f7:bb:7f:e5:44:77:d4:8f:56:35:b9:8f:ba:35:b3:d8:76:df: 4b:c7:62:f6:5b:15:4d:2d:64:6a:66:dd:f9:7a:75:69:cf:d5: 89:c7:22:87:f1:a9:bd:78:8c:44:c9:47:62:1a:28:04:a1:6f: bc:74:85:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGZwUqwEQHKK05fnT++ghbw/+JMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyOUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3 NjNDMzhBNDAeFw0yNDExMjIxODQxMzJaFw0yNDExMjMyMTQ4MzJaMDMxMTAvBgNV BAMTKEZEQjNENjE3RUNEODlFOEJBQjQzMkEwOUZCMTNFQ0RBQkFCNkEzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7KgagYV21lTx4KssqY5VOryj Ny9bwY9fSOLk9l4OdCohBmu+1Yl9rsAwAQJQrlm+XDFid9Jj6rY0q7ZrX9qEUuAA lxzzB4FX+yrZ2yjSGEm4TF1qtyTimWpefZYNtEUm6lzG8FsLUU+MamDAVjaJW40h 6tzDlTsvv8Ar9slJwq/XWNerByb4wBX4ocDX8RYt5XHpisTo01nxHr6ftAR3JUOL z4MQXlDZjd1qpAgdjhx5MqtOnaljQ83g+9tA91QN3BmO/wui+dQQiFwHYM+vPcdj enAn9PrcPiFksf5OpAb3F5GEZlA1QK2/8S+CKf1L42XmzjUQM3+lt1UnOTzpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/bPWF+zYnourQyoJ+xPs2rq2o2cwHwYDVR0j BBgwFoAUqim65U85hoY4xQobuV4jp3Y8OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM S1MvMS9BQTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMjlCQUU1NEYzOTg2ODYz OEM1MEExQkI5NUUyM0E3NzYzQzM4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMS9B QTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf4C8aX+WzLfQ5KqP3fL2vO75d3PIhHxTEmy0ipNPg/UshLrWRBfLP+Fu5/A8 /F7fNjcPX3k4FlfO8Uc0JPdMF9q1npo9y6fw9FOAm+14m45Lh9ANs3gEIMziOYxq xAJcS2AaSVkCab392va0yGPo1MkmMYw0o6R4F07DFAcmUaK3eo3dmXsiwL8M2IB4 cZhEo/19hy497Q2NBiAQwhJjcsUcEfXb/k2615JE7v7ToYFPdyjIrhvu0vaaa6o+ Bc6cpdkp9gx997t/5UR31I9WNbmPujWz2HbfS8di9lsVTS1kambd+Xp1ac/Vicci h/GpvXiMRMlHYhooBKFvvHSFew== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org