$ rpki-client -vvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft File: BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft (raw, json) Hash identifier: 7haI3y+VNz4S8ElouUsezL4SQpYPsUi1u5CtmVcAMOg= Subject key identifier: 8D:CA:D3:69:94:A1:A5:3E:C0:EF:C2:98:85:FF:DF:64:97:B2:40:81 Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC Certificate issuer: /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC Certificate serial: 234F9206AEEBB945451CE3B21882EB2CE2181917 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft Manifest number: 71 Signing time: Wed 26 Jun 2024 06:01:49 +0000 Manifest this update: Wed 26 Jun 2024 05:56:49 +0000 Manifest next update: Thu 27 Jun 2024 09:12:49 +0000 Files and hashes: 1: 34352e3233332e3138342e302f32322d3234203d3e20323637333236.roa (hash: QFiNIQT/+bvq7YaJ6fXd6bk3jcRTSIDtBOGEFMVXHbc=) 2: BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl (hash: 2CnjTIzh+/21McYtCfcsCykFpLy4rSAma4LIGs+7/RQ=) 3: 323830343a346262383a3a2f33322d3438203d3e20323637333236.roa (hash: rdIcb700YxMfxdJ0qOOAerPgAU89pTH1E1dDTxGEN4o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 09:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4f:92:06:ae:eb:b9:45:45:1c:e3:b2:18:82:eb:2c:e2:18:19:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC Validity Not Before: Jun 26 05:56:49 2024 GMT Not After : Jun 27 09:12:49 2024 GMT Subject: CN=8DCAD36994A1A53EC0EFC29885FFDF6497B24081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:79:8f:f4:e6:82:60:16:31:c8:82:61:ce: 45:f2:93:11:80:30:67:ed:c4:42:26:82:8a:b5:08: 90:36:24:a7:8d:80:cd:7f:80:82:55:a6:86:81:34: 47:0e:31:af:a1:8c:91:78:ea:c0:42:b5:de:1d:f8: 07:f9:b2:45:e8:a6:6e:57:07:c3:19:7d:7e:40:43: 80:57:75:af:a2:13:67:19:94:53:e7:67:c0:22:e3: d5:f2:65:64:73:25:cd:00:4e:9b:d4:a1:d1:f9:80: c8:32:84:ed:50:56:75:88:7c:df:09:9e:c6:c8:31: 7e:d1:15:2a:51:03:a5:a3:f5:c6:9a:ab:6a:06:6f: f2:ad:cd:75:3b:a9:52:80:b3:4b:11:62:cc:67:2f: f3:2c:48:d0:f8:f2:89:dd:0a:b2:c7:2a:80:d1:73: 81:ef:2c:85:ed:75:b6:5e:80:79:ca:8d:cb:73:6d: 65:2c:7d:99:9a:af:ad:ad:58:28:71:66:b4:92:e2: f7:0b:d6:95:1d:c7:c7:39:58:03:f6:47:3e:b5:83: fa:e7:b6:a9:18:e9:f0:e9:e7:b6:4b:08:37:83:c7: 7f:b5:f1:3d:3d:cb:3c:55:28:22:33:eb:45:20:dc: 55:28:4e:a5:fe:55:10:3b:a3:69:6d:d1:00:ca:54: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CA:D3:69:94:A1:A5:3E:C0:EF:C2:98:85:FF:DF:64:97:B2:40:81 X509v3 Authority Key Identifier: keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:09:ad:26:aa:97:ed:10:66:65:f9:0e:01:c5:29:c9:2c:8f: 00:09:2b:ae:bd:c3:f6:06:7d:87:28:b4:f8:f1:29:b0:a5:9f: ec:a5:dd:b6:dc:20:80:5f:32:ec:27:04:02:86:52:3e:14:92: 59:5a:59:46:85:11:df:f2:f4:89:70:1f:ad:e6:1f:99:b1:c7: af:df:00:6e:d0:53:62:c8:46:54:a5:c7:07:aa:1b:03:cb:e9: 46:9b:7a:cd:fe:57:df:b3:83:4c:46:a6:49:82:8a:28:91:96: f7:3e:4e:51:27:de:fe:4c:ef:ea:72:53:c8:59:89:72:f4:e2: 77:5c:68:a5:28:90:2b:64:f0:7d:90:6b:b6:5f:c3:f1:0f:16: 64:fd:df:c7:b4:51:a2:27:fb:c2:f4:31:ad:f7:58:04:52:fc: e7:82:a4:70:7d:1f:ba:a0:66:11:9a:e8:3d:a4:85:23:8c:bf: 8a:7d:fb:81:81:8c:b9:c0:73:47:33:ae:34:46:99:6e:a4:42: 28:30:ac:7a:2e:46:f3:16:91:66:8a:2c:0d:c5:ed:d0:78:68: 33:81:21:67:fb:e8:b8:3d:05:c2:6d:c7:8f:1d:02:8b:04:ca: 36:af:f2:a9:c0:25:61:d2:f2:5d:ba:f9:26:71:8c:5f:a2:93: f5:49:8b:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI0+SBq7ruUVFHOOyGILrLOIYGRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3QzgyRkNEOTFBMTFDRTVBOTVEQ0Y4MDcwNjk5MkNG OUQyOTJFQzAeFw0yNDA2MjYwNTU2NDlaFw0yNDA2MjcwOTEyNDlaMDMxMTAvBgNV BAMTKDhEQ0FEMzY5OTRBMUE1M0VDMEVGQzI5ODg1RkZERjY0OTdCMjQwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQ3mP9OaCYBYxyIJhzkXykxGA MGftxEImgoq1CJA2JKeNgM1/gIJVpoaBNEcOMa+hjJF46sBCtd4d+Af5skXopm5X B8MZfX5AQ4BXda+iE2cZlFPnZ8Ai49XyZWRzJc0ATpvUodH5gMgyhO1QVnWIfN8J nsbIMX7RFSpRA6Wj9caaq2oGb/KtzXU7qVKAs0sRYsxnL/MsSND48ondCrLHKoDR c4HvLIXtdbZegHnKjctzbWUsfZmar62tWChxZrSS4vcL1pUdx8c5WAP2Rz61g/rn tqkY6fDp57ZLCDeDx3+18T09yzxVKCIz60Ug3FUoTqX+VRA7o2lt0QDKVCWNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjcrTaZShpT7A78KYhf/fZJeyQIEwHwYDVR0j BBgwFoAUvnyC/NkaEc5aldz4BwaZLPnSkuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0JzZkU4UzQ0ZjcxR01nN1FrajVKWEFrWG1kbXZHaFljTFo4c3pvQ2JE OGMvMS9CRTdDODJGQ0Q5MUExMUNFNUE5NURDRjgwNzA2OTkyQ0Y5RDI5MkVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFN0M4MkZDRDkxQTExQ0U1 QTk1RENGODA3MDY5OTJDRjlEMjkyRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0JzZkU4UzQ0ZjcxR01nN1FrajVKWEFrWG1kbXZHaFljTFo4c3pvQ2JEOGMvMS9C RTdDODJGQ0Q5MUExMUNFNUE5NURDRjgwNzA2OTkyQ0Y5RDI5MkVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAywmtJqqX7RBmZfkOAcUpySyPAAkrrr3D9gZ9hyi0+PEpsKWf7KXdttwggF8y 7CcEAoZSPhSSWVpZRoUR3/L0iXAfreYfmbHHr98AbtBTYshGVKXHB6obA8vpRpt6 zf5X37ODTEamSYKKKJGW9z5OUSfe/kzv6nJTyFmJcvTid1xopSiQK2TwfZBrtl/D 8Q8WZP3fx7RRoif7wvQxrfdYBFL854KkcH0fuqBmEZroPaSFI4y/in37gYGMucBz RzOuNEaZbqRCKDCsei5G8xaRZoosDcXt0HhoM4EhZ/vouD0Fwm3Hjx0CiwTKNq/y qcAlYdLyXbr5JnGMX6KT9UmLcg== -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:03 2024 by rpki-client on console-fra.rpki-client.org