$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft File: 645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft (raw, json) Hash identifier: aMBFjDRmrYsgDp4NGCuwaRWwYU1W6GFZH94AD8C4Kf8= Subject key identifier: E7:10:FB:C2:E2:19:80:D7:4E:AA:22:C5:2D:2C:F0:D7:B0:7C:2E:9C Authority key identifier: 64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1 Certificate issuer: /CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1 Certificate serial: 214557B5D36E5EA56F7D3FC4065B3FFE67201B9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft Manifest number: F1 Signing time: Mon 25 Nov 2024 20:31:27 +0000 Manifest this update: Mon 25 Nov 2024 20:26:27 +0000 Manifest next update: Tue 26 Nov 2024 22:49:27 +0000 Files and hashes: 1: 3138372e34392e3132382e302f32302d3332203d3e203238313435.roa (hash: 26XPLmoTWO09IlFdyXJt9ffd3pbtNQ5+FkHUP0/E2P0=) 2: 3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa (hash: 6bDm9YZnMZvZfnz123y8gFjNCTaRb+wsV9fbpUbzt9w=) 3: 323830343a64303a3a2f33322d313238203d3e203238313435.roa (hash: bz5u4guPw3UP9Nz0rbNa+8+Ia6xicUf48X3Bxc47oak=) 4: 645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl (hash: Z8D6ydXYyxSkVYxAF8Y9glyIf/UNZrtnXr9XgNLa4Dg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 22:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:45:57:b5:d3:6e:5e:a5:6f:7d:3f:c4:06:5b:3f:fe:67:20:1b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1 Validity Not Before: Nov 25 20:26:27 2024 GMT Not After : Nov 26 22:49:27 2024 GMT Subject: CN=E710FBC2E21980D74EAA22C52D2CF0D7B07C2E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:87:d3:00:30:06:01:f7:30:90:4b:02:8e:72: 6c:92:51:4c:e5:96:66:4e:81:57:46:5f:af:66:47: ff:f4:04:7a:52:f0:5a:7b:05:87:5a:f3:de:89:c9: 79:aa:5f:e9:a9:44:49:e7:26:7b:d1:15:97:73:35: 68:37:71:81:8e:02:20:7b:d0:35:ed:86:87:d3:a7: dd:84:6d:8d:c1:bd:a0:4d:d8:4f:e8:cd:d2:aa:0a: 88:17:f5:6d:37:b0:95:c1:5c:b6:86:b8:34:58:26: 59:d0:80:00:8c:33:d8:0a:3f:84:3b:de:44:31:24: df:fa:a9:6e:a9:c6:73:1c:46:be:ec:1f:55:69:a8: b6:0c:79:dc:b7:9b:b4:04:06:69:60:a5:19:85:91: ed:35:f3:b0:4b:10:2e:7c:c5:55:df:a0:b4:29:7d: 92:3c:fd:87:65:01:7c:a7:d8:db:f6:d8:9e:96:6b: 32:17:b9:1f:e7:fe:1a:4c:00:ed:89:35:f0:08:25: a1:c7:ba:c4:a9:b1:bf:5a:47:b4:98:85:71:20:9e: a5:82:5d:d0:8d:d4:ea:8b:c1:8e:ce:ef:57:4e:4a: c1:35:95:05:74:d5:43:af:f1:96:c5:dd:54:1f:34: 54:70:b2:d0:df:69:e5:a2:64:83:42:4c:01:c8:16: 62:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:10:FB:C2:E2:19:80:D7:4E:AA:22:C5:2D:2C:F0:D7:B0:7C:2E:9C X509v3 Authority Key Identifier: keyid:64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c6:d1:93:92:78:5e:05:12:15:05:37:d3:03:49:2b:87:8c: 62:f1:7f:82:8f:e6:ad:fc:d9:53:92:c3:2d:2d:f8:f2:78:08: 8f:0d:19:ae:f2:55:15:b4:7b:a6:6f:68:2b:46:36:3b:64:58: 0b:53:b7:4c:d1:83:a5:bf:c8:d8:6c:79:47:61:4f:d2:74:1e: 18:3c:13:67:26:e3:a5:ba:82:30:bb:29:a1:a4:dc:f3:e6:1d: 78:b3:19:16:e5:34:96:d9:e8:b8:6f:35:85:45:52:a0:67:1d: 06:05:6b:a3:2f:57:26:87:0c:85:68:40:18:7d:f9:d4:1d:af: e4:17:ed:e5:03:a7:8e:dc:5b:ff:d8:e6:f1:b2:97:af:da:77: 0b:14:5e:e5:cd:45:2c:85:09:18:f3:85:eb:8e:32:66:46:30: fa:2e:6a:ef:fb:1f:7b:54:14:b1:fb:30:8a:e0:68:19:3e:76: c8:2a:3c:f6:a4:fa:bf:6c:21:b2:1c:75:d5:5f:1f:3a:82:50: 17:aa:9d:81:51:f6:3f:fc:7c:0b:76:9a:20:bb:82:b2:86:67: 2e:da:74:2a:73:39:9f:f9:0d:db:93:d2:9a:10:bf:51:52:ce: cc:9d:22:b5:a0:5c:7d:71:bb:e4:00:92:89:27:12:dd:cc:58: 36:48:78:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIUVXtdNuXqVvfT/EBls//mcgG5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QUMwQzk0OEE1RkY2MTg5RDlEQ0ZFRkExMzg4Njg1 NDg1QkVCMTAeFw0yNDExMjUyMDI2MjdaFw0yNDExMjYyMjQ5MjdaMDMxMTAvBgNV BAMTKEU3MTBGQkMyRTIxOTgwRDc0RUFBMjJDNTJEMkNGMEQ3QjA3QzJFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrh9MAMAYB9zCQSwKOcmySUUzl lmZOgVdGX69mR//0BHpS8Fp7BYda896JyXmqX+mpREnnJnvRFZdzNWg3cYGOAiB7 0DXthofTp92EbY3BvaBN2E/ozdKqCogX9W03sJXBXLaGuDRYJlnQgACMM9gKP4Q7 3kQxJN/6qW6pxnMcRr7sH1VpqLYMedy3m7QEBmlgpRmFke0187BLEC58xVXfoLQp fZI8/YdlAXyn2Nv22J6WazIXuR/n/hpMAO2JNfAIJaHHusSpsb9aR7SYhXEgnqWC XdCN1OqLwY7O71dOSsE1lQV01UOv8ZbF3VQfNFRwstDfaeWiZINCTAHIFmI1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5xD7wuIZgNdOqiLFLSzw17B8LpwwHwYDVR0j BBgwFoAUZFrAyUil/2GJ2dz++hOIaFSFvrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wx RVUvMC82NDVBQzBDOTQ4QTVGRjYxODlEOURDRkVGQTEzODg2ODU0ODVCRUIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0NUFDMEM5NDhBNUZGNjE4 OUQ5RENGRUZBMTM4ODY4NTQ4NUJFQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wxRVUvMC82 NDVBQzBDOTQ4QTVGRjYxODlEOURDRkVGQTEzODg2ODU0ODVCRUIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbMbRk5J4XgUSFQU30wNJK4eMYvF/go/mrfzZU5LDLS348ngIjw0ZrvJVFbR7 pm9oK0Y2O2RYC1O3TNGDpb/I2Gx5R2FP0nQeGDwTZybjpbqCMLspoaTc8+YdeLMZ FuU0ltnouG81hUVSoGcdBgVroy9XJocMhWhAGH351B2v5Bft5QOnjtxb/9jm8bKX r9p3CxRe5c1FLIUJGPOF644yZkYw+i5q7/sfe1QUsfswiuBoGT52yCo89qT6v2wh shx11V8fOoJQF6qdgVH2P/x8C3aaILuCsoZnLtp0KnM5n/kN25PSmhC/UVLOzJ0i taBcfXG75ACSiScS3cxYNkh4Zg== -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:59 2024 by rpki-client on console-fra.rpki-client.org