$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json) Hash identifier: dhNvyjY114bujbfw2zzsrfSE+7lglOotpB05EBo7EKc= Subject key identifier: A8:54:6B:44:83:81:12:3E:59:86:D6:B5:23:64:B0:76:E8:B0:B7:1E Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Certificate serial: 23ED4E3CC2047761474A34A5EE7BDD7449CC5137 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft Manifest number: 0136 Signing time: Fri 22 Nov 2024 10:32:19 +0000 Manifest this update: Fri 22 Nov 2024 10:27:19 +0000 Manifest next update: Sat 23 Nov 2024 11:43:19 +0000 Files and hashes: 1: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: BXWukTWsTYHoVCQU9xryLb3XPGkFgAPlv09lsYNuXcg=) 2: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: FwylFo0/FkZS4Z+5P9QD0tMEfH5h1g98/KFMoT+R8bE=) 3: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: tf2RoPQHA6t0VO3R7OBwK1JIUkJraJ9Fvg8jLut8sAE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 11:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ed:4e:3c:c2:04:77:61:47:4a:34:a5:ee:7b:dd:74:49:cc:51:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Validity Not Before: Nov 22 10:27:19 2024 GMT Not After : Nov 23 11:43:19 2024 GMT Subject: CN=A8546B448381123E5986D6B52364B076E8B0B71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:23:93:fc:56:08:da:15:ef:e4:ae:34:c3: 98:b9:85:98:9c:8d:be:a0:70:6d:fb:b6:ac:0a:27: 62:8c:4f:36:93:f8:f4:cd:e1:00:89:06:5b:b5:df: 11:54:ce:c7:83:3f:78:fc:ef:c3:bb:28:2b:5e:bd: d3:d8:e7:65:61:a4:ea:66:bc:97:fa:86:25:02:73: ce:01:e7:88:e3:a6:37:7d:b2:bb:7a:7e:12:45:4d: 50:13:e2:1b:0a:61:fe:a9:84:30:07:69:e7:89:84: 3c:0b:29:23:c9:e3:4f:04:3f:a0:f1:2c:09:71:18: b3:49:54:d1:d1:ad:a8:53:0c:b6:36:c8:73:6d:b3: b2:b0:60:29:49:80:bb:f9:0b:19:30:56:55:5a:e5: d2:a0:a7:74:29:0b:8d:32:c9:da:ac:44:bc:31:b0: 62:ae:86:31:0a:23:96:64:a7:1e:c5:97:12:78:70: 0a:34:af:94:10:45:d2:4b:58:ce:0e:4e:54:b6:43: 18:79:aa:17:a8:93:a6:34:4b:75:ac:2b:91:67:00: e2:32:1e:3e:e6:bf:3e:55:79:52:4d:07:5b:9a:3b: 40:ae:d2:69:ee:52:ad:c7:25:14:72:d5:92:05:14: 4c:54:4a:19:8f:de:55:b4:c9:fd:2c:2b:2d:02:87: b5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:54:6B:44:83:81:12:3E:59:86:D6:B5:23:64:B0:76:E8:B0:B7:1E X509v3 Authority Key Identifier: keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9c:06:b6:c4:25:c6:d2:dc:27:99:52:f5:ac:54:bd:ad:29: 38:de:af:8f:a6:16:bc:35:f3:9a:6c:73:6a:05:58:25:85:b0: 35:8e:60:b9:68:4e:64:66:73:bf:40:3e:38:5a:60:20:08:db: cd:77:e3:e0:57:34:b3:86:95:01:7f:97:46:64:f9:69:1c:38: 40:b7:3b:b5:b3:bd:06:fb:1a:4d:52:25:ae:fa:ff:e6:39:df: 4c:20:ba:42:a4:04:82:66:c9:1a:cc:69:3a:7f:b3:54:a3:83: 42:9b:1b:9c:21:7d:4c:d3:e8:ae:b1:fc:9c:31:b6:b9:e4:a4: da:dd:3f:7d:78:c6:23:a8:c1:de:3a:1d:bf:8f:1e:51:76:41: ed:b2:1d:ff:32:69:dd:82:a0:cc:05:71:c3:93:3f:bf:26:f1: 55:21:e3:69:43:a5:27:56:a0:97:77:b2:9a:fd:d7:2a:b2:7a: 46:71:38:d1:24:de:96:2a:1e:29:e6:de:db:86:ef:37:41:aa: cc:11:13:b5:0b:d4:d1:f3:2a:ce:f3:aa:1f:98:60:f6:98:39: 72:e6:90:6e:08:a7:e5:d4:7c:da:0b:f3:bf:53:fe:28:4b:43: 49:55:52:ad:da:20:74:61:f3:31:38:9d:2d:09:78:32:a8:2f: 0e:f7:5b:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI+1OPMIEd2FHSjSl7nvddEnMUTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDBCRDc1Q0FEM0EzMDNFQzcyRjFBRDBCMjM2NUVF OTVEMzkwRjAeFw0yNDExMjIxMDI3MTlaFw0yNDExMjMxMTQzMTlaMDMxMTAvBgNV BAMTKEE4NTQ2QjQ0ODM4MTEyM0U1OTg2RDZCNTIzNjRCMDc2RThCMEI3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISCOT/FYI2hXv5K40w5i5hZic jb6gcG37tqwKJ2KMTzaT+PTN4QCJBlu13xFUzseDP3j878O7KCtevdPY52VhpOpm vJf6hiUCc84B54jjpjd9srt6fhJFTVAT4hsKYf6phDAHaeeJhDwLKSPJ408EP6Dx LAlxGLNJVNHRrahTDLY2yHNts7KwYClJgLv5CxkwVlVa5dKgp3QpC40yydqsRLwx sGKuhjEKI5Zkpx7FlxJ4cAo0r5QQRdJLWM4OTlS2Qxh5qheok6Y0S3WsK5FnAOIy Hj7mvz5VeVJNB1uaO0Cu0mnuUq3HJRRy1ZIFFExUShmP3lW0yf0sKy0Ch7WfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqFRrRIOBEj5Zhta1I2Swduiwtx4wHwYDVR0j BBgwFoAUu+0L11ytOjA+xy8a0LI2XuldOQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE Y04vMS9CQkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRUQwQkQ3NUNBRDNBMzAz RUM3MkYxQUQwQjIzNjVFRTk1RDM5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhEY04vMS9C QkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaZwGtsQlxtLcJ5lS9axUva0pON6vj6YWvDXzmmxzagVYJYWwNY5guWhOZGZz v0A+OFpgIAjbzXfj4Fc0s4aVAX+XRmT5aRw4QLc7tbO9BvsaTVIlrvr/5jnfTCC6 QqQEgmbJGsxpOn+zVKODQpsbnCF9TNPorrH8nDG2ueSk2t0/fXjGI6jB3jodv48e UXZB7bId/zJp3YKgzAVxw5M/vybxVSHjaUOlJ1agl3eymv3XKrJ6RnE40STelioe Kebe24bvN0GqzBETtQvU0fMqzvOqH5hg9pg5cuaQbgin5dR82gvzv1P+KEtDSVVS rdogdGHzMTidLQl4MqgvDvdbSw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:54 2024 by rpki-client on console-fra.rpki-client.org