$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft File: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft (raw, json) Hash identifier: 5jV+qHtliT9c/4YgCC18WOroYDbWdMzoaOswgVS6uZ0= Subject key identifier: 5A:C5:6A:5F:F0:7F:A4:F2:9E:58:2A:E4:27:DC:80:57:FB:2E:98:A0 Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D Certificate issuer: /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D Certificate serial: 57BF2DEE00D3D34F5F107B999F4DE8389191D55C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer Subject info access: rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft Manifest number: 0139 Signing time: Sat 23 Nov 2024 11:07:57 +0000 Manifest this update: Sat 23 Nov 2024 11:02:57 +0000 Manifest next update: Sun 24 Nov 2024 14:53:57 +0000 Files and hashes: 1: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl (hash: SZG9lwswe5vMpQRCQAyJrFx7lgayu4+XdgRqc0A++3A=) 2: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: JvNutHO6dlPs37OfGQecm4v/EcpQJ1cEgn/pzXObylA=) 3: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: jJaW1JIbNZVWgV1gpN+3FzBsfwPR149jRNwJEoDuaaE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bf:2d:ee:00:d3:d3:4f:5f:10:7b:99:9f:4d:e8:38:91:91:d5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D Validity Not Before: Nov 23 11:02:57 2024 GMT Not After : Nov 24 14:53:57 2024 GMT Subject: CN=5AC56A5FF07FA4F29E582AE427DC8057FB2E98A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:04:15:08:a6:67:3f:ad:6a:fb:40:c0:ad: b0:9e:96:b7:29:42:99:bd:4f:83:01:64:13:15:30: 89:b4:f7:e7:d9:c5:9b:dd:1c:5e:1e:22:c5:0d:12: cc:39:af:fc:ce:21:f7:fd:c5:cd:3c:f2:05:50:ff: ca:57:77:19:1e:3f:47:5d:c2:f4:6d:62:43:03:cc: a7:fc:80:17:ef:3c:5f:ec:87:32:42:98:b1:70:d9: 2d:86:4e:c4:64:dc:61:d1:5f:50:5d:db:dc:aa:44: d8:18:c5:9e:8d:b4:05:67:53:3f:06:c1:07:89:34: df:a4:55:bc:19:d7:c8:11:00:38:ee:20:87:08:e8: 96:87:41:20:eb:8c:ec:fc:14:6e:83:ef:f3:96:d4: 11:c6:73:bc:1a:e0:21:6b:2b:2d:c2:71:16:b8:d3: 94:bc:f3:65:11:4c:b7:36:e6:79:8d:0d:bf:94:22: 6a:50:05:a7:c8:c1:59:3d:13:28:ab:9f:15:6c:90: 3a:c5:3c:dc:29:df:5d:02:f0:b2:59:b4:c1:b2:64: 77:4f:de:5e:ed:fb:55:bf:4e:2c:89:6f:5b:34:d0: a0:bc:c6:d2:cb:da:74:28:59:2d:34:5e:96:f7:7e: 4a:6d:be:1c:6d:6f:6d:da:ed:29:13:0e:75:ec:67: d0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C5:6A:5F:F0:7F:A4:F2:9E:58:2A:E4:27:DC:80:57:FB:2E:98:A0 X509v3 Authority Key Identifier: keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b4:d9:23:c9:5c:85:bd:6e:70:e4:97:17:ea:6c:0a:5d:90: 4f:6f:bd:ec:30:5d:d9:64:78:fe:0f:05:f5:82:57:af:ae:93: 05:ac:f7:b1:6c:66:59:8c:56:e3:da:b1:26:b6:ab:69:ac:3b: fa:61:c2:1a:a4:38:2c:4d:51:4d:37:1a:35:8e:4d:18:8d:10: 0a:54:82:7b:b3:d9:f8:b3:1b:9f:19:67:81:42:cc:03:f3:94: a3:aa:58:a2:ce:e0:5b:de:76:ef:23:cb:dc:f9:65:19:b3:d3: 8a:2e:71:f2:b7:0e:49:d0:17:95:4a:ce:57:85:47:9a:09:3d: 52:62:ac:08:cb:04:9c:bc:56:fb:27:59:03:e3:ad:c2:7a:32: cb:e9:40:0f:0b:4b:0f:eb:93:73:8a:2f:bb:d1:0f:22:76:a8: 55:3f:6d:9d:70:26:07:be:6c:76:28:46:5c:d0:d1:d1:a8:ce: 50:24:2f:be:48:20:78:3b:cf:1a:93:bd:c0:25:b2:46:cf:c3: 2f:df:f4:ed:68:86:c4:ef:d0:17:ea:7e:03:e5:42:b8:dc:ce: 4a:bd:5a:d4:73:ca:5a:5b:8c:66:37:ec:16:23:f7:8c:38:98: 4b:69:6d:0a:84:2d:93:58:b6:30:5c:61:01:a5:52:1e:54:94: 99:ac:93:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV78t7gDT009fEHuZn03oOJGR1VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4RkRGQzVBMkI3QkUxMzg3QkRCREJGMUU4RDUxRUFG NEQyMEYyRDAeFw0yNDExMjMxMTAyNTdaFw0yNDExMjQxNDUzNTdaMDMxMTAvBgNV BAMTKDVBQzU2QTVGRjA3RkE0RjI5RTU4MkFFNDI3REM4MDU3RkIyRTk4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEgQVCKZnP61q+0DArbCelrcp Qpm9T4MBZBMVMIm09+fZxZvdHF4eIsUNEsw5r/zOIff9xc088gVQ/8pXdxkeP0dd wvRtYkMDzKf8gBfvPF/shzJCmLFw2S2GTsRk3GHRX1Bd29yqRNgYxZ6NtAVnUz8G wQeJNN+kVbwZ18gRADjuIIcI6JaHQSDrjOz8FG6D7/OW1BHGc7wa4CFrKy3CcRa4 05S882URTLc25nmNDb+UImpQBafIwVk9EyirnxVskDrFPNwp310C8LJZtMGyZHdP 3l7t+1W/TiyJb1s00KC8xtLL2nQoWS00Xpb3fkptvhxtb23a7SkTDnXsZ9ADAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWsVqX/B/pPKeWCrkJ9yAV/sumKAwHwYDVR0j BBgwFoAUBo/fxaK3vhOHvb2/Ho1R6vTSDy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDJBREhMMkJRYnhGUXpINXBxdXFCS0R2b2ZiNFZNWWpaVE5EZWdRclZE Y3cvMS8wNjhGREZDNUEyQjdCRTEzODdCREJEQkYxRThENTFFQUY0RDIwRjJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2OEZERkM1QTJCN0JFMTM4 N0JEQkRCRjFFOEQ1MUVBRjREMjBGMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDJBREhMMkJRYnhGUXpINXBxdXFCS0R2b2ZiNFZNWWpaVE5EZWdRclZEY3cvMS8w NjhGREZDNUEyQjdCRTEzODdCREJEQkYxRThENTFFQUY0RDIwRjJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAubTZI8lchb1ucOSXF+psCl2QT2+97DBd2WR4/g8F9YJXr66TBaz3sWxmWYxW 49qxJraraaw7+mHCGqQ4LE1RTTcaNY5NGI0QClSCe7PZ+LMbnxlngULMA/OUo6pY os7gW9527yPL3PllGbPTii5x8rcOSdAXlUrOV4VHmgk9UmKsCMsEnLxW+ydZA+Ot wnoyy+lADwtLD+uTc4ovu9EPInaoVT9tnXAmB75sdihGXNDR0ajOUCQvvkggeDvP GpO9wCWyRs/DL9/07WiGxO/QF+p+A+VCuNzOSr1a1HPKWluMZjfsFiP3jDiYS2lt CoQtk1i2MFxhAaVSHlSUmayTBg== -----END CERTIFICATE-----Generated at Sat Nov 23 13:12:24 2024 by rpki-client on console-fra.rpki-client.org