$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft File: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json) Hash identifier: C89XPLvgAc4oHy23orrNEaUvOydV7ImbQNTnFIUzqko= Subject key identifier: 30:96:C9:8B:F1:90:AC:5C:46:CD:A0:D7:77:58:AD:F2:7B:E9:D9:AA Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8 Certificate issuer: /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8 Certificate serial: 2D7B89FF0719A0DD6F035D36EF61D55C6C972E07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft Manifest number: 013D Signing time: Sat 23 Nov 2024 06:13:29 +0000 Manifest this update: Sat 23 Nov 2024 06:08:29 +0000 Manifest next update: Sun 24 Nov 2024 06:48:29 +0000 Files and hashes: 1: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: QNFyXkDjYxtjAY+XGMe5tcCI6hXOc6k0U04RR0wk06M=) 2: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: xK8Vz8uxL1EMuumDY46XtETD4XaGdS2LY28aDtiFYj8=) 3: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: NAlyE1gP5eEm2QCzZwWb0ZvOj7kmRHCKooa9+7IETXo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7b:89:ff:07:19:a0:dd:6f:03:5d:36:ef:61:d5:5c:6c:97:2e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8 Validity Not Before: Nov 23 06:08:29 2024 GMT Not After : Nov 24 06:48:29 2024 GMT Subject: CN=3096C98BF190AC5C46CDA0D77758ADF27BE9D9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:2a:76:1e:ad:f2:5f:23:bc:3b:97:bf:7e: f4:37:3b:49:8a:ec:85:a0:2c:5e:a5:4c:8f:35:0c: 8d:ac:c5:f1:7a:2b:8c:f6:fa:c1:03:11:32:da:39: 7a:f4:bc:c3:99:bb:51:46:52:bf:18:e7:df:e7:50: 60:ee:bd:87:b7:99:2e:fa:bf:97:26:9f:eb:5d:28: 33:fe:74:5d:6e:7e:16:f6:5b:be:ea:6a:a1:76:18: 24:47:f3:49:33:7d:a8:ce:f2:27:73:8f:d6:49:4e: 8a:52:fa:1b:02:4b:15:24:9d:d1:ce:39:a9:6b:29: 27:1c:ae:59:59:00:ea:ce:08:dc:8b:12:c7:14:55: d5:2a:f5:09:c7:6a:66:e3:5b:6d:79:88:cd:d1:5f: 01:44:a1:09:ff:c1:3c:6e:dc:f1:d0:96:dc:a4:b2: 9f:f2:4c:c8:bb:fd:96:66:03:00:12:d9:a0:ab:ac: a0:6e:a8:60:1a:ff:12:7e:af:77:bf:ad:b8:99:d5: ab:ff:eb:ff:4a:e1:51:a1:37:09:b4:05:6a:9b:8b: ed:7a:9e:8a:0b:3e:2d:2a:71:a5:79:00:59:6c:4b: a7:a5:ba:cf:f6:be:c5:4b:b0:1f:a5:ae:ae:4c:52: ab:39:d4:02:42:bf:22:ab:e4:f4:53:6b:0c:33:84: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:96:C9:8B:F1:90:AC:5C:46:CD:A0:D7:77:58:AD:F2:7B:E9:D9:AA X509v3 Authority Key Identifier: keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a4:4d:7b:93:15:b0:62:7a:94:ca:c2:ac:1c:28:0d:a7:bd: 25:e6:82:3d:c6:59:2e:70:a5:4b:d3:a4:1c:09:25:c8:9a:f8: cb:e6:9e:36:81:3c:0a:ad:ba:dd:78:ef:a5:f8:85:84:05:51: 0a:a4:1a:8f:7b:8d:45:29:52:6d:c2:01:18:41:a7:6e:4d:f3: 35:0b:fb:cd:7d:32:c8:f8:98:24:22:b1:15:bc:b4:73:0c:6b: b2:60:cf:ff:32:ba:ba:32:36:57:d8:8c:dd:96:a5:98:be:6c: 18:ae:db:f0:19:cb:66:a9:dc:a9:7b:71:4b:2b:42:8d:31:c9: 1b:62:00:c5:fd:16:2a:89:7a:6f:d2:a6:23:db:2d:90:c4:61: 89:be:a3:70:f9:be:d3:c1:96:a3:97:e6:9e:7b:7d:71:47:51: 17:e6:96:ab:4f:68:2b:cc:e5:80:ac:92:40:d5:28:36:f5:1c: 45:91:e1:90:92:d5:6a:89:11:d0:78:3e:63:14:33:2e:dd:6a: a1:32:9a:96:bf:e9:bf:fe:63:76:27:56:d8:6e:aa:32:2c:61: 43:f5:45:e1:2d:b3:e8:da:a4:cf:2e:c4:fd:a7:be:bf:c0:a2: f3:ee:4b:64:22:5a:e0:12:5c:ec:38:cd:c4:69:41:d7:fb:24: 2a:68:1d:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULXuJ/wcZoN1vA10272HVXGyXLgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE1QkZDNDQ5QkMwQUU5NEYyNjBDNTBBMzFEQ0JGQkMz MTgzOTFFODAeFw0yNDExMjMwNjA4MjlaFw0yNDExMjQwNjQ4MjlaMDMxMTAvBgNV BAMTKDMwOTZDOThCRjE5MEFDNUM0NkNEQTBENzc3NThBREYyN0JFOUQ5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPIip2Hq3yXyO8O5e/fvQ3O0mK 7IWgLF6lTI81DI2sxfF6K4z2+sEDETLaOXr0vMOZu1FGUr8Y59/nUGDuvYe3mS76 v5cmn+tdKDP+dF1ufhb2W77qaqF2GCRH80kzfajO8idzj9ZJTopS+hsCSxUkndHO OalrKSccrllZAOrOCNyLEscUVdUq9QnHambjW215iM3RXwFEoQn/wTxu3PHQltyk sp/yTMi7/ZZmAwAS2aCrrKBuqGAa/xJ+r3e/rbiZ1av/6/9K4VGhNwm0BWqbi+16 nooLPi0qcaV5AFlsS6elus/2vsVLsB+lrq5MUqs51AJCvyKr5PRTawwzhDmBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMJbJi/GQrFxGzaDXd1it8nvp2aowHwYDVR0j BBgwFoAUClv8RJvArpTyYMUKMdy/vDGDkegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2hu THgvMS8wQTVCRkM0NDlCQzBBRTk0RjI2MEM1MEEzMURDQkZCQzMxODM5MUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNUJGQzQ0OUJDMEFFOTRG MjYwQzUwQTMxRENCRkJDMzE4MzkxRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2huTHgvMS8w QTVCRkM0NDlCQzBBRTk0RjI2MEM1MEEzMURDQkZCQzMxODM5MUU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhaRNe5MVsGJ6lMrCrBwoDae9JeaCPcZZLnClS9OkHAklyJr4y+aeNoE8Cq26 3XjvpfiFhAVRCqQaj3uNRSlSbcIBGEGnbk3zNQv7zX0yyPiYJCKxFby0cwxrsmDP /zK6ujI2V9iM3ZalmL5sGK7b8BnLZqncqXtxSytCjTHJG2IAxf0WKol6b9KmI9st kMRhib6jcPm+08GWo5fmnnt9cUdRF+aWq09oK8zlgKySQNUoNvUcRZHhkJLVaokR 0Hg+YxQzLt1qoTKalr/pv/5jdidW2G6qMixhQ/VF4S2z6Nqkzy7E/ae+v8Ci8+5L ZCJa4BJc7DjNxGlB1/skKmgdgQ== -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:05 2024 by rpki-client on console-fra.rpki-client.org