$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft File: CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json) Hash identifier: TB0Ktfl5a1lNHmMmtlsbwUSMqOomDpG53um1npYEhYw= Subject key identifier: 9F:B0:5D:61:C8:F5:CF:E6:6A:16:8F:18:48:D3:1D:19:38:B9:0A:A8 Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4 Certificate issuer: /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4 Certificate serial: 518B2EC7B7413AB599735DB27EE3CC0A40B6EF0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft Manifest number: 72 Signing time: Wed 26 Jun 2024 14:58:52 +0000 Manifest this update: Wed 26 Jun 2024 14:53:52 +0000 Manifest next update: Thu 27 Jun 2024 18:36:52 +0000 Files and hashes: 1: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: j1Noziw+CixXBAq8agTs7Cdm3bNS4Xy41lYcaQsMvEI=) 2: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: Wc32wril7H2Lm18UQ/E6ZP6Hhg8AobzOYo2+ZK+BMyM=) 3: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: ZmLJk6aq7jD7NRdmYHnuoNMOX3AvV5rBmI6Z8a396mk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 17:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8b:2e:c7:b7:41:3a:b5:99:73:5d:b2:7e:e3:cc:0a:40:b6:ef:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4 Validity Not Before: Jun 26 14:53:52 2024 GMT Not After : Jun 27 18:36:52 2024 GMT Subject: CN=9FB05D61C8F5CFE66A168F1848D31D1938B90AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:06:b0:be:f6:39:43:62:ef:66:e0:8b:d8:36: 21:15:f3:b5:0b:82:3a:f4:ec:12:3a:0d:39:47:5c: 72:09:2a:50:60:7f:ce:8d:60:15:4f:97:9a:6a:bd: 8b:b1:13:11:5e:3d:7c:73:4b:57:c7:ac:46:21:36: ec:5a:0c:06:0e:e0:68:5d:4f:63:49:2f:95:e1:c3: d7:62:cf:27:15:30:a3:f5:f1:87:c1:2f:ad:28:60: fb:18:53:d3:9c:10:8d:3f:5a:67:94:b4:aa:c6:02: b8:6f:75:59:e5:e8:c4:aa:02:87:f7:9a:2b:99:f3: e1:84:c7:e0:01:85:b1:fe:fc:60:41:67:92:28:0d: 58:76:21:d8:45:3b:9a:c0:15:2c:aa:af:7c:c0:ce: 43:52:fd:45:e7:13:be:76:b2:4c:0b:27:92:b1:1c: 74:7c:3f:77:2c:3f:c7:2b:b8:c6:34:4b:d9:c3:c0: 86:66:4c:af:56:01:85:47:5f:9e:10:30:35:6b:32: dd:25:3b:57:f4:75:4d:c0:fb:65:c8:94:f4:3b:e6: d0:8f:c3:0b:e6:57:88:b0:34:5b:6f:0e:8e:99:2e: 6b:d8:15:96:e5:5a:5e:58:1d:88:52:55:ca:25:2d: 40:83:f2:11:a8:d8:5f:1d:45:b6:28:8f:fd:61:d1: 20:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B0:5D:61:C8:F5:CF:E6:6A:16:8F:18:48:D3:1D:19:38:B9:0A:A8 X509v3 Authority Key Identifier: keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:be:d7:a9:42:81:2a:a6:8a:c0:c7:5a:a0:79:83:dd:db:f0: 9a:d5:67:39:2e:4c:36:bc:d6:75:9a:63:ae:4d:4c:63:18:39: 58:84:53:41:72:76:8c:f1:dd:84:bc:c4:f3:cb:20:dc:f6:52: 59:94:13:2a:4b:1c:fa:fe:e7:26:66:f5:59:35:a2:9b:03:e1: bf:9d:db:ab:1e:5d:5f:aa:de:a3:26:85:3b:05:a5:6f:64:ee: e8:45:8b:f2:91:9e:c8:99:c4:18:f9:9a:de:20:a2:ee:2d:11: 15:7e:74:c6:61:4d:f8:7f:87:27:ae:0e:ba:84:23:53:be:a3: 7b:91:18:0d:62:c6:c2:b3:32:38:c5:03:13:b8:ce:42:64:e5: e4:74:e5:6d:b8:03:ca:ce:cd:e3:89:a4:8b:1d:3d:86:1c:fc: b9:ae:e6:61:e7:df:39:a3:dd:3b:ad:6c:c8:e3:16:63:d3:16: b9:01:f8:74:7e:d1:c6:86:6c:09:de:98:c8:b3:62:98:6a:a0: c6:2d:1f:72:44:cb:6e:ee:45:c9:9b:56:b3:a8:b0:dd:4b:93: a1:00:53:11:9e:d8:ca:ff:42:66:34:c8:47:66:f2:b6:69:b0: da:b1:58:cd:42:e1:83:fa:14:66:e1:c0:5a:6c:bc:06:cf:ab: 26:95:80:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUYsux7dBOrWZc12yfuPMCkC27w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODE4MjVBNzVGM0RGM0IwMzNEMzU0NEY4ODI2NDg4 RjNGQThBNDAeFw0yNDA2MjYxNDUzNTJaFw0yNDA2MjcxODM2NTJaMDMxMTAvBgNV BAMTKDlGQjA1RDYxQzhGNUNGRTY2QTE2OEYxODQ4RDMxRDE5MzhCOTBBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBrC+9jlDYu9m4IvYNiEV87UL gjr07BI6DTlHXHIJKlBgf86NYBVPl5pqvYuxExFePXxzS1fHrEYhNuxaDAYO4Ghd T2NJL5Xhw9dizycVMKP18YfBL60oYPsYU9OcEI0/WmeUtKrGArhvdVnl6MSqAof3 miuZ8+GEx+ABhbH+/GBBZ5IoDVh2IdhFO5rAFSyqr3zAzkNS/UXnE752skwLJ5Kx HHR8P3csP8cruMY0S9nDwIZmTK9WAYVHX54QMDVrMt0lO1f0dU3A+2XIlPQ75tCP wwvmV4iwNFtvDo6ZLmvYFZblWl5YHYhSVcolLUCD8hGo2F8dRbYoj/1h0SClAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn7BdYcj1z+ZqFo8YSNMdGTi5CqgwHwYDVR0j BBgwFoAUzWgYJadfPfOwM9NUT4gmSI8/qKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5 aW4vMS9DRDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENjgxODI1QTc1RjNERjNC MDMzRDM1NDRGODgyNjQ4OEYzRkE4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5aW4vMS9D RDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtb7XqUKBKqaKwMdaoHmD3dvwmtVnOS5MNrzWdZpjrk1MYxg5WIRTQXJ2jPHd hLzE88sg3PZSWZQTKksc+v7nJmb1WTWimwPhv53bqx5dX6reoyaFOwWlb2Tu6EWL 8pGeyJnEGPma3iCi7i0RFX50xmFN+H+HJ64OuoQjU76je5EYDWLGwrMyOMUDE7jO QmTl5HTlbbgDys7N44mkix09hhz8ua7mYeffOaPdO61syOMWY9MWuQH4dH7RxoZs Cd6YyLNimGqgxi0fckTLbu5FyZtWs6iw3UuToQBTEZ7Yyv9CZjTIR2bytmmw2rFY zULhg/oUZuHAWmy8Bs+rJpWACw== -----END CERTIFICATE-----Generated at Wed Jun 26 16:27:55 2024 by rpki-client on console-fra.rpki-client.org