$ rpki-client -vvf rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft File: 8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft (raw, json) Hash identifier: ztqb8coypvAOlITtYzjLqMURhdZoYftHf1CUFfW5KB4= Subject key identifier: 3D:82:50:59:C4:F5:12:80:CE:73:B7:0E:C0:E4:8F:4D:07:2C:CC:0C Authority key identifier: 8C:EB:93:8E:E7:EE:7A:3D:30:ED:A7:14:BE:1B:C7:A9:15:23:DA:C5 Certificate issuer: /CN=8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5 Certificate serial: 0E4D8C3446060963661421228B8BF66D2EB3F5C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft Manifest number: E2 Signing time: Tue 26 Nov 2024 02:06:47 +0000 Manifest this update: Tue 26 Nov 2024 02:01:47 +0000 Manifest next update: Wed 27 Nov 2024 02:41:47 +0000 Files and hashes: 1: 3137302e38302e3138342e302f32322d3234203d3e20323636333832.roa (hash: FCKy2ZjhRN9dtiuQeRFJRGyAf/TlhUIKNzYX1RfAICM=) 2: 323830343a333666343a3a2f33322d3438203d3e20323636333832.roa (hash: o+c5yPOmbJHRXvrEviD3tct8shSQ4UFSgT91lReCDDI=) 3: 8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl (hash: c/uxAofEFYc0+LEJuepWV1GK272GDOZDw3EYNaDEH+4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 02:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4d:8c:34:46:06:09:63:66:14:21:22:8b:8b:f6:6d:2e:b3:f5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5 Validity Not Before: Nov 26 02:01:47 2024 GMT Not After : Nov 27 02:41:47 2024 GMT Subject: CN=3D825059C4F51280CE73B70EC0E48F4D072CCC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:af:0f:b1:1d:3e:2f:45:00:40:46:3f:f5:aa: 29:4d:12:78:76:94:95:95:b1:70:75:9b:b0:a1:fb: 9a:34:13:65:da:61:70:d7:54:8e:d0:3f:7a:c2:4b: b6:36:43:29:c1:7f:25:ce:a0:02:57:d6:9a:e1:9d: c0:b5:13:ff:24:14:63:66:98:c0:77:1f:c5:d8:d3: 6c:d8:5a:80:2d:70:eb:e6:53:76:16:9b:4c:f1:f1: f3:f1:77:44:97:a6:1f:0a:2a:74:75:41:ae:00:a3: e0:42:24:3a:9a:40:b1:b3:c0:28:9d:d4:f6:00:15: 59:31:d7:5b:1a:da:15:c1:2e:79:7d:2b:27:e7:b6: be:ea:2d:5f:41:7f:2e:7a:3d:c2:44:a5:42:27:87: f7:9a:ac:ac:cd:22:a3:23:8d:b3:21:c0:b8:18:4a: 0d:f3:bb:f4:77:f8:e3:d8:36:b6:c3:8d:de:6b:c0: 38:e7:81:58:e5:12:ba:6b:b5:68:12:00:5d:52:5b: 42:ca:80:83:9b:f8:6e:ad:dd:1e:fd:01:33:75:32: 9e:9b:87:a1:66:b1:0d:9c:4d:ca:44:b4:32:1f:8c: 83:76:f3:66:68:2f:5c:01:b7:88:75:9d:5c:35:e3: b7:e6:92:8b:22:bd:e6:ee:11:b1:84:8d:99:39:34: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:82:50:59:C4:F5:12:80:CE:73:B7:0E:C0:E4:8F:4D:07:2C:CC:0C X509v3 Authority Key Identifier: keyid:8C:EB:93:8E:E7:EE:7A:3D:30:ED:A7:14:BE:1B:C7:A9:15:23:DA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:99:8f:70:f9:7b:64:f0:cf:65:22:31:17:f4:e4:8c:bf: c9:be:4a:cf:58:d3:ea:4a:59:e6:16:7f:79:da:67:8b:81:b3: bd:db:61:07:28:cd:06:6d:72:c6:6e:af:36:31:50:69:d0:ce: 49:2b:55:3e:68:ae:d3:6c:e8:e4:61:62:ba:03:fa:c0:67:3d: 2d:15:6d:42:99:67:59:63:a9:fd:7f:cd:93:2f:a5:f3:5d:bd: 13:3a:4e:26:42:71:1d:22:44:c9:c6:11:17:7e:67:66:c0:7b: 5c:aa:f9:79:c4:6c:c8:38:24:f8:78:38:06:24:12:85:d7:6c: 99:63:8d:92:bf:28:3d:b8:1f:fb:88:76:e9:d8:a9:a4:ef:59: 73:3b:28:3d:22:d6:06:7a:46:43:9b:98:be:a0:80:22:0f:6c: 0d:16:97:6e:d0:00:d4:2c:96:bd:e8:09:80:08:86:4f:a6:eb: f3:0f:5e:b6:b5:d5:7f:20:9f:5d:67:90:65:a1:b3:7c:c3:3d: a9:67:67:b2:16:99:ae:01:4b:83:a6:07:10:df:16:65:6b:cc: fc:11:ce:36:0b:a6:c2:7d:ab:d4:c4:87:00:a9:2c:83:a8:e5: dc:7a:1c:16:08:01:48:80:3e:b6:db:63:8f:bb:78:b2:b2:6b: 19:ce:7b:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDk2MNEYGCWNmFCEii4v2bS6z9cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENFQjkzOEVFN0VFN0EzRDMwRURBNzE0QkUxQkM3QTkx NTIzREFDNTAeFw0yNDExMjYwMjAxNDdaFw0yNDExMjcwMjQxNDdaMDMxMTAvBgNV BAMTKDNEODI1MDU5QzRGNTEyODBDRTczQjcwRUMwRTQ4RjREMDcyQ0NDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmrw+xHT4vRQBARj/1qilNEnh2 lJWVsXB1m7Ch+5o0E2XaYXDXVI7QP3rCS7Y2QynBfyXOoAJX1prhncC1E/8kFGNm mMB3H8XY02zYWoAtcOvmU3YWm0zx8fPxd0SXph8KKnR1Qa4Ao+BCJDqaQLGzwCid 1PYAFVkx11sa2hXBLnl9Kyfntr7qLV9Bfy56PcJEpUInh/earKzNIqMjjbMhwLgY Sg3zu/R3+OPYNrbDjd5rwDjngVjlErprtWgSAF1SW0LKgIOb+G6t3R79ATN1Mp6b h6FmsQ2cTcpEtDIfjIN282ZoL1wBt4h1nVw147fmkosivebuEbGEjZk5NAtlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPYJQWcT1EoDOc7cOwOSPTQcszAwwHwYDVR0j BBgwFoAUjOuTjufuej0w7acUvhvHqRUj2sUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG10OWdubUpGdXo4NnQ2WnJ1ZGNhbXJLdVhSbTd1ZDVXSmJvTkRxRzVu R28vMC84Q0VCOTM4RUU3RUU3QTNEMzBFREE3MTRCRTFCQzdBOTE1MjNEQUM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRUI5MzhFRTdFRTdBM0Qz MEVEQTcxNEJFMUJDN0E5MTUyM0RBQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG10OWdubUpGdXo4NnQ2WnJ1ZGNhbXJLdVhSbTd1ZDVXSmJvTkRxRzVuR28vMC84 Q0VCOTM4RUU3RUU3QTNEMzBFREE3MTRCRTFCQzdBOTE1MjNEQUM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG5SZj3D5e2Twz2UiMRf05Iy/yb5Kz1jT6kpZ5hZ/edpni4GzvdthByjNBm1y xm6vNjFQadDOSStVPmiu02zo5GFiugP6wGc9LRVtQplnWWOp/X/Nky+l8129EzpO JkJxHSJEycYRF35nZsB7XKr5ecRsyDgk+Hg4BiQShddsmWONkr8oPbgf+4h26dip pO9ZczsoPSLWBnpGQ5uYvqCAIg9sDRaXbtAA1CyWvegJgAiGT6br8w9etrXVfyCf XWeQZaGzfMM9qWdnshaZrgFLg6YHEN8WZWvM/BHONgumwn2r1MSHAKksg6jl3Hoc FggBSIA+tttjj7t4srJrGc57ow== -----END CERTIFICATE-----Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org