$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft File: D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft (raw, json) Hash identifier: sgcfANKk/HM0WFAdByCMxTLYi37OopK4Im1MQkW3uwc= Subject key identifier: 02:74:64:DA:7C:B1:5F:6D:D7:9A:15:4B:28:A5:58:8A:5F:C7:3E:33 Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40 Certificate issuer: /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40 Certificate serial: 14863E7D7FEFC5CBA04A6E215843D6FCCBF0C321 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft Manifest number: 0136 Signing time: Fri 22 Nov 2024 21:20:01 +0000 Manifest this update: Fri 22 Nov 2024 21:15:01 +0000 Manifest next update: Sat 23 Nov 2024 23:46:01 +0000 Files and hashes: 1: 34352e3136312e31392e302f32342d3234203d3e20323638343436.roa (hash: teoW2OzTR0iT5LuOa9lVft6yg7no7ZxxEpMMHi5j1QA=) 2: D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl (hash: 7V8lcw4UCNQRFnxWa5aIcZ/tNLrbO0YDjQhkcbuzwBk=) 3: 323830343a353135383a3a2f33322d3332203d3e20323638343436.roa (hash: TeUrNGU2EdDyaPxjX0eBruzn9OJCu1l0VRuwl4NJe20=) 4: 34352e3136312e31362e302f32342d3234203d3e20323638343436.roa (hash: ocVbthX0lxEC5NYdnEvtV+GPWgxkuyPo0v665fj0H1U=) 5: 34352e3136312e31382e302f32342d3234203d3e20323638343436.roa (hash: 9EoCpKBGuYo1bkIlY1TvNF5OwqDrQK/P8eDzQkKuL8M=) 6: 34352e3136312e31372e302f32342d3234203d3e20323638343436.roa (hash: tRdAL31O3bvhrE9jLw/c8E70MjPk10/B7iLPUU25FBA=) 7: 34352e3136312e31382e302f32332d3233203d3e20323638343436.roa (hash: O0EUUd3vo04zuHUHM6x9QgwlcB9qwLLcbSdwuUN51bo=) 8: 34352e3136312e31362e302f32322d3232203d3e20323638343436.roa (hash: W5Avw41xUm9/9MPiCLR0WMIcs6FjypNDUyd7w0NNYN4=) 9: 34352e3136312e31362e302f32332d3233203d3e20323638343436.roa (hash: X6Lbmc1AZl5O3j+4L5AchGCCoZXCqBePKNuu9Nac5VQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 23:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:86:3e:7d:7f:ef:c5:cb:a0:4a:6e:21:58:43:d6:fc:cb:f0:c3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40 Validity Not Before: Nov 22 21:15:01 2024 GMT Not After : Nov 23 23:46:01 2024 GMT Subject: CN=027464DA7CB15F6DD79A154B28A5588A5FC73E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:cc:a0:1c:d0:21:48:72:88:a4:26:01:73: c4:2b:15:74:c4:16:fd:1e:a6:be:6e:e0:1a:43:98: 1d:6f:25:de:15:5f:53:88:6b:80:26:72:9b:3e:24: 05:5e:ec:ab:a1:e3:16:6a:eb:2b:d1:9a:ad:f0:0e: f9:b1:10:b8:91:81:2f:49:c3:04:10:4a:c9:15:48: 63:58:4c:db:32:39:f7:0d:78:00:2c:c0:9d:d6:48: 67:e4:da:90:97:cd:d6:0b:67:56:ab:25:7c:fb:7e: fd:e8:25:08:a7:66:95:4c:df:90:f2:8d:98:f2:69: 19:c3:54:b8:30:da:d4:9c:98:d2:7f:93:62:c2:e9: f7:00:44:e9:f6:8e:a0:e3:98:b1:f7:2e:ac:90:8c: f1:57:80:fa:b3:39:43:b3:2e:8e:d4:f7:7b:44:14: 87:5a:8a:45:d4:66:b5:4f:d1:39:6e:2c:37:39:2c: 2a:b0:b8:94:1e:8f:85:36:6b:1b:d3:66:e1:f0:55: 82:b3:55:ca:81:35:08:a4:20:6a:01:e4:26:8b:d8: c2:32:2f:82:59:83:6c:dd:46:72:c4:b7:9d:de:77: 5b:36:7f:c3:85:11:f5:2e:56:ff:80:98:b9:13:42: 70:c3:d6:48:2c:49:0e:49:9e:73:5b:a6:b4:1e:fe: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:74:64:DA:7C:B1:5F:6D:D7:9A:15:4B:28:A5:58:8A:5F:C7:3E:33 X509v3 Authority Key Identifier: keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b4:b0:74:39:5b:5d:10:8a:ff:ea:de:75:9b:8b:06:6f:8e: 09:cf:a2:92:f6:5a:ce:1f:91:65:6e:43:a9:f2:7d:2e:27:20: 01:e0:47:75:88:2b:26:23:c6:09:ef:bc:b0:f6:fe:76:5e:14: d5:ab:eb:65:7f:b0:bf:9c:a6:f1:dd:69:c2:ed:0d:49:16:26: c0:00:16:60:47:ec:93:38:e3:b2:2e:30:e0:9d:d9:05:87:f6: fb:fa:fa:ad:e7:d4:34:ae:89:04:c2:17:ae:53:7e:eb:b8:65: 2d:87:13:68:8d:d6:85:fa:40:14:36:8e:8d:70:74:42:4f:5e: 56:e2:42:fd:8d:4e:29:25:24:6e:a9:80:19:c1:65:85:6b:2d: 66:86:22:bf:91:30:85:0f:ae:03:03:2f:02:95:4b:f3:1f:b1: 3c:b3:18:8d:c8:61:7e:69:9e:da:25:07:70:8c:de:51:4c:22: 4b:13:03:64:a9:a5:db:1e:51:40:af:0f:06:d1:86:8a:5d:f2: f1:69:1a:08:b0:58:c3:8a:b5:91:cf:d6:9f:2e:21:88:3d:fe: a6:00:be:cf:88:a0:e6:b5:77:7c:8c:80:d8:4c:6c:84:94:66: 5e:8d:41:e4:52:97:be:66:3c:36:2b:84:db:93:3e:10:0a:f7: 2f:58:21:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFIY+fX/vxcugSm4hWEPW/MvwwyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBBMTkzOEFGNTNDQUI5MTVBQTlFNTI3MUExQ0MwNkJD RTBENEY0MDAeFw0yNDExMjIyMTE1MDFaFw0yNDExMjMyMzQ2MDFaMDMxMTAvBgNV BAMTKDAyNzQ2NERBN0NCMTVGNkRENzlBMTU0QjI4QTU1ODhBNUZDNzNFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDMygHNAhSHKIpCYBc8QrFXTE Fv0epr5u4BpDmB1vJd4VX1OIa4Amcps+JAVe7Kuh4xZq6yvRmq3wDvmxELiRgS9J wwQQSskVSGNYTNsyOfcNeAAswJ3WSGfk2pCXzdYLZ1arJXz7fv3oJQinZpVM35Dy jZjyaRnDVLgw2tScmNJ/k2LC6fcAROn2jqDjmLH3LqyQjPFXgPqzOUOzLo7U93tE FIdaikXUZrVP0TluLDc5LCqwuJQej4U2axvTZuHwVYKzVcqBNQikIGoB5CaL2MIy L4JZg2zdRnLEt53ed1s2f8OFEfUuVv+AmLkTQnDD1kgsSQ5JnnNbprQe/vOhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAnRk2nyxX23XmhVLKKVYil/HPjMwHwYDVR0j BBgwFoAU0KGTivU8q5FaqeUnGhzAa84NT0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHUySENFYUNTSm1xa2VMNkwzOUd6RXJkOG1KNUN6R0RBVHJIQUFGMUM1 OFMvMS9EMEExOTM4QUY1M0NBQjkxNUFBOUU1MjcxQTFDQzA2QkNFMEQ0RjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQTE5MzhBRjUzQ0FCOTE1 QUE5RTUyNzFBMUNDMDZCQ0UwRDRGNDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHUySENFYUNTSm1xa2VMNkwzOUd6RXJkOG1KNUN6R0RBVHJIQUFGMUM1OFMvMS9E MEExOTM4QUY1M0NBQjkxNUFBOUU1MjcxQTFDQzA2QkNFMEQ0RjQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPbSwdDlbXRCK/+redZuLBm+OCc+ikvZazh+RZW5DqfJ9LicgAeBHdYgrJiPG Ce+8sPb+dl4U1avrZX+wv5ym8d1pwu0NSRYmwAAWYEfskzjjsi4w4J3ZBYf2+/r6 refUNK6JBMIXrlN+67hlLYcTaI3WhfpAFDaOjXB0Qk9eVuJC/Y1OKSUkbqmAGcFl hWstZoYiv5EwhQ+uAwMvApVL8x+xPLMYjchhfmme2iUHcIzeUUwiSxMDZKml2x5R QK8PBtGGil3y8WkaCLBYw4q1kc/Wny4hiD3+pgC+z4ig5rV3fIyA2ExshJRmXo1B 5FKXvmY8NiuE25M+EAr3L1ghgw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org