$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json) Hash identifier: YCyqtlVHxuNG5APYY6L3lohA+91Q6IkxYX1GFkzJwLA= Subject key identifier: BA:90:54:78:70:3C:C9:04:76:EC:9C:57:B8:04:85:59:62:45:86:08 Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD Certificate serial: 6F4B42D56D62F0FC8CA7AB11A0C1FA78BAA1D74A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft Manifest number: 0139 Signing time: Fri 22 Nov 2024 08:07:09 +0000 Manifest this update: Fri 22 Nov 2024 08:02:09 +0000 Manifest next update: Sat 23 Nov 2024 11:49:09 +0000 Files and hashes: 1: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: dt07wAYXTKfdLNJO1iIrUYr3NRHhSKYVAGHiZfaafis=) 2: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: 23FRy86N/kyEC8SyUn72Ttmr+cXH0zMMdz8pBAM28vk=) 3: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: tXvq/8eOQJSi6xXr2N+D4s9i5MpURlp/EkVdekGmaEE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 11:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4b:42:d5:6d:62:f0:fc:8c:a7:ab:11:a0:c1:fa:78:ba:a1:d7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD Validity Not Before: Nov 22 08:02:09 2024 GMT Not After : Nov 23 11:49:09 2024 GMT Subject: CN=BA905478703CC90476EC9C57B804855962458608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:2e:81:94:40:44:ba:f8:e8:4b:ed:a3:01: a9:4f:5a:94:c9:b5:24:64:8f:4f:9f:9f:00:90:43: 57:a2:7a:c6:cd:2c:25:05:a3:85:13:e3:2a:46:0b: ae:6e:c9:b4:6c:6e:eb:6c:be:2b:7b:26:5d:27:93: 71:54:9e:ab:e9:ff:43:28:36:bc:9d:1b:f7:6d:0f: 3a:4a:06:02:dc:bf:5f:81:69:bc:ab:67:31:65:91: e1:c6:9a:94:2d:69:0b:13:fb:33:04:d8:5c:27:6f: 80:bc:2a:b3:73:57:63:95:f0:55:ca:11:49:6c:56: 25:64:8e:45:b2:4b:fa:4e:f6:02:1d:88:53:33:e8: 37:7d:ab:c9:40:5a:49:26:da:9a:fc:69:02:01:79: 80:0c:d7:b9:d8:b5:19:38:24:72:6c:82:42:80:5c: 51:69:23:79:5d:64:83:03:32:3d:4e:f7:9b:57:a9: b3:f0:d9:25:98:9e:09:8b:2b:41:cd:e9:28:da:0a: 1f:37:5a:dc:5a:c5:da:d5:72:4e:d0:22:94:55:22: d2:c6:77:7d:65:33:ec:9a:66:07:be:6a:2c:1f:81: 63:5b:d2:98:99:b8:04:77:3b:3d:71:36:33:44:2e: eb:d2:e9:b4:23:8f:af:2d:43:aa:5e:3a:b0:9d:77: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:54:78:70:3C:C9:04:76:EC:9C:57:B8:04:85:59:62:45:86:08 X509v3 Authority Key Identifier: keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:ef:0e:ce:f1:93:e1:31:fc:ea:82:55:02:b6:9d:5f:32: 41:87:d8:2a:b6:88:86:a0:3d:bc:29:b8:7f:e2:c1:b8:c4:32: 15:2a:d9:ab:ef:86:62:a0:d1:36:2d:e8:c8:61:94:42:01:f2: a0:4a:dd:51:eb:3d:11:ca:81:53:d3:47:01:ca:b1:b2:b4:be: 78:e1:c8:46:b1:3a:c8:b5:e7:63:b8:f7:01:f5:05:98:2b:56: ec:e0:ba:d9:61:09:2c:c5:ed:d0:6b:a3:cf:78:e3:f6:30:b1: 06:9f:0d:08:22:c4:26:73:87:bb:e1:3f:f5:0e:59:92:e3:c9: 3f:29:b5:b1:fe:40:6e:65:b9:56:fd:55:6b:93:76:f5:c0:21: 01:35:df:2a:b4:fc:d7:f0:57:21:b5:e7:fc:39:9e:a0:af:ce: 43:aa:f2:63:78:22:9e:98:61:05:28:16:b5:1f:c9:e0:bc:6b: 3b:59:2c:69:74:56:7c:ae:45:e6:46:fd:34:90:a9:28:f8:38: c1:09:3e:4e:88:35:a1:33:7a:30:1f:60:97:d5:55:90:66:c5: bc:ce:92:c9:00:8d:6b:33:f5:ba:cf:ae:26:4f:d8:17:e6:2a: b8:f7:80:cb:7b:7d:47:5e:d9:30:91:a5:ba:be:f5:81:96:90: 8d:5e:b9:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb0tC1W1i8PyMp6sRoMH6eLqh10owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUEyQkM1N0IzM0RGQkU1NUIzRUI0RUE1OEE3RTlB MTcxNTVERDAeFw0yNDExMjIwODAyMDlaFw0yNDExMjMxMTQ5MDlaMDMxMTAvBgNV BAMTKEJBOTA1NDc4NzAzQ0M5MDQ3NkVDOUM1N0I4MDQ4NTU5NjI0NTg2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTi6BlEBEuvjoS+2jAalPWpTJ tSRkj0+fnwCQQ1eiesbNLCUFo4UT4ypGC65uybRsbutsvit7Jl0nk3FUnqvp/0Mo NrydG/dtDzpKBgLcv1+BabyrZzFlkeHGmpQtaQsT+zME2Fwnb4C8KrNzV2OV8FXK EUlsViVkjkWyS/pO9gIdiFMz6Dd9q8lAWkkm2pr8aQIBeYAM17nYtRk4JHJsgkKA XFFpI3ldZIMDMj1O95tXqbPw2SWYngmLK0HN6SjaCh83WtxaxdrVck7QIpRVItLG d31lM+yaZge+aiwfgWNb0piZuAR3Oz1xNjNELuvS6bQjj68tQ6peOrCdd21fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUupBUeHA8yQR27JxXuASFWWJFhggwHwYDVR0j BBgwFoAUQMqivFezPfvlWz606lin6aFxVd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBV SmcvMS80MENBQTJCQzU3QjMzREZCRTU1QjNFQjRFQTU4QTdFOUExNzE1NURELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQ0FBMkJDNTdCMzNERkJF NTVCM0VCNEVBNThBN0U5QTE3MTU1REQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBVSmcvMS80 MENBQTJCQzU3QjMzREZCRTU1QjNFQjRFQTU4QTdFOUExNzE1NURELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZNzvDs7xk+Ex/OqCVQK2nV8yQYfYKraIhqA9vCm4f+LBuMQyFSrZq++GYqDR Ni3oyGGUQgHyoErdUes9EcqBU9NHAcqxsrS+eOHIRrE6yLXnY7j3AfUFmCtW7OC6 2WEJLMXt0Gujz3jj9jCxBp8NCCLEJnOHu+E/9Q5ZkuPJPym1sf5AbmW5Vv1Va5N2 9cAhATXfKrT81/BXIbXn/DmeoK/OQ6ryY3ginphhBSgWtR/J4LxrO1ksaXRWfK5F 5kb9NJCpKPg4wQk+Tog1oTN6MB9gl9VVkGbFvM6SyQCNazP1us+uJk/YF+YquPeA y3t9R17ZMJGlur71gZaQjV658A== -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org