$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft File: 23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft (raw, json) Hash identifier: 0/UdPi1/7Ek/A6JPkDNk8gnkHOMgY6ZpEv3BZaifNc8= Subject key identifier: AB:E6:9B:59:BB:97:F4:E7:43:CE:DF:79:87:5C:0E:97:72:E4:3C:B3 Authority key identifier: 23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97 Certificate issuer: /CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97 Certificate serial: 6E938551C7C8132ED706D8C80977BBC48A62C216 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer Subject info access: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft Manifest number: 60 Signing time: Fri 04 Apr 2025 09:42:46 +0000 Manifest this update: Fri 04 Apr 2025 09:37:46 +0000 Manifest next update: Sat 05 Apr 2025 12:07:46 +0000 Files and hashes: 1: 23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl (hash: RK+FvsF2uzKq5A42v4H1adjwDhXScGemcEOiHXsakkI=) 2: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (hash: 6cNuXpM/hVKussaKp8OiKygMcJMioHGg827oNChqSVg=) 3: 323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (hash: k+fcDEgAcH19H2ZMeX8Wy3GyjPtollDjfiUOwCete7o=) 4: 3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (hash: 4AtHEp888/iGAmenD1pUO5ZkZo5aUmW8rKsPYcqy0q4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 12:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:93:85:51:c7:c8:13:2e:d7:06:d8:c8:09:77:bb:c4:8a:62:c2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97 Validity Not Before: Apr 4 09:37:46 2025 GMT Not After : Apr 5 12:07:46 2025 GMT Subject: CN=ABE69B59BB97F4E743CEDF79875C0E9772E43CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:62:b7:29:08:d9:58:ee:db:77:c6:0b:25: c1:32:5c:92:51:36:70:c1:d7:dc:65:fc:c1:3b:25: fb:08:0a:a7:29:25:4c:81:98:31:3f:cd:01:86:ae: 89:e8:90:7b:12:b7:d1:32:84:70:b9:d1:b6:cd:9f: 78:76:07:5c:53:99:2c:1f:8a:4d:b9:6f:a5:42:9b: 2b:e9:ea:67:72:a7:f4:54:1c:2d:25:66:3e:82:3e: 28:15:d5:98:2c:cc:51:02:e2:2d:32:7d:0c:cf:c1: 75:85:22:51:57:fe:08:0c:dc:bf:24:c1:10:96:3a: e2:cf:10:6c:de:5a:5f:a9:8c:6c:90:f3:e0:9a:6d: 2f:26:35:a4:88:c4:87:78:cd:c3:9d:34:64:b1:c5: a7:3e:d8:b9:6c:4d:61:c4:c3:99:78:0d:9a:6f:ca: c3:27:de:91:8a:39:c3:7f:74:a5:8a:67:c6:86:e3: 4a:39:17:fc:b4:d0:b6:22:03:c7:69:66:94:f8:36: 4d:82:e4:8e:31:19:2e:02:16:d3:85:5f:da:6f:4c: 24:59:09:93:f3:3c:da:82:98:59:db:8f:ef:0c:24: 5d:32:e9:26:f8:16:63:0d:a1:43:ea:26:0e:a9:ef: e4:d7:82:33:a1:39:61:e7:40:15:d8:09:d6:c6:92: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E6:9B:59:BB:97:F4:E7:43:CE:DF:79:87:5C:0E:97:72:E4:3C:B3 X509v3 Authority Key Identifier: keyid:23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1c:f4:d3:07:34:37:42:11:3b:64:33:dd:ce:da:28:ca:ad: ec:17:9a:d1:06:58:05:21:f6:26:b8:d6:b9:17:ba:6b:ab:d5: 97:d9:81:5e:be:62:54:33:6a:e7:cf:20:34:2d:44:92:42:26: c4:6a:93:1e:6d:56:c0:b6:2e:94:49:21:1f:ee:3e:ef:ea:5e: 7b:ad:32:f6:78:0f:87:61:29:de:c8:7e:66:91:9e:24:c4:ad: 04:e7:a0:9a:8a:79:9c:d2:5d:e3:10:01:d6:40:b0:82:ca:a6: 87:46:ad:2d:21:5d:20:c1:a4:32:ec:62:4b:45:24:be:e8:b0: 21:f3:ba:95:f7:98:0c:52:5f:9b:36:61:aa:eb:3c:12:58:5f: f1:f3:db:69:a4:a2:11:23:d0:16:65:a6:bf:55:1c:12:62:69: a3:51:b4:e1:79:cc:25:a3:be:04:33:e3:84:ca:e4:59:42:cb: a9:8f:ec:61:4c:67:76:cb:72:11:fa:31:02:c7:cd:f7:72:e5: 0f:15:d8:ae:de:b2:b6:0b:ac:3b:b8:24:6e:fe:17:ae:fd:56: a6:a7:75:9d:bc:cb:f8:dc:ed:16:99:60:ee:67:9d:86:54:1b: c7:7d:b8:39:a9:2c:ed:3c:d6:3e:f1:50:0d:18:dc:21:ca:1f: cf:7c:f9:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbpOFUcfIEy7XBtjICXe7xIpiwhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDMkQ1N0M0OUM3QzQwQTNEMjU3M0JDM0E0MUQwODhB MUU4NkM5NzAeFw0yNTA0MDQwOTM3NDZaFw0yNTA0MDUxMjA3NDZaMDMxMTAvBgNV BAMTKEFCRTY5QjU5QkI5N0Y0RTc0M0NFREY3OTg3NUMwRTk3NzJFNDNDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VGK3KQjZWO7bd8YLJcEyXJJR NnDB19xl/ME7JfsICqcpJUyBmDE/zQGGronokHsSt9EyhHC50bbNn3h2B1xTmSwf ik25b6VCmyvp6mdyp/RUHC0lZj6CPigV1ZgszFEC4i0yfQzPwXWFIlFX/ggM3L8k wRCWOuLPEGzeWl+pjGyQ8+CabS8mNaSIxId4zcOdNGSxxac+2LlsTWHEw5l4DZpv ysMn3pGKOcN/dKWKZ8aG40o5F/y00LYiA8dpZpT4Nk2C5I4xGS4CFtOFX9pvTCRZ CZPzPNqCmFnbj+8MJF0y6Sb4FmMNoUPqJg6p7+TXgjOhOWHnQBXYCdbGkl5ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUq+abWbuX9OdDzt95h1wOl3LkPLMwHwYDVR0j BBgwFoAUI8LVfEnHxAo9JXO8OkHQiKHobJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWEx V04vMC8yM0MyRDU3QzQ5QzdDNDBBM0QyNTczQkMzQTQxRDA4OEExRTg2Qzk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzJENTdDNDlDN0M0MEEz RDI1NzNCQzNBNDFEMDg4QTFFODZDOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWExV04vMC8y M0MyRDU3QzQ5QzdDNDBBM0QyNTczQkMzQTQxRDA4OEExRTg2Qzk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAARz00wc0N0IRO2Qz3c7aKMqt7Bea0QZYBSH2JrjWuRe6a6vVl9mBXr5iVDNq 588gNC1EkkImxGqTHm1WwLYulEkhH+4+7+pee60y9ngPh2Ep3sh+ZpGeJMStBOeg mop5nNJd4xAB1kCwgsqmh0atLSFdIMGkMuxiS0UkvuiwIfO6lfeYDFJfmzZhqus8 Elhf8fPbaaSiESPQFmWmv1UcEmJpo1G04XnMJaO+BDPjhMrkWULLqY/sYUxndsty EfoxAsfN93LlDxXYrt6ytgusO7gkbv4Xrv1Wpqd1nbzL+NztFplg7medhlQbx324 Oaks7TzWPvFQDRjcIcofz3z5UA== -----END CERTIFICATE-----Generated at Fri Apr 4 17:59:41 2025 by rpki-client