$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: DkbSJeyvKbHaSM8EKHWhP15RkyasEouYwUPBRQfECNw= Subject key identifier: B5:AD:57:A8:C8:5B:11:B7:85:15:B8:8A:FE:A5:1A:74:2E:7D:BE:95 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 4761E7AF1AA53F7EAC9A091C2537CD0C1DB64F1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 01AC Signing time: Sun 16 Feb 2025 13:17:45 +0000 Manifest this update: Sun 16 Feb 2025 13:12:45 +0000 Manifest next update: Mon 17 Feb 2025 15:46:45 +0000 Files and hashes: 1: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: KHE+ZQ16mc8T16RprQnpTvgyg0k/AL4kWG24E2CBbKY=) 2: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: y3lZCCq0IOFmfmrjbdteQ0GspT2lhf61PyVMBbr1S80=) 3: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: IvYrnZ80rmvnk+f/ifQla6cK5O6B38hzT1CwtOxjX7M=) 4: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: fCiKWIGD8EL/QIyZTksmVx9NSqYYweXi5WC6tEAvyuA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 15:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:61:e7:af:1a:a5:3f:7e:ac:9a:09:1c:25:37:cd:0c:1d:b6:4f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Feb 16 13:12:45 2025 GMT Not After : Feb 17 15:46:45 2025 GMT Subject: CN=B5AD57A8C85B11B78515B88AFEA51A742E7DBE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:f3:7c:5c:d1:d0:ab:70:a1:87:66:c5:fb: 1b:b6:d8:ac:87:a3:71:7b:f9:54:09:24:01:7c:bb: 18:df:6e:b3:f3:35:3e:c9:ba:dd:b7:a5:19:fd:29: e2:a2:c3:fe:29:98:16:81:06:44:da:cb:24:5c:35: 42:bb:d0:cd:66:24:7e:7b:98:2c:50:2a:8a:da:9b: d8:2c:fd:a4:aa:a4:32:ae:87:3b:f1:13:73:da:95: e1:f9:90:f8:0b:10:46:d2:e0:f3:d6:ae:f0:93:01: 9b:c9:8d:3c:b2:4a:fa:2b:44:44:49:ca:ee:a3:64: b7:16:79:29:d7:f3:56:b7:22:e7:56:ab:ca:30:9f: 20:95:74:22:7d:12:8f:3c:58:90:88:69:e7:0a:86: fa:dc:0e:33:c1:6e:d4:6c:d0:e4:13:34:1f:ff:4b: 26:34:62:b3:60:1a:a0:e7:05:91:7a:d9:5e:bf:69: 05:31:ca:0a:f8:cf:c8:80:4d:81:39:25:fc:10:5d: c4:bd:cc:a6:32:43:2c:cf:a8:f3:60:a2:79:ba:47: 48:f6:10:38:3a:ad:1e:fc:c6:34:0f:57:41:e5:16: 1d:8d:0d:63:7c:c7:eb:a3:c6:ab:9b:cc:70:14:42: 0f:a6:82:4d:a7:2e:62:a1:36:23:c0:10:5f:66:94: 1e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AD:57:A8:C8:5B:11:B7:85:15:B8:8A:FE:A5:1A:74:2E:7D:BE:95 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:50:6f:3b:c5:b7:b2:f1:7f:57:e0:8e:9e:d8:28:f2:66:4f: c5:a4:61:0a:c3:6b:3a:1f:aa:93:49:fd:ee:c8:c8:ea:44:2d: f4:70:9a:4a:b7:23:ed:bd:04:80:11:be:e2:1a:20:75:ee:35: 76:22:9b:7a:fc:42:03:d9:11:12:11:ea:c3:5a:f5:3f:0d:ab: f6:90:b5:07:8b:5f:b1:fa:39:f4:61:e0:38:1a:4d:bf:13:5c: d8:fe:03:2f:95:2e:27:42:c6:b2:1a:20:d9:02:85:e3:be:d5: 0e:d2:76:81:2a:84:37:3d:39:60:6f:95:d1:29:eb:92:50:dc: cd:85:0c:de:e5:1c:99:b7:e0:ab:cb:74:23:4b:ab:93:fe:6d: d1:f8:38:50:4f:72:07:0a:c7:ca:c3:27:67:6e:f5:e2:c3:91: 92:5c:92:0e:1a:1c:0e:80:39:f2:82:f4:3c:74:53:79:6b:d7: e7:50:f2:64:f0:9c:42:ef:28:25:fc:69:67:64:cd:29:f5:3e: 85:21:b0:03:a0:4b:bf:41:c8:d5:3a:f6:e3:d0:da:7d:74:ac: b0:5f:a0:4b:a1:fc:9d:b4:6d:28:80:37:a3:38:7c:ce:d0:bd: 66:60:cf:2c:6e:43:9c:78:c0:f1:34:c0:0f:c6:10:2b:f4:8b: d0:0b:d9:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR2HnrxqlP36smgkcJTfNDB22TxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTAyMTYxMzEyNDVaFw0yNTAyMTcxNTQ2NDVaMDMxMTAvBgNV BAMTKEI1QUQ1N0E4Qzg1QjExQjc4NTE1Qjg4QUZFQTUxQTc0MkU3REJFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEY/N8XNHQq3Chh2bF+xu22KyH o3F7+VQJJAF8uxjfbrPzNT7Jut23pRn9KeKiw/4pmBaBBkTayyRcNUK70M1mJH57 mCxQKoram9gs/aSqpDKuhzvxE3PaleH5kPgLEEbS4PPWrvCTAZvJjTyySvorRERJ yu6jZLcWeSnX81a3IudWq8ownyCVdCJ9Eo88WJCIaecKhvrcDjPBbtRs0OQTNB// SyY0YrNgGqDnBZF62V6/aQUxygr4z8iATYE5JfwQXcS9zKYyQyzPqPNgonm6R0j2 EDg6rR78xjQPV0HlFh2NDWN8x+ujxqubzHAUQg+mgk2nLmKhNiPAEF9mlB4dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUta1XqMhbEbeFFbiK/qUadC59vpUwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn1BvO8W3svF/V+COntgo8mZPxaRhCsNrOh+qk0n97sjI6kQt9HCaSrcj7b0E gBG+4hogde41diKbevxCA9kREhHqw1r1Pw2r9pC1B4tfsfo59GHgOBpNvxNc2P4D L5UuJ0LGshog2QKF477VDtJ2gSqENz05YG+V0SnrklDczYUM3uUcmbfgq8t0I0ur k/5t0fg4UE9yBwrHysMnZ2714sORklySDhocDoA58oL0PHRTeWvX51DyZPCcQu8o JfxpZ2TNKfU+hSGwA6BLv0HI1Tr249DafXSssF+gS6H8nbRtKIA3ozh8ztC9ZmDP LG5DnHjA8TTAD8YQK/SL0AvZOQ== -----END CERTIFICATE-----Generated at Sun Feb 16 21:59:32 2025 by rpki-client