$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft File: 8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft (raw, json) Hash identifier: tXZ2CfaPBZWdq/TqE8UbyLv1l/GVLHSy7u3o2HcTXgE= Subject key identifier: 5B:22:7F:51:39:A1:ED:A1:92:7B:6A:72:C8:47:F1:3B:37:71:6A:88 Authority key identifier: 82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72 Certificate issuer: /CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672 Certificate serial: 392527657D7CACA6516BC266D04820D301D1EC76 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft Manifest number: 2B Signing time: Wed 19 Feb 2025 20:54:53 +0000 Manifest this update: Wed 19 Feb 2025 20:49:53 +0000 Manifest next update: Fri 21 Feb 2025 00:35:53 +0000 Files and hashes: 1: 323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa (hash: k8osUm4P75pnPijgAVqyHJekVPFfGsN94INVDQYK0to=) 2: 3137392e36332e38362e302f32342d3234203d3e20323732363737.roa (hash: pv8uGn8LrrkiDHRUYYjBcI4mbf6DGk0WV0wqC8WtV2A=) 3: 323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa (hash: GXBmtfeZe589AKYXYDIZmj8w5w7lB0A2LszXm8/A8E0=) 4: 3137392e36332e38342e302f32332d3233203d3e20323732363737.roa (hash: WN4ZwA2nx+3cTSwAdC3vDweZNp/7N7K6iIiOfadQL5k=) 5: 323830343a383666343a3a2f33342d3334203d3e20323732363737.roa (hash: 8AAR0xUIu4J+HKbCCX/zgMfpXO/F9BzLHhea6iVl+3g=) 6: 3137392e36332e38352e302f32342d3234203d3e20323732363737.roa (hash: xNp5tEvN+nChFr/FehwVAcuPNFdglKKwFzasegKy7ZU=) 7: 8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl (hash: Yo3PF8L9tNLalv7uAyQUG2dfMZZijVjVEifRP+kQnHA=) 8: 3137392e36332e38342e302f32342d3234203d3e20323732363737.roa (hash: O0F7UTGkKMI7AvMGD+A8PQ50At8u6krvXx3k0rHyiD8=) 9: 3137392e36332e38372e302f32342d3234203d3e20323732363737.roa (hash: DFY/FSL2pAfu+JmC8QwwfRt+dB+l0veKzydzEOWLAMY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:25:27:65:7d:7c:ac:a6:51:6b:c2:66:d0:48:20:d3:01:d1:ec:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672 Validity Not Before: Feb 19 20:49:53 2025 GMT Not After : Feb 21 00:35:53 2025 GMT Subject: CN=5B227F5139A1EDA1927B6A72C847F13B37716A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:24:93:9e:8f:1e:f2:de:0d:41:ad:df:78: 89:10:41:65:47:db:88:d2:4c:86:cd:3b:87:fb:8a: 81:12:78:87:e5:5d:59:c5:e4:47:81:98:60:45:1d: 56:56:52:97:63:b1:cc:e5:58:76:e6:5d:0f:0c:5b: 7d:33:d9:92:75:88:79:27:47:7a:5e:0d:60:36:6d: c2:7c:b3:c2:53:cc:66:1f:00:4f:0c:07:f3:83:38: fe:6d:83:80:ed:38:94:48:57:60:f4:dd:2a:d1:95: e4:13:a2:80:f1:8c:fc:ae:8d:d7:84:9e:81:26:25: 2c:7e:ba:1e:24:7b:3c:fb:0d:88:22:64:24:31:b2: 05:99:37:9f:2f:f4:e2:d4:4c:30:f4:18:e1:46:02: 89:97:57:12:11:9f:2d:1a:7c:02:db:06:14:fe:c6: 45:5c:dd:2c:79:91:35:1c:e9:cb:1a:60:68:cd:19: bf:e3:b8:2c:9e:29:b8:bb:ec:84:da:c8:6a:0a:49: 60:67:c0:e6:93:20:5d:51:12:55:d5:66:49:8c:97: e3:6b:47:fc:26:7c:6a:19:0c:6d:8a:95:c1:a2:85: 1d:a3:14:b7:91:cc:ca:7a:e0:63:96:f5:f2:34:f6: 32:04:e5:2b:5e:73:64:53:54:bd:bb:9a:b3:a2:70: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:22:7F:51:39:A1:ED:A1:92:7B:6A:72:C8:47:F1:3B:37:71:6A:88 X509v3 Authority Key Identifier: keyid:82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e5:bd:c0:54:2e:5a:a3:69:7e:06:39:c8:49:0b:10:d7:60: e6:74:88:47:d9:31:53:a9:9d:0f:c3:26:e4:37:2d:09:1b:2a: 6e:92:f2:11:b6:9c:2e:d7:e6:9b:eb:07:ff:71:a9:0e:fd:b4: b5:55:75:40:d8:93:a5:4f:23:86:28:f4:cb:65:f8:03:c3:d3: c7:57:95:c7:e1:96:e7:5e:9c:3a:e2:63:5c:8a:67:ab:b2:6c: bb:1b:47:c7:9b:c5:9d:d7:9b:f4:ae:d1:9b:f7:4c:36:bb:6a: bf:7d:bf:c6:25:33:9b:2f:fb:00:18:47:17:2b:19:3b:66:39: 72:e1:7a:a2:ae:2d:bd:2f:fc:d3:1e:d1:0a:46:78:48:fc:66: 74:76:08:0d:4c:76:23:7c:0a:bb:92:23:98:3d:f0:00:f6:99: 46:97:fd:a9:86:ce:60:d0:c6:a3:95:d6:32:12:f5:a5:86:53: d9:f4:15:68:ac:bb:42:2b:25:33:6d:08:bf:48:91:2c:37:14: 17:a8:76:ab:a9:94:35:6b:2e:ef:1f:7f:6a:05:83:71:34:ab: 5e:e4:16:24:43:56:41:4a:ab:bc:dd:6d:d9:7a:a5:c2:4f:3e: 32:42:ae:e4:0f:d9:4c:84:99:a0:eb:15:b9:75:3c:aa:15:cd: dd:ee:c5:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOSUnZX18rKZRa8Jm0Egg0wHR7HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzODc4MkJFQjlDRkU5RkQ1QTFBM0Q3OUNFRkFBQTM0 N0IzMTY3MjAeFw0yNTAyMTkyMDQ5NTNaFw0yNTAyMjEwMDM1NTNaMDMxMTAvBgNV BAMTKDVCMjI3RjUxMzlBMUVEQTE5MjdCNkE3MkM4NDdGMTNCMzc3MTZBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQSSTno8e8t4NQa3feIkQQWVH 24jSTIbNO4f7ioESeIflXVnF5EeBmGBFHVZWUpdjsczlWHbmXQ8MW30z2ZJ1iHkn R3peDWA2bcJ8s8JTzGYfAE8MB/ODOP5tg4DtOJRIV2D03SrRleQTooDxjPyujdeE noEmJSx+uh4kezz7DYgiZCQxsgWZN58v9OLUTDD0GOFGAomXVxIRny0afALbBhT+ xkVc3Sx5kTUc6csaYGjNGb/juCyeKbi77ITayGoKSWBnwOaTIF1RElXVZkmMl+Nr R/wmfGoZDG2KlcGihR2jFLeRzMp64GOW9fI09jIE5Stec2RTVL27mrOicKFfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWyJ/UTmh7aGSe2pyyEfxOzdxaogwHwYDVR0j BBgwFoAUgjh4K+uc/p/VoaPXnO+qo0ezFnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK UlQvMC84MjM4NzgyQkVCOUNGRTlGRDVBMUEzRDc5Q0VGQUFBMzQ3QjMxNjcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyMzg3ODJCRUI5Q0ZFOUZE NUExQTNENzlDRUZBQUEzNDdCMzE2NzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBKUlQvMC84 MjM4NzgyQkVCOUNGRTlGRDVBMUEzRDc5Q0VGQUFBMzQ3QjMxNjcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeOW9wFQuWqNpfgY5yEkLENdg5nSIR9kxU6mdD8Mm5DctCRsqbpLyEbacLtfm m+sH/3GpDv20tVV1QNiTpU8jhij0y2X4A8PTx1eVx+GW516cOuJjXIpnq7JsuxtH x5vFndeb9K7Rm/dMNrtqv32/xiUzmy/7ABhHFysZO2Y5cuF6oq4tvS/80x7RCkZ4 SPxmdHYIDUx2I3wKu5IjmD3wAPaZRpf9qYbOYNDGo5XWMhL1pYZT2fQVaKy7Qisl M20Iv0iRLDcUF6h2q6mUNWsu7x9/agWDcTSrXuQWJENWQUqrvN1t2Xqlwk8+MkKu 5A/ZTISZoOsVuXU8qhXN3e7Fkg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:36:13 2025 by rpki-client