$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft File: 011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft (raw, json) Hash identifier: mqWWcWGobJIPi4lewO9m0zMYKfAfW1/baCDfWWfEBR4= Subject key identifier: 32:4E:29:93:C8:0B:5C:47:9F:E8:E0:B4:72:D5:D5:2C:A1:E3:1C:05 Authority key identifier: 01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53 Certificate issuer: /CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453 Certificate serial: 47DF22D85DE3A6CDE9AA3873AFD05D1A236BA5E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft Manifest number: AE Signing time: Wed 19 Feb 2025 16:41:05 +0000 Manifest this update: Wed 19 Feb 2025 16:36:05 +0000 Manifest next update: Thu 20 Feb 2025 17:05:05 +0000 Files and hashes: 1: 323830343a31343a3a2f33322d313238203d3e203238333630.roa (hash: fxsMtFM9Q+eEfNju9tFWLjkWXVFHCaw+JtId8IbpjSw=) 2: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (hash: uCusOwfIODi2DkSCpf8sewOTENPUEMkwYuxsEf+tFVg=) 3: 3137372e382e31362e302f32302d3332203d3e203238333630.roa (hash: +SUzPeXZNx20d5vnZdAr1EAm2/lIuIjjo7pgMz2l96M=) 4: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (hash: VArEVVoQSo6mmgqgThge67qIEXk4nUeV07/UlQ+S2B0=) 5: 3137372e382e302e302f32302d3332203d3e203238333630.roa (hash: sebdx+71V1SPfz5jgGt15p8vyYg1zNIocQGwTnYDiO0=) 6: 011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl (hash: Dy/BnwjH75BgJ1vML1LrKQ86woDHvmGL3NqeW1ASmF8=) 7: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (hash: 7xnUV8TVx1qFRE2xPZ6+p184T34Q01d6h8kLHhs8rKM=) 8: 3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (hash: oKaogbl14tCZm0YEgP3o16QWaRyZ/5vgl5pgFw/+WwQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:df:22:d8:5d:e3:a6:cd:e9:aa:38:73:af:d0:5d:1a:23:6b:a5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453 Validity Not Before: Feb 19 16:36:05 2025 GMT Not After : Feb 20 17:05:05 2025 GMT Subject: CN=324E2993C80B5C479FE8E0B472D5D52CA1E31C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:e7:50:29:ed:29:c7:f0:46:df:49:b7:b3: 21:9b:8d:3a:bb:8e:8b:09:ca:c6:01:c7:0f:5f:c8: f9:6d:a6:9a:0b:58:98:17:57:bf:c4:ec:0e:d5:f5: 60:80:74:ef:fd:4a:b6:a7:6e:c5:1c:39:d0:e6:19: ef:4c:d1:30:5c:9d:72:94:da:91:fe:1e:81:af:3c: a3:85:c9:40:fd:9b:81:19:bd:c3:9f:75:2a:df:5f: 58:8a:c2:7b:0f:3a:62:c9:ad:37:32:a3:b2:48:3b: 27:8f:a2:7a:1c:d7:8a:f2:2d:cb:28:a3:5b:c3:7b: f9:47:71:9f:94:2c:fc:4d:a1:74:96:86:c3:ed:5c: 1f:59:ae:5e:d3:d8:76:bf:2d:e6:73:ee:2c:bf:4d: d2:3d:e9:20:8c:b9:1e:70:b3:d5:1b:4f:2c:4c:1a: 02:9b:9e:5c:3c:15:fa:88:21:e8:0f:52:1b:d6:9f: a5:a5:ba:cd:24:1b:6b:cf:dc:42:7f:f3:41:60:1e: d6:eb:09:5c:73:27:46:a1:87:b2:93:4e:c2:c2:eb: 32:85:b8:96:59:e9:78:4d:32:d7:55:50:51:41:83: 25:c3:a0:d8:92:65:d6:17:57:9f:20:3c:44:da:d1: 77:1d:3a:c1:24:b3:d9:5c:ab:65:fd:89:8e:dd:5b: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:29:93:C8:0B:5C:47:9F:E8:E0:B4:72:D5:D5:2C:A1:E3:1C:05 X509v3 Authority Key Identifier: keyid:01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:86:1a:d8:90:74:76:ba:3c:23:76:47:c6:4d:13:b4:44:76: 57:ee:55:0a:82:f0:c5:c9:b1:1b:97:1e:cd:a8:d3:72:e8:65: 14:66:88:10:3b:6c:69:65:75:de:e0:ed:48:df:9b:bd:9d:a7: 81:80:1c:fc:dd:78:3e:33:57:ea:de:ba:5f:ba:aa:74:9e:53: d3:ce:93:3c:64:02:39:c2:1e:c5:c2:eb:07:73:cc:35:e1:dc: d6:76:7e:f7:a4:e9:41:bb:9c:d2:4d:93:6b:f6:b4:a7:21:ab: 51:a9:2b:0a:9e:93:55:6a:02:9b:dd:f7:00:1b:bc:e6:7c:c3: 53:84:9d:b8:56:13:06:98:16:74:45:3c:71:fe:66:a0:bb:41: 09:a4:56:91:f1:87:cd:50:5c:04:8b:ab:c2:e6:6d:0e:fc:d5: 12:a5:f7:70:71:a6:a2:95:74:34:16:f4:3a:16:92:ce:cb:c9: b8:a4:bf:6d:d2:66:00:7a:05:71:87:df:f0:52:36:d7:70:cb: 44:3e:24:e6:18:31:78:28:df:22:af:b2:95:eb:fe:08:2f:21: 28:64:41:1e:a2:19:94:ff:1d:ca:23:74:15:93:08:c8:6b:83: dc:bb:ae:73:54:f2:d1:85:13:7d:68:29:bc:ed:21:35:eb:21: 2d:2b:07:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR98i2F3jps3pqjhzr9BdGiNrpeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExRTAzQzkxNjlERUZGNjYyRjZCRTFEOUVCRjQzMEJG QTlFMDQ1MzAeFw0yNTAyMTkxNjM2MDVaFw0yNTAyMjAxNzA1MDVaMDMxMTAvBgNV BAMTKDMyNEUyOTkzQzgwQjVDNDc5RkU4RTBCNDcyRDVENTJDQTFFMzFDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofOdQKe0px/BG30m3syGbjTq7 josJysYBxw9fyPltppoLWJgXV7/E7A7V9WCAdO/9SranbsUcOdDmGe9M0TBcnXKU 2pH+HoGvPKOFyUD9m4EZvcOfdSrfX1iKwnsPOmLJrTcyo7JIOyePonoc14ryLcso o1vDe/lHcZ+ULPxNoXSWhsPtXB9Zrl7T2Ha/LeZz7iy/TdI96SCMuR5ws9UbTyxM GgKbnlw8FfqIIegPUhvWn6Wlus0kG2vP3EJ/80FgHtbrCVxzJ0ahh7KTTsLC6zKF uJZZ6XhNMtdVUFFBgyXDoNiSZdYXV58gPETa0XcdOsEks9lcq2X9iY7dW5WrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMk4pk8gLXEef6OC0ctXVLKHjHAUwHwYDVR0j BBgwFoAUAR4DyRad7/Zi9r4dnr9DC/qeBFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz UDIvMC8wMTFFMDNDOTE2OURFRkY2NjJGNkJFMUQ5RUJGNDMwQkZBOUUwNDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxMUUwM0M5MTY5REVGRjY2 MkY2QkUxRDlFQkY0MzBCRkE5RTA0NTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkozUDIvMC8w MTFFMDNDOTE2OURFRkY2NjJGNkJFMUQ5RUJGNDMwQkZBOUUwNDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACoYa2JB0dro8I3ZHxk0TtER2V+5VCoLwxcmxG5cezajTcuhlFGaIEDtsaWV1 3uDtSN+bvZ2ngYAc/N14PjNX6t66X7qqdJ5T086TPGQCOcIexcLrB3PMNeHc1nZ+ 96TpQbuc0k2Ta/a0pyGrUakrCp6TVWoCm933ABu85nzDU4SduFYTBpgWdEU8cf5m oLtBCaRWkfGHzVBcBIurwuZtDvzVEqX3cHGmopV0NBb0OhaSzsvJuKS/bdJmAHoF cYff8FI213DLRD4k5hgxeCjfIq+ylev+CC8hKGRBHqIZlP8dyiN0FZMIyGuD3Luu c1Ty0YUTfWgpvO0hNeshLSsHAg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:36:27 2025 by rpki-client