$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: 9D4LydvAHs/hvJHb9rKXCwyG4VWzphMSuYBtfK4GuSI= Subject key identifier: 46:07:4C:21:FE:C1:76:2D:F8:50:CC:20:35:52:9D:15:D8:15:20:29 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 683B41E329C0359AC3428ED491E1DDC9829285DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 01B5 Signing time: Sun 16 Feb 2025 09:42:44 +0000 Manifest this update: Sun 16 Feb 2025 09:37:44 +0000 Manifest next update: Mon 17 Feb 2025 13:16:44 +0000 Files and hashes: 1: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: dVq3vCMVCXPy5rt7YXUMbmgATZGcuvitwQHeYjiFwqk=) 2: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: 7pAcbuLrpIB62LfP66+E2nxWBNHiZ+nJQEK/Jwqg2Yk=) 3: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: QFeGo9z+xnDn9TfvQo7+CzLYmFi4mQOMZ53KXPIhFAs=) 4: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 13:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3b:41:e3:29:c0:35:9a:c3:42:8e:d4:91:e1:dd:c9:82:92:85:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Feb 16 09:37:44 2025 GMT Not After : Feb 17 13:16:44 2025 GMT Subject: CN=46074C21FEC1762DF850CC2035529D15D8152029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:1b:bc:d4:b6:e1:2f:df:1a:79:18:aa:97: 6e:e3:fc:39:46:f5:97:99:2e:26:4e:0f:d2:1a:c8: cd:c0:d9:33:57:6b:4d:44:e7:9a:23:1b:a8:02:7f: 77:04:dd:db:ec:85:95:01:32:2a:77:d7:0a:7a:25: 7e:e3:23:8b:c7:73:f3:4c:82:11:66:8e:b6:eb:7b: ca:a4:c5:0c:cc:3b:bf:c6:bd:01:56:60:b9:80:c4: 3c:2d:37:4c:25:9b:68:29:ca:8e:23:ad:3f:fc:12: 8d:f4:86:71:40:e5:bd:2f:1d:f7:1f:71:64:dd:0d: 7f:ec:0b:3a:8a:cd:51:95:35:a9:e3:dc:aa:d5:8b: 74:ca:58:0b:db:85:6e:c1:79:9c:83:0b:d7:9b:73: 94:d5:12:96:b6:c8:5a:8a:40:8b:7f:4f:eb:cb:1d: 6c:ce:51:67:cb:62:47:08:39:bc:04:7c:82:7e:1e: d8:1e:db:d9:e4:4d:9e:12:8a:c1:05:a7:86:bd:c2: d4:03:4b:eb:93:92:64:50:aa:21:f2:89:a3:c3:95: d2:48:92:2b:fa:71:97:a0:67:5b:ac:98:98:d4:db: 79:74:e2:97:e8:d2:51:c4:66:4f:a0:af:ce:a7:fa: d7:94:e1:53:64:32:f9:6b:25:17:54:27:5f:bc:2c: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:07:4C:21:FE:C1:76:2D:F8:50:CC:20:35:52:9D:15:D8:15:20:29 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:62:4b:e0:2a:86:1f:d9:7a:5f:75:02:c3:67:c6:c3:79:cf: fc:80:4e:40:2c:b8:23:c1:95:d4:fa:24:d7:20:00:40:76:d9: 60:bd:ec:92:f4:ad:78:33:cd:c7:1d:55:e4:f4:3d:41:b3:84: ca:f8:e1:ca:8d:b0:db:dd:7b:d6:d1:ec:be:88:cb:e2:01:ee: 7b:27:ab:de:48:0e:f4:12:73:5c:5c:b3:1d:d3:b8:ab:d8:cd: 6c:93:3a:29:9a:52:8f:5c:bd:58:3d:e7:96:15:57:3c:dd:5a: d0:28:50:c0:9d:0e:9a:36:bc:8b:9e:a5:e9:d6:21:72:b0:c2: 5d:55:43:9e:2b:9c:59:e9:43:8c:0a:fa:30:aa:45:1f:c8:c0: 5d:4b:64:13:71:74:89:eb:99:56:bc:44:ab:95:ce:30:55:c9: e8:ae:b3:d8:11:2b:8b:86:ec:8a:c8:eb:09:ff:37:b6:b1:58: ea:80:e6:52:ee:d4:6c:81:c9:d2:dd:6b:80:46:bd:34:15:80: 5d:33:3c:ed:09:1c:a5:e0:2f:f6:68:d4:87:c9:2e:b1:7e:6d: 39:12:90:9f:ff:85:90:d8:21:6d:38:6d:f6:2d:37:88:ca:09: 75:d8:cf:44:c4:21:ab:bf:22:27:d2:ab:2b:f0:a1:76:c0:c3: 08:c0:25:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaDtB4ynANZrDQo7UkeHdyYKShd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTAyMTYwOTM3NDRaFw0yNTAyMTcxMzE2NDRaMDMxMTAvBgNV BAMTKDQ2MDc0QzIxRkVDMTc2MkRGODUwQ0MyMDM1NTI5RDE1RDgxNTIwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEBu81LbhL98aeRiql27j/DlG 9ZeZLiZOD9IayM3A2TNXa01E55ojG6gCf3cE3dvshZUBMip31wp6JX7jI4vHc/NM ghFmjrbre8qkxQzMO7/GvQFWYLmAxDwtN0wlm2gpyo4jrT/8Eo30hnFA5b0vHfcf cWTdDX/sCzqKzVGVNanj3KrVi3TKWAvbhW7BeZyDC9ebc5TVEpa2yFqKQIt/T+vL HWzOUWfLYkcIObwEfIJ+Htge29nkTZ4SisEFp4a9wtQDS+uTkmRQqiHyiaPDldJI kiv6cZegZ1usmJjU23l04pfo0lHEZk+gr86n+teU4VNkMvlrJRdUJ1+8LJdtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURgdMIf7Bdi34UMwgNVKdFdgVICkwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdmJL4CqGH9l6X3UCw2fGw3nP/IBOQCy4I8GV1Pok1yAAQHbZYL3skvSteDPN xx1V5PQ9QbOEyvjhyo2w29171tHsvojL4gHueyer3kgO9BJzXFyzHdO4q9jNbJM6 KZpSj1y9WD3nlhVXPN1a0ChQwJ0Omja8i56l6dYhcrDCXVVDniucWelDjAr6MKpF H8jAXUtkE3F0ieuZVrxEq5XOMFXJ6K6z2BEri4bsisjrCf83trFY6oDmUu7UbIHJ 0t1rgEa9NBWAXTM87QkcpeAv9mjUh8kusX5tORKQn/+FkNghbTht9i03iMoJddjP RMQhq78iJ9KrK/ChdsDDCMAlMA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:05:47 2025 by rpki-client