$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft File: 2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft (raw, json) Hash identifier: x+a2OYbPqYG70tsmQ9KMi1gMY1AKW/RbymSjHVe57Cs= Subject key identifier: B4:D9:DD:6C:27:D7:E7:6C:81:A8:AE:D4:71:06:2F:43:1C:F7:47:33 Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF Certificate issuer: /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF Certificate serial: 0854A7377535A47861B7C984B745838553AF2244 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer Subject info access: rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft Manifest number: 11 Signing time: Thu 20 Feb 2025 13:07:11 +0000 Manifest this update: Thu 20 Feb 2025 13:02:11 +0000 Manifest next update: Fri 21 Feb 2025 13:41:11 +0000 Files and hashes: 1: 34352e36352e3230372e302f32342d3234203d3e20323636353434.roa (hash: UBvS06FMuKqSrQS0LkIaSgc02wwjCwehpcAxAJgunxo=) 2: 34352e36352e3230342e302f32332d3233203d3e20323636353434.roa (hash: Vt/gQuRH6Ut7MDX+FeHi3lFHnqWD10nSXGUgQmAo4Jc=) 3: 323830343a336461343a3a2f34302d3430203d3e20323636353434.roa (hash: 09hisYJc1VosXsVh7+Z9+ofTW2WLctfcYNSk2Ousozs=) 4: 2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl (hash: PfAwi0p/G/Itwg+51lHDl3vpCXDcKaQfOYhs5f8M2nE=) 5: 323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa (hash: GS2xXRNMwHse9m4AUjP2BjRHrpXrXQJ6LsBNXTcSD6o=) 6: 34352e36352e3230362e302f32342d3234203d3e20323636353434.roa (hash: gmBfkFcP1FmjECVTK0E9EveVsOhM/UD0beivJWf5e30=) 7: 323830343a336461343a3a2f33322d3332203d3e20323636353434.roa (hash: DvcsaLp8E0Ouamb2Fwv0KT11deEDA6WBjUoErFqzlgc=) 8: 34352e36352e3230362e302f32332d3233203d3e20323636353434.roa (hash: y+QEhouUhOoETai0OImI1nXkg8+POCGmWct0GlhGcQw=) 9: 323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa (hash: fNZ/9r46FClcYJgFPwN7V/mAYWUg10WZ4IB5KtcTfcI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 13:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:54:a7:37:75:35:a4:78:61:b7:c9:84:b7:45:83:85:53:af:22:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF Validity Not Before: Feb 20 13:02:11 2025 GMT Not After : Feb 21 13:41:11 2025 GMT Subject: CN=B4D9DD6C27D7E76C81A8AED471062F431CF74733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bf:19:6e:a2:3e:00:37:76:8e:4c:26:13:f1: d2:ce:8a:e3:d2:9f:93:a9:a3:c8:ef:21:5e:8a:b6: 5a:f0:4a:1b:62:4e:2a:9c:8e:2d:28:07:99:1e:00: e0:56:34:d6:24:b8:49:f1:ea:2a:73:34:c2:f5:82: 0e:91:40:7f:de:cb:19:e6:29:31:3c:ab:4d:c4:bd: c5:62:31:49:95:50:99:19:19:82:f6:68:ad:72:d5: 72:d4:5e:68:0d:d9:42:e4:ee:af:44:07:65:04:b8: 19:1e:c8:44:61:52:0b:b5:e9:0d:19:c7:f4:7d:47: 6a:d5:d0:61:9e:49:6b:bd:fb:99:80:25:0f:2b:c1: 83:9f:80:32:ca:5e:be:f3:9f:1b:cd:c5:bb:c3:2a: 69:f7:5b:d6:61:94:54:16:e6:e0:3a:69:ea:49:6d: ea:2b:ca:fc:70:2e:14:09:b9:f5:17:11:b0:75:be: fa:38:2d:c3:07:91:f6:ad:e1:15:10:cf:63:0f:18: 73:dc:70:7b:65:b8:2c:29:89:ce:a6:47:fd:38:cd: 05:60:c4:de:00:1b:d9:06:08:c5:4a:b4:e3:99:79: 23:b4:a1:9e:17:ec:f0:6f:8a:31:a2:d5:3e:ba:5d: a9:5a:cf:2d:b1:48:44:bd:e5:b3:84:e3:25:d6:aa: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D9:DD:6C:27:D7:E7:6C:81:A8:AE:D4:71:06:2F:43:1C:F7:47:33 X509v3 Authority Key Identifier: keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:dd:b5:44:a0:67:6c:b6:af:1d:60:60:cc:ff:c8:7c:8d:3c: 28:72:e0:9c:87:90:9e:b9:d7:dd:23:f9:e6:b3:47:53:b6:85: 03:6d:64:2c:60:0b:2e:9b:26:6b:c4:70:77:64:51:9c:9d:59: 2d:b9:e5:04:27:9d:4e:36:f1:1f:f2:2d:af:02:d2:1c:a8:5d: b6:d5:94:9f:6a:fb:90:44:b5:9a:e8:ee:c1:cd:8f:99:9f:58: 9e:00:f4:ed:55:45:fb:d8:13:b6:31:4e:c4:7d:9c:ea:1d:88: 58:71:55:e5:59:8c:32:1b:54:55:67:59:b7:8b:89:69:0b:f3: 30:ec:7f:39:fd:d1:b0:02:54:c1:f3:6f:2e:50:5a:6f:7e:1c: b4:89:51:06:13:a2:54:38:66:19:4e:43:b7:b3:e2:8f:64:f9: 29:85:8b:38:b9:8d:ee:71:55:57:cf:86:5d:3f:c3:a2:6d:78: 90:56:02:8f:0f:88:59:6d:22:af:f7:e6:e1:a5:24:99:54:36: b7:81:18:a4:5a:f6:77:29:7f:e8:72:86:71:5f:76:14:29:80: 59:27:cb:93:87:2d:64:c7:4c:13:ed:fd:6f:52:38:31:40:07: 3f:42:89:bf:c6:8c:63:9d:90:e9:25:27:da:8c:8f:e1:da:ba: e3:bd:72:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCFSnN3U1pHhht8mEt0WDhVOvIkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxQkMzN0Q4NDdENTFGQzc2Nzc2QThFMkEzMkM4NTFC MzkxRERFRjAeFw0yNTAyMjAxMzAyMTFaFw0yNTAyMjExMzQxMTFaMDMxMTAvBgNV BAMTKEI0RDlERDZDMjdEN0U3NkM4MUE4QUVENDcxMDYyRjQzMUNGNzQ3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvxluoj4AN3aOTCYT8dLOiuPS n5Opo8jvIV6KtlrwShtiTiqcji0oB5keAOBWNNYkuEnx6ipzNML1gg6RQH/eyxnm KTE8q03EvcViMUmVUJkZGYL2aK1y1XLUXmgN2ULk7q9EB2UEuBkeyERhUgu16Q0Z x/R9R2rV0GGeSWu9+5mAJQ8rwYOfgDLKXr7znxvNxbvDKmn3W9ZhlFQW5uA6aepJ beoryvxwLhQJufUXEbB1vvo4LcMHkfat4RUQz2MPGHPccHtluCwpic6mR/04zQVg xN4AG9kGCMVKtOOZeSO0oZ4X7PBvijGi1T66Xalazy2xSES95bOE4yXWqpCzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtNndbCfX52yBqK7UcQYvQxz3RzMwHwYDVR0j BBgwFoAULRvDfYR9Ufx2d2qOKjLIUbOR3e8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVg1TDdWZUhjSHROMTlwRVpyV3VMNkdpZjNEdk1SbzNBUVNKOWdMWTZ4 TG4vMC8yRDFCQzM3RDg0N0Q1MUZDNzY3NzZBOEUyQTMyQzg1MUIzOTFEREVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMUJDMzdEODQ3RDUxRkM3 Njc3NkE4RTJBMzJDODUxQjM5MURERUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVg1TDdWZUhjSHROMTlwRVpyV3VMNkdpZjNEdk1SbzNBUVNKOWdMWTZ4TG4vMC8y RDFCQzM3RDg0N0Q1MUZDNzY3NzZBOEUyQTMyQzg1MUIzOTFEREVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASd21RKBnbLavHWBgzP/IfI08KHLgnIeQnrnX3SP55rNHU7aFA21kLGALLpsm a8Rwd2RRnJ1ZLbnlBCedTjbxH/ItrwLSHKhdttWUn2r7kES1mujuwc2PmZ9YngD0 7VVF+9gTtjFOxH2c6h2IWHFV5VmMMhtUVWdZt4uJaQvzMOx/Of3RsAJUwfNvLlBa b34ctIlRBhOiVDhmGU5Dt7Pij2T5KYWLOLmN7nFVV8+GXT/Dom14kFYCjw+IWW0i r/fm4aUkmVQ2t4EYpFr2dyl/6HKGcV92FCmAWSfLk4ctZMdME+39b1I4MUAHP0KJ v8aMY52Q6SUn2oyP4dq6471ybw== -----END CERTIFICATE-----Generated at Thu Feb 20 17:34:33 2025 by rpki-client