$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.mft File: 1B4381A700D83209483A0BD2D3A2787F6A191AD4.mft (raw, json) Hash identifier: X4GSIbhiWFXZwG3rWpcfSzoUGXkp8WseaCDikuHbN0c= Subject key identifier: 44:6E:CA:34:AE:9B:F1:59:F6:A5:6B:15:D1:4A:87:17:56:10:01:95 Authority key identifier: 1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4 Certificate issuer: /CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4 Certificate serial: 1EB6B4B9B48B159CCEFF6862D0B7FDDB373A991A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer Subject info access: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.mft Manifest number: 10 Signing time: Thu 20 Feb 2025 07:24:41 +0000 Manifest this update: Thu 20 Feb 2025 07:19:41 +0000 Manifest next update: Fri 21 Feb 2025 07:43:41 +0000 Files and hashes: 1: 1B4381A700D83209483A0BD2D3A2787F6A191AD4.crl (hash: 8xESvEwkLCJENyV4tX2JHJijF1XT6sL9ukfDARHdh/0=) 2: 3133312e37322e3235322e302f32322d3332203d3e203631373531.roa (hash: qLWW+OmKq5ByDss7FsN7Z8OjX8r5k1Ies4e5AakxelE=) 3: 323830343a316263633a3a2f33322d313238203d3e203631373531.roa (hash: GMyr4/EL4+r2CREOd7jflJkeCQRXgdDT+F5jyxLfyWc=) 4: 3136382e3232382e34302e302f32322d3332203d3e203631373531.roa (hash: efmPVoVspdg5rQLOAZMfkpjSOnS1ZFS+4ItllO7dqLE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.crl rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 07:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b6:b4:b9:b4:8b:15:9c:ce:ff:68:62:d0:b7:fd:db:37:3a:99:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4 Validity Not Before: Feb 20 07:19:41 2025 GMT Not After : Feb 21 07:43:41 2025 GMT Subject: CN=446ECA34AE9BF159F6A56B15D14A871756100195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:9e:ba:f8:1b:9a:0d:65:9c:88:39:2a:ca: 4d:66:f6:2d:60:9e:34:74:76:59:68:e7:97:0a:6b: 4c:0b:14:73:20:76:cf:34:48:39:4e:2b:99:67:64: b1:5b:48:94:9a:d8:6a:18:d5:d6:ef:6c:80:22:6c: d0:19:8c:10:3b:e4:4d:83:ef:3c:9c:b8:1b:21:cd: c0:82:6a:22:5b:c5:03:d2:16:45:f1:47:d0:4b:77: db:e9:38:8a:22:52:f8:de:85:e1:5b:18:05:f8:0b: bc:16:c3:f9:dc:ab:cb:2c:38:9f:33:0c:b0:c7:66: 02:1f:d1:78:20:e6:2d:f4:30:ab:ae:f2:bf:12:05: cf:f0:64:52:23:4d:e5:83:50:c6:50:96:d2:e1:7b: 93:8e:1e:dc:1e:fe:5f:d0:13:c4:f3:e0:6b:d4:51: 79:de:d7:96:57:55:de:4e:cf:5b:56:12:36:a2:a9: 5c:45:bf:87:83:6b:63:49:bb:52:19:65:10:05:01: fc:80:9f:02:78:f9:ef:9b:ce:2c:b8:88:60:05:ff: b4:8c:54:9f:3e:d2:e5:b1:c0:ef:68:95:bb:7a:57: 24:e6:73:13:a6:d9:4c:ef:5a:c3:5e:99:9b:5b:9a: c8:5a:99:e5:9c:47:8a:26:37:2d:ab:94:b8:c0:4b: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:CA:34:AE:9B:F1:59:F6:A5:6B:15:D1:4A:87:17:56:10:01:95 X509v3 Authority Key Identifier: keyid:1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9f:d2:54:98:07:d6:80:38:8a:1b:e0:22:b1:31:a1:ed:96: 7d:63:bb:29:53:41:2c:20:d3:38:a2:ac:0f:ea:68:77:73:41: f1:ba:e6:fa:c6:9c:b9:b2:e3:30:26:06:b4:d5:b4:9e:fb:2d: 6a:41:ba:66:ec:10:84:77:4c:95:2e:32:6c:59:7c:1f:f6:71: f2:58:e1:13:ac:85:36:5a:99:5f:a1:03:01:a7:71:f9:d3:45: 1e:f9:d4:49:31:8e:a7:51:5c:e0:bb:f8:a5:26:07:9d:d4:20: 63:11:12:06:8f:fc:dd:7e:fd:0e:85:c5:54:be:b3:cc:60:4b: 7b:d3:42:e1:ea:dc:86:f4:49:cc:d1:76:eb:9c:4a:6c:66:c2: 62:55:03:e3:6d:7e:fe:4b:63:57:8d:61:4d:a2:80:c3:54:8b: ae:ce:14:6f:70:e8:45:7c:4e:e0:50:65:aa:d8:12:70:f4:83: b7:4c:4b:1f:f7:a0:5f:48:24:06:4a:2a:95:05:3c:d6:f7:7f: f8:a0:a0:9a:b2:ef:ee:3c:29:ac:2d:25:f2:ca:16:35:9c:a2: 03:62:29:2e:ec:7f:00:d3:44:12:85:bc:fa:f3:19:29:fe:e3: 03:bd:b6:20:22:8a:20:9b:11:ae:17:c4:09:0b:db:81:41:83: dd:91:c9:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHra0ubSLFZzO/2hi0Lf92zc6mRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MzgxQTcwMEQ4MzIwOTQ4M0EwQkQyRDNBMjc4N0Y2 QTE5MUFENDAeFw0yNTAyMjAwNzE5NDFaFw0yNTAyMjEwNzQzNDFaMDMxMTAvBgNV BAMTKDQ0NkVDQTM0QUU5QkYxNTlGNkE1NkIxNUQxNEE4NzE3NTYxMDAxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgJ66+BuaDWWciDkqyk1m9i1g njR0dllo55cKa0wLFHMgds80SDlOK5lnZLFbSJSa2GoY1dbvbIAibNAZjBA75E2D 7zycuBshzcCCaiJbxQPSFkXxR9BLd9vpOIoiUvjeheFbGAX4C7wWw/ncq8ssOJ8z DLDHZgIf0Xgg5i30MKuu8r8SBc/wZFIjTeWDUMZQltLhe5OOHtwe/l/QE8Tz4GvU UXne15ZXVd5Oz1tWEjaiqVxFv4eDa2NJu1IZZRAFAfyAnwJ4+e+bziy4iGAF/7SM VJ8+0uWxwO9olbt6VyTmcxOm2UzvWsNemZtbmshameWcR4omNy2rlLjAS7UPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURG7KNK6b8Vn2pWsV0UqHF1YQAZUwHwYDVR0j BBgwFoAUG0OBpwDYMglIOgvS06J4f2oZGtQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZa UFMvMC8xQjQzODFBNzAwRDgzMjA5NDgzQTBCRDJEM0EyNzg3RjZBMTkxQUQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNDM4MUE3MDBEODMyMDk0 ODNBMEJEMkQzQTI3ODdGNkExOTFBRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZaUFMvMC8x QjQzODFBNzAwRDgzMjA5NDgzQTBCRDJEM0EyNzg3RjZBMTkxQUQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVp/SVJgH1oA4ihvgIrExoe2WfWO7KVNBLCDTOKKsD+pod3NB8brm+sacubLj MCYGtNW0nvstakG6ZuwQhHdMlS4ybFl8H/Zx8ljhE6yFNlqZX6EDAadx+dNFHvnU STGOp1Fc4Lv4pSYHndQgYxESBo/83X79DoXFVL6zzGBLe9NC4erchvRJzNF265xK bGbCYlUD421+/ktjV41hTaKAw1SLrs4Ub3DoRXxO4FBlqtgScPSDt0xLH/egX0gk BkoqlQU81vd/+KCgmrLv7jwprC0l8soWNZyiA2IpLux/ANNEEoW8+vMZKf7jA722 ICKKIJsRrhfECQvbgUGD3ZHJ6Q== -----END CERTIFICATE-----Generated at Thu Feb 20 17:34:17 2025 by rpki-client