$ rpki-client -vvf rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.mft File: 4A2574393B503DE41274B86A7310E0272B6E4C75.mft (raw, json) Hash identifier: 6MbV7Glvs6tWz3MtjWxGWWvifx+OeB98vyAmxeBsxqg= Subject key identifier: EC:4A:53:F7:31:4B:C5:84:6D:E2:F1:9A:94:A3:E0:66:4B:3A:55:30 Authority key identifier: 4A:25:74:39:3B:50:3D:E4:12:74:B8:6A:73:10:E0:27:2B:6E:4C:75 Certificate issuer: /CN=4A2574393B503DE41274B86A7310E0272B6E4C75 Certificate serial: 4DFADAE22510AC5AA5444B3F50B3102BC70B47F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer Subject info access: rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.mft Manifest number: 8A Signing time: Mon 17 Feb 2025 23:45:21 +0000 Manifest this update: Mon 17 Feb 2025 23:40:21 +0000 Manifest next update: Wed 19 Feb 2025 02:03:21 +0000 Files and hashes: 1: 4A2574393B503DE41274B86A7310E0272B6E4C75.crl (hash: MRp9WjYsdLcZvhN5ohJKF5QbGl/b55kYOzglgmk3JI8=) 2: 34352e3233332e3132362e302f32332d3233203d3e20323637333131.roa (hash: grmU47/QAl0u9WCk4uzopcXzP+7tvEoatPmoF8mrWt4=) 3: 34352e3233332e3132342e302f32332d3233203d3e20323637333131.roa (hash: LV2EmFXtSCtT+wfQ881kAXrHo/NFIDq46KHcsdEYVpY=) 4: 34352e3233332e3132342e302f32322d3232203d3e20323637333131.roa (hash: f2hQr3QPxaXr5U4kdD8vVhp3KHKrAgLh1zoDYrgaCmY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.crl rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Feb 2025 02:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fa:da:e2:25:10:ac:5a:a5:44:4b:3f:50:b3:10:2b:c7:0b:47:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A2574393B503DE41274B86A7310E0272B6E4C75 Validity Not Before: Feb 17 23:40:21 2025 GMT Not After : Feb 19 02:03:21 2025 GMT Subject: CN=EC4A53F7314BC5846DE2F19A94A3E0664B3A5530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:4a:fd:30:82:8a:c3:88:05:ff:cf:ab:de: 19:97:d7:c8:6e:33:14:96:3d:60:0f:98:a3:66:4e: 8c:2b:08:97:9a:70:c6:18:19:cd:5f:b5:39:e7:5a: 24:9e:0a:0f:4c:c8:b1:27:cb:5f:93:68:e8:a1:e3: fb:f5:e4:6c:5b:83:b3:2c:be:1b:67:00:46:a5:aa: 4f:a4:a3:2f:f3:be:5f:89:4b:a8:b8:c7:7b:60:fb: 05:84:c6:99:b4:00:d0:a7:cb:66:cc:b4:7c:ae:a9: b4:e5:78:f9:1c:15:22:08:a1:b5:4c:31:23:85:ae: f5:76:6e:c1:f0:9b:81:60:2e:9d:09:dc:7d:61:38: 3f:d5:ad:34:48:c0:89:6c:6e:95:15:f9:23:85:86: 91:3d:3c:ef:7e:9d:bd:cd:e8:56:d6:9a:f9:33:2a: 51:2d:5c:e5:3e:e2:e2:66:a7:d7:bb:85:ea:7d:93: 16:52:55:97:07:54:ca:d7:eb:6e:a3:91:87:bd:43: 1e:06:fe:a2:c0:42:55:98:9a:97:fa:39:11:69:4c: c2:95:3f:5d:47:1d:e1:47:7a:d5:6b:c3:5c:cf:e3: ff:4c:88:9b:6f:1b:1a:5c:7d:c5:10:b8:55:67:be: fe:2d:1e:c4:d0:e5:9d:da:c2:14:c6:a6:57:48:cb: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4A:53:F7:31:4B:C5:84:6D:E2:F1:9A:94:A3:E0:66:4B:3A:55:30 X509v3 Authority Key Identifier: keyid:4A:25:74:39:3B:50:3D:E4:12:74:B8:6A:73:10:E0:27:2B:6E:4C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:77:cf:57:f2:d0:3c:0c:27:42:1e:24:02:d5:16:cc:c2:5a: 04:47:55:49:6e:17:6e:c4:54:03:ff:79:12:4b:8a:78:da:62: 0d:e6:4a:05:6b:25:06:4a:e6:2a:cf:66:aa:81:67:24:1a:35: 68:11:7a:b7:d9:96:3a:a6:b5:f5:f3:59:e8:ec:b5:cd:f3:00: 11:f6:a3:64:15:30:c5:77:b0:39:12:3c:7e:68:9a:8b:6f:3f: 2d:0e:fc:d7:53:38:c9:b7:8a:1a:bb:eb:1e:9f:5b:50:29:53: 98:7b:c4:02:dd:c5:a9:87:f2:bb:cd:73:7d:4c:4e:86:5a:84: 4c:f4:c2:0c:e2:e4:ad:f4:f1:d0:c7:7d:33:81:65:8b:fb:99: 1f:77:b0:a3:fa:b7:81:14:a5:23:33:7e:9f:72:78:21:b8:e8: 9f:05:19:0d:87:1f:a1:98:f1:05:0e:6d:ab:2d:62:99:c0:ea: 46:10:2e:13:08:de:dd:06:70:21:14:6a:d2:e6:14:63:c1:3e: 7d:27:7f:14:dd:b9:ff:36:80:89:c9:ee:55:dd:39:37:10:e3: bf:f7:aa:8a:9b:b3:b3:aa:5b:d8:2a:a5:cf:b8:9b:49:0a:bd: b5:65:84:7e:8a:21:9e:56:fb:4e:59:ee:ad:f8:e5:59:2b:f3: 7b:75:08:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTfra4iUQrFqlREs/ULMQK8cLR/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNTc0MzkzQjUwM0RFNDEyNzRCODZBNzMxMEUwMjcy QjZFNEM3NTAeFw0yNTAyMTcyMzQwMjFaFw0yNTAyMTkwMjAzMjFaMDMxMTAvBgNV BAMTKEVDNEE1M0Y3MzE0QkM1ODQ2REUyRjE5QTk0QTNFMDY2NEIzQTU1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVkr9MIKKw4gF/8+r3hmX18hu MxSWPWAPmKNmTowrCJeacMYYGc1ftTnnWiSeCg9MyLEny1+TaOih4/v15Gxbg7Ms vhtnAEalqk+koy/zvl+JS6i4x3tg+wWExpm0ANCny2bMtHyuqbTlePkcFSIIobVM MSOFrvV2bsHwm4FgLp0J3H1hOD/VrTRIwIlsbpUV+SOFhpE9PO9+nb3N6FbWmvkz KlEtXOU+4uJmp9e7hep9kxZSVZcHVMrX626jkYe9Qx4G/qLAQlWYmpf6ORFpTMKV P11HHeFHetVrw1zP4/9MiJtvGxpcfcUQuFVnvv4tHsTQ5Z3awhTGpldIyyrvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7EpT9zFLxYRt4vGalKPgZks6VTAwHwYDVR0j BBgwFoAUSiV0OTtQPeQSdLhqcxDgJytuTHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTlmUldLM0tIWUFueUdNR0ZheVlWNzdMeWVad0o0ZmZyMUc4aTVmWWJB VlMvMC80QTI1NzQzOTNCNTAzREU0MTI3NEI4NkE3MzEwRTAyNzJCNkU0Qzc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBMjU3NDM5M0I1MDNERTQx Mjc0Qjg2QTczMTBFMDI3MkI2RTRDNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTlmUldLM0tIWUFueUdNR0ZheVlWNzdMeWVad0o0ZmZyMUc4aTVmWWJBVlMvMC80 QTI1NzQzOTNCNTAzREU0MTI3NEI4NkE3MzEwRTAyNzJCNkU0Qzc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN3fPV/LQPAwnQh4kAtUWzMJaBEdVSW4XbsRUA/95EkuKeNpiDeZKBWslBkrm Ks9mqoFnJBo1aBF6t9mWOqa19fNZ6Oy1zfMAEfajZBUwxXewORI8fmiai28/LQ78 11M4ybeKGrvrHp9bUClTmHvEAt3FqYfyu81zfUxOhlqETPTCDOLkrfTx0Md9M4Fl i/uZH3ewo/q3gRSlIzN+n3J4IbjonwUZDYcfoZjxBQ5tqy1imcDqRhAuEwje3QZw IRRq0uYUY8E+fSd/FN25/zaAicnuVd05NxDjv/eqipuzs6pb2Cqlz7ibSQq9tWWE foohnlb7TlnurfjlWSvze3UIOQ== -----END CERTIFICATE-----Generated at Tue Feb 18 13:40:28 2025 by rpki-client