$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft File: 3170E59F647D12F2C01381F789FEA19B94A7EA94.mft (raw, json) Hash identifier: R34KaFmfypxKq2vSb86tYMtDC3qDWEmaX6iRVO2zV1w= Subject key identifier: 6B:54:06:A5:54:D5:47:1C:08:F5:48:0C:59:AF:C3:CA:51:F7:BF:97 Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94 Certificate issuer: /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94 Certificate serial: 1118CA8B0B858B9D6C63559DFADB797A3695132A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer Subject info access: rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft Manifest number: D5 Signing time: Sat 05 Apr 2025 14:12:00 +0000 Manifest this update: Sat 05 Apr 2025 14:07:00 +0000 Manifest next update: Sun 06 Apr 2025 14:29:00 +0000 Files and hashes: 1: 3170E59F647D12F2C01381F789FEA19B94A7EA94.crl (hash: HOrTow2bMoLbsQEQvYOfc1C5jrV/bpXCGzOMs+1tVlI=) 2: 323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (hash: Bm9Kcd02phGiG7AWOn0ma8NcB+QmfSZ46IQIKek0iV4=) 3: 323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (hash: VHbLnBh+MIcqX2rOknoM+7yXE3n3B6fYN0D/ZGd03VM=) 4: 323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (hash: dg++jRiYgNDqqn7koG7VCPM8YtEa8GnVfBh/0VMl//I=) 5: 323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa (hash: lgKZpEMQXJgbbGxAppKdGMzEqXxmi5YjRfS1hmqnWqk=) 6: 323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa (hash: p8mxdsJqd7Z6f1JB1QLr6T+6+Rpg0LQLBtyRI4domro=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 14:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:18:ca:8b:0b:85:8b:9d:6c:63:55:9d:fa:db:79:7a:36:95:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94 Validity Not Before: Apr 5 14:07:00 2025 GMT Not After : Apr 6 14:29:00 2025 GMT Subject: CN=6B5406A554D5471C08F5480C59AFC3CA51F7BF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:83:3b:40:c7:2f:19:b5:a2:eb:62:cb:de: c1:54:b0:9c:3e:24:c0:1d:32:28:3f:51:3a:f4:83: d4:fe:e1:ab:2c:3d:f1:4c:7c:d7:bc:ec:aa:31:c6: f5:22:1b:12:59:6f:9f:88:5f:dd:f8:45:26:cb:4d: 73:64:29:e3:8e:7a:31:be:25:39:fa:48:02:c4:c2: ce:7c:df:bf:68:a4:86:42:c2:56:4f:f9:bd:61:56: d6:1b:47:ae:0a:2c:a0:be:74:25:2d:ec:91:64:20: 97:0d:c3:fd:a8:cb:97:45:38:e2:d6:7b:a3:0b:ba: 2f:9e:8e:27:f4:74:b5:3f:70:77:6e:01:4a:86:18: c6:3d:8b:34:dc:cd:b1:13:d2:94:d4:50:ee:6f:fd: e8:8b:79:d9:5f:d8:ec:ea:d5:f1:77:57:16:80:2d: c8:f1:a8:7c:84:c7:1d:25:82:7a:18:f1:64:ae:f9: a0:aa:ef:d1:60:d5:86:3f:5f:9f:32:b4:1a:ff:ec: 9b:97:e7:64:0b:00:5d:cb:52:f7:9b:70:05:6f:88: 58:c4:8f:ff:b2:db:d8:90:93:cd:62:ab:26:cf:0c: 90:00:be:20:a0:83:d7:42:94:38:d3:85:39:96:91: 31:a6:c9:7c:32:db:ee:2c:25:74:1c:95:84:8c:d0: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:54:06:A5:54:D5:47:1C:08:F5:48:0C:59:AF:C3:CA:51:F7:BF:97 X509v3 Authority Key Identifier: keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1b:c9:0c:fb:3a:c5:22:8f:d1:dc:c1:4c:d4:94:5c:0a:40: c4:c3:be:2b:3e:a0:54:3a:0a:39:d4:d1:6d:ae:ff:8b:da:8e: 9f:81:82:9f:29:3d:d6:c4:53:25:52:a7:6a:96:98:3f:e1:75: 66:c7:02:c6:e9:1a:2b:31:ee:52:8a:82:4d:1d:fd:5f:d2:16: e0:d5:45:e8:4f:8b:5e:35:fb:17:e7:1e:72:e2:c4:f6:2f:25: ee:ab:69:15:52:1e:e0:3f:62:23:a0:e3:82:d0:2b:e8:b9:72: ff:0d:f8:1d:b6:26:3d:cd:7d:8d:a5:c1:c3:9d:e0:13:47:9a: b2:b1:ad:35:54:11:a6:ba:9b:fe:d3:fe:7a:31:af:f6:e7:fe: 49:a4:72:44:3c:a8:07:99:dd:3b:f0:4a:49:d0:b8:a6:70:e6: 5e:07:67:f7:f1:3c:3a:28:f2:0b:be:26:60:d2:12:16:df:bc: 5d:61:98:21:4c:b6:31:d7:7a:27:65:5f:5c:d1:5d:7e:13:a4: 2c:5c:a5:1d:05:f5:9d:f9:d0:cc:8f:35:31:43:14:ff:5b:c2: db:a6:15:f5:2f:3f:06:48:3c:c9:7d:c6:cd:4b:67:a4:70:f0: 19:a0:d5:c9:61:58:96:42:cb:c2:85:05:93:37:18:dc:ef:30: 7d:36:7a:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUERjKiwuFi51sY1Wd+tt5ejaVEyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE3MEU1OUY2NDdEMTJGMkMwMTM4MUY3ODlGRUExOUI5 NEE3RUE5NDAeFw0yNTA0MDUxNDA3MDBaFw0yNTA0MDYxNDI5MDBaMDMxMTAvBgNV BAMTKDZCNTQwNkE1NTRENTQ3MUMwOEY1NDgwQzU5QUZDM0NBNTFGN0JGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEV4M7QMcvGbWi62LL3sFUsJw+ JMAdMig/UTr0g9T+4assPfFMfNe87KoxxvUiGxJZb5+IX934RSbLTXNkKeOOejG+ JTn6SALEws58379opIZCwlZP+b1hVtYbR64KLKC+dCUt7JFkIJcNw/2oy5dFOOLW e6MLui+ejif0dLU/cHduAUqGGMY9izTczbET0pTUUO5v/eiLedlf2Ozq1fF3VxaA LcjxqHyExx0lgnoY8WSu+aCq79Fg1YY/X58ytBr/7JuX52QLAF3LUvebcAVviFjE j/+y29iQk81iqybPDJAAviCgg9dClDjThTmWkTGmyXwy2+4sJXQclYSM0LOvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa1QGpVTVRxwI9UgMWa/DylH3v5cwHwYDVR0j BBgwFoAUMXDln2R9EvLAE4H3if6hm5Sn6pQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2 eHQvMC8zMTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNzBFNTlGNjQ3RDEyRjJD MDEzODFGNzg5RkVBMTlCOTRBN0VBOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2eHQvMC8z MTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAexvJDPs6xSKP0dzBTNSUXApAxMO+Kz6gVDoKOdTRba7/i9qOn4GCnyk91sRT JVKnapaYP+F1ZscCxukaKzHuUoqCTR39X9IW4NVF6E+LXjX7F+cecuLE9i8l7qtp FVIe4D9iI6DjgtAr6Lly/w34HbYmPc19jaXBw53gE0easrGtNVQRprqb/tP+ejGv 9uf+SaRyRDyoB5ndO/BKSdC4pnDmXgdn9/E8OijyC74mYNISFt+8XWGYIUy2Mdd6 J2VfXNFdfhOkLFylHQX1nfnQzI81MUMU/1vC26YV9S8/Bkg8yX3GzUtnpHDwGaDV yWFYlkLLwoUFkzcY3O8wfTZ6gw== -----END CERTIFICATE-----Generated at Sat Apr 5 23:08:46 2025 by rpki-client