$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft File: 524E9D1652F660663CB5548E20AE99DA463B2CFA.mft (raw, json) Hash identifier: MKqOpfiHHrX8HXks/YSh+9D0ZPl9QUaivejZZnlU5W4= Subject key identifier: 1C:5C:A7:93:A9:B6:73:D6:1F:4C:33:C2:03:77:2D:AF:2B:F4:1F:96 Authority key identifier: 52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA Certificate issuer: /CN=524E9D1652F660663CB5548E20AE99DA463B2CFA Certificate serial: 52CC015BC8F90473065B95F914665184773C7982 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft Manifest number: 01F7 Signing time: Tue 15 Apr 2025 23:27:53 +0000 Manifest this update: Tue 15 Apr 2025 23:22:53 +0000 Manifest next update: Thu 17 Apr 2025 00:04:53 +0000 Files and hashes: 1: 524E9D1652F660663CB5548E20AE99DA463B2CFA.crl (hash: ksbFIww2Jv8NgQsel+C9oEmqgfvZjWi7MDe/DGOrELk=) 2: 3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (hash: MPHO4BWPGCLq71dUFZ81qcr0K606XlOebKG3tsXzu6M=) 3: 323830343a316466343a3a2f33322d3332203d3e203532393437.roa (hash: UO8SzCxNOncH1EKpVftEgIdnjtAcaAKS1Rk8+iLSf6w=) 4: 3137372e33382e3133362e302f32312d3234203d3e203532393437.roa (hash: JijRPy8SmbfnFZXadwP7en6JPxdoQ821D8R+qekqhwQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 17 Apr 2025 00:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cc:01:5b:c8:f9:04:73:06:5b:95:f9:14:66:51:84:77:3c:79:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=524E9D1652F660663CB5548E20AE99DA463B2CFA Validity Not Before: Apr 15 23:22:53 2025 GMT Not After : Apr 17 00:04:53 2025 GMT Subject: CN=1C5CA793A9B673D61F4C33C203772DAF2BF41F96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:45:ab:51:1b:46:62:93:9b:18:87:93:18:c4: 35:68:97:de:5f:e6:a7:6e:4f:eb:b3:d7:36:68:c9: d5:d3:6e:29:a1:a5:4e:30:62:79:80:d2:5d:bf:3d: 66:a9:7b:94:40:44:2e:96:c8:1f:7a:ef:a4:a6:21: 1b:ff:d7:ef:14:a6:af:c0:89:82:d2:1e:e1:18:4a: 3c:ac:6b:fe:4a:7c:7f:f9:f2:c3:5a:d6:cc:8c:96: dd:01:da:26:7f:02:47:f9:92:a0:e9:7b:07:4d:b1: 02:f2:cf:84:f8:bc:d0:25:fb:c5:fe:05:b6:6b:3c: b9:95:8b:3b:89:e9:b8:2d:56:7f:8e:98:c0:65:bb: 5a:0b:db:14:ce:c4:4a:29:0a:b8:f7:13:13:11:2d: 65:c4:a8:01:87:a3:3a:86:52:02:ba:f0:d5:c0:00: c7:04:c5:5f:0d:d0:61:5a:94:8c:ef:d7:ef:34:ac: 14:6d:fe:a3:1a:50:e4:0f:b0:eb:7e:79:05:01:e6: 05:f3:49:c5:08:37:8a:ae:45:90:dd:7f:17:de:16: 49:f3:cd:e2:c0:1e:1d:34:79:bf:c0:c9:9e:87:cc: a0:05:88:69:4a:9e:77:ab:22:6e:1b:96:a9:22:f5: cd:6f:1e:eb:89:75:ba:57:d9:77:d7:8d:f4:5b:d6: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5C:A7:93:A9:B6:73:D6:1F:4C:33:C2:03:77:2D:AF:2B:F4:1F:96 X509v3 Authority Key Identifier: keyid:52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:8f:94:bc:33:09:b4:41:5d:1e:ac:42:61:8c:84:61:c0:c3: 18:ae:95:81:cf:64:63:ac:9e:c7:85:4e:32:63:1c:13:47:af: a6:a3:3b:77:47:aa:e7:92:8b:60:09:58:d3:46:f1:71:f3:73: 5e:b2:fc:ae:4d:69:53:9c:3d:f7:6d:63:6e:7e:d0:b1:5c:bd: 92:37:c5:85:e6:49:bf:f0:aa:e0:e1:18:23:4a:79:76:62:62: 53:c1:ac:d7:ec:c6:d4:1e:58:40:97:32:4e:cb:b1:18:5c:e7: 54:98:8e:e1:c9:bb:a6:f8:2e:6b:fa:41:77:81:7b:1d:89:57: cd:12:28:03:98:6b:da:d0:eb:c6:03:63:29:1f:83:63:39:ba: ce:0a:69:c0:f7:b7:24:6d:bd:40:27:79:af:49:49:78:04:d9: 0b:b0:b5:1c:4a:8c:65:d5:7a:7c:21:97:2f:1f:5b:b4:d8:8c: ec:cf:07:e9:a9:20:74:32:7f:cf:72:02:0d:a1:bf:28:f0:18: 0d:bb:c4:9f:02:ed:f5:c0:56:4e:60:d8:4a:97:99:82:17:0f: 80:07:32:bb:9e:b0:17:89:b4:f1:5a:72:20:7c:64:e8:94:34: 69:92:7e:17:e4:a5:5f:cb:1b:a6:a9:8d:22:49:b6:51:ff:90: 87:72:ac:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUswBW8j5BHMGW5X5FGZRhHc8eYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI0RTlEMTY1MkY2NjA2NjNDQjU1NDhFMjBBRTk5REE0 NjNCMkNGQTAeFw0yNTA0MTUyMzIyNTNaFw0yNTA0MTcwMDA0NTNaMDMxMTAvBgNV BAMTKDFDNUNBNzkzQTlCNjczRDYxRjRDMzNDMjAzNzcyREFGMkJGNDFGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRatRG0Zik5sYh5MYxDVol95f 5qduT+uz1zZoydXTbimhpU4wYnmA0l2/PWape5RARC6WyB9676SmIRv/1+8Upq/A iYLSHuEYSjysa/5KfH/58sNa1syMlt0B2iZ/Akf5kqDpewdNsQLyz4T4vNAl+8X+ BbZrPLmVizuJ6bgtVn+OmMBlu1oL2xTOxEopCrj3ExMRLWXEqAGHozqGUgK68NXA AMcExV8N0GFalIzv1+80rBRt/qMaUOQPsOt+eQUB5gXzScUIN4quRZDdfxfeFknz zeLAHh00eb/AyZ6HzKAFiGlKnnerIm4blqki9c1vHuuJdbpX2XfXjfRb1r1PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHFynk6m2c9YfTDPCA3ctryv0H5YwHwYDVR0j BBgwFoAUUk6dFlL2YGY8tVSOIK6Z2kY7LPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlNZMnpZWnY2QjVwSHJwN1U5d3ZxRmdmeFBxSzZ1NW1nekczWHhkZ2gx NUovMS81MjRFOUQxNjUyRjY2MDY2M0NCNTU0OEUyMEFFOTlEQTQ2M0IyQ0ZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNEU5RDE2NTJGNjYwNjYz Q0I1NTQ4RTIwQUU5OURBNDYzQjJDRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlNZMnpZWnY2QjVwSHJwN1U5d3ZxRmdmeFBxSzZ1NW1nekczWHhkZ2gxNUovMS81 MjRFOUQxNjUyRjY2MDY2M0NCNTU0OEUyMEFFOTlEQTQ2M0IyQ0ZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdY+UvDMJtEFdHqxCYYyEYcDDGK6Vgc9kY6yex4VOMmMcE0evpqM7d0eq55KL YAlY00bxcfNzXrL8rk1pU5w9921jbn7QsVy9kjfFheZJv/Cq4OEYI0p5dmJiU8Gs 1+zG1B5YQJcyTsuxGFznVJiO4cm7pvgua/pBd4F7HYlXzRIoA5hr2tDrxgNjKR+D Yzm6zgppwPe3JG29QCd5r0lJeATZC7C1HEqMZdV6fCGXLx9btNiM7M8H6akgdDJ/ z3ICDaG/KPAYDbvEnwLt9cBWTmDYSpeZghcPgAcyu56wF4m08VpyIHxk6JQ0aZJ+ F+SlX8sbpqmNIkm2Uf+Qh3KsUg== -----END CERTIFICATE-----Generated at Wed Apr 16 17:17:45 2025 by rpki-client