$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft File: 988E922E2EBFFBA80468C170F0B053C90FD160E4.mft (raw, json) Hash identifier: r1aD4gYCN8Cr1S7bVha9MOuaJfB57WPXDZgPfr676jU= Subject key identifier: 3B:1C:40:37:ED:49:1C:C1:BF:64:CD:96:EE:31:E9:22:30:BF:96:F3 Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Certificate serial: 17A290635DB926C3EBC0CB235618E179AAD206ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft Manifest number: 0200 Signing time: Sun 06 Apr 2025 01:52:03 +0000 Manifest this update: Sun 06 Apr 2025 01:47:03 +0000 Manifest next update: Mon 07 Apr 2025 05:29:03 +0000 Files and hashes: 1: AS61946.roa (hash: MHezp5ABff3K9mAC3u37SxDxJqkpY3OCZMH5EO6JpvI=) 2: AS268018.roa (hash: 1Pe5RUB4aLq32t+IW0sRw2bZ+6P8AQDCdJJ71jcbQ7o=) 3: AS28598.roa (hash: NaT3lIcN3oKlhvWTdYv5kT4dKVnF/bh2v8WbG8qijk4=) 4: AS61832.roa (hash: UtzBhnBGxkhO4+Apu2YRS3sgs5a+Mwkxkun6cEVMT5w=) 5: 988E922E2EBFFBA80468C170F0B053C90FD160E4.crl (hash: kOcbyi/79QW73oro/WVakESNyzPlvaMg4B872mTcUyI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 05:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a2:90:63:5d:b9:26:c3:eb:c0:cb:23:56:18:e1:79:aa:d2:06:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Validity Not Before: Apr 6 01:47:03 2025 GMT Not After : Apr 7 05:29:03 2025 GMT Subject: CN=3B1C4037ED491CC1BF64CD96EE31E92230BF96F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:96:8d:0f:71:dc:03:8a:bf:f4:19:bf:fa: e6:83:af:93:0e:6d:94:fa:9a:b5:78:e2:16:33:09: 1c:d2:92:75:03:8b:c5:19:63:0a:5b:29:d1:e7:e1: 80:a5:b3:22:2a:11:fc:1a:8f:ff:d9:79:45:41:cb: b7:8f:48:99:c7:10:fa:d3:ce:d7:e5:58:b5:45:3e: c6:72:d1:6c:c2:8e:de:b9:5e:79:e3:d6:88:ab:8c: e3:b8:8c:42:bc:22:5d:cb:e1:9a:d2:2b:a5:b3:14: ea:b8:7d:14:fa:ec:19:e5:9f:9b:37:e6:62:87:0f: c1:5a:ea:25:57:d2:aa:ff:99:c9:f3:c9:ac:7a:7b: 63:1a:97:ce:aa:1d:df:e1:5b:7a:35:a0:70:f8:5a: 3c:6d:17:87:f3:56:7b:bc:38:ca:20:fa:e1:f6:b1: 47:42:82:e2:0a:4b:a8:68:9d:a7:9e:23:55:df:33: f3:97:d6:e1:1d:1b:3d:b6:c5:95:9d:ec:85:f2:e5: 70:74:84:bf:b1:f1:ca:4b:0a:14:3b:cf:b5:7b:37: 98:83:c4:3b:4c:8f:bd:f6:84:9a:be:4b:d3:66:98: 3d:d3:c4:24:a9:16:44:31:b4:ae:aa:90:ef:14:60: 9d:6f:80:cf:d5:e8:80:0c:df:79:d9:95:9a:fd:e7: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:40:37:ED:49:1C:C1:BF:64:CD:96:EE:31:E9:22:30:BF:96:F3 X509v3 Authority Key Identifier: keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0a:06:fd:23:13:53:e5:70:02:07:d1:8f:13:6c:e9:09:de: a9:24:e0:91:4f:54:e0:77:08:f3:79:bf:1f:a7:9e:f6:cd:ae: 3d:dd:69:90:52:a7:46:8e:5e:96:4f:f5:02:98:28:26:be:94: 34:ac:9c:4e:54:72:cc:b3:37:10:95:3e:9e:37:50:cf:e8:a6: 37:6d:a8:f9:52:dc:df:25:8a:72:3c:00:8a:40:8b:65:a5:ea: f8:f7:bd:d9:88:43:e6:7b:4a:d1:4f:e0:76:f5:6f:66:31:62: 47:eb:9e:10:92:1e:8e:66:e3:6f:ec:b8:90:b3:04:26:52:ad: be:85:d6:57:07:17:25:52:a7:91:d6:fd:fb:ef:32:c5:17:56: 61:e3:0f:6c:53:81:2b:eb:de:d6:91:93:2e:7f:14:01:10:45: 92:a9:46:1e:2b:7d:18:20:2d:78:16:0d:11:94:35:19:80:9f: 3d:82:bb:28:8d:38:17:ba:0f:b0:83:34:82:4f:8d:4b:82:b2: f1:99:44:b7:5f:b0:cb:1c:b1:2a:6c:a6:91:94:94:c2:81:49: 26:e4:ae:ca:50:09:22:77:52:1a:c9:ca:5e:7b:8f:57:50:a5: e9:dc:8a:76:20:9a:56:34:a6:a5:08:54:91:8e:85:a5:f1:bb: de:0e:fa:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF6KQY125JsPrwMsjVhjhearSBu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTkyMkUyRUJGRkJBODA0NjhDMTcwRjBCMDUzQzkw RkQxNjBFNDAeFw0yNTA0MDYwMTQ3MDNaFw0yNTA0MDcwNTI5MDNaMDMxMTAvBgNV BAMTKDNCMUM0MDM3RUQ0OTFDQzFCRjY0Q0Q5NkVFMzFFOTIyMzBCRjk2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUJaND3HcA4q/9Bm/+uaDr5MO bZT6mrV44hYzCRzSknUDi8UZYwpbKdHn4YClsyIqEfwaj//ZeUVBy7ePSJnHEPrT ztflWLVFPsZy0WzCjt65Xnnj1oirjOO4jEK8Il3L4ZrSK6WzFOq4fRT67Bnln5s3 5mKHD8Fa6iVX0qr/mcnzyax6e2Mal86qHd/hW3o1oHD4WjxtF4fzVnu8OMog+uH2 sUdCguIKS6honaeeI1XfM/OX1uEdGz22xZWd7IXy5XB0hL+x8cpLChQ7z7V7N5iD xDtMj732hJq+S9NmmD3TxCSpFkQxtK6qkO8UYJ1vgM/V6IAM33nZlZr954pJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOxxAN+1JHMG/ZM2W7jHpIjC/lvMwHwYDVR0j BBgwFoAUmI6SLi6/+6gEaMFw8LBTyQ/RYOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm dXEvMS85ODhFOTIyRTJFQkZGQkE4MDQ2OEMxNzBGMEIwNTNDOTBGRDE2MEU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4OEU5MjJFMkVCRkZCQTgw NDY4QzE3MEYwQjA1M0M5MEZEMTYwRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFmdXEvMS85 ODhFOTIyRTJFQkZGQkE4MDQ2OEMxNzBGMEIwNTNDOTBGRDE2MEU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtAoG/SMTU+VwAgfRjxNs6QneqSTgkU9U4HcI83m/H6ee9s2uPd1pkFKnRo5e lk/1ApgoJr6UNKycTlRyzLM3EJU+njdQz+imN22o+VLc3yWKcjwAikCLZaXq+Pe9 2YhD5ntK0U/gdvVvZjFiR+ueEJIejmbjb+y4kLMEJlKtvoXWVwcXJVKnkdb9++8y xRdWYeMPbFOBK+ve1pGTLn8UARBFkqlGHit9GCAteBYNEZQ1GYCfPYK7KI04F7oP sIM0gk+NS4Ky8ZlEt1+wyxyxKmymkZSUwoFJJuSuylAJIndSGsnKXnuPV1Cl6dyK diCaVjSmpQhUkY6FpfG73g76Cw== -----END CERTIFICATE-----Generated at Sun Apr 6 09:39:01 2025 by rpki-client