$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft File: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json) Hash identifier: 97Uc5BZb2Rm/dkG8AXIN4c0j5ZxH3xko3x+f9bujr+0= Subject key identifier: 70:6E:64:B9:87:15:6A:60:D8:AA:A6:51:D2:23:6C:DC:F7:58:76:CA Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 Certificate issuer: /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Certificate serial: 3704D7B014C8F38D8DB7EA860354C82F224863D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject info access: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft Manifest number: 015E Signing time: Tue 18 Feb 2025 02:52:56 +0000 Manifest this update: Tue 18 Feb 2025 02:47:56 +0000 Manifest next update: Wed 19 Feb 2025 03:53:56 +0000 Files and hashes: 1: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: 27YomA8TpPWq056IxLZdNFeCc9AAqgUAcMtyVHrU7JI=) 2: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: eaHNN+6vzLIJPLthvhRu8XALhQCUuVyk7EwjYSTBDTw=) 3: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: T8tKlDwd9TGCI+s7MB2oi6kCEtd2vIMrUnKqOxql/cI=) 4: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: Z3kmpsldci+k0etKHqSHjFsR/sd0khJ9mMYU2nyZdBc=) 5: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: esw6x8P3fMUPZO2WnayMqMVAbOu2lTavg6s564d0UVo=) 6: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: 9EY7apw8vm0HkmsbpiQUW6dmLnGVjoF4qsDb8nu5zhk=) 7: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: jbZ7m/cZ2XC8pnRIQ9hoHimB9Dj0Rfx0URi4KyT+Pdw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Feb 2025 03:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:04:d7:b0:14:c8:f3:8d:8d:b7:ea:86:03:54:c8:2f:22:48:63:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Validity Not Before: Feb 18 02:47:56 2025 GMT Not After : Feb 19 03:53:56 2025 GMT Subject: CN=706E64B987156A60D8AAA651D2236CDCF75876CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:aa:33:2b:0f:93:5f:f0:28:4e:58:2d:80: f1:3f:0d:5d:14:92:ad:ac:7e:b6:c9:8f:ba:c5:45: fb:f0:58:85:91:dd:de:6f:76:2f:5d:d7:eb:66:a4: ad:f5:e1:42:cd:52:50:4b:07:9d:ac:35:24:cf:ed: 82:23:79:ab:34:95:74:4e:78:e8:6d:8b:99:4a:b6: 04:5c:38:67:67:d5:a5:df:3f:f5:6d:e8:6b:7b:af: 63:36:35:15:40:78:90:86:23:a1:5e:54:73:b2:c6: 88:d2:b3:87:58:f2:e7:fd:2f:8d:c5:5b:2c:c1:7b: a4:d3:96:4e:52:47:c3:7c:dd:eb:32:2c:c5:6b:1e: 23:d9:88:25:73:38:52:9a:b0:06:c6:10:6d:e1:4f: 4f:69:e8:fd:1f:6d:43:f8:c3:8d:4d:c3:14:54:f8: b1:33:80:91:28:a2:0e:5b:00:fc:68:8d:db:cd:77: a5:64:dd:3b:3a:53:b2:a0:90:4b:dc:89:f7:df:b5: 19:09:41:c3:9b:2f:c3:27:ac:c4:91:cb:3d:ea:5b: aa:be:0f:b3:a0:83:57:0c:16:9a:d8:9e:f9:bf:b5: 0d:ae:63:01:63:b2:6e:20:23:db:c1:c0:d6:a5:ae: 4f:93:e6:b6:98:e5:a7:35:98:3c:78:2d:4e:44:a0: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6E:64:B9:87:15:6A:60:D8:AA:A6:51:D2:23:6C:DC:F7:58:76:CA X509v3 Authority Key Identifier: keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4b:fe:6f:6b:d4:37:0b:04:04:16:a8:82:eb:56:bf:b8:76: ec:a5:69:e6:c8:2f:c5:ec:ab:97:b7:64:6b:94:2d:eb:1d:f4: e6:ba:65:b3:3b:2f:51:f5:f1:8a:a1:5a:56:d6:4a:8b:12:19: fd:ee:bd:e9:9e:e0:e3:03:6b:7c:8e:d6:a8:21:e6:9b:5a:19: 67:22:f5:b2:a6:92:50:58:38:51:2c:4b:04:d3:f6:c8:00:2e: e9:0e:ae:2c:79:a6:0d:a3:95:a4:74:33:42:8a:2f:c1:48:af: a5:0a:d2:fc:64:95:e4:da:1a:3b:5f:f4:eb:a6:7b:2f:20:e0: d5:2c:82:5e:fc:82:ca:58:d4:cb:aa:03:07:1b:19:26:e5:f3: b7:85:2a:4c:a7:75:5f:c7:8c:a3:38:79:a7:b8:96:4d:3b:48: 16:83:1a:08:1e:1c:8e:ba:3d:d7:d0:f1:31:1d:71:b6:44:b4: 34:66:ed:69:af:64:33:e7:ff:76:f5:fc:50:6d:1f:f7:77:c9: ae:98:9d:6c:3b:ad:52:e7:35:85:9c:c3:58:f6:a9:64:2a:fa: 4d:ef:81:56:4a:5a:5d:9c:e6:79:1d:f7:00:19:df:2b:22:c4: f4:58:33:71:69:97:03:6f:c4:34:af:a3:43:01:b9:83:8c:07: 57:49:3f:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNwTXsBTI842Nt+qGA1TILyJIY9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREOTdGNUU4NUQ1QTk1NzhFNzg5NDBDRkQ1QkFFREZC ODJFMDY0NzAeFw0yNTAyMTgwMjQ3NTZaFw0yNTAyMTkwMzUzNTZaMDMxMTAvBgNV BAMTKDcwNkU2NEI5ODcxNTZBNjBEOEFBQTY1MUQyMjM2Q0RDRjc1ODc2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzqozKw+TX/AoTlgtgPE/DV0U kq2sfrbJj7rFRfvwWIWR3d5vdi9d1+tmpK314ULNUlBLB52sNSTP7YIjeas0lXRO eOhti5lKtgRcOGdn1aXfP/Vt6Gt7r2M2NRVAeJCGI6FeVHOyxojSs4dY8uf9L43F WyzBe6TTlk5SR8N83esyLMVrHiPZiCVzOFKasAbGEG3hT09p6P0fbUP4w41NwxRU +LEzgJEoog5bAPxojdvNd6Vk3Ts6U7KgkEvciffftRkJQcObL8MnrMSRyz3qW6q+ D7Ogg1cMFprYnvm/tQ2uYwFjsm4gI9vBwNalrk+T5raY5ac1mDx4LU5EoOt5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcG5kuYcVamDYqqZR0iNs3PdYdsowHwYDVR0j BBgwFoAULdl/XoXVqVeOeJQM/Vuu37guBkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0x b0IvMC8yREQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDk3RjVFODVENUE5NTc4 RTc4OTQwQ0ZENUJBRURGQjgyRTA2NDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0xb0IvMC8y REQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh0v+b2vUNwsEBBaogutWv7h27KVp5sgvxeyrl7dka5Qt6x305rplszsvUfXx iqFaVtZKixIZ/e696Z7g4wNrfI7WqCHmm1oZZyL1sqaSUFg4USxLBNP2yAAu6Q6u LHmmDaOVpHQzQoovwUivpQrS/GSV5NoaO1/066Z7LyDg1SyCXvyCyljUy6oDBxsZ JuXzt4UqTKd1X8eMozh5p7iWTTtIFoMaCB4cjro919DxMR1xtkS0NGbtaa9kM+f/ dvX8UG0f93fJrpidbDutUuc1hZzDWPapZCr6Te+BVkpaXZzmeR33ABnfKyLE9Fgz cWmXA2/ENK+jQwG5g4wHV0k//g== -----END CERTIFICATE-----Generated at Tue Feb 18 13:47:36 2025 by rpki-client