$ rpki-client -vvf rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft File: 43B19C9E57D3EDADD315DF0E16760E303285E640.mft (raw, json) Hash identifier: LF39MnAbRuExavZxvWyKIkEuo8YjmyTQKDLrgzLZaLc= Subject key identifier: 3D:EF:85:56:9C:5A:AC:33:A2:DF:8F:A2:14:67:33:0E:75:0B:3B:38 Authority key identifier: 43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40 Certificate issuer: /CN=43B19C9E57D3EDADD315DF0E16760E303285E640 Certificate serial: 64E77CBECAE934392D495DBAC84BBDADBBF263C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft Manifest number: 01EC Signing time: Sun 06 Apr 2025 19:58:33 +0000 Manifest this update: Sun 06 Apr 2025 19:53:33 +0000 Manifest next update: Mon 07 Apr 2025 21:05:33 +0000 Files and hashes: 1: 323830343a333330633a3a2f33322d3336203d3e20323635313133.roa (hash: fx1aVoJ8u5swT9sokjs71rdgCIfOetZ7kdmMctTx2UU=) 2: 43B19C9E57D3EDADD315DF0E16760E303285E640.crl (hash: en60rMUZoQKtyT1eQ0djGbRFt00aX1LSlHWKoAMIBp8=) 3: 3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa (hash: jSR8/YMl7l3F3ZQFPLDZugzcVfH7Z8XPfuj/tMptYgw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 21:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e7:7c:be:ca:e9:34:39:2d:49:5d:ba:c8:4b:bd:ad:bb:f2:63:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43B19C9E57D3EDADD315DF0E16760E303285E640 Validity Not Before: Apr 6 19:53:33 2025 GMT Not After : Apr 7 21:05:33 2025 GMT Subject: CN=3DEF85569C5AAC33A2DF8FA21467330E750B3B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:d9:b6:03:f5:87:02:d5:43:49:c4:40:b2: 8e:dd:6b:09:b7:f8:ff:9c:8d:47:db:5f:dc:0f:19: d2:97:cf:ad:c9:50:ef:36:79:5b:cb:2c:75:f0:b4: 6b:ff:f5:fe:3b:c8:86:ea:84:a7:38:3c:a8:dd:ff: 71:26:0a:47:b6:04:23:bd:9b:7e:1f:80:0b:7a:0d: 52:98:f5:54:89:aa:ca:0d:05:aa:55:ab:74:b4:b6: a1:fd:a9:4c:14:0d:56:74:fa:af:5f:c1:1f:9c:1e: d6:63:9b:a8:c9:18:7e:25:36:d7:39:12:9c:c8:42: b6:11:26:0f:80:db:40:86:a8:bb:03:be:13:76:51: d1:41:09:f2:77:73:67:0d:db:38:b1:f9:4d:94:84: cf:4c:48:e2:ea:55:6c:26:2a:19:9c:5a:6f:b0:c2: ee:3a:b1:68:ab:cb:85:98:60:09:dd:25:e9:44:24: 31:93:94:d1:0e:90:58:80:3a:0b:6b:99:c3:29:99: 01:1a:35:e8:ef:ef:7c:1b:27:7f:c9:03:0f:48:e2: 23:24:76:94:f1:99:ea:2a:4b:5a:6a:c4:6e:17:61: 06:55:09:0b:8b:cc:b7:24:d3:c7:98:64:f9:6e:95: d9:c5:3e:f8:bf:8b:b9:43:be:8d:23:c3:68:3e:a7: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EF:85:56:9C:5A:AC:33:A2:DF:8F:A2:14:67:33:0E:75:0B:3B:38 X509v3 Authority Key Identifier: keyid:43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3e:b0:9f:f7:d7:1c:23:3a:d5:c4:81:76:9e:7c:89:b5:5c: a8:b5:0d:6a:47:ac:1a:39:25:00:5e:b6:32:f4:f2:4f:0e:00: 0b:59:24:df:1d:59:91:e3:56:92:11:97:26:59:c8:f1:ae:cd: 7c:f1:33:e0:f2:3f:83:b2:c2:15:33:53:86:80:c4:38:c1:c3: f3:c0:5c:2d:21:9b:eb:e6:66:02:21:b2:78:f1:ef:31:26:61: b9:c1:36:d2:d6:76:1d:4b:ab:e0:43:ef:84:c5:6c:4d:cb:48: 7f:80:f5:f9:70:8b:ed:1c:71:62:53:0f:7a:d5:26:2f:45:d3: b9:ff:bf:7c:58:40:7c:b6:8d:a1:67:65:37:39:4e:41:00:3b: 95:2d:1e:2a:02:81:14:ca:32:70:3d:e5:5e:a7:c4:d9:69:dc: 69:a9:79:32:b5:15:78:d4:75:ac:1e:84:ac:02:63:87:a3:c9: 07:d0:e4:43:01:91:3f:b2:26:c7:5d:c1:f2:4e:70:42:41:74: d7:a7:49:eb:2e:84:98:c8:74:c2:3b:7b:eb:5b:0a:2f:67:f1: 92:46:88:5b:27:39:ca:c5:8a:e9:e7:41:db:e2:00:f9:f9:eb: 63:87:e9:ff:4b:63:ab:26:a7:86:35:aa:ec:45:b9:69:5d:91: d1:e9:8b:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZOd8vsrpNDktSV26yEu9rbvyY8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNCMTlDOUU1N0QzRURBREQzMTVERjBFMTY3NjBFMzAz Mjg1RTY0MDAeFw0yNTA0MDYxOTUzMzNaFw0yNTA0MDcyMTA1MzNaMDMxMTAvBgNV BAMTKDNERUY4NTU2OUM1QUFDMzNBMkRGOEZBMjE0NjczMzBFNzUwQjNCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKoNm2A/WHAtVDScRAso7dawm3 +P+cjUfbX9wPGdKXz63JUO82eVvLLHXwtGv/9f47yIbqhKc4PKjd/3EmCke2BCO9 m34fgAt6DVKY9VSJqsoNBapVq3S0tqH9qUwUDVZ0+q9fwR+cHtZjm6jJGH4lNtc5 EpzIQrYRJg+A20CGqLsDvhN2UdFBCfJ3c2cN2zix+U2UhM9MSOLqVWwmKhmcWm+w wu46sWiry4WYYAndJelEJDGTlNEOkFiAOgtrmcMpmQEaNejv73wbJ3/JAw9I4iMk dpTxmeoqS1pqxG4XYQZVCQuLzLck08eYZPluldnFPvi/i7lDvo0jw2g+py11AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPe+FVpxarDOi34+iFGczDnULOzgwHwYDVR0j BBgwFoAUQ7GcnlfT7a3TFd8OFnYOMDKF5kAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ241NFp1ZFJ3Rkx4cnhRVEtaZHFZOTNNYzF6YUNUWXBab3FvR3VKS29Z M3MvMS80M0IxOUM5RTU3RDNFREFERDMxNURGMEUxNjc2MEUzMDMyODVFNjQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQjE5QzlFNTdEM0VEQURE MzE1REYwRTE2NzYwRTMwMzI4NUU2NDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q241NFp1ZFJ3Rkx4cnhRVEtaZHFZOTNNYzF6YUNUWXBab3FvR3VKS29ZM3MvMS80 M0IxOUM5RTU3RDNFREFERDMxNURGMEUxNjc2MEUzMDMyODVFNjQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEz6wn/fXHCM61cSBdp58ibVcqLUNakesGjklAF62MvTyTw4AC1kk3x1ZkeNW khGXJlnI8a7NfPEz4PI/g7LCFTNThoDEOMHD88BcLSGb6+ZmAiGyePHvMSZhucE2 0tZ2HUur4EPvhMVsTctIf4D1+XCL7RxxYlMPetUmL0XTuf+/fFhAfLaNoWdlNzlO QQA7lS0eKgKBFMoycD3lXqfE2Wncaal5MrUVeNR1rB6ErAJjh6PJB9DkQwGRP7Im x13B8k5wQkF016dJ6y6EmMh0wjt761sKL2fxkkaIWyc5ysWK6edB2+IA+fnrY4fp /0tjqyanhjWq7EW5aV2R0emLHg== -----END CERTIFICATE-----Generated at Mon Apr 7 11:32:30 2025 by rpki-client