$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json) Hash identifier: t/D3PspZdyZakBM2bRLd9ceDMp0aRBWnUECZk35Y5hY= Subject key identifier: 03:1E:49:D6:4B:5A:AD:29:39:AB:01:E2:0E:FA:29:47:02:EA:DE:6D Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Certificate serial: 6947A3C4E384B1C232EE73354A866D9A5389C4E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft Manifest number: 01BE Signing time: Sun 16 Feb 2025 13:22:45 +0000 Manifest this update: Sun 16 Feb 2025 13:17:45 +0000 Manifest next update: Mon 17 Feb 2025 16:12:45 +0000 Files and hashes: 1: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: bOpaIkAXXsKIN+Ct+fHUeGfiD988enjiann3sdq8QpE=) 2: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=) 3: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=) 4: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: WUNXhKC0j8k//3pduNHFQ964xWdY68Q2X0xvAtJTpHE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 16:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:47:a3:c4:e3:84:b1:c2:32:ee:73:35:4a:86:6d:9a:53:89:c4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Validity Not Before: Feb 16 13:17:45 2025 GMT Not After : Feb 17 16:12:45 2025 GMT Subject: CN=031E49D64B5AAD2939AB01E20EFA294702EADE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:62:d6:24:e8:fd:e1:13:f9:10:a4:8e:ca: e1:14:b2:8b:da:59:c2:31:1e:99:16:ad:76:e6:b2: 2d:90:61:5c:e0:d8:a8:b3:b2:14:79:7a:88:66:37: e5:23:6c:97:9b:7d:e8:8b:17:f7:c1:a9:9c:3b:f0: d0:4b:80:35:cf:8f:3f:6f:60:5b:c1:dc:20:42:95: 8c:65:89:13:8c:59:04:91:c0:19:fb:a5:fc:7b:2d: 53:db:53:c3:40:19:75:ae:4c:f4:d7:69:30:a0:6e: 1b:40:fb:12:1f:fe:84:a1:63:3b:5f:65:9e:6e:32: b3:c1:e5:a1:0b:cc:80:17:e4:44:d5:96:80:32:a0: bf:c3:77:d1:95:05:f4:20:74:2e:12:0d:b0:2e:cd: bc:7a:8c:fe:e6:8a:7e:cd:6b:15:86:af:fe:67:f0: 44:61:89:70:82:e3:2d:e4:b5:1b:aa:14:83:60:82: 04:c2:a3:e6:bb:f1:43:98:e0:a4:6b:74:bd:7c:f8: 39:22:68:38:f1:07:96:85:20:1a:04:e1:c5:1e:c9: 90:47:29:9f:54:4e:a3:1e:d2:de:e6:ee:af:85:06: fa:69:e5:21:ae:e3:15:ee:b0:ca:2b:c9:82:15:da: ad:89:27:02:17:45:f0:33:37:30:06:49:42:48:8e: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1E:49:D6:4B:5A:AD:29:39:AB:01:E2:0E:FA:29:47:02:EA:DE:6D X509v3 Authority Key Identifier: keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:99:20:d2:e8:89:05:c0:49:d4:d7:15:5a:75:4c:77:63:bc: 06:a6:a5:d7:4e:1d:ec:0e:8d:19:f6:35:c8:7c:e9:79:c1:45: 96:28:87:9d:32:9a:29:5a:27:d3:09:5b:34:71:cf:04:09:c3: 4e:92:31:19:d2:e9:66:81:ad:76:d3:8f:85:c6:80:2b:d2:1c: a0:56:0d:c3:f6:49:2f:cf:ba:ba:42:c5:e0:a2:5e:4f:63:2d: b7:18:72:ef:1a:a9:d6:c8:47:5f:3b:27:88:cc:be:f6:ba:01: 48:d9:9b:4e:a7:8c:a6:77:a1:89:09:cb:40:b7:9e:5b:bd:62: 87:b4:c2:76:af:2d:0a:7f:fb:74:b1:79:56:d1:81:98:2a:8f: 0b:84:ac:fb:df:0d:c5:bc:f1:0a:00:e7:60:c8:98:f1:0d:07: 04:9c:2b:b9:77:c1:c7:3d:eb:61:43:4a:ac:63:3a:22:19:ab: 5a:a8:36:74:cf:07:f2:d2:33:df:9d:14:08:a8:ea:21:1b:56: 45:6f:e3:75:dd:e3:36:73:df:e8:5d:8b:68:c0:ab:8b:74:f7: 04:35:f3:f3:be:29:34:ee:41:43:c0:d2:c0:9d:74:76:ce:9a: 0c:93:56:f1:f1:49:11:83:ac:ea:77:55:21:35:2a:13:3e:89: d6:f3:98:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaUejxOOEscIy7nM1SoZtmlOJxOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2 QkJCRENDNjAeFw0yNTAyMTYxMzE3NDVaFw0yNTAyMTcxNjEyNDVaMDMxMTAvBgNV BAMTKDAzMUU0OUQ2NEI1QUFEMjkzOUFCMDFFMjBFRkEyOTQ3MDJFQURFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KmLWJOj94RP5EKSOyuEUsova WcIxHpkWrXbmsi2QYVzg2KizshR5eohmN+UjbJebfeiLF/fBqZw78NBLgDXPjz9v YFvB3CBClYxliROMWQSRwBn7pfx7LVPbU8NAGXWuTPTXaTCgbhtA+xIf/oShYztf ZZ5uMrPB5aELzIAX5ETVloAyoL/Dd9GVBfQgdC4SDbAuzbx6jP7min7NaxWGr/5n 8ERhiXCC4y3ktRuqFINgggTCo+a78UOY4KRrdL18+DkiaDjxB5aFIBoE4cUeyZBH KZ9UTqMe0t7m7q+FBvpp5SGu4xXusMoryYIV2q2JJwIXRfAzNzAGSUJIjpjfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAx5J1ktarSk5qwHiDvopRwLq3m0wHwYDVR0j BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1 MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkxa0ovMC9D QTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiZkg0uiJBcBJ1NcVWnVMd2O8Bqal104d7A6NGfY1yHzpecFFliiHnTKaKVon 0wlbNHHPBAnDTpIxGdLpZoGtdtOPhcaAK9IcoFYNw/ZJL8+6ukLF4KJeT2Mttxhy 7xqp1shHXzsniMy+9roBSNmbTqeMpnehiQnLQLeeW71ih7TCdq8tCn/7dLF5VtGB mCqPC4Ss+98NxbzxCgDnYMiY8Q0HBJwruXfBxz3rYUNKrGM6IhmrWqg2dM8H8tIz 350UCKjqIRtWRW/jdd3jNnPf6F2LaMCri3T3BDXz874pNO5BQ8DSwJ10ds6aDJNW 8fFJEYOs6ndVITUqEz6J1vOYnA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:37 2025 by rpki-client