$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json) Hash identifier: pL4KCUqbWxMrOK2ZAmMMA1lvpeNIbyh3blfykvXtFh8= Subject key identifier: C5:8B:1C:20:F9:BB:3B:56:56:D0:34:29:BD:1E:BD:EC:04:80:1B:FC Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Certificate serial: 6F6F0AA02CCB8AB6FB86C6874D13B8A73F63F59D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft Manifest number: 01E7 Signing time: Wed 19 Mar 2025 02:31:07 +0000 Manifest this update: Wed 19 Mar 2025 02:26:07 +0000 Manifest next update: Thu 20 Mar 2025 02:50:07 +0000 Files and hashes: 1: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: bOpaIkAXXsKIN+Ct+fHUeGfiD988enjiann3sdq8QpE=) 2: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=) 3: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=) 4: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: X60T99pAUp79kku1lX0GRz1YSbXHlswUojfF6fW+XIg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Mar 2025 02:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6f:0a:a0:2c:cb:8a:b6:fb:86:c6:87:4d:13:b8:a7:3f:63:f5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Validity Not Before: Mar 19 02:26:07 2025 GMT Not After : Mar 20 02:50:07 2025 GMT Subject: CN=C58B1C20F9BB3B5656D03429BD1EBDEC04801BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:36:24:c6:f8:9a:91:c4:63:bf:11:d3:14: e9:6b:46:78:14:c6:16:60:1a:b7:8b:b7:a9:b9:9d: 9d:39:11:0b:c6:87:4f:1a:e4:02:44:c3:8c:d1:58: ae:58:b8:ac:59:6b:49:b0:f8:8f:5c:67:6c:c5:f6: 9a:09:58:2b:e4:2a:a4:b6:b6:9d:31:cf:ea:b0:34: 69:76:cd:0b:84:76:81:43:4b:c1:10:19:26:52:f3: 65:85:f9:18:c0:01:64:03:5d:b9:fa:1a:7d:ba:82: c4:94:a1:e5:54:c6:fc:c8:61:d9:df:4b:ad:29:34: 7d:4a:17:2c:d4:ec:ac:c7:bd:1e:3f:ff:9e:b8:b6: 88:16:0d:6e:da:be:d1:37:5b:7c:c3:0f:8d:de:77: eb:95:30:fa:b2:48:09:21:87:5d:7c:19:45:e4:9c: 36:60:24:53:e1:4d:96:65:d2:a4:8d:09:34:4f:ac: 8c:1f:db:f6:aa:01:0f:d0:13:7a:c9:e4:f3:54:35: 7a:1b:cc:4a:c7:4c:a1:ec:2b:1f:fe:28:6d:83:83: f2:e0:bb:f2:53:89:97:e7:97:89:45:72:1c:aa:93: d7:d6:76:93:ea:00:2c:36:e4:fb:a8:5a:ea:6d:a1: 92:06:5f:c2:b8:80:5b:2e:e0:61:6f:4d:47:76:95: e8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8B:1C:20:F9:BB:3B:56:56:D0:34:29:BD:1E:BD:EC:04:80:1B:FC X509v3 Authority Key Identifier: keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f6:ca:3c:82:db:bb:95:ed:d5:5a:37:26:38:87:d4:3a:52: 3f:1e:87:2e:27:0f:9c:79:f1:5c:30:ab:9c:39:6d:b4:f1:4d: 97:ef:70:c4:96:da:91:1b:8d:c0:7c:61:b6:dc:b6:5e:28:c9: e2:80:4f:9a:e9:09:ff:b0:f5:0f:5a:ba:ad:89:d6:23:ca:63: a9:1e:1d:3c:c6:16:10:b5:d5:52:ae:ca:fa:a0:d0:7f:52:06: 81:09:d8:b2:72:08:b1:5c:7d:d7:2c:8b:84:13:1f:d9:5f:c9: ac:3a:22:16:df:57:62:a2:42:67:62:f1:b4:23:eb:15:b6:3b: f8:35:d0:3a:2a:e5:41:d1:58:44:21:17:e7:f0:41:c8:07:95: 7f:50:bb:d4:3d:63:12:f7:de:9f:50:af:11:22:c6:47:87:59: 58:0c:4d:9c:22:99:e7:4b:bd:7e:bb:44:c2:e0:81:c5:08:cf: 56:48:7f:26:d0:37:75:17:2b:c2:ad:20:db:3d:11:e1:09:8f: 43:a2:86:1e:30:09:fe:8c:70:b7:b0:35:66:5e:9e:c0:09:54: 4c:80:17:e6:ff:bd:7b:81:f9:dc:d5:9b:eb:9a:6e:7f:72:c4: c5:2f:3c:63:cc:76:d9:2a:19:a7:e0:9a:5c:69:13:0b:17:1d: 35:e2:b3:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb28KoCzLirb7hsaHTRO4pz9j9Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2 QkJCRENDNjAeFw0yNTAzMTkwMjI2MDdaFw0yNTAzMjAwMjUwMDdaMDMxMTAvBgNV BAMTKEM1OEIxQzIwRjlCQjNCNTY1NkQwMzQyOUJEMUVCREVDMDQ4MDFCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuDYkxviakcRjvxHTFOlrRngU xhZgGreLt6m5nZ05EQvGh08a5AJEw4zRWK5YuKxZa0mw+I9cZ2zF9poJWCvkKqS2 tp0xz+qwNGl2zQuEdoFDS8EQGSZS82WF+RjAAWQDXbn6Gn26gsSUoeVUxvzIYdnf S60pNH1KFyzU7KzHvR4//564togWDW7avtE3W3zDD43ed+uVMPqySAkhh118GUXk nDZgJFPhTZZl0qSNCTRPrIwf2/aqAQ/QE3rJ5PNUNXobzErHTKHsKx/+KG2Dg/Lg u/JTiZfnl4lFchyqk9fWdpPqACw25PuoWuptoZIGX8K4gFsu4GFvTUd2legtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxYscIPm7O1ZW0DQpvR697ASAG/wwHwYDVR0j BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1 MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkxa0ovMC9D QTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAafbKPILbu5Xt1Vo3JjiH1DpSPx6HLicPnHnxXDCrnDlttPFNl+9wxJbakRuN wHxhtty2XijJ4oBPmukJ/7D1D1q6rYnWI8pjqR4dPMYWELXVUq7K+qDQf1IGgQnY snIIsVx91yyLhBMf2V/JrDoiFt9XYqJCZ2LxtCPrFbY7+DXQOirlQdFYRCEX5/BB yAeVf1C71D1jEvfen1CvESLGR4dZWAxNnCKZ50u9frtEwuCBxQjPVkh/JtA3dRcr wq0g2z0R4QmPQ6KGHjAJ/oxwt7A1Zl6ewAlUTIAX5v+9e4H53NWb65puf3LExS88 Y8x22SoZp+CaXGkTCxcdNeKzKQ== -----END CERTIFICATE-----Generated at Wed Mar 19 19:19:52 2025 by rpki-client