$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: Ieqx9hOhmXDFjcSWfjBQwqZ/7iH74s1ppITbubBpt00= Subject key identifier: BD:FE:36:36:BE:9F:91:87:3D:C7:51:63:1E:CF:F5:4A:4D:4F:EE:3C Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 61EDBE3C47BB990D4D65AE176EE352D9EBDF8D17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 10 Signing time: Wed 19 Feb 2025 04:42:52 +0000 Manifest this update: Wed 19 Feb 2025 04:37:52 +0000 Manifest next update: Thu 20 Feb 2025 08:15:52 +0000 Files and hashes: 1: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) 2: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 3: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: HsneTVPYJHfVJG3bcnN0sDUMpNfGAk7lCzgePBTwITQ=) 4: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 08:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ed:be:3c:47:bb:99:0d:4d:65:ae:17:6e:e3:52:d9:eb:df:8d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Feb 19 04:37:52 2025 GMT Not After : Feb 20 08:15:52 2025 GMT Subject: CN=BDFE3636BE9F91873DC751631ECFF54A4D4FEE3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:5a:f6:8d:b3:59:24:56:2c:7d:d1:f1:9c: 61:0c:83:6a:86:05:f1:48:ce:94:fd:e4:4c:5f:4b: 4a:b6:58:81:89:b9:35:fc:36:00:9e:d2:d9:2b:7f: 60:b5:f9:39:5e:aa:dd:6f:25:f5:b0:3e:40:c2:d6: 58:2e:63:8c:b2:b6:7a:63:5f:df:c3:49:e2:c1:0b: ad:d9:4b:b8:79:4e:19:66:61:f2:d5:f7:41:32:8d: ad:83:c5:83:48:05:f2:bd:06:37:62:99:05:ca:b2: 1e:96:ac:ed:af:9e:a4:8d:6b:52:bd:aa:01:4f:a4: ee:ba:3c:ff:54:6f:93:ba:3c:f2:d2:ff:31:fb:db: 29:c7:02:6e:aa:53:bf:f6:e5:b0:ee:f0:1b:6d:7d: 21:a1:40:b7:46:86:3f:c6:08:83:8c:77:ce:b5:5a: 25:93:ce:96:41:8a:5d:7b:b8:3a:9f:6f:c5:42:ee: 81:48:d8:25:17:1f:ad:2a:f1:aa:87:03:f9:89:7f: 05:54:61:58:31:b7:24:ea:7d:56:99:d1:6a:67:1f: b4:27:b4:d2:dc:3b:0b:e5:2e:26:3a:cf:50:e7:4f: f4:18:f9:a8:1c:36:53:eb:cf:53:55:42:fb:aa:d1: ff:b1:21:02:25:7e:a7:2d:e1:74:4e:6f:cf:09:1a: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FE:36:36:BE:9F:91:87:3D:C7:51:63:1E:CF:F5:4A:4D:4F:EE:3C X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1a:a6:b9:86:d0:83:a2:ca:48:49:5c:47:af:f5:49:17:1f: df:66:b5:35:5e:91:7f:7f:fb:c0:f7:de:ca:77:34:c2:f7:dc: 38:a4:a9:b7:92:1e:19:e3:52:1d:f7:58:6a:5a:a8:b1:74:86: d4:31:aa:59:d4:ac:10:8b:35:cd:c9:51:9f:0c:08:0f:00:22: 64:6a:38:a2:32:2f:4c:01:86:7a:c3:c9:1f:0a:67:9d:b7:97: b7:ef:d8:ba:44:31:6f:df:4e:7d:f6:06:89:5b:ee:92:c9:4a: f6:93:55:f3:8e:fc:4e:30:d1:93:59:bc:d6:e8:0f:fd:c1:85: 3f:de:62:12:54:2d:2e:c2:d9:10:10:7d:17:f5:a0:15:1f:f9: fe:68:07:d9:b1:89:6d:d3:1f:55:0d:d3:9b:56:da:92:96:09: 87:c8:c5:8f:88:9d:e5:d9:a0:83:9e:7f:f3:e5:e3:38:fd:37: 21:7b:4b:19:08:73:21:51:05:a0:1a:4e:e3:02:f7:80:76:07: 91:ff:59:32:20:09:3b:ee:f4:50:7c:90:17:51:ed:9d:0c:7c: 63:9f:20:29:66:10:df:ee:e6:4e:85:3f:26:a3:04:b8:b7:cf: 5e:01:c4:c9:a2:1d:8c:ed:99:f2:0e:fb:58:0c:42:6f:cf:de: d4:bf:70:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYe2+PEe7mQ1NZa4XbuNS2evfjRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTAyMTkwNDM3NTJaFw0yNTAyMjAwODE1NTJaMDMxMTAvBgNV BAMTKEJERkUzNjM2QkU5RjkxODczREM3NTE2MzFFQ0ZGNTRBNEQ0RkVFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAolr2jbNZJFYsfdHxnGEMg2qG BfFIzpT95ExfS0q2WIGJuTX8NgCe0tkrf2C1+Tleqt1vJfWwPkDC1lguY4yytnpj X9/DSeLBC63ZS7h5ThlmYfLV90Eyja2DxYNIBfK9BjdimQXKsh6WrO2vnqSNa1K9 qgFPpO66PP9Ub5O6PPLS/zH72ynHAm6qU7/25bDu8BttfSGhQLdGhj/GCIOMd861 WiWTzpZBil17uDqfb8VC7oFI2CUXH60q8aqHA/mJfwVUYVgxtyTqfVaZ0WpnH7Qn tNLcOwvlLiY6z1DnT/QY+agcNlPrz1NVQvuq0f+xIQIlfqct4XROb88JGq2vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvf42Nr6fkYc9x1FjHs/1Sk1P7jwwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANRqmuYbQg6LKSElcR6/1SRcf32a1NV6Rf3/7wPfeync0wvfcOKSpt5IeGeNS HfdYalqosXSG1DGqWdSsEIs1zclRnwwIDwAiZGo4ojIvTAGGesPJHwpnnbeXt+/Y ukQxb99OffYGiVvukslK9pNV8478TjDRk1m81ugP/cGFP95iElQtLsLZEBB9F/Wg FR/5/mgH2bGJbdMfVQ3Tm1bakpYJh8jFj4id5dmgg55/8+XjOP03IXtLGQhzIVEF oBpO4wL3gHYHkf9ZMiAJO+70UHyQF1HtnQx8Y58gKWYQ3+7mToU/JqMEuLfPXgHE yaIdjO2Z8g77WAxCb8/e1L9wqw== -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:14 2025 by rpki-client