$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.mft File: F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.mft (raw, json) Hash identifier: kh4+4Y86SO9RO8Twnza2zFNbm/QtKcLq4zU5X/86hYw= Subject key identifier: CE:2E:4E:32:68:91:08:7B:01:6D:CB:F1:61:E6:DB:E3:B6:A9:BC:4C Authority key identifier: F7:03:FB:4F:49:BC:7E:A3:94:CC:49:55:D3:BB:D7:B5:B4:0F:AA:F5 Certificate issuer: /CN=F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5 Certificate serial: 027D50B216405B3D8939993CE794C60B86F5AD82 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.mft Manifest number: 0D Signing time: Wed 19 Feb 2025 12:03:48 +0000 Manifest this update: Wed 19 Feb 2025 11:58:48 +0000 Manifest next update: Thu 20 Feb 2025 15:14:48 +0000 Files and hashes: 1: 34352e3233342e342e302f32322d3234203d3e20323637333531.roa (hash: MmIKzA6m047/armRL9ZfWYAvEHhVBrO2jD/XJtwmo5s=) 2: F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.crl (hash: muMYeY0hGHs+PMlKgKkdu/arhCkUFS2LV5SNkvTo9s4=) 3: 323830343a346332303a3a2f33322d313238203d3e20323637333531.roa (hash: AWQ7YkDE4uqyTndYWc0SsbNLFy8vkdFOxhrouBBKZHc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.crl rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 15:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7d:50:b2:16:40:5b:3d:89:39:99:3c:e7:94:c6:0b:86:f5:ad:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5 Validity Not Before: Feb 19 11:58:48 2025 GMT Not After : Feb 20 15:14:48 2025 GMT Subject: CN=CE2E4E326891087B016DCBF161E6DBE3B6A9BC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d8:36:97:65:4b:83:6e:a8:38:f0:a6:be:9c: af:03:c6:77:49:97:da:2e:47:25:52:45:1b:5d:f1: 22:a3:ec:49:84:df:be:f4:fe:99:13:0c:9a:f7:79: dc:17:7f:8e:46:2e:c5:d7:00:60:c8:ee:75:5f:af: 4b:7e:4b:47:b4:ed:e8:51:b1:e2:c7:f7:18:4c:44: 95:f1:42:92:15:51:f8:d1:b5:6b:b9:7b:b9:d3:32: 23:d8:6b:13:9f:74:fe:e1:63:08:04:f7:a7:2c:45: 25:21:8a:59:ef:8f:a9:c5:cf:b9:f2:ca:6d:df:4b: 84:8a:b0:87:6d:db:82:f1:49:83:39:80:a3:65:1f: 50:c0:91:7d:e8:7d:7a:a4:94:a1:4c:f1:2c:46:0b: 18:8b:d0:d2:fe:b5:2b:04:a2:da:cb:94:86:17:a2: fb:ec:43:84:e7:a0:8e:2e:42:70:f7:89:29:81:bb: b4:f1:63:b5:34:23:bd:90:58:30:9e:f0:35:a7:65: 18:b8:53:5f:2e:12:3c:40:62:b1:16:e3:0b:e1:2e: d5:23:b4:d9:36:66:d1:ca:e8:bc:ab:e7:6a:ab:02: 51:ac:d4:72:94:05:91:57:ca:7f:88:3a:a8:ee:46: 69:11:3f:d0:45:d1:72:ad:b5:10:08:db:c9:82:55: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2E:4E:32:68:91:08:7B:01:6D:CB:F1:61:E6:DB:E3:B6:A9:BC:4C X509v3 Authority Key Identifier: keyid:F7:03:FB:4F:49:BC:7E:A3:94:CC:49:55:D3:BB:D7:B5:B4:0F:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/F703FB4F49BC7EA394CC4955D3BBD7B5B40FAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3e:fc:52:22:84:e6:39:95:04:1e:71:c4:c0:62:49:88:67: 35:cb:fa:8a:2c:18:76:0c:2f:fb:ae:85:6f:bf:fb:8c:cc:94: aa:45:1f:c8:85:61:af:b3:ed:72:f3:19:d2:0a:23:9a:b5:bb: 2d:e3:21:a3:b7:e3:bb:e7:00:f6:d9:05:59:55:13:ca:5d:bd: c6:60:eb:0d:2f:dd:e4:65:b1:72:60:6c:b9:5f:06:17:45:8b: 4e:1f:34:a5:d1:74:50:62:2b:f3:57:37:c6:cc:70:da:5b:49: bd:b4:73:98:83:dd:47:41:8b:1c:54:35:1b:5f:f5:df:cc:2a: 13:38:8d:29:1e:51:00:d9:39:d8:da:d7:12:37:26:e8:18:87: 74:5d:6c:05:29:13:b0:bc:a4:8c:97:b1:dc:3c:2e:a3:43:24: 04:0b:3f:5e:cb:8d:d9:91:1f:ac:db:80:62:62:43:79:23:ca: fe:f4:f4:ce:ca:03:ab:ed:7c:a0:1f:68:93:ff:49:61:27:a5: f1:73:ad:fc:32:00:da:f1:67:65:4b:1a:94:d9:cb:bf:c7:27: 24:21:30:43:e4:fb:af:33:6d:f5:b6:c1:32:a2:f4:73:d9:a1: 39:c5:d9:72:c7:77:66:ba:18:ec:9a:c8:bb:a0:75:7b:55:2c: d1:03:b8:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAn1QshZAWz2JOZk855TGC4b1rYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwM0ZCNEY0OUJDN0VBMzk0Q0M0OTU1RDNCQkQ3QjVC NDBGQUFGNTAeFw0yNTAyMTkxMTU4NDhaFw0yNTAyMjAxNTE0NDhaMDMxMTAvBgNV BAMTKENFMkU0RTMyNjg5MTA4N0IwMTZEQ0JGMTYxRTZEQkUzQjZBOUJDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2DaXZUuDbqg48Ka+nK8DxndJ l9ouRyVSRRtd8SKj7EmE3770/pkTDJr3edwXf45GLsXXAGDI7nVfr0t+S0e07ehR seLH9xhMRJXxQpIVUfjRtWu5e7nTMiPYaxOfdP7hYwgE96csRSUhilnvj6nFz7ny ym3fS4SKsIdt24LxSYM5gKNlH1DAkX3ofXqklKFM8SxGCxiL0NL+tSsEotrLlIYX ovvsQ4TnoI4uQnD3iSmBu7TxY7U0I72QWDCe8DWnZRi4U18uEjxAYrEW4wvhLtUj tNk2ZtHK6Lyr52qrAlGs1HKUBZFXyn+IOqjuRmkRP9BF0XKttRAI28mCVcGhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzi5OMmiRCHsBbcvxYebb47apvEwwHwYDVR0j BBgwFoAU9wP7T0m8fqOUzElV07vXtbQPqvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhF dUQvMC9GNzAzRkI0RjQ5QkM3RUEzOTRDQzQ5NTVEM0JCRDdCNUI0MEZBQUY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3MDNGQjRGNDlCQzdFQTM5 NENDNDk1NUQzQkJEN0I1QjQwRkFBRjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhFdUQvMC9G NzAzRkI0RjQ5QkM3RUEzOTRDQzQ5NTVEM0JCRDdCNUI0MEZBQUY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaT78UiKE5jmVBB5xxMBiSYhnNcv6iiwYdgwv+66Fb7/7jMyUqkUfyIVhr7Pt cvMZ0gojmrW7LeMho7fju+cA9tkFWVUTyl29xmDrDS/d5GWxcmBsuV8GF0WLTh80 pdF0UGIr81c3xsxw2ltJvbRzmIPdR0GLHFQ1G1/138wqEziNKR5RANk52NrXEjcm 6BiHdF1sBSkTsLykjJex3Dwuo0MkBAs/XsuN2ZEfrNuAYmJDeSPK/vT0zsoDq+18 oB9ok/9JYSel8XOt/DIA2vFnZUsalNnLv8cnJCEwQ+T7rzNt9bbBMqL0c9mhOcXZ csd3ZroY7JrIu6B1e1Us0QO4Pg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:37 2025 by rpki-client