$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft File: AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft (raw, json) Hash identifier: Ywtvdq0g34p/wpzA+Vp32dKx0qu2WoDMHQSk/RlAiLQ= Subject key identifier: E3:38:28:95:DE:CC:E2:34:A0:BA:E7:0E:A8:22:5A:F4:F9:D0:2A:0D Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 Certificate issuer: /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Certificate serial: 7A0E3121AA2D460DDA38A9822963B6A254F072C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft Manifest number: 01E9 Signing time: Sat 05 Apr 2025 17:18:06 +0000 Manifest this update: Sat 05 Apr 2025 17:13:06 +0000 Manifest next update: Sun 06 Apr 2025 17:45:06 +0000 Files and hashes: 1: 3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (hash: XA3CDHGQzJtVy7KlXD+Ti8xltUzX609QLMhF05gs+Cg=) 2: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: ve9csxsYtvbttCUtJ6k2byKVef+aNPiHNUI7M+ZsbD4=) 3: AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl (hash: co5lK8xJC76oMVkY7qqPiHD9OBBmpJVnADAMaWc7HV4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 17:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0e:31:21:aa:2d:46:0d:da:38:a9:82:29:63:b6:a2:54:f0:72:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Validity Not Before: Apr 5 17:13:06 2025 GMT Not After : Apr 6 17:45:06 2025 GMT Subject: CN=E3382895DECCE234A0BAE70EA8225AF4F9D02A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1f:0b:e9:8f:b7:3d:a9:0b:00:a2:8b:b7:33: f0:e0:f4:8e:e3:c9:d0:be:2b:4e:14:39:4c:76:ce: ec:ed:dc:18:20:c5:a6:a2:be:bc:40:fe:b9:3e:2e: ee:8b:ac:61:a9:39:70:05:f0:f7:c9:0c:13:f2:33: 43:00:59:7c:7d:59:74:ed:74:dc:39:3a:ba:e3:bf: 1c:83:70:e7:a7:9e:67:70:cd:f5:fb:bb:11:1e:91: 2b:7c:1f:fd:12:96:8b:89:a3:db:eb:a0:19:e0:5b: b6:e8:af:0b:77:6c:4d:05:d5:cc:e3:21:9a:e5:ed: a0:0e:5f:06:d0:30:6b:41:af:79:02:e1:dc:24:39: 07:d3:cf:5b:cd:f0:f7:86:7f:a6:2c:b8:cd:23:2e: 4a:7d:5e:20:6d:de:12:45:1d:bc:cf:76:48:f0:c2: 16:86:bc:19:46:4f:b6:f7:17:c9:fa:47:68:b2:8b: fd:ab:60:fc:7e:aa:f0:2a:f8:da:46:0a:0b:0f:88: 01:ff:19:3e:4f:b9:45:ff:99:5a:52:4d:4e:83:f2: 56:0b:2f:8d:7a:f7:a6:f5:45:25:0d:ff:c2:c6:b3: 51:18:fe:6a:77:f4:07:f8:ba:a1:d1:f6:52:85:cf: 1e:b5:56:20:4d:c2:2a:26:cf:fa:93:36:b2:a6:11: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:38:28:95:DE:CC:E2:34:A0:BA:E7:0E:A8:22:5A:F4:F9:D0:2A:0D X509v3 Authority Key Identifier: keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4d:ec:44:a6:18:0d:e2:1b:86:ad:eb:6e:29:5e:01:3f:be: 69:80:86:5e:56:12:d8:31:37:e1:f8:bd:ce:78:e8:d5:e6:a7: 30:47:78:79:38:40:cf:7f:43:d9:0d:f8:31:00:55:eb:fe:a3: 7b:9a:2a:85:58:c3:ce:ac:7d:99:5f:29:24:bf:cc:c5:0b:b6: bc:f3:88:7b:30:ba:ef:b9:ec:03:20:33:26:7b:a5:b2:a7:ce: b2:8e:85:3d:49:ce:48:74:c5:58:5e:89:79:50:65:7f:65:2a: 91:9d:a2:cb:e8:7c:a4:ae:63:b4:9a:77:7f:fd:4c:40:35:5e: d9:d7:c3:84:8b:4d:97:5d:9d:ef:41:e5:04:e1:b2:ae:6a:5d: e5:56:33:fc:a6:c2:74:a6:55:05:54:dd:f5:9e:ff:a4:ac:c6: 97:dc:04:95:8f:d8:f8:ce:ea:c6:4f:54:12:29:11:40:4b:a9: ce:85:e3:df:0b:7b:19:09:02:43:ab:d2:d2:6f:f8:b2:e8:3b: 9c:7a:32:36:28:a1:41:b3:30:82:81:14:07:88:83:a9:f6:13: 48:a4:af:41:4a:29:c6:77:e7:24:f8:ee:8b:f3:73:56:74:5b: fe:85:7d:fc:a4:05:44:2b:ed:dd:7b:9e:72:c3:be:0b:6d:96: 8b:05:66:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeg4xIaotRg3aOKmCKWO2olTwcsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyOUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3 NjNDMzhBNDAeFw0yNTA0MDUxNzEzMDZaFw0yNTA0MDYxNzQ1MDZaMDMxMTAvBgNV BAMTKEUzMzgyODk1REVDQ0UyMzRBMEJBRTcwRUE4MjI1QUY0RjlEMDJBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHwvpj7c9qQsAoou3M/Dg9I7j ydC+K04UOUx2zuzt3BggxaaivrxA/rk+Lu6LrGGpOXAF8PfJDBPyM0MAWXx9WXTt dNw5OrrjvxyDcOennmdwzfX7uxEekSt8H/0SlouJo9vroBngW7borwt3bE0F1czj IZrl7aAOXwbQMGtBr3kC4dwkOQfTz1vN8PeGf6YsuM0jLkp9XiBt3hJFHbzPdkjw whaGvBlGT7b3F8n6R2iyi/2rYPx+qvAq+NpGCgsPiAH/GT5PuUX/mVpSTU6D8lYL L41696b1RSUN/8LGs1EY/mp39Af4uqHR9lKFzx61ViBNwiomz/qTNrKmEdrlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4zgold7M4jSguucOqCJa9PnQKg0wHwYDVR0j BBgwFoAUqim65U85hoY4xQobuV4jp3Y8OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM S1MvMS9BQTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMjlCQUU1NEYzOTg2ODYz OEM1MEExQkI5NUUyM0E3NzYzQzM4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMS9B QTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb03sRKYYDeIbhq3rbileAT++aYCGXlYS2DE34fi9znjo1eanMEd4eThAz39D 2Q34MQBV6/6je5oqhVjDzqx9mV8pJL/MxQu2vPOIezC677nsAyAzJnulsqfOso6F PUnOSHTFWF6JeVBlf2UqkZ2iy+h8pK5jtJp3f/1MQDVe2dfDhItNl12d70HlBOGy rmpd5VYz/KbCdKZVBVTd9Z7/pKzGl9wElY/Y+M7qxk9UEikRQEupzoXj3wt7GQkC Q6vS0m/4sug7nHoyNiihQbMwgoEUB4iDqfYTSKSvQUopxnfnJPjui/NzVnRb/oV9 /KQFRCvt3XuecsO+C22WiwVm/Q== -----END CERTIFICATE-----Generated at Sun Apr 6 06:18:31 2025 by rpki-client