$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: ZsH7y9TpgOSNu9WQtzjlyxtEAdCdz7b6+63Weg9vB/0= Subject key identifier: A5:AB:B0:B3:ED:FC:06:D3:61:15:DF:82:91:35:54:45:F8:25:C2:0F Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 534228AE944A4B53E29C9F2B6CC52FE7D958C549 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 01E7 Signing time: Fri 04 Apr 2025 13:14:19 +0000 Manifest this update: Fri 04 Apr 2025 13:09:19 +0000 Manifest next update: Sat 05 Apr 2025 14:18:19 +0000 Files and hashes: 1: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) 2: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: tXrU4ZDPZP8tfvfdn0hUCeAqKtU54Bcc9jpmUXocrOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 14:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:42:28:ae:94:4a:4b:53:e2:9c:9f:2b:6c:c5:2f:e7:d9:58:c5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: Apr 4 13:09:19 2025 GMT Not After : Apr 5 14:18:19 2025 GMT Subject: CN=A5ABB0B3EDFC06D36115DF8291355445F825C20F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:de:5c:c3:ff:66:ba:e1:24:76:ba:eb:54: 33:e8:83:38:70:4a:8b:8e:28:85:f5:af:10:6f:eb: 76:fd:28:e7:f9:39:ae:9c:37:a4:d3:2e:df:f6:ef: 3d:22:59:30:8b:2f:a2:7a:a7:5d:d0:c4:5d:3f:49: 8c:3f:91:9c:2f:de:75:50:68:b4:17:5b:10:a1:e4: 90:40:e0:ca:ba:eb:94:8b:b4:1a:13:d9:42:17:54: b7:e4:ba:73:79:04:39:ed:9c:e8:43:44:17:e7:b1: 3e:fd:d1:1b:21:f9:12:55:7e:ac:e0:45:49:df:9a: 88:1d:27:a2:28:8d:c7:a5:af:7d:2c:6e:02:be:67: 7b:35:09:b3:7c:19:a7:ae:17:b2:1c:23:8c:0e:d0: 29:cd:6e:da:82:ac:b5:d9:3d:d9:2e:26:dd:ed:81: ca:c4:31:c3:26:04:1c:ab:6e:6a:ce:6e:e4:3a:e4: e7:32:bd:71:e6:6c:e9:fe:d8:92:09:21:74:c3:e2: 98:e7:5d:c1:35:01:c9:d7:7c:6b:4c:b0:32:83:90: 6a:1d:a7:8d:ba:a0:3c:59:47:f7:83:c7:ff:61:d6: 77:69:60:ce:83:30:ed:32:27:40:00:cb:52:81:fe: 16:1a:fd:64:0d:b9:b8:fd:4e:06:4f:5f:d0:cb:f2: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AB:B0:B3:ED:FC:06:D3:61:15:DF:82:91:35:54:45:F8:25:C2:0F X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e2:02:5d:7b:9f:12:49:ff:20:3a:eb:10:48:a7:c6:7c:4d: 51:90:54:87:1f:2c:bb:2b:12:42:0b:ef:31:06:e0:ae:78:42: dd:c9:90:e7:42:af:05:ec:b8:b5:1e:15:59:5e:16:0b:10:77: 55:7a:eb:c0:b6:d2:37:54:c4:88:c8:55:62:e7:42:f1:9f:80: 41:01:f3:41:2c:12:93:a1:9a:7e:fa:e6:a8:a7:2a:61:cb:6e: fe:33:78:74:ff:55:cf:b7:3b:2d:16:08:68:a7:53:09:d5:4e: 86:35:44:9e:9a:c7:75:18:11:66:d0:a2:34:22:f2:c7:54:f6: 9d:e9:37:e7:c6:90:72:b5:7a:48:4b:f3:c6:87:2a:05:f4:8e: 0d:91:e3:f1:9d:67:51:11:ed:78:97:c2:68:4e:32:a1:91:dc: 01:3e:5a:7c:ea:25:0c:7a:9c:c3:a9:98:a7:4e:73:32:de:dc: 36:f8:fb:3e:73:89:90:b9:f5:42:23:85:d5:0c:b9:f3:1a:cc: d2:ef:06:6a:45:f8:d4:5b:14:ad:72:a2:65:71:8b:af:9f:4c: 28:c7:c2:ec:df:38:4c:d0:81:e8:ba:f8:71:14:b6:ea:a5:1b: 27:a2:ad:0f:b3:d8:08:2e:f3:e1:5d:e0:9f:0b:c8:2f:9c:bd: 4b:b4:71:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU0IorpRKS1PinJ8rbMUv59lYxUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTA0MDQxMzA5MTlaFw0yNTA0MDUxNDE4MTlaMDMxMTAvBgNV BAMTKEE1QUJCMEIzRURGQzA2RDM2MTE1REY4MjkxMzU1NDQ1RjgyNUMyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34N5cw/9muuEkdrrrVDPogzhw SouOKIX1rxBv63b9KOf5Oa6cN6TTLt/27z0iWTCLL6J6p13QxF0/SYw/kZwv3nVQ aLQXWxCh5JBA4Mq665SLtBoT2UIXVLfkunN5BDntnOhDRBfnsT790Rsh+RJVfqzg RUnfmogdJ6Iojcelr30sbgK+Z3s1CbN8GaeuF7IcI4wO0CnNbtqCrLXZPdkuJt3t gcrEMcMmBByrbmrObuQ65OcyvXHmbOn+2JIJIXTD4pjnXcE1AcnXfGtMsDKDkGod p426oDxZR/eDx/9h1ndpYM6DMO0yJ0AAy1KB/hYa/WQNubj9TgZPX9DL8lqJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpauws+38BtNhFd+CkTVURfglwg8wHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUeICXXufEkn/IDrrEEinxnxNUZBUhx8suysSQgvvMQbgrnhC3cmQ50KvBey4 tR4VWV4WCxB3VXrrwLbSN1TEiMhVYudC8Z+AQQHzQSwSk6GafvrmqKcqYctu/jN4 dP9Vz7c7LRYIaKdTCdVOhjVEnprHdRgRZtCiNCLyx1T2nek358aQcrV6SEvzxocq BfSODZHj8Z1nURHteJfCaE4yoZHcAT5afOolDHqcw6mYp05zMt7cNvj7PnOJkLn1 QiOF1Qy58xrM0u8GakX41FsUrXKiZXGLr59MKMfC7N84TNCB6Lr4cRS26qUbJ6Kt D7PYCC7z4V3gnwvIL5y9S7RxhA== -----END CERTIFICATE-----Generated at Fri Apr 4 18:01:49 2025 by rpki-client