$ rpki-client -vvf rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft File: 22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft (raw, json) Hash identifier: /qwQXOAtnfKtaxgUD3VYsLLecyrpM2sqHziGIrTxJzA= Subject key identifier: 61:4F:7C:E3:FA:FA:85:6D:2D:D5:68:8E:D6:B2:9B:1B:4B:2E:94:0C Authority key identifier: 22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB Certificate issuer: /CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB Certificate serial: 50AA81531BD5B810F5A52E26A34D5B93CBE5E5E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft Manifest number: 0164 Signing time: Tue 18 Feb 2025 11:24:37 +0000 Manifest this update: Tue 18 Feb 2025 11:19:37 +0000 Manifest next update: Wed 19 Feb 2025 13:23:37 +0000 Files and hashes: 1: 323830343a323262303a3a2f33322d3438203d3e20323634313136.roa (hash: QXNnnsSekudtlkp86dBK3BtxcaPlOJIQb1WJsSK8Vxc=) 2: 3133382e35392e3230382e302f32322d3234203d3e20323634313136.roa (hash: 1MwPaeg0yHOJ1Doa1McVeYrt+QEEf9HjVVdV42nDnc0=) 3: 22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl (hash: EkLXExdF9DfSN/XZpOwNTaxt2CGBaQsRKZ83hV+f794=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Feb 2025 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:aa:81:53:1b:d5:b8:10:f5:a5:2e:26:a3:4d:5b:93:cb:e5:e5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB Validity Not Before: Feb 18 11:19:37 2025 GMT Not After : Feb 19 13:23:37 2025 GMT Subject: CN=614F7CE3FAFA856D2DD5688ED6B29B1B4B2E940C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:14:46:2e:09:4c:c2:42:f9:7c:bc:cb:c9:60: 31:ee:7d:15:30:72:47:00:f6:44:c8:87:75:88:a2: 48:57:84:6b:34:6a:6c:e5:d0:8e:02:c9:5c:ea:10: 6e:6e:dc:60:8a:db:48:ac:18:ff:6b:2d:3d:29:2b: 74:e6:53:f1:f2:df:09:55:75:dc:af:25:90:98:04: 27:fa:e2:33:2c:e2:d8:4f:92:ff:53:4d:ef:61:51: 86:71:50:8b:db:6a:fc:aa:6a:24:6e:e8:36:4d:33: e8:79:39:ac:e1:a9:a9:be:dd:f8:52:26:2d:de:38: 30:b5:8d:88:14:38:70:c1:9e:c5:ae:b2:ba:fe:78: 1e:89:ff:bb:04:f2:62:ef:cf:f0:32:1e:51:7d:00: 66:87:07:8f:ad:fb:9d:aa:07:5a:6f:2c:ae:66:a4: 2f:0c:c8:21:80:19:59:b6:02:cb:4a:5a:ed:45:6b: bf:9c:63:ba:2c:be:46:ee:fc:2e:27:c8:7b:bc:63: 32:84:9f:4b:6d:92:dd:2e:ec:35:1e:05:23:99:72: 8c:70:c7:6a:76:2c:6c:06:cd:c8:e5:21:a4:ea:45: e2:36:af:71:10:bc:1d:d5:8c:85:f8:2b:ad:ee:54: 88:cd:18:41:3d:08:9d:05:e4:55:70:8a:dd:30:38: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4F:7C:E3:FA:FA:85:6D:2D:D5:68:8E:D6:B2:9B:1B:4B:2E:94:0C X509v3 Authority Key Identifier: keyid:22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8e:7d:ef:b5:d1:d5:38:8e:22:a9:72:de:74:3d:5f:06:cd: 69:13:fe:81:f7:af:33:33:39:a7:31:33:85:bd:d4:29:22:15: 88:10:d0:07:e2:ef:4d:db:75:fd:e8:1b:6b:9e:ec:09:32:04: e1:36:c1:c3:5a:9c:ae:43:6f:70:eb:62:4b:24:ad:0d:a2:b6: 68:12:e5:36:8e:46:0a:35:2a:bf:19:3d:11:11:7e:81:b6:0a: ea:fa:86:65:d8:bb:74:ab:92:fe:e3:89:36:53:a0:05:cb:04: 57:dd:ac:fe:d0:cf:5f:3f:9a:ae:0e:89:c8:ad:71:64:83:c7: 5c:22:2a:43:ef:3b:76:96:38:58:72:14:29:d0:ea:bb:97:1a: d7:43:b8:2e:41:11:31:cf:95:fd:ac:e9:3f:3e:f6:20:3e:0c: 85:d5:6a:c9:c9:02:90:0b:0f:64:eb:37:c4:63:8f:c6:22:54: eb:6e:ad:b9:4a:c0:81:5f:4c:6e:25:f1:ac:ff:10:38:bc:ff: 3f:f5:7c:ad:eb:61:87:7a:b5:0c:d6:b8:62:ef:a1:8e:0f:95: e3:8e:b3:31:47:d3:1d:c7:aa:17:31:53:c9:d0:6e:17:f0:17: 67:b6:5d:aa:32:5f:2f:1b:10:04:34:39:37:8e:6a:0a:d9:47: c3:8c:f7:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUKqBUxvVuBD1pS4mo01bk8vl5eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERUIzRDJBMTRGOTg5NzI3NTNDQUY4QjdCQzVDNUUy MDI3RjdGQjAeFw0yNTAyMTgxMTE5MzdaFw0yNTAyMTkxMzIzMzdaMDMxMTAvBgNV BAMTKDYxNEY3Q0UzRkFGQTg1NkQyREQ1Njg4RUQ2QjI5QjFCNEIyRTk0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFEYuCUzCQvl8vMvJYDHufRUw ckcA9kTIh3WIokhXhGs0amzl0I4CyVzqEG5u3GCK20isGP9rLT0pK3TmU/Hy3wlV ddyvJZCYBCf64jMs4thPkv9TTe9hUYZxUIvbavyqaiRu6DZNM+h5Oazhqam+3fhS Ji3eODC1jYgUOHDBnsWusrr+eB6J/7sE8mLvz/AyHlF9AGaHB4+t+52qB1pvLK5m pC8MyCGAGVm2AstKWu1Fa7+cY7osvkbu/C4nyHu8YzKEn0ttkt0u7DUeBSOZcoxw x2p2LGwGzcjlIaTqReI2r3EQvB3VjIX4K63uVIjNGEE9CJ0F5FVwit0wOD3PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYU984/r6hW0t1WiO1rKbG0sulAwwHwYDVR0j BBgwFoAUIt6z0qFPmJcnU8r4t7xcXiAn9/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVYUjVBcHVYcFRheEZ6ekc1R1RVcEJCczRUdVVTVTl2RVAzemZWdFpY NGQvMC8yMkRFQjNEMkExNEY5ODk3Mjc1M0NBRjhCN0JDNUM1RTIwMjdGN0ZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyREVCM0QyQTE0Rjk4OTcy NzUzQ0FGOEI3QkM1QzVFMjAyN0Y3RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVYUjVBcHVYcFRheEZ6ekc1R1RVcEJCczRUdVVTVTl2RVAzemZWdFpYNGQvMC8y MkRFQjNEMkExNEY5ODk3Mjc1M0NBRjhCN0JDNUM1RTIwMjdGN0ZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi45977XR1TiOIqly3nQ9XwbNaRP+gfevMzM5pzEzhb3UKSIViBDQB+LvTdt1 /egba57sCTIE4TbBw1qcrkNvcOtiSyStDaK2aBLlNo5GCjUqvxk9ERF+gbYK6vqG Zdi7dKuS/uOJNlOgBcsEV92s/tDPXz+arg6JyK1xZIPHXCIqQ+87dpY4WHIUKdDq u5ca10O4LkERMc+V/azpPz72ID4MhdVqyckCkAsPZOs3xGOPxiJU626tuUrAgV9M biXxrP8QOLz/P/V8rethh3q1DNa4Yu+hjg+V446zMUfTHceqFzFTydBuF/AXZ7Zd qjJfLxsQBDQ5N45qCtlHw4z3FA== -----END CERTIFICATE-----Generated at Tue Feb 18 13:32:22 2025 by rpki-client