$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: 6z8BItnepJhhqbevf8gq8R4+NXM8/3CR2IeVrnFRtIc= Subject key identifier: F4:FE:6E:67:8A:CA:D7:4D:EC:0F:7B:08:DE:B9:15:D8:4D:4F:06:47 Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 2E1326CC10463E157BBE5194CD9D3A7F37B1E826 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 2A Signing time: Thu 15 May 2025 08:09:43 +0000 Manifest this update: Thu 15 May 2025 08:04:43 +0000 Manifest next update: Fri 16 May 2025 08:28:43 +0000 Files and hashes: 1: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: te0Qh2xMwzcVJt+fAWTh6EnJMkDJ2pSwksLJziuqD94=) 2: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 3: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) 4: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 08:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:13:26:cc:10:46:3e:15:7b:be:51:94:cd:9d:3a:7f:37:b1:e8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: May 15 08:04:43 2025 GMT Not After : May 16 08:28:43 2025 GMT Subject: CN=F4FE6E678ACAD74DEC0F7B08DEB915D84D4F0647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:91:51:cb:2b:ec:85:00:94:ab:97:9a:74: 95:8d:97:9f:7d:62:7f:f7:86:51:40:8e:4a:5e:1f: e5:85:95:20:a4:6e:7e:34:38:df:1c:da:36:38:f2: c4:1e:85:a8:65:4c:c0:7b:ea:6b:1e:94:cb:e5:03: 84:9a:43:fb:ab:60:1c:c5:c9:80:a5:d0:3c:74:53: 4b:fb:dc:29:c1:0e:db:86:ee:11:52:84:32:86:99: cc:15:d8:29:d9:54:9c:36:56:76:20:de:56:b6:78: ca:63:55:98:b1:10:89:d3:12:4e:b9:ad:d9:07:a8: 73:d8:78:9d:e3:7a:90:ef:a6:fb:49:69:13:28:9b: da:cc:ae:66:c7:16:0f:75:37:d9:4e:c5:b3:c8:04: 95:69:db:1a:2c:81:bf:94:19:78:a5:31:f7:d9:7f: ff:15:94:5b:00:5a:f7:41:01:c6:f2:7b:9e:16:e4: 0e:ed:2a:85:a7:3f:43:03:45:e5:89:23:e4:97:10: b6:dc:ba:da:44:d4:1f:ff:ad:23:f0:b7:92:c5:67: 85:25:7a:03:99:74:f0:2c:9d:91:26:f5:2d:2d:e1: 83:b6:4c:b3:f7:d7:b4:c2:78:a6:c9:80:6f:1a:36: 41:bb:ac:51:7f:93:21:4a:79:18:7e:32:57:d9:dc: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FE:6E:67:8A:CA:D7:4D:EC:0F:7B:08:DE:B9:15:D8:4D:4F:06:47 X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0e:33:0d:83:17:de:ff:8d:be:1c:80:b6:98:e6:2d:c6:65: 80:4d:50:36:8e:a7:f0:17:2e:2e:65:f8:dc:74:36:80:bc:5d: 59:09:89:0f:77:7c:4b:22:fc:a8:cc:68:e3:24:e0:8b:22:77: 26:ed:8f:cc:b5:1d:ea:ee:b7:ee:b6:44:79:79:2b:5a:02:dd: 7a:f0:bc:20:30:db:d8:ce:ad:d9:f3:35:26:e8:1e:8d:b6:da: 9e:39:e9:59:62:b2:ae:eb:47:74:d5:a1:5e:39:46:0f:bd:20: 45:a0:44:c2:49:af:b8:25:81:97:d3:07:d8:58:f3:c0:e2:a3: 3b:45:df:c0:ca:ff:ce:da:d5:72:58:0e:ca:02:4c:25:c0:c0: a8:62:62:8e:08:34:c3:13:c6:8b:5e:73:19:dc:00:e7:64:db: bc:e9:08:02:10:97:89:99:fe:d4:90:70:46:38:4c:24:e5:78: e0:c9:f5:0e:1a:5e:07:bd:c5:ac:6a:0b:39:b6:ec:f0:db:09: eb:2f:21:67:27:cd:2d:fc:08:8b:ac:7b:08:73:8b:1c:7e:b5: 5a:46:7b:44:b3:60:4e:2a:89:41:4d:ea:4d:1b:fc:77:f2:33: bf:e6:be:23:98:1a:91:a6:f7:e2:ee:0c:d8:b5:8f:7b:b3:3e: 14:c6:23:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULhMmzBBGPhV7vlGUzZ06fzex6CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTA1MTUwODA0NDNaFw0yNTA1MTYwODI4NDNaMDMxMTAvBgNV BAMTKEY0RkU2RTY3OEFDQUQ3NERFQzBGN0IwOERFQjkxNUQ4NEQ0RjA2NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZpFRyyvshQCUq5eadJWNl599 Yn/3hlFAjkpeH+WFlSCkbn40ON8c2jY48sQehahlTMB76mselMvlA4SaQ/urYBzF yYCl0Dx0U0v73CnBDtuG7hFShDKGmcwV2CnZVJw2VnYg3la2eMpjVZixEInTEk65 rdkHqHPYeJ3jepDvpvtJaRMom9rMrmbHFg91N9lOxbPIBJVp2xosgb+UGXilMffZ f/8VlFsAWvdBAcbye54W5A7tKoWnP0MDReWJI+SXELbcutpE1B//rSPwt5LFZ4Ul egOZdPAsnZEm9S0t4YO2TLP317TCeKbJgG8aNkG7rFF/kyFKeRh+MlfZ3EflAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9P5uZ4rK103sD3sI3rkV2E1PBkcwHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAew4zDYMX3v+NvhyAtpjmLcZlgE1QNo6n8BcuLmX43HQ2gLxdWQmJD3d8SyL8 qMxo4yTgiyJ3Ju2PzLUd6u637rZEeXkrWgLdevC8IDDb2M6t2fM1Jugejbbanjnp WWKyrutHdNWhXjlGD70gRaBEwkmvuCWBl9MH2FjzwOKjO0XfwMr/ztrVclgOygJM JcDAqGJijgg0wxPGi15zGdwA52TbvOkIAhCXiZn+1JBwRjhMJOV44Mn1DhpeB73F rGoLObbs8NsJ6y8hZyfNLfwIi6x7CHOLHH61WkZ7RLNgTiqJQU3qTRv8d/Izv+a+ I5gakab34u4M2LWPe7M+FMYjTw== -----END CERTIFICATE-----Generated at Thu May 15 12:21:48 2025 by rpki-client