$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json) Hash identifier: BSKU0WxkKB8VEJLQ0qGV/S/TNSDZ/bozeiwtjMV3EZg= Subject key identifier: 4E:12:A4:04:AB:F3:BE:34:75:5D:9A:2A:5C:7E:06:51:94:8E:34:3C Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Certificate serial: 525F87A543E5FF5C77A9F5B9F6DE7D8FA15A0BE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft Manifest number: 0221 Signing time: Thu 15 May 2025 20:53:16 +0000 Manifest this update: Thu 15 May 2025 20:48:16 +0000 Manifest next update: Fri 16 May 2025 22:22:16 +0000 Files and hashes: 1: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: nwaAmZ9ZNzIRa0QJeOUahTYNcWFBrz8udM8diRKYFCg=) 2: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: KM9thWqBbCezSnN/udktn45yMz+Zf63QSRQur/etjgw=) 3: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: edA3Rs6eMjpScHqME9Ghe5dGKocqfYma+Nqo84HmhRQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 22:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5f:87:a5:43:e5:ff:5c:77:a9:f5:b9:f6:de:7d:8f:a1:5a:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Validity Not Before: May 15 20:48:16 2025 GMT Not After : May 16 22:22:16 2025 GMT Subject: CN=4E12A404ABF3BE34755D9A2A5C7E0651948E343C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:7c:e7:95:23:20:63:a3:fd:a9:4f:d7:86: fc:c5:94:45:9d:b4:f5:50:0a:15:1a:6f:90:af:23: 11:1c:da:83:56:63:31:51:3e:f5:a0:1b:f4:eb:21: b0:67:99:14:29:aa:fa:c0:a8:6a:99:c8:b6:8b:43: 68:52:5e:31:23:82:1d:41:52:b2:ff:5d:1f:16:e4: a1:09:06:b7:bc:e2:b1:36:d7:9a:74:db:e9:15:85: a2:59:fd:f5:8f:4a:c6:e1:67:e7:27:a9:81:20:07: aa:d5:20:b0:9c:f1:c8:53:55:26:88:e2:be:78:4f: 37:96:72:f9:38:3b:1e:7a:76:94:06:71:39:be:2d: b0:17:c1:c0:06:4b:4a:f5:f0:e1:73:26:f6:c7:24: b3:d2:8d:28:e6:03:e6:fd:b1:cc:72:00:69:f5:c7: e2:c4:f5:93:18:d8:2d:34:15:af:7d:be:da:df:ac: b7:4d:11:3a:90:40:68:b0:8f:f7:5a:ce:3f:1f:41: 6c:66:d9:6c:30:6f:20:04:4f:66:4f:71:cb:7e:99: e5:c3:e3:01:24:17:60:4c:e9:a6:77:2f:a5:50:14: 69:5b:15:dd:dc:67:72:bd:f0:9b:74:fc:e9:63:6d: f1:9a:b2:40:47:fe:cb:db:8f:bd:2c:f6:d9:87:26: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:12:A4:04:AB:F3:BE:34:75:5D:9A:2A:5C:7E:06:51:94:8E:34:3C X509v3 Authority Key Identifier: keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c8:28:0e:71:b9:1f:f7:cb:24:d1:64:68:a0:60:5a:06:99: ff:3c:03:7a:98:c6:54:ee:e3:59:26:60:c7:a7:0a:8f:85:5b: f0:db:21:c5:da:a5:52:3b:e7:58:51:91:17:ee:b1:84:c2:e4: 70:b1:d3:65:19:b3:26:76:40:c4:e8:a8:29:b8:69:48:19:5d: be:c7:fb:d4:02:72:22:38:e8:dd:43:e1:88:21:06:e1:4d:56: c8:3b:22:9e:bc:4f:17:4e:36:be:8a:1c:87:f0:d3:2b:40:3f: dd:5d:5a:e5:31:b9:e9:bf:e8:06:30:e1:9f:9b:1d:1b:7c:d6: 94:21:e4:70:38:34:bc:10:f7:5e:40:27:39:38:cf:81:91:c3: 89:38:40:e2:8a:63:c2:94:42:16:3f:78:50:57:46:03:ac:e7: f9:a3:5b:5b:87:50:ff:de:30:2a:0a:be:72:64:81:09:88:f6: a5:6a:0a:66:6d:86:ca:11:91:10:af:65:99:56:30:2a:41:a6: 9f:47:7d:90:e8:76:bb:49:38:a3:5d:b2:42:8f:f9:9b:4f:69: 8a:7d:53:13:f7:5b:7d:c4:6d:68:71:38:bd:86:d4:c0:e3:b5: 6d:b2:ff:0e:c6:ad:0a:5c:6f:a8:ab:8e:c5:5e:59:10:4e:97: 4a:99:ed:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUl+HpUPl/1x3qfW59t59j6FaC+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNTk0N0IzRUIyMjUyREMyQzI4QTFGNUY4NTYxMjMy NjAwMzZGRTAeFw0yNTA1MTUyMDQ4MTZaFw0yNTA1MTYyMjIyMTZaMDMxMTAvBgNV BAMTKDRFMTJBNDA0QUJGM0JFMzQ3NTVEOUEyQTVDN0UwNjUxOTQ4RTM0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCP3znlSMgY6P9qU/XhvzFlEWd tPVQChUab5CvIxEc2oNWYzFRPvWgG/TrIbBnmRQpqvrAqGqZyLaLQ2hSXjEjgh1B UrL/XR8W5KEJBre84rE215p02+kVhaJZ/fWPSsbhZ+cnqYEgB6rVILCc8chTVSaI 4r54TzeWcvk4Ox56dpQGcTm+LbAXwcAGS0r18OFzJvbHJLPSjSjmA+b9scxyAGn1 x+LE9ZMY2C00Fa99vtrfrLdNETqQQGiwj/dazj8fQWxm2WwwbyAET2ZPcct+meXD 4wEkF2BM6aZ3L6VQFGlbFd3cZ3K98Jt0/OljbfGaskBH/svbj70s9tmHJiIpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUThKkBKvzvjR1XZoqXH4GUZSONDwwHwYDVR0j BBgwFoAUK7WUez6yJS3CwoofX4VhIyYANv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJn MWkvMi8yQkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjU5NDdCM0VCMjI1MkRD MkMyOEExRjVGODU2MTIzMjYwMDM2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJnMWkvMi8y QkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAscgoDnG5H/fLJNFkaKBgWgaZ/zwDepjGVO7jWSZgx6cKj4Vb8NshxdqlUjvn WFGRF+6xhMLkcLHTZRmzJnZAxOioKbhpSBldvsf71AJyIjjo3UPhiCEG4U1WyDsi nrxPF042vooch/DTK0A/3V1a5TG56b/oBjDhn5sdG3zWlCHkcDg0vBD3XkAnOTjP gZHDiThA4opjwpRCFj94UFdGA6zn+aNbW4dQ/94wKgq+cmSBCYj2pWoKZm2GyhGR EK9lmVYwKkGmn0d9kOh2u0k4o12yQo/5m09pin1TE/dbfcRtaHE4vYbUwOO1bbL/ DsatClxvqKuOxV5ZEE6XSpnthg== -----END CERTIFICATE-----Generated at Fri May 16 07:20:10 2025 by rpki-client