$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft File: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft (raw, json) Hash identifier: GczbQ5It0vMTJgg/vQCcXBFkGk1ldzY3QxH02IBzgkg= Subject key identifier: C1:7D:25:79:71:B8:62:99:D3:99:56:28:E5:79:41:F5:30:C0:6D:E7 Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 Certificate issuer: /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Certificate serial: 7D161094DE70A59BF2418F58C704D918E15B01F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft Manifest number: 0214 Signing time: Fri 09 May 2025 19:07:28 +0000 Manifest this update: Fri 09 May 2025 19:02:28 +0000 Manifest next update: Sat 10 May 2025 21:03:28 +0000 Files and hashes: 1: 323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (hash: k8/Tw+SgoiL84ZsrYLWHWBEWIwVDj1v9BVLZaSH4bik=) 2: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl (hash: BCh6Dn+DojrW42zth+cpeRLS8W86klHn91lN9ooY+Zc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 21:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:16:10:94:de:70:a5:9b:f2:41:8f:58:c7:04:d9:18:e1:5b:01:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Validity Not Before: May 9 19:02:28 2025 GMT Not After : May 10 21:03:28 2025 GMT Subject: CN=C17D257971B86299D3995628E57941F530C06DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:04:ae:48:1a:68:f2:5c:5d:5c:2d:9a:4b: d4:47:36:34:a4:c2:45:32:3d:78:9f:d8:32:aa:1b: d9:3b:cc:f9:62:6c:a2:3a:13:60:cf:21:eb:62:b5: dc:88:93:10:b2:d0:07:17:ad:7b:6c:da:81:87:58: f9:cd:12:f1:29:d5:92:6f:80:a5:e5:47:ef:59:2b: 3d:b9:7e:7d:55:43:8e:cc:1a:8e:b7:a7:58:65:4c: 6a:07:1b:05:a6:d3:b1:ca:94:a5:20:67:f2:2f:83: 2b:c6:0e:54:d7:ba:4d:9c:af:59:58:9a:67:0f:91: 78:1a:7d:85:61:f7:2c:ba:b7:79:85:12:e3:18:9a: d3:57:e3:5f:6a:e6:80:13:a0:e7:f7:3a:a9:d8:64: a5:d2:15:21:29:da:55:2b:a2:12:32:c6:4a:a8:e8: 33:b2:0f:43:4c:83:0b:a4:55:bb:c1:37:1f:03:fd: 33:59:4b:d0:f0:fb:65:60:5f:d5:f5:4b:40:52:69: 02:c1:e2:fd:7d:f6:a8:2f:48:e0:92:e7:c9:e8:98: 91:4f:a4:ff:63:38:53:19:fd:02:33:92:c0:33:30: f6:a2:57:6a:9c:78:23:00:b0:6f:ae:40:f2:de:74: 7b:c3:bb:ce:7d:b0:ae:bc:ea:a9:a5:38:7d:2f:b4: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7D:25:79:71:B8:62:99:D3:99:56:28:E5:79:41:F5:30:C0:6D:E7 X509v3 Authority Key Identifier: keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4e:9c:fe:11:7c:f2:33:f0:10:67:9f:00:d1:c9:c3:56:ee: 02:f6:06:ee:a5:e6:5e:91:87:6a:1a:a0:1d:e7:77:7d:46:c6: 68:ba:b7:48:5e:fc:34:32:3c:68:9c:28:6b:0e:3a:88:af:52: 2e:db:36:16:7d:9a:1b:04:e6:eb:17:28:16:41:bb:8d:dc:a3: d4:b5:23:b5:e3:b2:85:30:3f:e7:1b:e8:dc:b2:f9:f3:82:a7: 75:9a:2a:98:58:21:35:a2:25:50:5c:55:79:03:19:09:9b:3d: a9:84:7d:80:b5:d9:b2:82:ea:e9:de:8e:f8:f7:05:e8:da:07: 42:a8:82:73:1d:3b:76:d4:ed:e0:68:07:b5:5d:df:19:b3:cb: f3:8c:ed:5f:ca:4c:1d:bc:42:f5:04:77:da:5d:2b:49:c8:75: 9d:16:0f:89:23:f4:35:7e:62:b9:7c:36:3e:bf:2b:46:36:2d: 2e:15:9a:d5:f1:51:53:28:6b:3a:f9:b5:45:21:40:ab:fe:0d: c5:2d:48:2d:dc:7c:87:9f:09:67:44:6c:7e:b3:58:f5:66:11: a5:9d:73:ee:44:c8:43:bc:d3:d0:e4:e0:5c:32:1f:7c:3b:11: 7c:ea:8b:75:31:bf:df:43:a0:d4:63:f0:c5:67:a6:a8:7a:b2: 2c:25:e7:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfRYQlN5wpZvyQY9YxwTZGOFbAfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0Q0FGRUQxN0QwMkM0NTU1RTVENDU4NjlGMzBFQ0FB N0UxRTVFMzAeFw0yNTA1MDkxOTAyMjhaFw0yNTA1MTAyMTAzMjhaMDMxMTAvBgNV BAMTKEMxN0QyNTc5NzFCODYyOTlEMzk5NTYyOEU1Nzk0MUY1MzBDMDZERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lASuSBpo8lxdXC2aS9RHNjSk wkUyPXif2DKqG9k7zPlibKI6E2DPIetitdyIkxCy0AcXrXts2oGHWPnNEvEp1ZJv gKXlR+9ZKz25fn1VQ47MGo63p1hlTGoHGwWm07HKlKUgZ/IvgyvGDlTXuk2cr1lY mmcPkXgafYVh9yy6t3mFEuMYmtNX419q5oAToOf3OqnYZKXSFSEp2lUrohIyxkqo 6DOyD0NMgwukVbvBNx8D/TNZS9Dw+2VgX9X1S0BSaQLB4v199qgvSOCS58nomJFP pP9jOFMZ/QIzksAzMPaiV2qceCMAsG+uQPLedHvDu859sK686qmlOH0vtHYzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwX0leXG4YpnTmVYo5XlB9TDAbecwHwYDVR0j BBgwFoAUSEyv7RfQLEVV5dRYafMOyqfh5eMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52Zktv S0cvMS80ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NENBRkVEMTdEMDJDNDU1 NUU1RDQ1ODY5RjMwRUNBQTdFMUU1RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52ZktvS0cvMS80 ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhE6c/hF88jPwEGefANHJw1buAvYG7qXmXpGHahqgHed3fUbGaLq3SF78NDI8 aJwoaw46iK9SLts2Fn2aGwTm6xcoFkG7jdyj1LUjteOyhTA/5xvo3LL584KndZoq mFghNaIlUFxVeQMZCZs9qYR9gLXZsoLq6d6O+PcF6NoHQqiCcx07dtTt4GgHtV3f GbPL84ztX8pMHbxC9QR32l0rSch1nRYPiSP0NX5iuXw2Pr8rRjYtLhWa1fFRUyhr Ovm1RSFAq/4NxS1ILdx8h58JZ0RsfrNY9WYRpZ1z7kTIQ7zT0OTgXDIffDsRfOqL dTG/30Og1GPwxWemqHqyLCXnwA== -----END CERTIFICATE-----Generated at Sat May 10 00:30:30 2025 by rpki-client