$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C34C8C77BF526822ECE13942E53CDB12B6E559C2.mft File: C34C8C77BF526822ECE13942E53CDB12B6E559C2.mft (raw, json) Hash identifier: BSST05x66b1YY1gzrZNuHk64MMo2H7SYIcPCbt8RL+E= Subject key identifier: 57:DB:4C:30:88:B0:1D:A3:6A:B1:3B:D5:35:6D:1F:A4:2B:53:8D:C4 Authority key identifier: C3:4C:8C:77:BF:52:68:22:EC:E1:39:42:E5:3C:DB:12:B6:E5:59:C2 Certificate issuer: /CN=C34C8C77BF526822ECE13942E53CDB12B6E559C2 Certificate serial: 41F191FDDD5CCBF768C16173A5CF3F496DAED165 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34C8C77BF526822ECE13942E53CDB12B6E559C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C34C8C77BF526822ECE13942E53CDB12B6E559C2.mft Manifest number: 0D Signing time: Thu 08 May 2025 09:58:03 +0000 Manifest this update: Thu 08 May 2025 09:53:03 +0000 Manifest next update: Fri 09 May 2025 11:32:03 +0000 Files and hashes: 1: C34C8C77BF526822ECE13942E53CDB12B6E559C2.crl (hash: e4QkJv59FolYCeQPFj2J3ItIrxqrkSECLlfktS3H3IQ=) 2: 323830343a366433633a3a2f33322d313238203d3e20323730353139.roa (hash: 30AJW4IFqGMkZw2Z179Zc2Li1Ssb+W0+RxCBilQtQLo=) 3: 32342e3135322e3130342e302f32322d3332203d3e20323730353139.roa (hash: E+X0L/9d2jpO01z/FVUaI6/xcGkxYwdEEKmHihoTPLs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C34C8C77BF526822ECE13942E53CDB12B6E559C2.crl rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C34C8C77BF526822ECE13942E53CDB12B6E559C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34C8C77BF526822ECE13942E53CDB12B6E559C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 11:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f1:91:fd:dd:5c:cb:f7:68:c1:61:73:a5:cf:3f:49:6d:ae:d1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C34C8C77BF526822ECE13942E53CDB12B6E559C2 Validity Not Before: May 8 09:53:03 2025 GMT Not After : May 9 11:32:03 2025 GMT Subject: CN=57DB4C3088B01DA36AB13BD5356D1FA42B538DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:79:38:8b:1d:2a:71:23:49:d2:2a:b3:61: 69:61:f1:00:e6:e3:99:88:c6:68:2e:44:4e:8b:bb: 41:29:d7:8d:28:f4:76:ed:51:6e:f6:8a:8f:91:a7: 80:f4:10:c6:82:91:ca:22:f5:bf:fa:1e:25:6a:dc: 32:14:e9:d0:b0:cc:6e:5e:a8:19:8a:91:a4:a1:0f: 96:fa:b8:a0:72:ac:86:3c:2b:f6:35:c9:c4:84:b8: e2:4b:23:68:56:6c:51:34:e6:01:00:56:48:a9:38: dc:0f:a2:a9:6b:cb:3c:21:51:f6:92:2d:b1:86:fa: ec:55:d5:ae:d4:b3:82:84:5c:c2:52:ac:ef:3a:35: ba:a1:df:c9:6a:46:89:47:d4:96:60:b3:3c:60:da: 8b:6f:12:78:c1:5d:36:76:f8:15:05:54:8d:a9:ee: 69:33:4b:b8:7d:cb:5e:2e:8a:b1:ce:40:26:a7:60: e8:33:16:74:35:1a:49:15:5d:d2:c6:01:17:2c:3d: b9:6d:c4:23:f8:30:4f:1c:12:96:3e:a4:2d:06:71: 6c:2d:45:33:33:11:7c:99:4b:f5:31:49:ea:2b:3f: 62:e5:2a:c0:30:ec:7a:87:43:04:6f:fd:04:8a:b8: e8:0f:bb:e7:1d:fa:c6:ea:94:fa:e1:96:84:22:06: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DB:4C:30:88:B0:1D:A3:6A:B1:3B:D5:35:6D:1F:A4:2B:53:8D:C4 X509v3 Authority Key Identifier: keyid:C3:4C:8C:77:BF:52:68:22:EC:E1:39:42:E5:3C:DB:12:B6:E5:59:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C34C8C77BF526822ECE13942E53CDB12B6E559C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34C8C77BF526822ECE13942E53CDB12B6E559C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C34C8C77BF526822ECE13942E53CDB12B6E559C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:81:29:ca:5c:56:92:70:eb:05:c4:22:17:4a:bf:e8:83:3c: 7d:dd:a6:fe:79:33:56:17:38:c6:e3:e0:20:b1:ec:ba:27:fd: dc:de:64:9c:26:49:15:eb:c4:32:42:17:8a:d3:ae:71:b6:0c: b9:7e:a1:9c:0a:91:b2:60:cc:f8:ab:05:23:c2:43:51:b7:f3: 80:c6:0a:5c:21:a0:16:4c:89:79:66:06:50:de:19:75:0f:3b: d7:1e:e6:72:c9:35:52:71:77:48:e3:80:d2:25:56:ac:4f:b5: 5e:d7:04:d8:a6:fa:d9:02:d9:08:4b:ac:59:0d:aa:14:dc:11: 3e:47:12:45:16:ff:d8:48:05:6d:e1:ec:7a:b8:b1:77:86:3e: 4a:fc:6b:be:57:13:8d:3b:9d:52:53:93:8a:79:44:f1:64:f8: a7:29:f8:53:70:f3:e4:d1:b2:45:7e:2d:4d:07:84:23:2f:ee: 7f:5e:86:a2:2a:78:bc:17:40:2d:0a:b9:86:1c:f5:fc:c8:4c: 97:d4:7e:73:2a:56:ae:1d:82:c9:c9:28:24:04:31:48:47:28: bb:3c:84:b5:7c:92:7f:a7:2c:33:e5:47:92:6c:64:95:65:3f: 0d:97:dd:a8:1b:e0:7a:e7:4d:2b:d2:d3:aa:38:70:56:29:5c: ad:b2:c6:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQfGR/d1cy/dowWFzpc8/SW2u0WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM0QzhDNzdCRjUyNjgyMkVDRTEzOTQyRTUzQ0RCMTJC NkU1NTlDMjAeFw0yNTA1MDgwOTUzMDNaFw0yNTA1MDkxMTMyMDNaMDMxMTAvBgNV BAMTKDU3REI0QzMwODhCMDFEQTM2QUIxM0JENTM1NkQxRkE0MkI1MzhEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wXk4ix0qcSNJ0iqzYWlh8QDm 45mIxmguRE6Lu0Ep140o9HbtUW72io+Rp4D0EMaCkcoi9b/6HiVq3DIU6dCwzG5e qBmKkaShD5b6uKByrIY8K/Y1ycSEuOJLI2hWbFE05gEAVkipONwPoqlryzwhUfaS LbGG+uxV1a7Us4KEXMJSrO86Nbqh38lqRolH1JZgszxg2otvEnjBXTZ2+BUFVI2p 7mkzS7h9y14uirHOQCanYOgzFnQ1GkkVXdLGARcsPbltxCP4ME8cEpY+pC0GcWwt RTMzEXyZS/UxSeorP2LlKsAw7HqHQwRv/QSKuOgPu+cd+sbqlPrhloQiBpJnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV9tMMIiwHaNqsTvVNW0fpCtTjcQwHwYDVR0j BBgwFoAUw0yMd79SaCLs4TlC5TzbErblWcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzhBdkc2YUxOU1VZSE1BYzNiSzFHWk40ZUFtektDeVBZdVJMUHZOZnh6 aGovMC9DMzRDOEM3N0JGNTI2ODIyRUNFMTM5NDJFNTNDREIxMkI2RTU1OUMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEM4Qzc3QkY1MjY4MjJF Q0UxMzk0MkU1M0NEQjEyQjZFNTU5QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzhBdkc2YUxOU1VZSE1BYzNiSzFHWk40ZUFtektDeVBZdVJMUHZOZnh6aGovMC9D MzRDOEM3N0JGNTI2ODIyRUNFMTM5NDJFNTNDREIxMkI2RTU1OUMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQoEpylxWknDrBcQiF0q/6IM8fd2m/nkzVhc4xuPgILHsuif93N5knCZJFevE MkIXitOucbYMuX6hnAqRsmDM+KsFI8JDUbfzgMYKXCGgFkyJeWYGUN4ZdQ871x7m csk1UnF3SOOA0iVWrE+1XtcE2Kb62QLZCEusWQ2qFNwRPkcSRRb/2EgFbeHserix d4Y+SvxrvlcTjTudUlOTinlE8WT4pyn4U3Dz5NGyRX4tTQeEIy/uf16Goip4vBdA LQq5hhz1/MhMl9R+cypWrh2CyckoJAQxSEcouzyEtXySf6csM+VHkmxklWU/DZfd qBvgeudNK9LTqjhwVilcrbLGVw== -----END CERTIFICATE-----Generated at Fri May 9 02:06:32 2025 by rpki-client