$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft File: B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft (raw, json) Hash identifier: EP2KB3Tx9AlIfKKBfbOVHl6MOtiS+qgq4bBeWFOt9KA= Subject key identifier: D7:45:49:95:96:CF:C1:7E:7D:73:89:A8:0A:58:E6:96:0B:6D:1F:84 Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 Certificate issuer: /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Certificate serial: 517E4C9F50BBE5DBE74196B756767829B034D174 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft Manifest number: 0240 Signing time: Sun 11 May 2025 17:37:28 +0000 Manifest this update: Sun 11 May 2025 17:32:28 +0000 Manifest next update: Mon 12 May 2025 19:38:28 +0000 Files and hashes: 1: 3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa (hash: B5kMvttt+bGHnk6YxAymnhJJ1ryJ1QBy6mgYp8SEB0w=) 2: 323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (hash: a6j/KcP9LGqdiXHZWCuDZw4xcgprwaOaXc/U/4yxwYU=) 3: 34352e3138352e32342e302f32322d3234203d3e20323637343538.roa (hash: NL52hXAc83T3ah0zDi0xSKidp17hg3QoaFn+3+7e760=) 4: B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl (hash: gv/3Jt8EjpcwnL20IconYpzscFx4QfrtylDaMzJz03k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 19:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7e:4c:9f:50:bb:e5:db:e7:41:96:b7:56:76:78:29:b0:34:d1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Validity Not Before: May 11 17:32:28 2025 GMT Not After : May 12 19:38:28 2025 GMT Subject: CN=D745499596CFC17E7D7389A80A58E6960B6D1F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:dc:06:5a:bf:3c:1d:ab:69:3f:65:29:af: 82:7b:5e:93:65:3a:fb:32:ba:9a:37:c9:fd:0d:bc: 0d:a8:f7:65:b1:a1:cc:c6:fa:99:f4:7b:fe:40:fe: c1:6e:60:8c:c8:80:74:57:eb:52:e7:b9:5f:bd:81: 0b:8f:cc:3a:84:96:d8:5a:04:0e:fc:b7:05:2e:eb: 7a:4b:0e:10:2b:00:6d:be:eb:b4:45:db:2a:05:96: c7:81:84:a8:83:62:1d:6a:bb:da:f8:f5:a7:dc:30: bf:e3:3f:04:e6:91:81:55:4f:c1:46:10:d2:17:ff: 26:95:62:93:4c:7f:3d:fc:24:28:1b:af:19:ac:ed: bd:ee:01:b9:97:76:39:2f:39:fc:af:9b:0a:78:6f: f4:e7:af:e5:fe:96:d1:61:41:27:37:cc:19:ad:88: 66:b9:f4:59:3c:7d:da:61:e8:fa:9c:10:b7:a6:91: f7:17:d6:eb:18:b2:8a:47:5c:cb:41:b0:af:4f:6a: 8d:69:70:7e:97:09:4e:3b:13:c9:a3:5c:d9:01:02: 46:1c:9a:fa:1b:a7:c4:9a:d9:9b:14:29:7e:64:61: c2:59:09:ce:a0:08:62:de:ea:01:83:f9:86:82:fd: d7:46:e4:bf:00:3a:8f:c2:2b:a9:49:3c:14:b5:02: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:45:49:95:96:CF:C1:7E:7D:73:89:A8:0A:58:E6:96:0B:6D:1F:84 X509v3 Authority Key Identifier: keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b2:b0:3d:fe:90:d0:9f:66:00:8c:27:6f:1d:c2:d7:9f:13: d6:58:6d:46:94:9c:b4:83:56:1d:14:98:e5:71:f9:86:ad:bd: 65:9a:89:0e:96:f8:48:ea:06:7f:49:61:5c:63:6b:79:fd:0a: 30:15:51:17:e6:2a:af:cc:33:01:e3:1c:b4:48:9e:01:5d:ef: b8:06:48:98:f9:38:a6:0b:d3:2f:70:fc:e2:b9:44:48:fd:b3: ee:f1:29:7d:02:c8:07:c5:b8:16:51:3c:da:dc:5d:c8:a0:98: bd:f8:f5:53:18:11:41:f2:61:c3:1e:f7:c0:34:1a:6c:c3:ec: d7:27:a6:7e:57:11:16:0d:0b:d8:d5:9b:ab:c2:2e:58:23:dd: 43:34:19:e0:7d:4d:c4:27:4c:26:bf:02:66:63:70:91:71:ed: 8f:ae:85:a1:48:9d:ea:46:b6:16:4a:fb:4b:41:5c:11:be:a5: 98:10:f9:6f:84:b5:4f:45:2a:0c:98:bc:ec:3b:8a:46:ee:95: ca:e9:5e:39:74:eb:ca:45:5f:d4:41:d1:23:a2:31:83:75:b6: 6a:30:0a:28:d7:08:9d:9d:0e:6b:51:61:e5:04:2a:77:45:be: ea:71:00:63:87:5f:f3:09:86:47:89:9d:25:22:f8:ef:30:26: dc:2f:6a:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUX5Mn1C75dvnQZa3VnZ4KbA00XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy REIyNEJFNDAeFw0yNTA1MTExNzMyMjhaFw0yNTA1MTIxOTM4MjhaMDMxMTAvBgNV BAMTKEQ3NDU0OTk1OTZDRkMxN0U3RDczODlBODBBNThFNjk2MEI2RDFGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHNwGWr88HatpP2Upr4J7XpNl Ovsyupo3yf0NvA2o92WxoczG+pn0e/5A/sFuYIzIgHRX61LnuV+9gQuPzDqEltha BA78twUu63pLDhArAG2+67RF2yoFlseBhKiDYh1qu9r49afcML/jPwTmkYFVT8FG ENIX/yaVYpNMfz38JCgbrxms7b3uAbmXdjkvOfyvmwp4b/Tnr+X+ltFhQSc3zBmt iGa59Fk8fdph6PqcELemkfcX1usYsopHXMtBsK9Pao1pcH6XCU47E8mjXNkBAkYc mvobp8Sa2ZsUKX5kYcJZCc6gCGLe6gGD+YaC/ddG5L8AOo/CK6lJPBS1Ao4pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU10VJlZbPwX59c4moCljmlgttH4QwHwYDVR0j BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2 Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFhWXYvMS9C M0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7KwPf6Q0J9mAIwnbx3C158T1lhtRpSctINWHRSY5XH5hq29ZZqJDpb4SOoG f0lhXGNref0KMBVRF+Yqr8wzAeMctEieAV3vuAZImPk4pgvTL3D84rlESP2z7vEp fQLIB8W4FlE82txdyKCYvfj1UxgRQfJhwx73wDQabMPs1yemflcRFg0L2NWbq8Iu WCPdQzQZ4H1NxCdMJr8CZmNwkXHtj66FoUid6ka2Fkr7S0FcEb6lmBD5b4S1T0Uq DJi87DuKRu6VyuleOXTrykVf1EHRI6Ixg3W2ajAKKNcInZ0Oa1Fh5QQqd0W+6nEA Y4df8wmGR4mdJSL47zAm3C9qkQ== -----END CERTIFICATE-----Generated at Sun May 11 19:54:12 2025 by rpki-client