$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: o8orea7NXVZqdjZMYENRd2oB1PMH/rTtl8MEKDJ9U4c= Subject key identifier: 60:BB:33:C4:5E:E1:8E:40:35:26:B0:FD:51:8D:5D:0E:0E:0D:9C:F0 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 312544E88F1EBCB6BF049C6EF21C35461BD863D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 0218 Signing time: Wed 07 May 2025 19:31:22 +0000 Manifest this update: Wed 07 May 2025 19:26:22 +0000 Manifest next update: Thu 08 May 2025 20:15:22 +0000 Files and hashes: 1: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: fCiKWIGD8EL/QIyZTksmVx9NSqYYweXi5WC6tEAvyuA=) 2: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) 3: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: dHRHtKj/munWRNYLVZdMesk2gXMIcnXHXD/zBP18eQI=) 4: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: y3lZCCq0IOFmfmrjbdteQ0GspT2lhf61PyVMBbr1S80=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:25:44:e8:8f:1e:bc:b6:bf:04:9c:6e:f2:1c:35:46:1b:d8:63:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: May 7 19:26:22 2025 GMT Not After : May 8 20:15:22 2025 GMT Subject: CN=60BB33C45EE18E403526B0FD518D5D0E0E0D9CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:b5:8d:39:b1:cb:fe:bd:c5:20:db:c3:f8: f6:ae:d6:3d:d1:7b:58:28:e0:18:4b:5e:37:69:72: 00:f6:58:ae:e6:ac:81:8b:a3:06:29:0a:ba:3b:3f: 80:52:35:50:2b:37:d9:09:ed:d4:54:d8:e6:be:c2: 9d:9a:53:66:86:ed:ee:35:da:31:f3:73:2f:ca:6d: 03:66:f4:d7:a1:86:2c:d3:fa:ed:3a:c4:cc:39:3a: 9a:1f:a8:8a:37:80:2f:23:31:7c:df:88:64:a4:4d: 85:70:9d:b9:b9:e7:32:0a:bb:68:d7:8a:72:e4:c9: 29:10:d5:73:81:5d:be:6b:11:de:b5:21:cf:08:e7: 1d:46:fa:14:0d:c0:4d:6b:b1:48:8a:d0:63:2d:3f: b0:e5:26:7e:80:ec:67:c8:e5:d4:23:e3:03:f8:7d: c0:4c:29:5f:cd:b7:fa:2b:58:1e:d3:f0:f3:6d:5a: 6f:1f:27:61:a1:7c:75:0b:32:32:e8:2c:a3:0a:2b: 87:f9:ac:98:29:c4:d7:97:ac:a9:c4:89:e8:16:dd: 34:c9:ab:6b:7e:2e:9f:27:3f:89:73:61:9e:4f:f6: e0:d9:df:b3:79:f3:bd:be:7c:fa:58:5c:d2:a0:ae: 0a:d1:4a:39:4c:e3:57:9c:3e:73:72:63:69:ae:36: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BB:33:C4:5E:E1:8E:40:35:26:B0:FD:51:8D:5D:0E:0E:0D:9C:F0 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d2:d6:c9:e0:e0:8c:75:38:e2:29:c4:45:8d:ef:54:2f:9d: 17:99:a4:8d:7a:82:65:ab:36:77:82:bf:c5:6e:d0:ae:16:f0: 3a:03:ac:8a:b5:7b:bc:e2:49:74:4a:1b:b3:59:bc:c3:a5:20: ac:4b:a7:4c:30:03:1a:e5:b4:93:9e:0d:b0:ea:44:d1:ec:0d: b8:97:3d:f3:a4:16:f5:49:2a:51:0e:48:25:0d:53:2d:2e:ab: 8e:eb:5e:25:04:bd:5a:e3:e0:9f:df:b8:52:8c:e7:ca:fa:d4: 7b:ed:3f:35:96:9f:9b:30:69:a6:b9:0b:a5:69:82:c0:0a:92: cb:f7:96:56:ab:f5:82:04:b6:15:72:e1:2b:f3:80:b1:4b:c8: cc:f2:82:56:d3:9e:14:84:dd:b4:ca:eb:99:cb:f5:dd:fd:ea: da:61:c9:7a:89:83:94:92:1c:2d:cd:77:84:8b:07:57:64:a9: fd:b6:7a:be:f6:42:0e:40:2d:8c:ab:e3:3f:55:e4:86:17:c9: fb:8e:c4:6d:6c:4d:12:c5:2d:03:bd:d9:e7:7b:f8:7b:7a:f9: 03:3f:0b:21:93:b1:59:38:23:74:c1:e6:34:03:dd:e6:07:a3: e8:2e:c0:b8:e3:0f:62:37:a7:81:0d:38:0b:94:ba:e7:e8:67: 58:cd:1e:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMSVE6I8evLa/BJxu8hw1RhvYY9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTA1MDcxOTI2MjJaFw0yNTA1MDgyMDE1MjJaMDMxMTAvBgNV BAMTKDYwQkIzM0M0NUVFMThFNDAzNTI2QjBGRDUxOEQ1RDBFMEUwRDlDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC737WNObHL/r3FINvD+Pau1j3R e1go4BhLXjdpcgD2WK7mrIGLowYpCro7P4BSNVArN9kJ7dRU2Oa+wp2aU2aG7e41 2jHzcy/KbQNm9NehhizT+u06xMw5OpofqIo3gC8jMXzfiGSkTYVwnbm55zIKu2jX inLkySkQ1XOBXb5rEd61Ic8I5x1G+hQNwE1rsUiK0GMtP7DlJn6A7GfI5dQj4wP4 fcBMKV/Nt/orWB7T8PNtWm8fJ2GhfHULMjLoLKMKK4f5rJgpxNeXrKnEiegW3TTJ q2t+Lp8nP4lzYZ5P9uDZ37N5872+fPpYXNKgrgrRSjlM41ecPnNyY2muNi3nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYLszxF7hjkA1JrD9UY1dDg4NnPAwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKdLWyeDgjHU44inERY3vVC+dF5mkjXqCZas2d4K/xW7QrhbwOgOsirV7vOJJ dEobs1m8w6UgrEunTDADGuW0k54NsOpE0ewNuJc986QW9UkqUQ5IJQ1TLS6rjute JQS9WuPgn9+4UoznyvrUe+0/NZafmzBpprkLpWmCwAqSy/eWVqv1ggS2FXLhK/OA sUvIzPKCVtOeFITdtMrrmcv13f3q2mHJeomDlJIcLc13hIsHV2Sp/bZ6vvZCDkAt jKvjP1XkhhfJ+47EbWxNEsUtA73Z53v4e3r5Az8LIZOxWTgjdMHmNAPd5gej6C7A uOMPYjengQ04C5S65+hnWM0eTg== -----END CERTIFICATE-----Generated at Thu May 8 12:08:35 2025 by rpki-client