$ rpki-client -vvf rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft File: 24C90100868CC7E5E4ADB4222503286F7BF449AA.mft (raw, json) Hash identifier: xyHlpbBH51TV+GrrWmR9dreHolce23FNmugq+WJNYH4= Subject key identifier: 93:EC:6C:8F:B0:4D:B8:D1:4C:AA:0B:52:C8:15:A8:0E:9D:91:B8:08 Authority key identifier: 24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA Certificate issuer: /CN=24C90100868CC7E5E4ADB4222503286F7BF449AA Certificate serial: 7E8CB070F4A310EEC3C4F7461DC8AA55A549B47B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft Manifest number: 01FA Signing time: Tue 29 Apr 2025 09:48:15 +0000 Manifest this update: Tue 29 Apr 2025 09:43:15 +0000 Manifest next update: Wed 30 Apr 2025 11:47:15 +0000 Files and hashes: 1: 34352e3233322e3138302e302f32322d3234203d3e20323637323832.roa (hash: XbMvb0sHDqh6I8tw7R7pOeSgv0NogUeRGWr0SWQ5A0I=) 2: 24C90100868CC7E5E4ADB4222503286F7BF449AA.crl (hash: 9fX+iypbzjrkAMNzOCOsH3u3lHjqXC36GQjwLqhAEB4=) 3: 323830343a346231343a3a2f33322d3336203d3e20323637323832.roa (hash: YepoO3AKHh52C+NKLMnz+2byTie+Z3SUdV9FD/LaTiw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 11:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8c:b0:70:f4:a3:10:ee:c3:c4:f7:46:1d:c8:aa:55:a5:49:b4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24C90100868CC7E5E4ADB4222503286F7BF449AA Validity Not Before: Apr 29 09:43:15 2025 GMT Not After : Apr 30 11:47:15 2025 GMT Subject: CN=93EC6C8FB04DB8D14CAA0B52C815A80E9D91B808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:88:8e:b3:4d:dd:23:2c:1b:0c:79:3d:b4: e5:bb:89:49:b6:16:c7:7b:19:37:91:73:ad:cf:a9: 87:f2:6f:f9:ed:9f:c7:83:ef:90:ef:3f:b2:f9:ab: 43:10:bc:f9:74:b4:b2:ee:96:db:41:ab:71:b9:95: 74:75:96:ce:ad:76:78:9d:d4:c0:ea:bc:c1:4e:ca: 22:5f:d5:a3:d0:09:d2:6b:33:2f:02:d1:a1:f1:9f: 38:7e:1c:f5:dd:2e:91:a1:5a:17:02:73:0b:36:44: 16:83:63:3c:ee:a3:c2:ae:65:f7:5c:5b:32:3a:87: e3:f6:1d:76:40:c1:a8:16:d7:b3:d0:01:20:4c:32: 8b:ff:b3:3d:34:1c:84:e9:27:67:c3:d9:25:0d:4a: 43:95:e2:61:1f:23:a1:a5:d4:a6:e7:70:89:73:3c: b8:23:5a:31:9b:39:1b:20:88:05:35:96:ca:39:5e: 63:f7:87:3a:50:84:81:f3:ba:d9:25:9a:41:d3:4e: b3:99:fe:a0:82:fd:f6:ff:e4:42:b0:35:76:57:33: 26:93:17:c0:a5:61:33:5b:09:6c:6a:3f:e4:fa:46: 60:ae:02:dc:47:c8:8d:af:84:b9:5f:c0:f3:56:6e: 97:7f:06:9c:73:44:ae:52:ed:18:b4:96:36:3a:ef: e2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EC:6C:8F:B0:4D:B8:D1:4C:AA:0B:52:C8:15:A8:0E:9D:91:B8:08 X509v3 Authority Key Identifier: keyid:24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c1:5c:c3:70:17:52:07:f8:58:32:62:82:53:0e:a8:4f:c9: b7:09:04:9d:e1:46:b1:c5:90:59:e0:12:90:9e:d4:12:78:94: 11:e3:20:f7:d6:8d:13:2b:73:0b:6b:1a:f7:0f:f7:23:51:f3: cf:e2:64:d6:b6:56:e3:c5:c0:55:c3:38:23:c7:39:2d:ee:5d: b7:90:f2:d9:98:12:85:69:f5:df:ac:06:44:78:9e:12:fc:ec: 2d:09:88:a5:32:73:a6:48:6f:fc:fd:ee:f9:9b:2b:24:6c:76: 1f:99:e7:0e:56:90:85:a9:ed:14:8e:3a:11:e5:b0:8c:42:c4: 65:21:73:48:1d:22:7d:70:00:bd:ff:9a:9a:fe:ac:3b:4c:6a: 79:60:f7:b1:46:46:9b:e9:70:6a:a0:ba:05:9d:a0:3c:1b:00: 34:69:73:4b:05:4a:c0:8e:1c:48:b1:30:8f:7d:76:2f:85:22: 13:fd:fc:b9:8b:27:d7:e0:f9:87:1c:d6:35:ca:74:6d:80:eb: 84:80:fa:e4:ca:36:56:41:21:9a:f2:63:ca:2e:e7:ce:df:03: 0b:a5:40:b1:7b:bc:1c:a9:c5:91:d2:74:3d:b4:81:f7:c8:64: 38:fb:c4:b5:85:c3:4a:3d:70:e4:45:df:00:90:b5:fe:e2:b8: 55:dd:20:b0 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUfoywcPSjEO7DxPdGHciqVaVJtHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRDOTAxMDA4NjhDQzdFNUU0QURCNDIyMjUwMzI4NkY3 QkY0NDlBQTAeFw0yNTA0MjkwOTQzMTVaFw0yNTA0MzAxMTQ3MTVaMDMxMTAvBgNV BAMTKDkzRUM2QzhGQjA0REI4RDE0Q0FBMEI1MkM4MTVBODBFOUQ5MUI4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEYiOs03dIywbDHk9tOW7iUm2 Fsd7GTeRc63PqYfyb/ntn8eD75DvP7L5q0MQvPl0tLLulttBq3G5lXR1ls6tdnid 1MDqvMFOyiJf1aPQCdJrMy8C0aHxnzh+HPXdLpGhWhcCcws2RBaDYzzuo8KuZfdc WzI6h+P2HXZAwagW17PQASBMMov/sz00HITpJ2fD2SUNSkOV4mEfI6Gl1KbncIlz PLgjWjGbORsgiAU1lso5XmP3hzpQhIHzutklmkHTTrOZ/qCC/fb/5EKwNXZXMyaT F8ClYTNbCWxqP+T6RmCuAtxHyI2vhLlfwPNWbpd/BpxzRK5S7Ri0ljY67+LBAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUk+xsj7BNuNFMqgtSyBWoDp2RuAgwHwYDVR0j BBgwFoAUJMkBAIaMx+XkrbQiJQMob3v0SaowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby84VVVTR1hrTFBidkpOQ1ZuamluU1J6NEVOVzRRUXRzWk54b2YxOHFuZUhT LzEvMjRDOTAxMDA4NjhDQzdFNUU0QURCNDIyMjUwMzI4NkY3QkY0NDlBQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNEM5MDEwMDg2OENDN0U1RTRB REI0MjIyNTAzMjg2RjdCRjQ0OUFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhV VVNHWGtMUGJ2Sk5DVm5qaW5TUno0RU5XNFFRdHNaTnhvZjE4cW5lSFMvMS8yNEM5 MDEwMDg2OENDN0U1RTRBREI0MjIyNTAzMjg2RjdCRjQ0OUFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA WMFcw3AXUgf4WDJiglMOqE/JtwkEneFGscWQWeASkJ7UEniUEeMg99aNEytzC2sa 9w/3I1Hzz+Jk1rZW48XAVcM4I8c5Le5dt5Dy2ZgShWn136wGRHieEvzsLQmIpTJz pkhv/P3u+ZsrJGx2H5nnDlaQhantFI46EeWwjELEZSFzSB0ifXAAvf+amv6sO0xq eWD3sUZGm+lwaqC6BZ2gPBsANGlzSwVKwI4cSLEwj312L4UiE/38uYsn1+D5hxzW Ncp0bYDrhID65Mo2VkEhmvJjyi7nzt8DC6VAsXu8HKnFkdJ0PbSB98hkOPvEtYXD Sj1w5EXfAJC1/uK4Vd0gsA== -----END CERTIFICATE-----Generated at Tue Apr 29 12:14:38 2025 by rpki-client