$ rpki-client -vvf rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.mft File: EEE7ECD0FACEDB5728224B1A1ED60D889F673104.mft (raw, json) Hash identifier: SY4SreLXMbFRa3hpSoY87je9RZmMKaxjsS1+q10y/LA= Subject key identifier: 42:B1:1D:93:D8:4C:09:75:CC:E4:15:FA:69:D5:65:17:F2:DF:52:67 Authority key identifier: EE:E7:EC:D0:FA:CE:DB:57:28:22:4B:1A:1E:D6:0D:88:9F:67:31:04 Certificate issuer: /CN=EEE7ECD0FACEDB5728224B1A1ED60D889F673104 Certificate serial: 7F1485483AA51DF970C7454618F80B2EB99DC594 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer Subject info access: rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.mft Manifest number: 14 Signing time: Mon 28 Apr 2025 10:57:30 +0000 Manifest this update: Mon 28 Apr 2025 10:52:30 +0000 Manifest next update: Tue 29 Apr 2025 11:41:30 +0000 Files and hashes: 1: 3138392e3132362e36342e302f32302d3234203d3e203238323235.roa (hash: fZulo89CqNn+vZxA9dDglPCFD3rPEWiVIl12YaFMuhM=) 2: EEE7ECD0FACEDB5728224B1A1ED60D889F673104.crl (hash: 3AisvDL1B0AWJQ9Rl8hRDEDRdeRiwsNHKC7kEOvST6U=) 3: 323830343a363230633a3a2f33322d3334203d3e203238323235.roa (hash: pb/l3KSMWM3wtGuNvxyMzdnvIMAr9lJCsp8BMQwS6iQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.crl rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 11:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:14:85:48:3a:a5:1d:f9:70:c7:45:46:18:f8:0b:2e:b9:9d:c5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEE7ECD0FACEDB5728224B1A1ED60D889F673104 Validity Not Before: Apr 28 10:52:30 2025 GMT Not After : Apr 29 11:41:30 2025 GMT Subject: CN=42B11D93D84C0975CCE415FA69D56517F2DF5267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:33:10:c7:e3:a1:e7:8b:3c:de:7e:2c:e5: 41:e5:98:ee:6e:ec:bc:a1:1f:08:36:9f:5f:08:3d: e1:ab:1e:cd:be:ff:6e:e6:53:c2:d4:89:af:84:f2: 54:47:73:29:9f:93:ef:d7:9b:ac:81:c9:d9:cd:86: d8:5f:d6:89:f6:a5:b6:c1:85:a2:6d:54:ba:75:0b: 26:fc:a1:b5:5b:45:8a:cc:81:1b:7b:b0:4e:1f:fb: 97:2e:a9:86:d1:7d:1b:d8:0f:d9:7b:7c:05:e5:5f: 8f:dd:ff:41:3c:d0:7d:53:dd:6a:9e:1b:5c:0a:bb: 96:4c:cd:50:bc:25:ea:d5:d2:5a:54:df:1d:01:89: 31:43:19:b1:43:61:9f:6c:a8:b5:03:c7:4e:67:fc: 85:f9:26:d5:b2:b5:6f:e5:87:42:55:2c:48:48:8a: a0:1f:b6:41:0c:6b:6f:f0:f8:f2:f7:52:8d:96:5c: f4:be:41:f5:49:ba:ef:59:40:aa:30:b9:6b:0d:54: 7e:72:55:07:0e:93:ca:50:7c:1c:22:b8:30:92:9a: 1e:9d:a7:51:2e:e8:c6:fe:2b:7e:71:48:5f:ff:50: fd:75:42:a8:22:64:c8:d0:38:a8:d1:32:85:b1:38: 0e:c3:69:19:e5:14:fc:a8:d6:09:d1:c1:a8:93:a9: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:1D:93:D8:4C:09:75:CC:E4:15:FA:69:D5:65:17:F2:DF:52:67 X509v3 Authority Key Identifier: keyid:EE:E7:EC:D0:FA:CE:DB:57:28:22:4B:1A:1E:D6:0D:88:9F:67:31:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8SXWAtKyKvky6TtpqzqhTGag7dM1koY3hygv2DaAXjH/0/EEE7ECD0FACEDB5728224B1A1ED60D889F673104.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9a:a1:f2:f7:cc:2b:a2:d7:b3:f3:da:ed:f8:a8:62:db:b1: 4a:e2:47:ed:05:63:c7:5f:e4:04:bc:5e:65:8d:3d:83:08:28: eb:a1:e2:85:64:7d:3f:f9:db:fd:6b:da:2e:63:63:33:27:f2: fe:e9:e5:26:0d:0d:be:54:f9:00:b5:b5:de:dd:65:9d:de:de: 4a:8a:c5:6d:c5:8f:73:d4:d4:34:b9:9d:44:c6:8b:3d:7a:16: 1e:38:66:38:6c:60:d9:99:d5:e3:81:31:a3:60:89:e0:11:84: e2:09:e1:fe:51:55:c4:bf:cf:f4:24:20:92:6d:e3:1a:1a:08: ca:3f:da:df:21:6e:92:4d:26:5b:ce:54:91:9d:51:2e:f5:0e: ae:f5:73:86:88:8d:47:12:98:20:18:49:c6:c9:25:e0:38:66: 21:8f:9b:c2:4d:8a:72:05:a9:57:53:40:40:6a:6f:ce:7f:ea: bd:d9:1f:0c:a0:0b:91:87:71:1a:2a:80:fd:72:5a:38:73:85: 01:51:f6:de:99:d4:aa:8f:09:fa:98:c5:63:95:a5:f0:8a:db: 98:da:3b:ef:65:5a:84:c6:b9:61:f5:94:be:67:ef:a9:4d:d9: bc:be:30:46:19:db:b7:0d:78:c8:77:6d:1d:dc:ac:4a:fa:5c: 1c:de:bb:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfxSFSDqlHflwx0VGGPgLLrmdxZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVFN0VDRDBGQUNFREI1NzI4MjI0QjFBMUVENjBEODg5 RjY3MzEwNDAeFw0yNTA0MjgxMDUyMzBaFw0yNTA0MjkxMTQxMzBaMDMxMTAvBgNV BAMTKDQyQjExRDkzRDg0QzA5NzVDQ0U0MTVGQTY5RDU2NTE3RjJERjUyNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yTMQx+Oh54s83n4s5UHlmO5u 7LyhHwg2n18IPeGrHs2+/27mU8LUia+E8lRHcymfk+/Xm6yBydnNhthf1on2pbbB haJtVLp1Cyb8obVbRYrMgRt7sE4f+5cuqYbRfRvYD9l7fAXlX4/d/0E80H1T3Wqe G1wKu5ZMzVC8JerV0lpU3x0BiTFDGbFDYZ9sqLUDx05n/IX5JtWytW/lh0JVLEhI iqAftkEMa2/w+PL3Uo2WXPS+QfVJuu9ZQKowuWsNVH5yVQcOk8pQfBwiuDCSmh6d p1Eu6Mb+K35xSF//UP11QqgiZMjQOKjRMoWxOA7DaRnlFPyo1gnRwaiTqc33AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQrEdk9hMCXXM5BX6adVlF/LfUmcwHwYDVR0j BBgwFoAU7ufs0PrO21coIksaHtYNiJ9nMQQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFY akgvMC9FRUU3RUNEMEZBQ0VEQjU3MjgyMjRCMUExRUQ2MEQ4ODlGNjczMTA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFRTdFQ0QwRkFDRURCNTcy ODIyNEIxQTFFRDYwRDg4OUY2NzMxMDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjhTWFdBdEt5S3ZreTZUdHBxenFoVEdhZzdkTTFrb1kzaHlndjJEYUFYakgvMC9F RUU3RUNEMEZBQ0VEQjU3MjgyMjRCMUExRUQ2MEQ4ODlGNjczMTA0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqJqh8vfMK6LXs/Pa7fioYtuxSuJH7QVjx1/kBLxeZY09gwgo66HihWR9P/nb /WvaLmNjMyfy/unlJg0NvlT5ALW13t1lnd7eSorFbcWPc9TUNLmdRMaLPXoWHjhm OGxg2ZnV44Exo2CJ4BGE4gnh/lFVxL/P9CQgkm3jGhoIyj/a3yFukk0mW85UkZ1R LvUOrvVzhoiNRxKYIBhJxskl4DhmIY+bwk2KcgWpV1NAQGpvzn/qvdkfDKALkYdx GiqA/XJaOHOFAVH23pnUqo8J+pjFY5Wl8IrbmNo772VahMa5YfWUvmfvqU3ZvL4w Rhnbtw14yHdtHdysSvpcHN671w== -----END CERTIFICATE-----Generated at Mon Apr 28 23:59:04 2025 by rpki-client