$ rpki-client -vvf rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.mft File: 1FFC457CB13EA536D923B91EC0125BE121DBBCB7.mft (raw, json) Hash identifier: NQiVMYWJuFt7kitKceaDvmTZmXCRFX5O5B6Yojiftkw= Subject key identifier: 31:F6:A7:25:FA:0F:42:E4:9B:9F:07:07:E1:84:C1:57:C5:02:C5:1A Authority key identifier: 1F:FC:45:7C:B1:3E:A5:36:D9:23:B9:1E:C0:12:5B:E1:21:DB:BC:B7 Certificate issuer: /CN=1FFC457CB13EA536D923B91EC0125BE121DBBCB7 Certificate serial: 35BB3F738081149308301706A6DD9A204FFAC993 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.mft Manifest number: 08 Signing time: Fri 02 May 2025 10:06:48 +0000 Manifest this update: Fri 02 May 2025 10:01:48 +0000 Manifest next update: Sat 03 May 2025 11:29:48 +0000 Files and hashes: 1: 1FFC457CB13EA536D923B91EC0125BE121DBBCB7.crl (hash: GeTp9/DwnT5LWpm+lcQ+ONQk2jPR+mvR7b8a5EVX6PY=) 2: 3230312e34392e3234302e302f32322d3232203d3e20323730393534.roa (hash: BUVorxvx/YG+FNeb1vQEcUtWM9wt13hyr6n5GtEKqIU=) 3: 3230312e34392e3234302e302f32332d3233203d3e20323730393534.roa (hash: /qzV/vNJx/4hhuM2gurHAdSXcir6Ow5YRCjyC90BGxQ=) 4: 3230312e34392e3234322e302f32332d3233203d3e20323730393534.roa (hash: 2xmkZ1fklLVJyAI4c1HPx2d/LuOXmMgkLz5jW0F2B00=) 5: 323830343a373430383a3a2f33322d313238203d3e20323730393534.roa (hash: nZ/Zu3RiLF6uVSVY0XXdMM+rPb7D6KVeFcm8wpdUdfg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.crl rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 11:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:bb:3f:73:80:81:14:93:08:30:17:06:a6:dd:9a:20:4f:fa:c9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFC457CB13EA536D923B91EC0125BE121DBBCB7 Validity Not Before: May 2 10:01:48 2025 GMT Not After : May 3 11:29:48 2025 GMT Subject: CN=31F6A725FA0F42E49B9F0707E184C157C502C51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:9b:8b:ac:4c:22:c8:0d:44:a2:1e:65:6f: 45:a1:79:dd:8b:8f:7f:a6:d4:74:40:91:6e:b9:6a: 30:83:cc:ff:f8:c3:c2:96:69:7e:ff:a0:9d:54:49: 71:cb:33:88:95:f1:9f:c5:71:69:ea:4d:17:bb:3f: 03:2c:2c:de:5f:cc:10:58:15:f5:1a:b2:3e:11:b2: 91:ff:27:f9:34:4a:97:ee:d5:5f:e7:03:7e:21:6d: 19:39:fc:de:62:37:d8:b4:ee:d8:9d:dc:57:c5:14: 3d:be:1d:43:02:d7:bd:60:f9:ab:c9:2b:12:c8:32: 91:1f:a3:31:20:cc:24:79:be:1e:c0:a5:26:25:f8: ce:0a:8f:38:cb:77:7c:d1:b7:de:03:03:47:cb:4a: 06:7e:43:5d:3d:13:c3:ba:6a:b6:c2:19:0f:18:67: e2:07:53:09:d8:53:24:0b:2f:22:42:74:3a:3d:49: 6c:6c:d4:05:e8:35:ef:54:10:46:3f:71:15:77:85: 57:75:1b:7b:90:a0:15:2e:f7:66:f4:36:20:17:43: 1a:fe:8c:4d:79:3f:4c:04:4b:c1:a6:69:26:b1:06: 65:03:82:3e:cd:0f:0c:f4:23:55:3b:a4:5f:48:26: 00:d9:75:ad:96:af:65:34:45:8b:0b:e7:38:3d:06: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F6:A7:25:FA:0F:42:E4:9B:9F:07:07:E1:84:C1:57:C5:02:C5:1A X509v3 Authority Key Identifier: keyid:1F:FC:45:7C:B1:3E:A5:36:D9:23:B9:1E:C0:12:5B:E1:21:DB:BC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b2:b6:5b:73:c8:30:2d:aa:a4:3b:a8:59:23:e7:1a:56:da: c7:d2:79:4e:18:65:fc:88:e5:82:e4:e9:f0:2d:4d:83:e7:50: fa:22:f6:f8:90:5a:bc:61:fb:24:80:6a:82:18:c5:36:26:bf: 15:c4:59:a4:c0:6b:b4:dd:9a:e6:50:e7:24:66:d3:b1:f7:1a: 16:76:f8:7f:9b:bc:41:cd:af:0c:bf:86:ee:d1:0e:e7:7f:97: 48:a9:7a:5d:be:8b:d6:76:61:c4:80:3e:a6:0a:ac:e7:fd:67: 32:d5:22:7d:82:e7:91:2f:df:b9:e4:dc:e8:66:19:fc:01:1d: 63:4c:39:3f:69:da:78:f7:b0:95:a0:be:82:bd:82:a3:34:09: 25:4a:c7:a1:b8:96:af:95:39:5c:29:93:d1:0d:49:b4:e8:fb: c3:6d:37:35:8f:e0:3b:cf:67:26:ae:08:6a:30:91:9b:7b:53: fd:81:9b:49:af:44:db:cf:ea:c6:f4:ad:e1:70:a8:15:72:f2: c5:8d:88:ed:17:16:21:3c:d9:ae:12:50:de:4c:e4:e1:6a:ee: 66:15:4f:dd:30:3e:f6:cc:ee:cc:f8:48:24:64:37:cc:94:8f: 4e:b7:92:c9:f9:2e:f0:68:8b:43:7b:62:d4:c2:6d:9d:29:8b: 8a:5d:a1:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNbs/c4CBFJMIMBcGpt2aIE/6yZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGQzQ1N0NCMTNFQTUzNkQ5MjNCOTFFQzAxMjVCRTEy MURCQkNCNzAeFw0yNTA1MDIxMDAxNDhaFw0yNTA1MDMxMTI5NDhaMDMxMTAvBgNV BAMTKDMxRjZBNzI1RkEwRjQyRTQ5QjlGMDcwN0UxODRDMTU3QzUwMkM1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5JuLrEwiyA1Eoh5lb0Whed2L j3+m1HRAkW65ajCDzP/4w8KWaX7/oJ1USXHLM4iV8Z/FcWnqTRe7PwMsLN5fzBBY FfUasj4RspH/J/k0Spfu1V/nA34hbRk5/N5iN9i07tid3FfFFD2+HUMC171g+avJ KxLIMpEfozEgzCR5vh7ApSYl+M4KjzjLd3zRt94DA0fLSgZ+Q109E8O6arbCGQ8Y Z+IHUwnYUyQLLyJCdDo9SWxs1AXoNe9UEEY/cRV3hVd1G3uQoBUu92b0NiAXQxr+ jE15P0wES8GmaSaxBmUDgj7NDwz0I1U7pF9IJgDZda2Wr2U0RYsL5zg9BtzJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMfanJfoPQuSbnwcH4YTBV8UCxRowHwYDVR0j BBgwFoAUH/xFfLE+pTbZI7kewBJb4SHbvLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmdFWTY3dlkydldqRWJLQ243TE1vc0oyTHU2d3pZcWVaMVRNa0Q2Mjhy NUMvMC8xRkZDNDU3Q0IxM0VBNTM2RDkyM0I5MUVDMDEyNUJFMTIxREJCQ0I3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRkM0NTdDQjEzRUE1MzZE OTIzQjkxRUMwMTI1QkUxMjFEQkJDQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmdFWTY3dlkydldqRWJLQ243TE1vc0oyTHU2d3pZcWVaMVRNa0Q2MjhyNUMvMC8x RkZDNDU3Q0IxM0VBNTM2RDkyM0I5MUVDMDEyNUJFMTIxREJCQ0I3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH7K2W3PIMC2qpDuoWSPnGlbax9J5Thhl/IjlguTp8C1Ng+dQ+iL2+JBavGH7 JIBqghjFNia/FcRZpMBrtN2a5lDnJGbTsfcaFnb4f5u8Qc2vDL+G7tEO53+XSKl6 Xb6L1nZhxIA+pgqs5/1nMtUifYLnkS/fueTc6GYZ/AEdY0w5P2naePewlaC+gr2C ozQJJUrHobiWr5U5XCmT0Q1JtOj7w203NY/gO89nJq4IajCRm3tT/YGbSa9E28/q xvSt4XCoFXLyxY2I7RcWITzZrhJQ3kzk4WruZhVP3TA+9szuzPhIJGQ3zJSPTreS yfku8GiLQ3ti1MJtnSmLil2h5g== -----END CERTIFICATE-----Generated at Fri May 2 15:00:54 2025 by rpki-client