$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.mft File: 8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.mft (raw, json) Hash identifier: BKk6ul3SCcDVL1nyMAj6kaNjx2oMi4+VhrSzQ5FTNuc= Subject key identifier: BE:4A:8C:2B:63:16:CD:AD:97:55:0C:F3:F1:76:27:90:6F:F2:51:48 Authority key identifier: 80:68:C3:B3:46:FD:1E:F7:59:FA:5F:D0:B6:3C:B4:44:8A:D2:9B:C2 Certificate issuer: /CN=8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2 Certificate serial: 0D24F799CBD69580C43E6BC2910A8A870DB4196D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.mft Manifest number: 2C Signing time: Mon 28 Apr 2025 19:13:45 +0000 Manifest this update: Mon 28 Apr 2025 19:08:45 +0000 Manifest next update: Tue 29 Apr 2025 21:00:45 +0000 Files and hashes: 1: 8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.crl (hash: zyNUowTyty5t6PDap7D1qvYxNyZ9Rdpm20CVF25dA7w=) 2: 323830343a316437633a3a2f33322d3333203d3e20323634333733.roa (hash: 1poXB5IHDNac6uW3pWSKM3+LlapSRHpAvAvsuo4mwJU=) 3: 3133312e3136312e37362e302f32322d3234203d3e20323634333733.roa (hash: 8d9pwdS/IrGIV0UW6CJlPrjEhUZFnSP38eFHvi1DBHQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.crl rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:24:f7:99:cb:d6:95:80:c4:3e:6b:c2:91:0a:8a:87:0d:b4:19:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2 Validity Not Before: Apr 28 19:08:45 2025 GMT Not After : Apr 29 21:00:45 2025 GMT Subject: CN=BE4A8C2B6316CDAD97550CF3F17627906FF25148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:c9:be:43:41:e1:f9:d7:98:80:f0:51:3f: a6:4c:6e:57:a4:60:93:b3:4b:25:0a:0e:f4:19:ae: 7c:bc:3b:4e:8a:88:62:f2:57:8a:69:19:38:1c:89: c8:ba:e8:1d:a8:49:39:ad:f7:83:db:cb:0a:2f:a1: 22:f4:61:f5:dd:da:a1:01:a2:b7:80:1b:c1:ab:2f: e1:12:23:6d:28:99:f0:09:f3:ac:44:cf:73:91:ac: 50:95:6b:61:cf:31:33:8c:9b:68:52:56:27:23:64: 90:0d:27:5e:de:e6:a9:87:c4:02:c1:b7:1d:14:5a: 0f:2b:3a:5f:9c:0a:8e:7e:9a:ac:9c:b1:d0:87:ca: cb:02:05:17:6a:d8:a7:c0:0b:4f:59:d4:f1:3e:ed: 51:bf:70:f3:62:d8:38:3a:1b:59:37:29:a1:23:2d: ac:b6:53:cb:37:c6:64:49:38:cd:ac:b2:99:5c:49: 9d:be:ff:4e:2a:40:67:95:ec:a8:09:06:b8:b2:aa: f1:32:e2:55:1c:e9:a9:b1:02:8e:03:78:fd:a8:47: c4:86:fb:bc:af:13:71:5d:52:fe:a9:6f:4f:96:6b: 60:22:5c:fa:fc:fb:e0:9a:3b:7b:e8:c1:36:42:ab: 29:13:1e:3d:21:1d:aa:a3:bc:76:13:70:59:90:cc: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4A:8C:2B:63:16:CD:AD:97:55:0C:F3:F1:76:27:90:6F:F2:51:48 X509v3 Authority Key Identifier: keyid:80:68:C3:B3:46:FD:1E:F7:59:FA:5F:D0:B6:3C:B4:44:8A:D2:9B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/8068C3B346FD1EF759FA5FD0B63CB4448AD29BC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:ae:6b:a1:86:c6:a4:60:93:4d:3d:2e:0b:e4:53:a1:21:08: 22:91:96:d6:1c:84:89:2c:3a:39:b9:5a:8d:f5:5a:f4:40:1c: 4d:df:a8:63:66:74:74:7d:98:c2:c7:ac:2e:6f:a5:7b:5a:88: bb:30:b5:5d:58:7f:bd:60:a8:35:76:25:92:17:29:30:65:6c: 30:32:0e:6a:c9:18:30:0c:b8:34:8c:f4:1e:cd:7f:f3:96:ed: 95:7b:e1:3b:0a:79:98:33:62:6b:e6:9d:42:ac:f5:6f:41:cb: 26:2e:65:bf:3b:48:17:1c:3e:4f:8b:fb:17:8f:c0:23:be:e8: 27:bc:44:e5:8a:c3:bd:dc:3a:ed:f5:e6:5e:85:3a:a0:c5:4d: ae:fc:3b:fd:71:73:01:a7:2b:df:e7:11:ad:ac:c9:67:c5:0e: 77:f1:26:21:0c:9c:e6:61:6c:b6:c0:c9:be:36:3e:8e:81:dc: 4e:b2:cf:c6:ab:38:cf:73:70:94:8e:b0:20:1f:3b:aa:55:81: aa:e2:7d:a5:34:6a:09:7e:14:42:8d:45:82:4c:3a:53:8f:82: cc:19:9d:a2:60:8f:27:b9:e3:af:cb:f7:9a:5d:14:65:04:27: 31:1f:b3:4d:70:b5:c7:17:91:33:3d:bc:2e:13:0f:1a:95:f3: 92:03:0a:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDST3mcvWlYDEPmvCkQqKhw20GW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA2OEMzQjM0NkZEMUVGNzU5RkE1RkQwQjYzQ0I0NDQ4 QUQyOUJDMjAeFw0yNTA0MjgxOTA4NDVaFw0yNTA0MjkyMTAwNDVaMDMxMTAvBgNV BAMTKEJFNEE4QzJCNjMxNkNEQUQ5NzU1MENGM0YxNzYyNzkwNkZGMjUxNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClKcm+Q0Hh+deYgPBRP6ZMblek YJOzSyUKDvQZrny8O06KiGLyV4ppGTgcici66B2oSTmt94PbywovoSL0YfXd2qEB oreAG8GrL+ESI20omfAJ86xEz3ORrFCVa2HPMTOMm2hSVicjZJANJ17e5qmHxALB tx0UWg8rOl+cCo5+mqycsdCHyssCBRdq2KfAC09Z1PE+7VG/cPNi2Dg6G1k3KaEj Lay2U8s3xmRJOM2ssplcSZ2+/04qQGeV7KgJBriyqvEy4lUc6amxAo4DeP2oR8SG +7yvE3FdUv6pb0+Wa2AiXPr8++CaO3vowTZCqykTHj0hHaqjvHYTcFmQzDupAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvkqMK2MWza2XVQzz8XYnkG/yUUgwHwYDVR0j BBgwFoAUgGjDs0b9HvdZ+l/Qtjy0RIrSm8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ01vV3M0a0pTNkxqaHRHdThwWFp4Rkw1QnFtSFJjZWZncmNQbjJZam1D cU4vMC84MDY4QzNCMzQ2RkQxRUY3NTlGQTVGRDBCNjNDQjQ0NDhBRDI5QkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwNjhDM0IzNDZGRDFFRjc1 OUZBNUZEMEI2M0NCNDQ0OEFEMjlCQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q01vV3M0a0pTNkxqaHRHdThwWFp4Rkw1QnFtSFJjZWZncmNQbjJZam1DcU4vMC84 MDY4QzNCMzQ2RkQxRUY3NTlGQTVGRDBCNjNDQjQ0NDhBRDI5QkMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAza5roYbGpGCTTT0uC+RToSEIIpGW1hyEiSw6OblajfVa9EAcTd+oY2Z0dH2Y wsesLm+le1qIuzC1XVh/vWCoNXYlkhcpMGVsMDIOaskYMAy4NIz0Hs1/85btlXvh Owp5mDNia+adQqz1b0HLJi5lvztIFxw+T4v7F4/AI77oJ7xE5YrDvdw67fXmXoU6 oMVNrvw7/XFzAacr3+cRrazJZ8UOd/EmIQyc5mFstsDJvjY+joHcTrLPxqs4z3Nw lI6wIB87qlWBquJ9pTRqCX4UQo1Fgkw6U4+CzBmdomCPJ7njr8v3ml0UZQQnMR+z TXC1xxeRMz28LhMPGpXzkgMKBA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:10:00 2025 by rpki-client