$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft File: AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft (raw, json) Hash identifier: isePZXEfYUGaQFre8Ex2NHWe12C0m4aM8I5j9wJjkb0= Subject key identifier: 61:C6:A3:9A:C4:DD:78:2D:4C:E0:B2:57:57:2F:36:38:E6:A2:7F:03 Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 Certificate issuer: /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Certificate serial: 2E0E9004C1EA15002A6B0D4B55CCF1A5C0BC72F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft Manifest number: 0207 Signing time: Mon 28 Apr 2025 09:30:22 +0000 Manifest this update: Mon 28 Apr 2025 09:25:22 +0000 Manifest next update: Tue 29 Apr 2025 13:25:22 +0000 Files and hashes: 1: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: ve9csxsYtvbttCUtJ6k2byKVef+aNPiHNUI7M+ZsbD4=) 2: 3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (hash: XA3CDHGQzJtVy7KlXD+Ti8xltUzX609QLMhF05gs+Cg=) 3: AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl (hash: p/rBw9AzFlKMn2UdjkiuHc7uX4Q9UOm8Qd2uUqihxs8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 13:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0e:90:04:c1:ea:15:00:2a:6b:0d:4b:55:cc:f1:a5:c0:bc:72:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Validity Not Before: Apr 28 09:25:22 2025 GMT Not After : Apr 29 13:25:22 2025 GMT Subject: CN=61C6A39AC4DD782D4CE0B257572F3638E6A27F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:36:55:87:e8:90:84:29:91:7f:23:f7:ef: 2c:d1:d8:2e:81:00:fc:6b:22:ff:c1:3b:c7:97:22: e6:fe:73:63:cd:d9:6a:50:bd:f7:65:ab:e5:36:10: 3e:a3:e9:9b:48:15:11:a1:e6:db:9f:90:c2:be:8e: 22:e2:b9:91:75:26:b4:2d:9f:af:8a:00:35:d1:0e: 97:a4:e5:5d:32:b0:d4:1e:1a:8d:df:40:c4:af:71: 43:a1:7e:ee:6c:56:25:fb:f5:80:a0:bb:ad:2a:cb: 77:46:4b:71:a2:7e:1c:8a:d8:38:bf:aa:a8:a2:8f: 55:5c:5a:5d:3a:e3:4b:8d:0b:86:02:6f:ca:7b:9d: 76:8f:ca:62:d9:1e:f2:5c:fc:44:ca:29:b9:5a:79: 78:20:22:7d:80:31:b3:51:f6:7e:1d:67:9a:4b:cc: 61:0d:a2:d2:9d:3c:47:80:cb:0e:87:da:2b:13:61: 2a:45:8a:45:bd:60:fc:64:ae:95:c7:75:95:59:87: c6:97:1e:4b:37:bf:11:9b:7b:ac:a6:69:16:68:13: a4:19:bd:ed:6d:5f:eb:3c:bd:8f:4a:53:80:b9:16: 3c:ab:25:ee:4e:9d:f7:e0:2a:d2:af:b7:b7:24:7a: 0d:0d:aa:ad:c3:1a:53:24:76:4c:ad:a1:e8:a7:ee: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C6:A3:9A:C4:DD:78:2D:4C:E0:B2:57:57:2F:36:38:E6:A2:7F:03 X509v3 Authority Key Identifier: keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:24:b8:68:f3:43:11:00:08:11:d1:6c:ff:fc:67:51:b3:5b: 56:49:f9:c6:ad:da:24:45:69:18:7b:d3:1e:70:5f:11:c3:af: 82:31:77:b9:16:93:9a:95:d5:c3:18:7e:38:5c:b4:7b:51:ff: 55:d6:9a:13:70:88:0d:7d:cf:35:04:be:e8:58:7c:d2:e6:b9: 87:40:cd:fb:b2:fd:9c:b4:87:90:6c:52:28:67:2b:cf:79:cb: 43:50:e4:96:e0:6c:98:71:06:f6:01:a3:46:df:e2:2d:08:f6: 7f:25:8a:9a:c5:f6:aa:78:83:ac:58:1e:3c:e2:71:ac:14:51: 70:ec:ec:b3:47:c9:14:f5:0b:0a:a8:c3:02:9a:d6:bd:5f:15: f3:e5:99:9a:5b:9b:8a:05:6b:96:3e:4a:71:68:33:c2:1d:b8: 5b:82:28:a8:d1:06:b1:f7:86:34:0e:1a:5c:84:76:55:68:d2: 2c:86:fb:b6:11:83:38:71:15:cd:22:b0:46:77:d0:77:3d:c9: 6d:f8:61:34:48:c6:af:83:d7:b1:c9:b4:4f:9c:0c:e0:e5:5f: a8:a1:58:64:d3:89:52:df:f3:44:f3:03:4d:0b:c7:10:70:05: 2e:62:98:1e:87:4e:27:81:4f:75:96:cb:0a:af:80:ef:fe:67: ed:99:59:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULg6QBMHqFQAqaw1LVczxpcC8cvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyOUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3 NjNDMzhBNDAeFw0yNTA0MjgwOTI1MjJaFw0yNTA0MjkxMzI1MjJaMDMxMTAvBgNV BAMTKDYxQzZBMzlBQzRERDc4MkQ0Q0UwQjI1NzU3MkYzNjM4RTZBMjdGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kzZVh+iQhCmRfyP37yzR2C6B APxrIv/BO8eXIub+c2PN2WpQvfdlq+U2ED6j6ZtIFRGh5tufkMK+jiLiuZF1JrQt n6+KADXRDpek5V0ysNQeGo3fQMSvcUOhfu5sViX79YCgu60qy3dGS3GifhyK2Di/ qqiij1VcWl0640uNC4YCb8p7nXaPymLZHvJc/ETKKblaeXggIn2AMbNR9n4dZ5pL zGENotKdPEeAyw6H2isTYSpFikW9YPxkrpXHdZVZh8aXHks3vxGbe6ymaRZoE6QZ ve1tX+s8vY9KU4C5FjyrJe5OnffgKtKvt7ckeg0Nqq3DGlMkdkytoein7hqHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYcajmsTdeC1M4LJXVy82OOaifwMwHwYDVR0j BBgwFoAUqim65U85hoY4xQobuV4jp3Y8OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM S1MvMS9BQTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMjlCQUU1NEYzOTg2ODYz OEM1MEExQkI5NUUyM0E3NzYzQzM4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMS9B QTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAySS4aPNDEQAIEdFs//xnUbNbVkn5xq3aJEVpGHvTHnBfEcOvgjF3uRaTmpXV wxh+OFy0e1H/VdaaE3CIDX3PNQS+6Fh80ua5h0DN+7L9nLSHkGxSKGcrz3nLQ1Dk luBsmHEG9gGjRt/iLQj2fyWKmsX2qniDrFgePOJxrBRRcOzss0fJFPULCqjDAprW vV8V8+WZmlubigVrlj5KcWgzwh24W4IoqNEGsfeGNA4aXIR2VWjSLIb7thGDOHEV zSKwRnfQdz3JbfhhNEjGr4PXscm0T5wM4OVfqKFYZNOJUt/zRPMDTQvHEHAFLmKY HodOJ4FPdZbLCq+A7/5n7ZlZoQ== -----END CERTIFICATE-----Generated at Tue Apr 29 05:24:54 2025 by rpki-client