$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft File: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json) Hash identifier: di23hWr3tRfDRHi9RFEJqGSOPFUHKDkv7WSsb2Xirps= Subject key identifier: B6:47:19:55:B1:7F:A6:3A:56:D8:61:01:79:EB:A9:27:01:3C:56:7E Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C Certificate issuer: /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Certificate serial: 2B289338E0F7ACB37AB396D9144EBCEBF65F2777 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft Manifest number: 020A Signing time: Sun 27 Apr 2025 10:37:43 +0000 Manifest this update: Sun 27 Apr 2025 10:32:43 +0000 Manifest next update: Mon 28 Apr 2025 13:54:43 +0000 Files and hashes: 1: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=) 2: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=) 3: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=) 4: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: nK3LwTVs8XcI4+5/sPslusbIuSRgky3/HXzpaCQPicA=) 5: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=) 6: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: mqy8b9GeFOuJat8npSCtdNaMsEv+mc/f5yfeDuhXnYY=) 7: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=) 8: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=) 9: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 13:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:28:93:38:e0:f7:ac:b3:7a:b3:96:d9:14:4e:bc:eb:f6:5f:27:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Validity Not Before: Apr 27 10:32:43 2025 GMT Not After : Apr 28 13:54:43 2025 GMT Subject: CN=B6471955B17FA63A56D8610179EBA927013C567E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:b1:fc:fe:c5:0f:09:4c:52:e7:d1:33:71: f1:ad:3f:33:54:c6:d5:ce:d9:2d:5b:bb:95:83:10: 23:c2:5f:d7:92:bf:df:58:86:c2:30:0a:7e:cf:a3: 85:c0:22:c3:2f:10:42:a8:96:cb:f6:01:92:3f:1c: 52:72:d7:51:a2:d0:c3:d8:32:fa:9d:3b:32:19:8d: c1:d1:da:64:96:42:71:cc:9d:41:6c:12:d5:d9:c2: 88:0f:24:0d:91:e1:ea:5e:a0:2d:70:92:b1:c4:dd: 81:8d:f5:2f:2f:68:54:78:96:ce:a6:c4:e1:df:58: 52:2c:9b:5e:e4:6d:e5:bc:e9:e9:48:ad:86:0e:4f: 9d:b9:d4:9b:df:cd:d3:70:d9:bd:c3:05:de:d5:90: 07:7f:dc:05:9f:f4:8c:e1:40:39:ac:81:51:7d:6d: 25:10:31:94:8a:af:66:3f:5f:90:1e:03:f1:aa:2c: 08:59:80:c5:65:3e:ed:33:72:0d:7d:a0:32:d3:9a: e5:e1:df:af:6f:0c:bf:27:d7:b6:5a:d6:27:a6:ab: 24:8f:6f:ee:d2:24:36:b6:20:5a:4c:95:1a:2d:4f: 66:7f:eb:c1:af:8f:17:40:51:bf:b4:f4:9d:1c:4a: b3:da:11:d0:10:e4:39:5c:06:e0:b8:4f:06:25:b1: 05:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:47:19:55:B1:7F:A6:3A:56:D8:61:01:79:EB:A9:27:01:3C:56:7E X509v3 Authority Key Identifier: keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:10:88:be:e8:74:1b:09:d2:15:0f:e7:9b:a2:26:86:2e:9c: 53:ac:a6:7b:78:e7:61:b8:93:9e:ff:73:2f:0c:b5:4d:7d:2c: 9b:d3:31:fe:93:77:dc:65:a1:a5:65:e6:f5:c8:92:dc:75:53: 35:8e:70:80:0e:99:17:88:62:f8:9f:bd:d0:13:3f:31:b2:e5: a3:89:14:3d:b8:27:97:92:b9:3d:f7:83:33:fe:5f:da:10:34: aa:51:74:f2:42:eb:76:65:70:7b:0f:76:49:bf:11:0f:87:1d: 04:68:5c:a6:59:ad:99:e1:c8:73:d8:eb:ec:20:f9:a8:24:11: 2a:cb:a5:64:3a:d7:66:a0:aa:7b:1d:6a:4e:fd:50:29:95:21: f5:28:58:8b:71:36:16:f4:84:dd:1d:b4:ed:1e:9f:95:dd:f3: 8b:b9:a0:3a:17:34:70:3c:9d:eb:54:43:14:f2:61:ed:2a:57: 77:cc:7c:b4:9b:a6:c9:92:d7:69:26:91:23:10:0c:d1:31:c6: ae:09:8f:69:1c:94:e6:02:24:1a:1a:88:86:b4:9c:f6:5a:80: 64:92:6b:29:af:67:e5:f0:15:c2:14:4f:12:20:37:2a:11:c7: 67:3d:6f:9b:8c:73:ca:c2:19:28:a3:97:55:5e:97:2a:31:84: 66:e4:1a:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKyiTOOD3rLN6s5bZFE686/ZfJ3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy QjUxQ0IxQzAeFw0yNTA0MjcxMDMyNDNaFw0yNTA0MjgxMzU0NDNaMDMxMTAvBgNV BAMTKEI2NDcxOTU1QjE3RkE2M0E1NkQ4NjEwMTc5RUJBOTI3MDEzQzU2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlrH8/sUPCUxS59EzcfGtPzNU xtXO2S1bu5WDECPCX9eSv99YhsIwCn7Po4XAIsMvEEKolsv2AZI/HFJy11Gi0MPY MvqdOzIZjcHR2mSWQnHMnUFsEtXZwogPJA2R4epeoC1wkrHE3YGN9S8vaFR4ls6m xOHfWFIsm17kbeW86elIrYYOT5251JvfzdNw2b3DBd7VkAd/3AWf9IzhQDmsgVF9 bSUQMZSKr2Y/X5AeA/GqLAhZgMVlPu0zcg19oDLTmuXh369vDL8n17Za1iemqySP b+7SJDa2IFpMlRotT2Z/68GvjxdAUb+09J0cSrPaEdAQ5DlcBuC4TwYlsQVtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtkcZVbF/pjpW2GEBeeupJwE8Vn4wHwYDVR0j BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0 S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0S1IvMS9C QjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABRCIvuh0GwnSFQ/nm6Imhi6cU6yme3jnYbiTnv9zLwy1TX0sm9Mx/pN33GWh pWXm9ciS3HVTNY5wgA6ZF4hi+J+90BM/MbLlo4kUPbgnl5K5PfeDM/5f2hA0qlF0 8kLrdmVwew92Sb8RD4cdBGhcplmtmeHIc9jr7CD5qCQRKsulZDrXZqCqex1qTv1Q KZUh9ShYi3E2FvSE3R207R6fld3zi7mgOhc0cDyd61RDFPJh7SpXd8x8tJumyZLX aSaRIxAM0THGrgmPaRyU5gIkGhqIhrSc9lqAZJJrKa9n5fAVwhRPEiA3KhHHZz1v m4xzysIZKKOXVV6XKjGEZuQafQ== -----END CERTIFICATE-----Generated at Mon Apr 28 04:30:42 2025 by rpki-client